BE1031821B1 - Method for operating an access control system, access control system, telematic control device, access control device and access authorization server - Google Patents

Abstract

The invention relates to a method for operating an access control system (1), wherein the access control system (1) comprises a telematic control device (2) for a vehicle (3), an access control device (4), and an access authorization server (5), the method comprising the following steps: transmitting an access request message (12) via a wireless communication interface from the telematic control device (2) to the access control device (4), wherein the access request message (12) comprises freight information (10) about vehicle freight data (7) stored in the telematic control device (2) and reference information (11) about server freight data (9) stored in the access authorization server (5); transmitting a server request message (14) from the access control device (4) to the access authorization server (5), wherein the server request message (14) comprises the reference information (11); Transmitting a server response message (15) from the access authorization server (5) to the access control device (4), wherein the server response message (15) comprises the server freight data (9) referenced by the reference information (11); Performing a validation process, which comprises validating the freight information (10) in comparison to the respective server freight data (9), by the access control device (4) for fulfillment of a validity criterion and generating a respective validation result; Transmitting an access response message (16) via the wireless communication interface from the access control device (4) to the telematic control device (2), wherein the access response message (16) comprises the validation result.

Description

' BE2024/5518

Method for operating an access control system, access control system, telematic control device, access control device and

Access authorization server

Description (fair copy)

The invention relates to a method for operating an access control system, a

Access control system, a telematic control device for a vehicle and a

Access control device and an access authorization server.

When cargo is transported across a border between two countries, it may be necessary to register the cargo with an authority or to verify that the cargo is permitted to cross the border. Typically, inspections are carried out manually at the border, with the cargo and/or documents being

Customs officers or border guards. These screening processes are labor-intensive and time-consuming. This can lead to delays in

Border crossings for vehicles transporting freight as well as for other vehicles. The effort can be particularly high if the required documents are in

are available in paper form. For this reason, there are state-of-the-art systems

Technology designed to simplify border clearance for cargo.

US Patent No. 8,099,371 discloses an electronically enabled clearance methodology for improved border crossing processing. The system and procedure generate and manage an electronic manifest and an electronic commercial invoice with

Customs data in accordance with legal requirements and the requirements of a manufacturer who

Goods imported from other countries.

US 7312 702 B1 discloses a method for accelerating a release process for at least one freight container at at least one border crossing and at least one customs entry point.

US 10 846 809 B2 discloses an automated border inspection. A disclosed

The method includes receiving first data, determining whether each of the occupants of a vehicle is authorized to cross a border using the first

7 BE2024/5518

Data, storing second data in a record of pre-registered

border crossers, receiving third data that identify the vehicle and indicate the entry of the vehicle into a border crossing station, comparing the third data with data from the dataset of pre-registered border crossers,

Determining that both the third data and the second data identify the vehicle, collecting fourth data representing the current occupant for each current occupant in the vehicle, determining whether the current occupants in the

vehicle and the occupants identified in the second data are the same persons, and providing instructions to move the vehicle into a lane at the

border crossing station.

US 10 846 962 B2 describes methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for managing geospatial boundaries. In some implementations, an identification of a

user's data is scanned. Based on the scan, information corresponding to the user is retrieved. The user is then

Information corresponding to the user is recorded. Location data is obtained.

It is determined that the user is located near a geographical boundary. The location data and at least some of the information corresponding to the user are transmitted to an access control system.

US 11 099 294 B2 discloses systems and methods for combining

Manifest data for freight and light vehicles with their X-ray images generated during scanning. Manifest data is automatically imported into the

System and help security personnel quickly determine the cargo contents. In the event of a discrepancy between the cargo contents shown in the manifest data and the x-ray images, the cargo can be detained for further inspection. In one embodiment, the process of analyzing the x-ray image of the cargo in conjunction with the manifest data is automated.

It is an object of the present invention to provide a solution to

to support border clearance process.

3 BE2024/5518

The problem is solved by the subject matter of the independent claims.

Advantageous further developments with useful and not irrelevant further

Embodiments of the invention are set out in the dependent claims, the following

Description and drawings specified.

One aspect of the invention may be a method for operating an access control system (1). The access control system (1) comprises a telematic control device (2) for a vehicle (3), an access control device (4), and an access authorization server (5). The method comprises the following steps: - transmitting an access request message (12) via a

Wireless communication interface from the telematic control device (2) to the

Access control device (4), wherein the access request message (12) is a

Freight information (10) about vehicle freight data (7) stored in the telematic

control device (2) are stored, and a reference information (11) to

Server freight data (9) stored in the access authorization server (5); - transmitting a server request message (14) from the

Access control device (4) to the access authorization server (5), wherein the

Server request message (14) comprising the reference information (11); - transmitting a server response message (15) from the

Access authorization server (5) to the access control device (4), wherein the

Server response message (15) the referenced by the reference information (11)

Server cargo data (9); - performing a validation process that includes validation of the

Freight information (10) in comparison with the respective server freight data (9), by the access control device (4) for fulfilling a validity criterion, and

Generating a respective validation result; and - transmitting an access response message (16) via the

Wireless communication interface from the access control device (4) to the telematic control device (2), wherein the access response message (16)

validation result; and further characterized in that - the reference information (11) comprises a digital one-time token; and

4 BE2024/5518 - the procedure requires verification of the digital one-time token by the

Access authorization server (5), wherein the server freight data (9) is only accessible by the

Access authorization server (5) if the digital one-time token is valid.

According to a first aspect of the invention, a method for operating a

Access control system is provided. The access control system includes a telematic

Control device for a vehicle, an access control device and a

Access authorization server. The telematic control device can be used as a digital

Tachograph. The access control device may be a device for

Be placed at the inspection point of a border crossing point.

The access control device is designed to communicate with the telematic control device to enable inspection of a load of the vehicle.

Access authorization server is designed to provide the access control device on

Request to provide server freight data.

The method comprises transmitting an access request message via a

Wireless communication interface from the telematic control device to the

Access control device. In other words, the telematic control device sends the access request message to the access control device and the

Access control device receives the access request message. The

Wireless communication interface may include a Wi-Fi, a 5G, a DSRC, a 3GPP, C-V2X or other wireless communication interface.

Access request message includes cargo information related to

Vehicle cargo data stored in the access control device and a

Reference information for referencing respective server freight data contained in the

access authorization server. In other words: The telematic

The control device is configured to store vehicle cargo data describing the cargo transported by the vehicle. The telematic control device can store the cargo information of the access control device in the

Provide an access request message. The cargo information may include a hash value and/or a respective digital signature related to the vehicle cargo data.

> BE2024/5518

The reference information may include an identifier, a link and/or an address of the

Include server cargo data that is/are stored in the access authorization server.

In order to reduce the amount of data that is sent to the access control device via the

Wireless communication interface is provided, instead of the

To provide vehicle freight data via the wireless communication interface, the

Reference information of the access control device is provided.

Reference information enables the access control device to retrieve the server cargo data, which may be the same as the vehicle cargo data or may include the vehicle cargo data, from the access authorization server.

To enable the access control device to distinguish between the

Vehicle freight data and server freight data can be detected by

Freight information an identifier of the vehicle freight data, a timestamp of the

Vehicle freight data, a digital signature or a hash value relating to the

Vehicle freight data. The freight information enables verification of the

Server cargo data to detect a difference between the server cargo data and the

to detect vehicle freight data.

A next step involves transmitting the server request message from the

Access control device to the access authorization server. The

Server request message includes the reference information. In other words, to receive the server vehicle data from the access authorization server, the access control device transmits the server request message, which contains the

reference information, to the access authorization server. The

Access authorization server receives the server request message and by means of the

Reference information, the access authorization server selects the respective

Server freight data stored in the access authorization server. The

Access authorization server can retrieve the server freight data from a database of the

Extract access authorization server.

A next step involves transmitting a server response message from the

Access authorization server to the access control device. The server response message

° BE2024/5518 includes the server freight data reference through the reference information. With other

In other words: The server freight data according to the reference information will be

Access control device by the access authorization server via the

Server response message provided.

The access control device receives the server response message and performs a

Validation process to compare the server freight data with the

To validate cargo information. The validation process comprises validating the fulfillment of a validity criterion. The access control device generates a respective validation result of the validation process. The validation process may include generating a hash value of the server cargo data and comparing the

Hash value of the server cargo data with a hash value of the cargo information related to the vehicle cargo data. The validation process may include comparing a timestamp of the cargo information with a timestamp of the server cargo data. Accordingly, the access control device may determine whether the

Vehicle freight data matches the server freight data. If the validation process is successful, which means that the validity criterion is met, the

Access control device a respective validation certificate. The respective

Validation certificate may include a digital signature of the access control device.

The next step involves transmitting the access response message via the

Wireless communication interface from the access control device to the telematic control device. The access response message includes the

Validation result of the validation process, which may include the respective validation certificate. The validation result and/or the respective validation certificate may be stored on the telematic control device.

Upon receipt of the access response message, the telematics control device may send an audible, haptic and/or visual signal to indicate to a driver that the access response message has been received.

In case of a negative validation result, the telematic

control device sends a message to the driver to inform him about the

/ BE2024/5518

validation failure. In this case, the

Telematics control device prompts the driver to manually validate the

To move the load to a predefined position.

The invention also includes embodiments that provide additional technical advantages.

According to a further embodiment of the invention, the freight information comprises a hash value and/or a digital signature of the vehicle freight data.

Validation process includes validation of the hash value and/or

Validation of the digital signature of the server freight data against the hash value and/or the digital signature of the vehicle freight data provided in the freight information. The validity criterion requires compatibility of the hash value and/or compatibility of the digital signatures. In other words:

Access control device is designed to convert the hash value of the received

Server cargo data and compare the hash value of the server cargo data with the

Hash value of the vehicle freight data provided by the telematic control unit. The access control device is designed to check the digital signature of the received server freight data and to verify the digital

Compare the signature of the server cargo data with the digital signature of the vehicle cargo data provided by the telematics control unit. The advantage of this implementation is that it provides reliable and fast proof that the server cargo data matches the vehicle cargo data.

According to a further embodiment of the invention, the reference information comprises a digital key configured to decrypt the server cargo data. The method comprises decrypting the server cargo data by the

Access control device using the digital key. With other

In other words: The server cargo data stored in the access authorization server is encrypted. To decrypt the server cargo data, the corresponding digital key is required. The digital key for decrypting the

Server freight data is provided to the telematic control unit to enable the

Access control device to enable the server freight data using the

3 BE2024/5518 digital key. This embodiment has the advantage that the

Server cargo data is protected.

According to a further embodiment of the invention, the reference information comprises a digital token. The digital token may be required to

To allow access authorization servers to access the server freight data.

Server request message from the access control device to the

Access authorization server can include the digital token. The

Access authorization server verifies whether the digital token is valid for a

Enabling access to the server cargo data. If the digital token is valid, the =— access authorization server provides the server cargo data to the

Access control device ready. Otherwise, the provision of the

Server freight data rejected. This embodiment has the advantage that the

Provision of the token is required to receive the server cargo data.

According to a further embodiment, the digital token is a one-time token or a time-dependent token. In other words, the validity of the digital token is limited to a session or a specific period of time.

Access authorization server is designed to provide a session- or time-dependent

verification procedure. The access authorization server can be designed to block the respective digital token after each use of the digital token to unlock the server load data in a session.

This embodiment has the advantage that access to the server freight data is

Access control device is restricted. Accordingly, it can be ensured that the digital token does not provide permanent access to the server cargo data.

According to a further embodiment of the invention, the method comprises a

Transmission of the digital document from the telematics device and/or the

Access control device to the access authorization server. In other words, the digital document is made available to the access authorization server. The digital document can then be stored in the access authorization server.

9 BE2024/5518

According to a further embodiment of the invention, the

Access control device, if the validation process fails, a corresponding digital failure document digitally protected by a digital key of the

Access control device is signed. The access control device transmits the digital

Failure document to the telematic control device in the

Access response message. In other words, if the validation process fails, the digital failure document is made available to the telematic control device. The telematic control device can prevent receipt of the digital

The digital incident document may contain data describing a reason for the incident. The reason may be an expired timestamp of the server's data, a discrepancy between the hash

values and/or the presence of cargo requiring manual inspection, such as dangerous goods.

According to a further embodiment of the invention, the method comprises a

Transmission of the digital failure document to the access authorization server by the access control device. In other words: The failure of the verification is documented by the access authorization server. Accordingly, it can

Authorities should be able to verify the presence of the digital failure document at the

to control access authorization servers.

According to a further embodiment, the method comprises a step of

Transmitting the digital failure document from the telematic control device to a second access control device. The second access control device may be located at a specific location for manually inspecting the loads of vehicles that have received a negative response for their respective validation process. The second access control device may receive the digital failure document and, if a predefined condition is met, generate a second digital document related to the digital failure document, digitally signed by a key of the second access control device. A second

Step involves transferring the second digital document from the second

Access control device to the telematic control device. The generation of the second digital document can be carried out after a predefined

User input was received from the second access control device. The

User input can be an input by a police officer after a manual

inspection of the load. The second digital document is linked to the digital

Error document linked using cryptographic methods. The second digital

Document can override a fault status indicated by the digital fault document.

According to a further embodiment of the method, the vehicle freight data is received by the telematic control device. In other words, the telematic control device can receive the vehicle freight data that

Markings of the cargo are provided inside the vehicle or manually by the driver of the vehicle. In a next step, the

Vehicle freight data from the telematics control device to the

Access authorization server. In other words: The telematic

Control device provides its vehicle freight data to the server freight data of the

In the next step, the access authorization server receives

Access authorization server the vehicle freight data and stores the

Vehicle freight data as server freight data. This embodiment has the advantage that the vehicle freight data is synchronized with the server freight data.

For use cases or application situations that may occur within the scope of the method and which are not explicitly described here, it may be provided that — in accordance with the method — an error message and/or a prompt for user feedback is issued and/or standard settings and/or a predefined initial state is/are set.

A second aspect of the invention relates to an access control system comprising a telematic

Control device for a vehicle, an access control device and a

access authorization server. The system can be designed to

To carry out the method according to the first aspect of the invention.

" BE2024/5518

A third aspect of the invention relates to a telematic control device for a

Vehicle. The telematic control device can be a digital tachograph or a

The telematic control device can be designed for fixed or removable attachment to the vehicle. The telematic

The control device is designed to send an access request message to an access control device via an encrypted wireless communication interface, wherein the access request message contains cargo information about

Vehicle freight data stored in the telematic control device and reference information to server freight data stored in an access authorization server. The telematic control device is configured to receive an access response message from the

Access control device, the access response message includes the

Validation result.

A fourth aspect of the invention relates to an access control device.

Access control device can be arranged on a pole at the roadside, a

barrier or an infrastructure element. The access control device can also be designed as a mobile device or as a device for installation on a

vehicle. The access control device is designed to have a

Wireless communication interface to receive an access request message from a telematic control device, wherein the access request message contains freight information about vehicle freight data stored in the telematic

control device and includes reference information to server freight data stored in an access authorization server.

Access control device is designed to send a server request message to the

access authorization server, where the server request message contains the

Reference information. The access control device is designed to

Server response message from the access authorization server, where the

Server response message referenced by the reference information =

Server freight data. The access control device is designed to

Validation process, which includes validating the freight information against the respective server freight data, for fulfilling a validity criterion and generating a respective validation result.

Access control device is designed to use the encrypted

Wireless communication interface an access response message to the telematic

control device, wherein the access response message contains the

Validation result includes.

A fifth aspect of the invention relates to an access authorization server.

The access authorization server is configured to store server freight data referenced by reference information. The access authorization server is configured to receive a server request message from an access control device, wherein the server request message comprises the reference information, and to send a server response message to the access control device, wherein the

Server response message containing the referenced server cargo data.

The telematic control device, the access control device and the

Access authorization servers comprise at least one control device which comprises at least one microprocessor and/or at least one microcontroller.

The invention also includes the combinations of the features of the described

Embodiments.

An exemplary implementation of the invention is described below.

Figure shows the following:

Fig. 1 is a schematic representation of a method for operating a

Access control system.

The embodiment explained below is a preferred embodiment of the

In the embodiment, the described components of the

However, each embodiment represents individual features of the invention which are to be regarded as independent of each other and which also develop the invention independently of each other and thus also form part of the

invention individually or in a combination other than that shown. Furthermore, the described embodiment can also be supplemented by further features of the

invention which have already been described.

In the figure, elements that provide the same function are labeled with identical

reference symbols.

Fig. 1 shows a schematic representation of a method for operating a

Access control system.

The access control system 1 can comprise a telematic control device 2 of a vehicle 3, an access control device 4, and an access authorization server 5. The telematic control device 2 can be located in the vehicle 3. The vehicle can be a truck transporting a cargo 6. The telematic control device 2 can comprise vehicle cargo data 7 describing the cargo 6 transported by the vehicle 3. The vehicle cargo data 7 can be provided by a driver of the vehicle 3. The telematic control device 2 can also be configured to receive the vehicle cargo data 7 from markings of the cargo 6. The telematic control device 2 can be configured to provide the vehicle cargo data 7 to the access authorization server 5 in a vehicle cargo message from the telematic control device 2 to the access authorization server 5.

The access authorization server 5 can store the vehicle freight data 7 as server freight data 9. Accordingly, the vehicle freight data 7 can be

Server freight data 9 are synchronized in the access authorization server 5.

To enable inspection of the vehicle’s cargo 6, for example at a

border or during a police check, the telematic control device 2 can send the cargo information 10 of the vehicle cargo data 7 and the reference information 11 in an access request message 12 to the control device 4. The

Access request message may be sent to the access control device 4 in response to receipt of a message 13 received by the telematic control device 2 from the access control device 4. The

Access control device 4 can receive the access request message 12 containing the

Freight information 10 and reference information 11. The

Freight information 10 may include a hash value of the vehicle freight data 7 in the telematic control device 2. The reference information 11 may be a

Address of the respective server freight data 9, which in the

Access authorization server 5. The access control device 4 can

Send server request message 14 to the access authorization server 5, which

Reference information 11. The reference information 11 may also include a digital

Token. The access authorization server can include the server request message 14, which includes the reference information 11. In a next step, the

Access authorization servers verify whether the digital token is valid. If the digital

Token is valid, the access authorization server 5 can provide the

Server cargo data 9. The server cargo data 9 can be encrypted. A

Key for decrypting the server cargo data 9 can be provided by the cargo information 10. The access control device 4 can use the key to decrypt the server cargo data 9. The access authorization server 5 can

Provide server cargo data 9 to the access control device 4 in a server response message 15. The access control device 4 can receive the server response message 15 and validate the server cargo data 9 against the cargo information 10.

To validate the server cargo data 9, the access control device 4 can

Generate hash value of server cargo data 9 and compare the hash value to a

Check the hash value provided in the cargo information 10.

If the validation process is successful, the access control device 4 can

Access response message 16 is transmitted to the telematic control device 2. The

Access response message 16 may include the validation result.

Access response message 16 may comprise a digital document 17 that is digitally signed by a digital key of the access control device 4. The digital

Document 17 can be stored in the telematic control device 2 of the vehicle 3. If the telematic control device 2 receives a positive result of the

validation process, the telematic control device 2 may inform the driver that he is allowed to cross the border.

In case of a negative result, the access control device 4 can provide a digitally signed error document 18. The digital document 17 and/or the

Error document 18 can be sent by the access control device 4 to the

Access authorization server 5 must be provided.

When the error document 18 is received by the telematics control device 2, the telematics control device can signal the driver to proceed to a second

access control device 4 to perform a manual validation process. At the second access control device 4, the error document 18 can be transmitted to the second access control device 4. A police officer can

Inspect and manually validate the cargo. If the manual validation is successful, the police officer can provide a user input to the second access control device 4. The second access control device 4 can generate a digitally signed second digital document 17 relating to the error document 18. The second digital

Document can resolve the error indicated by error document 18.

Based on OTA (Over-The-Air) technology, a common platform could be developed to enable truck drivers to automatically complete all the necessary “paperwork” and

Information about the cargo at border points, i.e. border declarations, invoices,

Transport authorization documents, cargo weight, destination, etc. These

Information should be logged for each load in a truck control module, but also stored in advance in an online cloud storage. OTA technology would be the channel used for reconciliation; more specifically, the authorities would compare the encrypted information available in the cloud (accessible only with a special secure key) with the data stored in that specific

control module of the truck (by requesting telemetry data from the

trucks via encrypted OTA communication). The control module should be a type of

Telematics unit that operates similarly to a tachograph, i.e. a DTCO. This unit would already have the necessary border crossing information in its

memory. The module should also be able to regularly perform the necessary

Live data about the truck (truck identification, load present/not present,

cargo load, previous border protocols, etc.) in order to have up-to-date information in its memory.

This suite of technologies would help smooth traffic. It would also make the work of truck drivers and border police easier, as this infrastructure would make it much easier and faster to inspect loads with better traceability. Finally, it would create space for the beginning of the development of an autonomous freight delivery infrastructure.

Overall, the example shows how the invention enables a truck

Shipping information management for border controls is provided via OTA technology.

Reference numerals 1 access control system 2 telematic control device 3 vehicle 4 control device 5 access authorization server 6 cargo 7 vehicle cargo data 8 cargo message 9 server cargo data 10 cargo information 11 reference information 12 access request message 13 message 14 server request message 15 server response message 16 access response message 17 digital document 18 error document

Claims (13)

Patent claims (fair copy) 1. A method for operating an access control system (1), wherein the access control system (1) comprises a telematic control device (2) for a vehicle (3), an access control device (4), and an access authorization server (5), comprising the following steps: - transmitting an access request message (12) via a wireless communication interface from the telematic control device (2) to the access control device (4), wherein the access request message (12) comprises freight information (10) about vehicle freight data (7) stored in the telematic control device (2) and reference information (11) about server freight data (9) stored in the access authorization server (5); - transmitting a server request message (14) from the access control device (4) to the access authorization server (5), wherein the server request message (14) comprises the reference information (11); - transmitting a server response message (15) from the access authorization server (5) to the access control device (4), wherein the server response message (15) comprises the server freight data (9) referenced by the reference information (11); - performing a validation process, which comprises validating the freight information (10) in comparison to the respective server freight data (9), by the access control device (4) for fulfillment of a validity criterion, and generating a respective validation result; and - transmitting an access response message (16) via the wireless communication interface from the access control device (4) to the telematic control device (2), wherein the access response message (16) comprises the validation result; and further characterized in that - the reference information (11) comprises a digital one-time token; and - the method comprises verification of the digital one-time token by the access authorization server (5), wherein the server cargo data (9) is only provided by the access authorization server (5) if the digital one-time token is valid. 2. The method according to claim 1, characterized in that - the freight information (10) comprises a hash and/or a digital signature of the vehicle freight data (7); - the control process comprises a verification of a hash and/or a digital signature of the server freight data (9); and - the validity criterion comprises a compatibility of the hash and/or the digital signature of the vehicle freight data (7) with a hash and/or a digital signature of the server freight data (9). 3. The method according to claim 1 or 2, characterized in that - the cargo information (10) comprises a digital key configured to decrypt the server cargo data (9); and - the method comprises decrypting the server cargo data (9) by the access control device (4) using the digital key. 4. Method according to one of the preceding claims, comprising: - upon fulfillment of the validity criterion, generating a corresponding digital document (17) which is digitally signed with a digital key of the access control device (4) by the access control device (4), and transmitting the digital document (17) to the telematic control device (2) in the access response message (16). 5. The method according to claim 4, comprising transmitting the digital document (17) from the telematic control device (2) to the access authorization server (5). 6. A method according to any one of the preceding claims, comprising: - if the validation process fails, generating a respective digital error document (18) which is digitally signed with a digital key of the access control device (4), and transmitting the digital document (17) to the telematic control device (2). 7. A method according to any one of the preceding claims, comprising: - Transferring the digital document (17) to the access authorization server (5). 8. Method according to one of the preceding claims, comprising: - receiving a second digital document (17) relating to the respective digital error document (18) by the telematic control device (2). 9. The method according to any one of the preceding claims, comprising: - receiving vehicle freight data (7) by the telematic control device (2); - transmitting a vehicle freight message (13) from the telematic control device (2) to the access authorization server (5), wherein the vehicle freight message (13) comprises the vehicle freight data (7); and - storing the vehicle freight data (7) as server freight data (9) in the access authorization server (5) by the access authorization server (5). 10. Access control system (1), wherein the access control system (1) comprises a telematic control device (2) for a vehicle (3), an access control device (4) and an access authorization server (5), wherein the access control system (1) is designed to carry out a method according to one of the preceding method claims. 11. Telematic control device (2) for a vehicle (3), characterized in that the telematic control device (2) is designed to: - send an access request message (12) via a wireless communication interface to an access control device (4), wherein the access request message (12) comprises freight information (10) about vehicle freight data (7) stored in the telematic control device (2) and reference information (11) about server freight data (9) stored in an access authorization server (5), wherein the reference information (11) comprises a digital one-time token; and - receive an access response message (16) via the wireless communication interface from the access control device (4), provided only if the digital One-time token is valid, wherein the access response message (16) includes the validation result. 12. Access control device (4), characterized in that the access control device (4) is designed to: - receive an access request message (12) via a wireless communication interface from a telematic control device (2), wherein the access request message (12) comprises freight information (10) about vehicle freight data (7) stored in the telematic control device (2) and reference information (11) about server freight data (9) stored in an access authorization server (5), wherein the reference information (11) comprises a digital one-time token; - send a server request message (14) to the access authorization server (5), wherein the server request message (14) comprises the reference information (11); - to receive a server response message (15) from the access authorization server (5), wherein the server response message (15) comprises the server freight data (9) referenced by the reference information (11); - to carry out a validation process which comprises validating the freight information (10) in comparison to the respective server freight data (9) for fulfilling a validity criterion and generating a respective validation result; - to send an access response message (16) to the telematic control device (2) via the wireless communication interface, wherein the access response message (16) comprises the validation result, wherein a verification of the digital one-time token is provided by the access authorization server (5), wherein the server freight data (9) is only provided by the access authorization server (5) if the digital one-time token is valid. 13. Access authorization server (5), characterized in that the access authorization server (5) is designed to: - to receive a server request message (14) from an access control device (4), wherein the server request message (14) comprises the reference information (11), wherein the reference information (11) comprises a digital one-time token; - to send a server response message (15) to the access control device (4), wherein the server response message (15) comprises the server cargo data (9) referenced by the reference information (11), to provide verification of the digital one-time token by the access authorization server (5), wherein the server cargo data (9) is only provided by the access authorization server (5) if the digital one-time token is valid.