Problem deep dive

A plate is not authorisation

A number plate is on public display to everyone who passes the vehicle. Taking a payment, opening a barrier or granting an exemption on a plate read alone is acting on a claim of identity with no second factor. It is like taking a payment on a name alone.

Why it happens

Plate-based systems treat recognition as authorisation, but the plate was never designed to be a credential:

Plates are public

Anyone can read, photograph or record a registration. A credential that everyone can see is not a secret.

Plates can be cloned

A copied plate on another vehicle inherits the original's accounts, permissions and exemptions everywhere the plate is trusted.

Plates can be borrowed

The vehicle itself changes hands: lent, hired or taken without permission. The plate still says the same thing regardless of who is driving.

There is no second factor

Nothing in the plate-only model asks whether the person the account belongs to is actually there. The read is the whole decision.

What it costs

The direct cost is fraud exposure: cloned plates charging innocent accounts, drive-offs, and unauthorised drivers passing barriers on a trusted plate. The quieter cost is evidential. When a transaction is challenged, a plate read alone is weak evidence that the account holder was present. The result is conservative system design: operators keep humans in the loop, because a signal that cannot be trusted on its own cannot be allowed to act on its own.

Who feels this

Fuel stations

Authorising fuelling before a drop of fuel is dispensed means deciding on the plate read alone, with the drive-off risk that follows.

EV charging

Automatic charger billing assumes the account holder is the person at the charger, which the plate or the vehicle handshake alone cannot show.

Access control

A plate on an allowlist admits whoever is driving the vehicle, or a vehicle wearing a copy of its plate.

Logistics and fleet

Collection fraud and depot access both turn on trusting the vehicle at the gate, when the real question is who arrived in it.

How verified presence changes it

The patented method pairs the recognised vehicle with an authorised user's registered device at the same location before the system acts. Vehicle plus verified device is a second factor: closer to chip-and-PIN than to a signature.

  • Cloned plates fail the presence check. A copied plate arrives without the registered device of the account it is impersonating, so the impersonation surfaces instead of succeeding.
  • Borrowed vehicles stop inheriting permissions. Authorisation follows the verified person, not whatever the vehicle's plate happens to unlock.
  • Decisions gain evidence that lasts. Each authorisation can be backed by a record of verified presence that can be kept and produced later if the transaction is challenged.
  • Automation becomes easier to justify. With a second factor behind the decision, more of the process could be trusted to run without a human in the loop.

Implementation would be built by or with a partner into their own systems, and the design would depend on the use case. None of this exists as a Trust product today.