JP2004341938A - Etc on-vehicle system, etc on-vehicle device, and ic card for etc on-vehicle device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an ETC on-vehicle system flexibly conformable to an application other than ETC without leading to the complicatedness or cost increase of a structure. <P>SOLUTION: An ETC determination part 11 determines whether the application of a road-side machine is ETC or not by AID included in data received from the road-side machine. When the AID is "18", switching to a data exchange mode is performed, and a DSRC/card communication conversion processing part 14 delivers data with between the road-side machine and the IC card 2. The card OS 21 of the IC card 2 switches a file to be used by the application of the road-side machine based on the SID included in the data received from the road-side machine. In an application for other than ETC, only data exchange is performed in the ETC on-vehicle device 1, and the actual processing is executed by the application of the road-side machine and the IC card 2. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an ETC (Electronic Toll Collection) vehicle-mounted device and an IC card for the ETC vehicle-mounted device, and more particularly, to a technique for using the ETC vehicle-mounted device in an application other than the ETC.
[0002]
[Prior art]
The ETC system is a system for automatically performing toll settlement by wireless communication between a roadside device installed at a tollgate on a toll road and an on-board ETC device installed in a vehicle. The road-to-vehicle communication between the roadside device and the on-board ETC device uses a wireless communication system called DSRC (Dedicated Short Range Communication).
[0003]
Since DSRC has an advantage that high-speed communication by radio is possible, it is expected that DSRC will be applied to various uses other than ETC in the future. For example, services such as toll settlement in a parking lot or gas station, ERP (Electronic Road Pricing System) (see Patent Literature 1), and entrance / exit / gate management in a parking lot are conceivable.
[0004]
[Patent Document 1]
JP-A-2002-92668
[0005]
[Problems to be solved by the invention]
In the ETC system, the ETC application of the roadside device and the built-in program of the on-board ETC device cooperate to execute a series of ETC processes. In addition, the on-board ETC device has a built-in security module called a SAM (Secure Application Module), and all the ETC data transmitted to and received from the roadside device are encrypted in this module. I have. The built-in program of the on-board ETC and the encryption key stored in the SAM are written and provided at the time of manufacture or shipment of the on-board ETC.
[0006]
As described above, in the conventional vehicle-mounted ETC device, it is necessary to write a built-in program corresponding to the application of the roadside device in the memory. Therefore, when the service provider starts providing a new service, the user must purchase a new ETC on-board unit incorporating a program corresponding to the application of the service.
[0007]
In addition, as proposed in Patent Document 1, a method of downloading a program from the roadside device to the on-board ETC device may be considered. However, in this case, the expandability and flexibility of the on-board ETC device are required, which complicates the device configuration. In addition, it is necessary to allow some room for basic specifications such as a processor and memory in anticipation of additional programs. Also occurs. These are not preferred because they increase the cost of the ETC on-board unit.
[0008]
Further, in the conventional on-board ETC device, since data of the IC card cannot be accessed without passing through the SAM, it is difficult to use the IC card from an application other than the ETC, and a flexible application cannot be developed. There was also.
[0009]
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an ETC in-vehicle system that can flexibly cope with applications other than ETC without causing a complicated configuration and an increase in cost. It is in.
[0010]
[Means for Solving the Problems]
In order to achieve the above object, the present invention employs the following configuration.
[0011]
The ETC on-vehicle device includes a wireless communication unit that transmits and receives data to and from the roadside device, an ETC processing unit that performs ETC processing in cooperation with the ETC application of the roadside device, and data transfer between the roadside device and the IC card. Determining whether the application of the roadside device is an ETC application based on the application identifier included in the data received from the roadside device, and switching between the ETC processing mode by the ETC processing device and the data exchange mode by the data exchange device. Switching means.
[0012]
On the other hand, the IC card mounted on the on-board ETC device has a storage means for storing data and / or a program used by the application of the roadside device in association with the service identifier, and an IC card from the roadside device passed in the data exchange mode. Processing means for switching data and / or a program to be used by an application of the roadside device based on a service identifier included in the received data.
[0013]
In the ETC in-vehicle system including the ETC in-vehicle device and the IC card, various services other than the ETC can be executed in cooperation with the application of the roadside device and the IC card.
[0014]
In the case of an application other than the ETC, the on-board ETC only exchanges data between the roadside device and the IC card. Such a configuration can be realized by incorporating a simple circuit and a program into the conventional ETC on-board unit, so that the configuration of the ETC on-board unit and the cost are not increased. Moreover, since the on-board ETC device only exchanges data, it can flexibly cope with not only current applications but also various applications that will appear in the future.
[0015]
It is preferable that the on-board ETC device has encryption means for encrypting ETC data transmitted / received to / from the roadside device, and the data exchange means bypasses the encryption means to transfer data. As a result, in the data exchange mode, the data is exchanged by bypassing the encryption means, so that it is easy to access the data and / or the program in the IC card from the application on the roadside device, and the degree of freedom in application development is increased. improves.
[0016]
It is also preferable that the data exchange means performs format conversion between a communication message between the roadside device and the on-board ETC device and an input / output message between the ETC on-board device and the IC card. Since the format conversion between the communication message and the input / output message is automatically performed, application development is facilitated.
[0017]
In the above IC card, it is preferable that the program stored in the storage means is a program that operates on the IC card. Accordingly, it is not necessary to provide a special configuration for the program in the on-board ETC device, and the configuration of the on-board ETC device can be simplified and the cost can be reduced.
[0018]
It is also preferable that the storage means is capable of rewriting data and / or programs. As a result, the user can enjoy various services realized by applications other than ETC simply by adding data and / or programs corresponding to the application of the roadside device to the IC card.
[0019]
BEST MODE FOR CARRYING OUT THE INVENTION
Preferred embodiments of the present invention will be illustratively described in detail below with reference to the drawings.
[0020]
FIG. 1 is a block diagram showing a functional configuration of the ETC vehicle-mounted system according to the embodiment of the present invention.
[0021]
The on-board ETC system includes an on-board ETC device 1 installed in a vehicle and an IC card 2 mounted on the on-board ETC device 1.
[0022]
The ETC in-vehicle device 1 generally includes a DSRC communication unit 10, an ETC determination unit 11, an ETC processing unit 12, a SAM 13, a DSRC / card communication conversion processing unit (hereinafter, simply referred to as a "conversion processing unit") 14, a connector 15, and an I. It has an / O processing unit 16.
[0023]
The DSRC communication unit 10 is a wireless communication unit including a transmission / reception antenna, an RF module, a communication control controller, and the like, and performs data transmission / reception by a DSRC with (an antenna of) a roadside device installed outside the vehicle. . DSRC is a short-range communication method using 5.8 GHz as a radio frequency band. Although the communication area of a roadside device is as small as several meters to several tens of meters, it has an advantage that high-speed communication on the order of several Mbps is possible. Have.
[0024]
The DSRC communication unit 10 is connected to a processing processor including a CPU (Central Processing Unit) and a memory. The ETC determination unit 11, the ETC processing unit 12, the conversion processing unit 14, and the I / O processing unit 16 are functions implemented by a processing processor.
[0025]
The ETC determination unit 11 is a determination unit that determines the type of the application of the roadside device based on the AID (DSRC Application Entity ID) included in the data received from the roadside device. The AID is an application identifier defined by ARIB STD-T55, which is an ETC standard. For example, in the ETC application, “14” is used as the AID. “17” is a reservation ID for driving support and “18” is a reservation ID for entertainment.
[0026]
The ETC in-vehicle system according to the present embodiment uses AID “14” and AID “18”, and it is arranged that applications other than ETC use the AID “18” uniformly.
[0027]
When the AID included in the data received from the roadside device is “14”, the ETC determination unit 11 determines that the application of the roadside device is an ETC application, and switches the processing mode of the on-board ETC device 1 to the ETC processing mode. . On the other hand, when the AID is “18”, it is determined that the application is other than the ETC, and in this case, the processing mode is switched to the data exchange mode.
[0028]
In the ETC processing mode, data received from the roadside device received by the DSRC communication unit 10 is transferred to the ETC processing unit 12 which is an ETC processing unit. Then, the ETC processing unit 12 performs the ETC processing in cooperation with the ETC application of the roadside device.
[0029]
More specifically, the ETC processing unit 12 transfers data received from the ETC application of the roadside device (for example, detection, authentication, and payment of the IC card 2) to the IC card 2 via the SAM 13 and the connector 15. Further, the ETC processing unit 12 reads the ETC data (user information and credit information necessary for toll settlement) 22 stored in the IC card 2 via the SAM 13, and uses the DSRC communication unit 10 to execute the ETC of the roadside device. Send to application. As a result, a series of processing for automatic toll payment on the toll road is performed.
[0030]
The SAM 13 is a security module (encryption means) dedicated to ETC processing. The SAM 13 stores an encryption key and vehicle type information. When performing ETC processing, the SAM 13 performs mutual authentication between the roadside device and the ETC on-vehicle device 1 or transmits and receives ETC transmitted and received between the ETC onboard device 1 and the roadside device. For example, data is encrypted (encrypted / decrypted). As a result, security of various information required for the payment is ensured.
[0031]
On the other hand, in the data exchange mode, the received data from the roadside device received by the DSRC communication unit 10 is transferred to the conversion processing unit 14 as data exchange means. Then, the conversion processing unit 14 passes the received data to the IC card 2 via the connector, bypassing the SAM 13. At this time, the conversion processing unit 14 converts the format of the DSRC communication message between the roadside device and the on-board ETC device into a data input / output message between the ETC on-board device and the IC card.
[0032]
FIG. 2 shows an example of a message format. The message format for DSRC communication includes a DSRC header, an ASL header, an LPP header, and a data part. In the example of FIG. 2, an IC card command is described in the data section. The message format for data input / output includes a first field, an information field, and a last field. The conversion processing unit 14 extracts the data part of the message for DSRC communication, converts it into the information field format, and adds a head field and a last field before and after that to generate a data input / output message.
[0033]
Conversely, when receiving the data from the IC card 2 via the connector 15, the conversion processing unit 14 converts the data format for data input / output into a message format for DSRC communication, and transfers the data format to the DSRC communication unit 10.
[0034]
As described above, in the data exchange mode, the conversion processing unit 14 only exchanges data between the roadside device and the IC card 2. At this time, the ETC vehicle-mounted device 1 only passes data transmitted and received between the roadside device and the IC card 2 in principle, does not particularly concern the contents of the data, and does not perform the encryption process by the SAM 13. Therefore, the application of the roadside device can freely transmit commands and data to the IC card 2.
[0035]
If the data received from the roadside device or the data read from the IC card 2 includes data related to the I / O processing, the data related to the I / O processing is separated and sent to the I / O processing unit 16. Will be transferred. The I / O processing unit 16 controls a display and a speaker to output information by character display and voice guidance, and transfers data to an external device connected via a connector. In addition, a user's SW operation is input to the I / O processing unit 16, and a predetermined process is executed. For example, when "use history confirmation" is input by a SW operation, the ETC processing unit 12 reads out the use history data of the IC card 2 via the SAM 13, and the I / O processing unit 16 displays the data on the display.
[0036]
The IC card 2 is a contact-type smart card, and incorporates an IC chip having a CPU, a memory, and a contact terminal 20. The memory includes a ROM (Read Only Memory) storing a card OS (Operation System), a RAM (Random Access Memory) used as a work area of the CPU, and a rewritable nonvolatile memory. As the non-volatile memory, an electrically erasable and programmable read only memory (EEPROM) or a ferroelectric random access memory (FeRAM) is used.
[0037]
The non-volatile memory stores data and / or programs used by applications of the roadside device in addition to the ETC data 22 (hereinafter, data and programs are collectively referred to as “files”). The files are grouped in folders for each service performed by the service provider, and are stored in association with a service identifier (SID) representing the service. In the example of FIG. 1, files related to services A, B, and C are collectively stored in a service A folder 23, a service B folder 24, and a service C folder 25, respectively. The folders are associated with SIDs “0021”, “0180”, and “0353”, respectively.
[0038]
The format and contents of the data stored in the folder are not particularly limited. The function of the program is not particularly limited as long as it operates on the IC card (on the card OS). In other words, these files are used only by the applications on the roadside unit, so the data format / contents and program functions can be freely designed as long as they are compatible with the applications. .
[0039]
For example, an application that opens and closes a gate of a parking lot based on a user ID does not require a high level of security. Therefore, it is sufficient to store only a plaintext user ID in a folder. For an application that performs prepaid payment at a gas station or a drive-through shop, a program for performing original encryption processing or prepaid processing together with data such as an encrypted user ID and balance information (electronic money) in a folder. Is preferably stored.
[0040]
The card OS 21 is a processing unit that performs file management and access control of these files. Further, if necessary, encryption / decryption processing is also performed in file units or folder units.
[0041]
The access control is a process of switching data and / or a program used by an application of the roadside device based on a service ID included in data received from the roadside device passed in the data exchange mode.
[0042]
Normally, access is restricted to all files or folders in order to prevent unauthorized use from applications on the ETC on-board unit 1 or roadside devices, and leakage or falsification of information. Therefore, when accessing the file in the IC card 2, the application of the roadside device first transmits an access request including its own service identifier to the on-board ETC device 1. In the data exchange mode, the data received from the roadside device undergoes only format conversion and is delivered to the IC card 2. When receiving the received data from the roadside device, the card OS 21 extracts the service identifier included in the received data. Next, the service identifier is collated with the service identifier associated with each file or each folder stored in the non-volatile memory, and it is confirmed whether there is a match. Then, when a match is detected, the access restriction of the file or folder is released and the file or folder is made usable (accessible).
[0043]
After the file or folder becomes available, the application on the roadside device can read and write data in the IC card 2 and can start a program. This allows the application of the roadside device and the IC card 2 to execute services such as gate opening / closing processing and settlement processing in cooperation with each other.
[0044]
According to the ETC in-vehicle system of the present embodiment, various services realized by applications other than ETC can be enjoyed only by adding data and / or a program corresponding to the application of the roadside device to the IC card 2. . That is, when the user wants to use a new service, the user only needs to write a file in the IC card 2 and re-purchase the vehicle-mounted ETC 1 or add a program to the vehicle-mounted ETC 1 itself. No need.
[0045]
The file writing to the IC card 2 may be performed directly by the service provider, or may be performed by the user himself using a writing device such as a kiosk terminal. It is also preferable that the roadside device and the writing device are installed together or integrally so that a user can write a file when receiving a service from the roadside device.
[0046]
In the case of an application other than the ETC, the on-board ETC device 1 of the present embodiment only exchanges data between the roadside device and the IC card 2 and does not perform any other special processing. Such a configuration can be realized by incorporating, for example, a bypass circuit connecting the processing processor and the connector 15 and a simple program for performing AID determination processing and format conversion processing to the conventional ETC on-vehicle device. The configuration of the vehicle-mounted device 1 does not become complicated and the cost does not increase. In addition, since the on-board ETC device 1 only exchanges data, it can flexibly cope with not only current applications but also various applications that will appear in the future.
[0047]
Further, in the data exchange mode, the data is transferred while bypassing the SAM 13, so that it becomes easy to access the file in the IC card from the application on the roadside device, and the degree of freedom in application development is improved.
[0048]
In addition, since the format conversion between the DSRC communication message and the card input / output message is automatically performed by the conversion processing unit 14, application development is facilitated.
[0049]
In addition, the said structure is only what illustrated one Embodiment of this invention. The scope of the present invention is not limited to the above embodiment, and various modifications are possible within the scope of the technical idea.
[0050]
For example, in the above embodiment, whether or not the application is an ETC application is determined based on the AID, but it is also possible to use an application identifier uniquely defined instead of the AID. In this case, if the information amount (the number of bits) of the application identifier can be increased and the application identifier can be made different for each individual service, the application identifier can be used as the service identifier.
[0051]
Further, in the above embodiment, DSRC is used as a wireless communication method, but it is technically possible to adopt a wireless communication method other than DSRC.
[0052]
【Example】
Next, a specific service example using the ETC in-vehicle system of the above embodiment will be described.
[0053]
(Example 1)
In the first embodiment, a service for opening and closing a gate of a parking lot will be described.
[0054]
In this case, a roadside machine is installed at the entrance of the parking lot. The roadside device is configured to include a transmission / reception antenna and a communication control controller for performing wireless communication by DSRC with the on-board ETC device, and a computer that executes an application.
[0055]
It is assumed that a user ID for performing user confirmation is recorded in advance as data used by the gate opening / closing application on the IC card mounted on the ETC vehicle-mounted device.
[0056]
FIG. 3 is a timing chart illustrating processes of the roadside device, the on-board ETC, and the IC card for the gate opening / closing service according to the first embodiment. Hereinafter, the processing flow will be described with reference to FIG.
[0057]
The roadside device always broadcasts its own AID "18" (step S100). Alternatively, the AID may be transmitted only when the arrival of the vehicle is detected by a vehicle sensor or the like.
[0058]
Upon receiving the data from the roadside device, the on-board ETC device determines the type of the application of the roadside device based on the AID included in the received data (step S101). Here, since the AID is "18", the application is determined to be an application other than ETC, the mode is switched to the data exchange mode, and a response to the effect that the setting of the processing mode has been normally performed is returned to the roadside device (step S102).
[0059]
Subsequently, the roadside device transmits its own service identifier (SID) to the on-board ETC device (step S103). After performing the format conversion on the data received from the roadside device, the on-board ETC device transfers the converted data to the IC card (step S104).
[0060]
The card OS of the IC card checks whether or not the folder associated with the SID exists in the non-volatile memory, and if it exists, cancels the access restriction of the folder (step S105). Then, the fact that the folder can be accessed is transmitted to the roadside device via the on-board ETC device (step S106).
[0061]
Next, the roadside device reads the user ID stored in the IC card and checks whether the user is a registered user of the parking lot (steps S107 and S108). In this case, the roadside device sends a command for reading the file of the IC card, and as a result, obtains the user ID.
[0062]
If the user authentication is normally performed, the roadside device opens the gate (step S109) and writes a log on the IC card (steps S110 and S111).
[0063]
Thereafter, when the fact that the processing is completed is transmitted from the roadside device to the vehicle-mounted ETC device (step S112), the vehicle-mounted ETC device releases the data exchange mode and transmits a message to that effect to the IC card (step S113). With the IC card, the card OS restricts access to the folder (step S114).
[0064]
As described above, a series of processes relating to the gate opening / closing service are realized in cooperation with the gate opening / closing application of the roadside device and the data of the IC card.
[0065]
(Example 2)
In the second embodiment, a service for performing a prepaid payment at a gas station or a drive-through shop will be described.
[0066]
The data used by the prepaid payment application includes a user ID for user confirmation, balance information (electronic money), point information, and the like recorded on the IC card according to the present embodiment. In addition, since prepaid payment requires high security, an original encryption processing program and a prepaid processing program are recorded along with these data.
[0067]
FIG. 4 is a timing chart illustrating processes of a roadside device, an on-board ETC device, and an IC card for the prepaid payment service according to the second embodiment. Note that the process up to the process of switching the processing mode based on the AID (step S102 in FIG. 3) is the same as that of the first embodiment, and is not illustrated.
[0068]
Upon receiving the notification that the setting of the processing mode has been normally performed, the roadside device transmits its own service identifier (SID) to the on-board ETC device (step S200). The ETC on-board unit performs format conversion on the data received from the roadside unit, and then transfers the converted data to the IC card (step S201).
[0069]
The card OS of the IC card checks whether there is a folder associated with the SID, and if it exists, releases the access restriction of the folder (step S202). Then, the fact that the folder can be accessed is transmitted to the roadside device via the on-board ETC device (step S203). Further, the card OS activates the encryption processing program and the prepaid processing program stored in the folder (Step S204).
[0070]
Subsequently, mutual authentication and key exchange processing are performed between the roadside device and the IC card (steps S205 and S206). Also in this case, the on-board ETC only performs data format conversion and transfer (step S207), and the SAM of the on-board ETC is not used. That is, secure communication is realized between the roadside device and the IC card using the unique encryption processing program.
[0071]
After the preparation for the encrypted communication is completed, the roadside device transmits a payment request to the prepaid processing program running on the IC card (steps S208 and S209). The prepaid processing program deducts the payment amount from the balance based on the payment request and updates the balance information, and then sends a notice of completion of the payment processing to the roadside device (steps S210, S211).
[0072]
Subsequently, the roadside machine gives points according to the payment amount. This is also realized by the roadside device transmitting a point grant request to the prepaid processing program (steps S212 and S213). The prepaid processing program adds points based on the point grant request and updates the point information (step S214).
[0073]
Then, the roadside device writes the log on the IC card (steps S215 and S216), and ends the processing. Note that the flow of the end of the process is the same as that of the first embodiment (Steps S112 to S114 in FIG. 3), and thus the description is omitted.
[0074]
As described above, a series of processes related to the prepaid payment service is realized in cooperation with the prepaid payment application of the roadside device and the data and program of the IC card.
[0075]
【The invention's effect】
As described above, according to the present invention, it is possible to provide an ETC in-vehicle system that can flexibly cope with applications other than ETC without increasing the complexity of the configuration and increasing the cost.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a functional configuration of an ETC in-vehicle system according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating an example of a message format.
FIG. 3 is a timing chart showing processes of a roadside device, an on-board ETC device, and an IC card for a gate opening / closing service according to the first embodiment.
FIG. 4 is a timing chart illustrating processing of a roadside device, an on-board ETC device, and an IC card for a prepaid payment service according to a second embodiment.
[Explanation of symbols]
1 ETC on-board equipment
2 IC card
10 DSRC communication unit
11 ETC judgment unit
12 ETC processing unit
13 SAM
14 DSRC / card communication conversion processing unit (conversion processing unit)
15 Connector
16 I / O processing unit
20 contact terminals
21 Card OS
22 ETC data
23 Service A folder
24 Service B folder
25 Service C folder

Claims (7)

An ETC on-board system having an on-board ETC and an IC card mounted on the on-board ETC,
ETC on-board equipment
Wireless communication means for transmitting and receiving data to and from the roadside device,
ETC processing means for performing ETC processing in cooperation with the ETC application of the roadside device;
Data exchange means for transferring data between the roadside device and the IC card;
Determining whether or not the application of the roadside device is an ETC application based on the application identifier included in the data received from the roadside device and switching between an ETC processing mode by the ETC processing unit and a data exchange mode by the data exchange unit. And
IC card,
Storage means for storing data and / or a program used by an application of the roadside device in association with a service identifier;
Processing means for switching data and / or a program to be used by an application of the roadside device based on a service identifier included in data received from the roadside device passed in the data exchange mode;
ETC in-vehicle system having An ETC vehicle-mounted device to which an IC card is attached,
Wireless communication means for transmitting and receiving data to and from the roadside device,
ETC processing means for performing ETC processing in cooperation with the ETC application of the roadside device;
Data exchange means for transferring data between the roadside device and the IC card;
Determining means for determining whether an application of the roadside device is an ETC application based on an application identifier included in data received from the roadside device and switching between an ETC processing mode by the ETC processing unit and a data exchange mode by the data exchange unit;
A vehicle-mounted ETC device. Having encryption means for encrypting ETC data transmitted to and received from the roadside device,
3. The on-board ETC device according to claim 2, wherein the data exchange means exchanges data by bypassing the encryption means. The ETC vehicle-mounted device according to claim 2 or 3, wherein the data exchange means performs format conversion between a communication message between the roadside device and the ETC vehicle-mounted device and an input / output message between the ETC vehicle-mounted device and the IC card. Wireless communication means for transmitting and receiving data to and from the roadside device,
ETC processing means for performing ETC processing in cooperation with the ETC application of the roadside device;
Data exchange means for transferring data between the roadside device and the IC card;
Determining whether or not the application of the roadside device is an ETC application based on an application identifier included in data received from the roadside device, and switching between an ETC processing mode by the ETC processing unit and a data exchange mode by the data exchange unit; An IC card mounted on the ETC on-board unit,
Storage means for storing data and / or a program used by an application of the roadside device in association with a service identifier;
Processing means for switching data and / or a program to be used by an application of the roadside device based on a service identifier included in data received from the roadside device passed in the data exchange mode;
An IC card for an in-vehicle ETC device, comprising: 6. The IC card for an on-board ETC device according to claim 5, wherein the program stored in the storage means is a program that operates on the IC card. 7. The IC card for an on-board ETC device according to claim 5, wherein the storage means is capable of rewriting data and / or a program.

Images