JP3758852B2 - OBE used for electronic toll collection device and OBE mounted components mounted on it - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a vehicle-mounted device used for an electronic toll collection device and a vehicle-mounted device-mounted component mounted thereon.
[0002]
[Prior art]
On toll roads, toll collection takes place at the gate. Each car is decelerated for toll collection, stops at the gate, and is accelerated again after toll collection. Such acceleration / deceleration not only causes traffic congestion but also increases fuel consumption and waste gas. In order to eliminate such acceleration / deceleration, full automation of toll collection is being promoted.
[0003]
A device that fully automates toll collection is already in trial use. This electronic toll collection device is composed of a road side control system, a mobile unit side control system, and a communication system that performs wireless communication between both systems. In this apparatus, the billing process is performed by reading the number (card number or the like) associated with the payment request destination from the IC card set in the in-vehicle device as the mobile unit side control system, or performing withdrawal. The mobile-side control system is equipped with a security system that encrypts such communication, uses the encryption key for operations within itself, and further performs confidential processing for encrypting the operations.
[0004]
In order to prevent the specifications of such a security system from being disclosed, the vehicle-mounted device, which is a mobile-side control system, can be produced only by some limited manufacturers.
[0005]
Next, with reference to FIG. 3, the vehicle-mounted device manufactured under such restrictions will be described. As shown in FIG. 3, the vehicle-mounted device includes a power supply unit 31, an antenna 32, a transmission / reception unit 33 including a modulation / demodulation circuit, an integrated processing unit 34 that performs information processing by integrating and controlling each unit, and information A cryptographic operation processing unit 35 that specializes only cryptographic operations necessary for security and a human interface unit 36 such as a display unit and a button are provided.
[0006]
The cryptographic operation processing unit 35 is usually made into one chip because of demands such as tamper resistance and high-speed operation. On the other hand, the integrated processing unit 34 is configured by a normal CPU or memory medium, and includes a portion related to a toll collection application such as toll calculation. Therefore, the specification of the integrated processing unit 34 cannot be disclosed in order to protect the system from fraudulent acts such as on-vehicle device counterfeiting. As a result, as described above, it is virtually impossible for non-manufacturers to produce on-vehicle devices.
[0007]
[Problems to be solved by the invention]
In the electronic toll collection system, since it is necessary to mount the vehicle-mounted device in each vehicle, the vehicle-mounted device needs to be widely spread in order to fully operate the system. In view of this, it is not preferable to limit the on-board equipment manufacturers excessively, and as long as security is maintained, the on-board equipment can be manufactured by the desired manufacturer, and in terms of performance, price, and design It is preferable that a variety of convenient vehicle-mounted devices are produced.
[0008]
The present invention has been made based on such a technical background, and solves the following problems.
An object of the present invention is to provide an in-vehicle device used in an electronic toll collection device that can be produced by a desired manufacturer except for a non-public part and an in-vehicle device mounting component mounted thereon.
Another object of the present invention is to provide an in-vehicle device used in an electronic toll collection device that can be produced by a desired manufacturer except for a non-disclosure part while ensuring security, and an on-vehicle device mounting component mounted thereon. .
[0009]
[Means for Solving the Problems]
The vehicle-mounted device used in the electronic fee collection device of the present invention is used in an electronic fee collection device including a road-side control device and a mobile unit-side control device that can communicate with each other, and is included in the mobile-unit control device. The vehicle-mounted device comprises a module for performing application processing of toll collection, the module is configured as a stand-alone unit other than the module of the vehicle-mounted device, All of the non-public data necessary for the fee collection application processing is stored in an encrypted state, and an encryption processing unit is provided for analyzing the encrypted data.
[0010]
The vehicle-mounted device mounted on the vehicle-mounted device used in the electronic fee collection device of the present invention is used in an electronic fee collection device comprising a road-side control device and a mobile unit-side control device that can communicate with each other, A vehicle-mounted device mounted component mounted on a vehicle-mounted device of a mobile unit-side control device, wherein the vehicle-mounted device mounted component is configured as a single module independent of the vehicle-mounted device other than the vehicle-mounted device mounted component, The device-mounted component stores all the non-public data necessary for fee collection application processing in a pre-encrypted state, and is provided with an encryption processing unit for analyzing the encrypted data. It has been.
[0011]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an embodiment of an on-vehicle device in an electronic toll collection device of the present invention will be described with reference to the accompanying drawings.
[0012]
FIG. 1 is a diagram showing a schematic configuration of an electronic fee collection system to which the present embodiment is applied. In FIG. 1, the code | symbol 11 has shown the onboard equipment which concerns on this embodiment. The electronic toll collection system includes road-side control systems 12, 13, and 14, a vehicle-side control system that is the vehicle-mounted device 11, and a communication system that performs wireless communication between the two systems.
[0013]
The road side control system includes a road side processing device 14, a road side transmitting / receiving device 13, and a road side antenna 12. The road side antenna 12 is a radio communication antenna. The transmission / reception signal of the road side transmission / reception device 13 is transmitted / received to / from the vehicle-mounted device 11 (mobile body side control system) mounted on the vehicle 15 via the antenna 12.
[0014]
Next, the vehicle-mounted device 11 will be described with reference to FIG.
The vehicle-mounted device 11 (mobile unit-side control system) includes a power source unit 21, a mobile unit-side antenna 22, a mobile unit-side transmitter / receiver unit 23 including a modulation / demodulation circuit, and an integrated processing unit 24 that integrates the functions of the entire vehicle-mounted device 11. , A secure application module (module, on-vehicle device mounting part) 25 and a human interface unit 26 such as a display unit and a button. The secure application module 25 performs fee collection application processing having an information security function.
[0015]
The information security function included in the secure application module 25 is, for example, a self-identification function that can be confirmed only by itself. The encryption key held by the secure application module 25 and the IC card (not shown) set in the vehicle-mounted device 11 The function of mutual confirmation of coincidence with the encryption key is included. In addition, the information security function includes a function for mutual confirmation of the coincidence between the encryption key held by the secure application module 25 or the encryption key of the IC card and the encryption key held by the road side control system, and mutual confirmation thereof. Includes functions such as encryption during communication.
[0016]
The information security function is defined between the road-side control systems 12, 13, 14 and the mobile-side control system 11 if numerical information and logical operation specifications built in the secure application module 25 are not known. This function makes communication impossible. Such a function can be produced only by a manufacturer limited as a non-public specification.
[0017]
The integration processing unit 24 has a function capable of operating the mobile object antenna 21, the mobile object transmission / reception unit 23, and the human interface unit 26 without knowing the specifications of the secure application module 25. The integrated processing unit 24 cannot decrypt the secret specification of the secure application module 25. In this sense, the secure application module 25 is a so-called black box.
[0018]
Therefore, although the secure application module 25 is functionally expressed in this specification, description of the embodiment of the encryption / decryption method of the built-in program is omitted. For example, the encryption method of the built-in program is a matrix operator, an inverse matrix operator, randomization generation of the operator, or the like.
[0019]
Two-way communication is performed between the road side control systems 12, 13, and 14 and the mobile unit side control system 11. The two-way communication includes downlink communication from the road side control systems 12, 13, and 14 to the mobile side control system 11, and uplink communication from the mobile side control systems 12, 13, and 14 to the road side control system 11. is there.
[0020]
First, downlink communication will be described.
A signal generated by the road side processing device 14 and modulated by the road side transmission / reception device 13 and emitted from the antenna 12 is received by the antenna 22 of the vehicle-mounted device 11. The received signal is demodulated by the transmission / reception unit 23 and the type is interpreted by the integration processing unit 24. If this received signal is a signal related to fee collection, it is transferred to the secure application module 25. The secure application module 25 performs processing including information security processing related to fee collection, and if necessary, performs decryption of data on the received signal and data authentication to execute fee collection processing.
[0021]
Next, uplink communication will be described.
The secure application module 25 generates data to be transferred to the road-side processing device 14 and transfers the data to the integrated processing unit 24 as a signal. At this time, if necessary, the data authentication code is added and the signal is encrypted inside the secure application module 25 and then transferred to the integration processing unit 24. The integration processing unit 24 interprets that the generated signal is a signal to be transmitted to the outside, modulates the signal by the transmission / reception unit 23, and transmits the signal from the antenna 22 to the road-side antenna 12.
[0022]
When the user wants to display information on the vehicle-mounted device 11, the display request signal is output to the integration processing unit 24 via the human interface unit 26. The integrated processing unit 24 interprets the input display request signal. When the integrated processing unit 24 determines that the signal is a display request signal for data related to fee collection, a command corresponding to the display content is sent to the secure application module 25. The secure application module 25 interprets the command, creates corresponding display data, and returns a signal indicating the display data to the integration processing unit 24 as a response.
[0023]
The integration processing unit 24 interprets the received response signal and transfers a signal indicating the display data to the human interface unit 26 for display. When the secure application module 25 wants to voluntarily display it on the vehicle-mounted device 11, a signal corresponding to the response signal is transferred to the integrated processing unit 24 by interrupt processing, and thereafter the display is performed in the same manner.
[0024]
As described above, only the secure application module 25 knows the contents of the fee collection process, and the data related thereto is also stored only in the secure application module 25. The integrated processing unit 24 requires only the interface with the secure application module 25 as knowledge, and does not require any knowledge about the application itself related to fee collection.
[0025]
With such a security system, the specifications of the other components of the vehicle-mounted device 11 other than the secure application module 25 can be made public, and a large variety of vehicle-mounted devices 11 can be obtained by changing the design or adding functions. The manufacturer can make it. On the other hand, the secure application module 25 is manufactured only by a limited manufacturer as usual, and the module manufacturer supplies the secure application module 25 to the in-vehicle device manufacturer.
[0026]
In the present embodiment, the fee collection application that cannot publish the specifications is integrated with the encryption processing unit and is black boxed as a one-chip module. As a result, it is possible to remove the restriction of non-disclosure of specifications from the functions and configurations of each part except for the toll collection application of the in-vehicle device. This makes it possible for a large number of manufacturers to manufacture parts of the vehicle-mounted device other than the module (a toll collection application whose specifications cannot be disclosed).
[0027]
In the present invention, the module or the in-vehicle device mounting component has the information security function. The device portion that needs to be kept private is a module for performing toll collection application processing or the on-vehicle device mounting component, and it is desirable that it is only this. If there are other device parts that need to be kept private, that part should also be modularized. Here, a module is an encryption necessary for an interface, processing command unit, etc. of a device other than the module to operate the module when a device other than the module operates the module and obtains the operation result. It means something that does not require knowledge of cryptographic processing logic, programs, etc. The module here is a so-called black box in this sense.
[0028]
Moreover, in this invention, it is preferable that the said module or the said onboard equipment mounting component is mechanically separable from an integrated process part. Although it is mechanically separable, if another device is electrically connected to the module through the interface insertion port, the module can be operated as necessary and sufficient. Thereby, even when only the module is manufactured by a manufacturer different from the part of the vehicle-mounted device other than the module, both can be assembled easily. Even if the specifications of the interface function are disclosed, the encryption processing method and encryption key are kept confidential.
[0029]
【The invention's effect】
According to the vehicle-mounted device used in the electronic toll collection device of the present invention, it is used in an electronic toll collection device including a road-side control device and a mobile body-side control device that can communicate with each other, and is included in the mobile body-side control device. The on-vehicle device includes a module for performing application processing for toll collection, and the module is configured as a stand-alone unit other than the on-vehicle device module. Is stored in a state where all of the non-public data necessary for the fee collection application process is encrypted in advance, and an encryption processing unit is provided for analyzing the encrypted data. Therefore, a manufacturer who has received the module, which is a part whose specifications are not disclosed, can freely manufacture the vehicle-mounted device.
[Brief description of the drawings]
FIG. 1 is a system block diagram showing an electronic fee collection system.
FIG. 2 is a circuit block diagram showing an embodiment of the vehicle-mounted device used in the electronic toll collection device of the present invention.
FIG. 3 is a circuit block diagram showing a conventional general vehicle-mounted device.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 11 ... Onboard equipment 12 ... Road side antenna 13 ... Road side transmission / reception apparatus 14 ... Road side processing apparatus 15 ... Vehicle 21 ... Power supply part 22 ... Mobile body side antenna 23 ... Transmission / reception part 24 ... Integration processing part 25 ... Secure application module 26 ... Human Interface part

Claims (5)

It is used in an electronic toll collection device comprising a road-side control device and a mobile body-side control device that can communicate with each other, and is an in-vehicle device included in the mobile body-side control device,
The in-vehicle device is
An integrated processing unit for receiving a reception signal from the road side control device;
The said integration processing unit is configured as a separate stand and unitary, it includes a module for performing application processing toll collection,
The integration processing unit interprets the type of the received signal, and when the received signal is a signal related to toll collection, transfers the received signal to the module,
The module performs the toll collection application process using the received signal received from the integrated processing unit,
The module stores non-public data necessary for analyzing the data required for the fee collection application process, and is provided with a cryptographic processing unit for performing the analysis process. On-vehicle equipment used for equipment. It is used in an electronic toll collection device comprising a road-side control device and a mobile body-side control device that can communicate with each other, and is an in-vehicle device included in the mobile body-side control device,
The in-vehicle device is
An integrated processing unit for receiving a reception signal from the road side control device;
The said integration processing unit is configured as a separate stand and unitary, it includes a module for performing application processing toll collection,
The integration processing unit interprets the type of the received signal, and when the received signal is a signal related to toll collection, transfers the received signal to the module,
The module performs the toll collection application process using the received signal received from the integrated processing unit,
The module stores non-public data necessary for encryption / decryption processing of data necessary for the toll collection application processing, and is provided with an encryption processing unit for performing the encryption / decryption processing. Onboard equipment used for toll collection equipment. It is used in an electronic toll collection device comprising a road-side control device and a mobile body-side control device that can communicate with each other, and is an in-vehicle device included in the mobile body-side control device,
The in-vehicle device is
An integrated processing unit for receiving a reception signal from the road side control device;
The said integration processing unit is configured as a separate stand and unitary, it includes a module for performing application processing toll collection,
The integration processing unit interprets the type of the received signal, and when the received signal is a signal related to toll collection, transfers the received signal to the module,
The module performs the toll collection application process using the received signal received from the integrated processing unit,
The module stores non-public data necessary for performing authenticity confirmation processing of data required for the fee collection application processing, and is provided with an encryption processing unit for performing the authenticity confirmation processing. A vehicle-mounted device used in electronic toll collection equipment. It is used in an electronic toll collection device comprising a road-side control device and a mobile body-side control device that can communicate with each other, and is an in-vehicle device included in the mobile body-side control device,
The in-vehicle device is
An integrated processing unit for receiving a reception signal from the road side control device;
The said integration processing unit is configured as a separate stand and unitary, it includes a module for performing application processing toll collection,
The integration processing unit interprets the type of the received signal, when the received signal is a signal related to toll collection, and transfers the received signal to the module,
The module performs the toll collection application process using the received signal received from the integrated processing unit,
The module stores non-public data necessary for the partner authentication process with the road side device, and is provided with an encryption processing unit for performing the partner authentication process. vessel. It is used in an electronic toll collection device comprising a road-side control device and a mobile body-side control device that can communicate with each other, and is an in-vehicle device included in the mobile body-side control device,
The in-vehicle device is
An integrated processing unit for receiving a reception signal from the road side control device;
The said integration processing unit is configured as a separate stand and unitary, it includes a module for performing application processing toll collection,
The integration processing unit interprets the type of the received signal, and when the received signal is a signal related to toll collection, transfers the received signal to the module,
The module performs the toll collection application process using the received signal received from the integrated processing unit,
The module stores non-public data necessary for partner authentication processing with an external storage medium used as one of the mobile-side control devices, and is provided with an encryption processing unit that performs the partner authentication processing. A vehicle-mounted device used in electronic toll collection equipment.

Images