JPH10326365A - System and method for automatic charge reception - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a method for automatic charge reception that have a security function for enhancing the security of the automatic charge reception system for tool roads and enabling high-performance, high-speed processing. SOLUTION: The automatic charge reception system having the security function for tool roads is equipped with an IC card 5 issued by performing the writing of a 1st encoding means by an IC card issuing machine 4, an on- vehicle machine 3, which makes it possible to read the IC card 5 and has a 2nd ciphering means, and a communication processing part and is mounted on a vehicle V, toll gate entrance exits 1 and 2 which can have a bidirectional radio communication with the on-vehicle machine 3 and also have a cipher part having a 2nd ciphering means and a communication processing part, and an on-line communication network 27 which connects the toll gate entrance and exits 1 and 2 mutually and a system management center 26.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an automatic toll collection system and a method for automatically collecting tolls on a toll road such as an expressway, and more particularly to an automatic toll withdrawal method using an IC card (including a prepaid card). The present invention relates to a security system including concealment of charge (remaining balance) information when performing.

[0002]

2. Description of the Related Art Conventionally, techniques in such a field include:
For example, there is one disclosed in JP-A-6-60237. The collection of tolls on the expressway requires particularly manual labor, and the vehicle must be stopped, which causes traffic congestion. Therefore, a method for improving this has been proposed.

In a conventional automatic toll collection system using a smart card or the like disclosed in the above-mentioned document, a changeable encryption code is transmitted from a bypass device at a tollgate to a moving vehicle. Thereafter, the moving vehicle uses the transmitted encryption code to encrypt payment information and the like according to the Data Encryption Standard (DES) algorithm. The moving vehicle transmits the encrypted payment information to the bypass device, whereby the bypass device performs a credit or debit process.

[0004] As the encryption code changes from moment to moment, the signals transmitted by the vehicle also change. The encryption code is composed of an 8-bit random number and a number indicating the date and time. The device installed in the vehicle consists of a transponder unit and a portable smart card inserted therein. The bypass device has a pair of antennas installed at a certain interval continuously along a high-speed payment lane of a tollgate, and a computer for controlling them.

[0005]

However, in the above-described conventional automatic toll collection system, the communication of important information between the side devices of the tollgate and the vehicle is performed using an algorithm using only the data encryption standard (DES). Although it is encrypted, its DES algorithm is known, and its security is poor. In particular, if the data in plain text is clear, or if the contents of important data of a plurality of smart cards can be assumed, it is possible to easily find out the contents by contrast sentence analysis or the like.

Further, it is assumed that the 64-bit DES encryption key (k) is registered (stored) in a memory in the smart card, and that the DES processing program (IC) is also stored in the smart card. Considering
Since it is conceivable to steal an encryption key or a processing program, it has security, that is, it cannot be said to be secure.

Although the encryption code (plaintext data) is periodically changed by an 8-bit random number and date / time information, it is difficult to analyze the DES. Considering the transmission, the concealment algorithm, and the fact that the smart card storing the key is always present at the user's hand, little security is secured.

In the conventional automatic toll collection system,
The driver of the vehicle must insert the smart card into the transponder of the vehicle before entering the toll gate. In other words, the user must purchase a smart card before entering the expressway. In other words, purchasing in the service area of the expressway is not enough.

[0009] Furthermore, when a smart card is lost or stolen, its use in the system is invalidated by blacklisting the card as a rule, but the smart card is illegally copied. In the case of being used after being copied (copied), there is no means for dealing with this. In addition, since the vehicle identification (vehicle type information) and the position information (entrance information) transmitted from the vehicle to the tollgate are in plain text, the toll calculation at the tollgate can be performed at high speed, but an illegal pseudo signal (rate It is also possible to lower the price by sending a value that makes the price lower.

[0010] Furthermore, since the encryption (decryption) calculation processing for the enciphered communication such as the amount of money to be collected (the balance) must be performed in the smart card, the processing performance (processing time) of the smart card is reduced. It greatly affects toll gate transit time. It is impossible to incorporate a high-performance and high-speed processing device due to the physical restrictions of the smart card, and as a result, the feasibility of a system that reduces the processing time to 500 msec or less is poor.

In the conventional automatic toll collection system,
The system will not work unless smart card processing is assumed. SUMMARY OF THE INVENTION It is an object of the present invention to provide an automatic toll collection system and an automatic toll collection method that eliminate the above problems, enhance the security of the automatic toll collection system on toll roads, and enable high-performance, high-speed processing. .

[0012]

According to the present invention, there is provided an automatic toll collection system having a security function on a toll road. An information storage medium to be written and issued, an in-vehicle device mounted on a vehicle having an encryption unit having a second encryption unit and a communication processing unit while making the information storage medium readable; And a toll gate having an encryption unit and a communication processing unit, a communication network connecting the toll gates, and a system management center. It was made.

[2] In the automatic toll collection system according to the above [1], means for writing a random number bit string to the information storage medium, means for writing important information to the information storage medium, and The apparatus includes means for encrypting information by a plurality of concealment algorithms, and means for collecting and reissuing a used information storage medium.

[3] In the automatic toll collection system according to the above [1] or [2], the information storage medium is an IC card. [4] In an automatic toll collection method having a security function on a toll road, (a) a step of writing a random random number bit string to an information storage medium by an information storage medium issuing machine and writing important information to the information storage medium (B) encrypting the important information with a plurality of security algorithms, decrypting the encrypted information storage medium balance when the information storage medium is mounted, and displaying the balance. A) encrypting important information at the on-board unit and the toll gate, (c) encrypting a random random number bit string (R ₂ ) used each time of communication, and (d) encrypting the random random number bit string (R a method of encrypting data on a wireless communication using _2), and detecting the alteration information storage medium in the decoding means important information (e) tollgate exit (F) judging whether or not the information storage medium is a duplicated information storage medium based on the information of the system management center; (g) encrypting the information storage medium balance reduced by the collected amount; and (h) said random number. Encrypting the data on the wireless communication using the random number bit string (R ₂ ); (i) decrypting the new information storage medium balance encrypted by the on-vehicle device; and (j) decrypting this. Displaying the received information storage medium balance and the collected amount on a display unit to notify the driver that the automatic toll collection has been completed successfully.

[5] The automatic toll collection method according to [4], wherein the internal secret information is instantly deleted when the on-vehicle device is removed or disassembled from the vehicle. is there. [6] The automatic toll collection method according to [4], wherein the plurality of concealment algorithms and their keys are distributed and owned by the information storage medium issuing machine, the on-vehicle machine, and the toll gate. is there.

[7] In the automatic toll collection method according to the above [4], [5] or [6], an IC card is used as the information storage medium.

[0017]

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a block diagram of an essential part of an automatic toll collection system for a highway showing an embodiment of the present invention, FIG. 2 is a basic configuration diagram of tollgate entrance and exit showing an embodiment of the present invention, and FIG. It is a basic block diagram regarding communication of an in-vehicle device which shows.

Vehicle V attempting to use this system
It is pre-apply that to the authorities, and mounted with the vehicle-mounted device 3 of the vehicle V, necessary information such as the vehicle type information, and confidential algorithms required in the present system A ₁ 20, A ₃ 21, key their algorithm The information is stored in a memory (not shown) in the encryption unit 100 inside the vehicle-mounted device 3 by the administrator of the authority. Reference numeral 22 denotes a random number generation circuit b.

In-vehicle device 3, toll gate entrance 1, toll gate exit 2
Is a communication unit 200 for wireless communication with the encryption unit 100, as shown in FIGS. 2 and 3, and a display unit for displaying information such as during communication between the tollgate and the on-board unit and acceptance of tollgate passage. Although not shown, the encryption unit 100 and the communication processing unit 200 have a microprocessor for arithmetic processing and a memory for data processing and storage, although not shown.

The ciphering algorithm A ₁ 20 shown in FIG. 1, A
₂ 19 and A ₃ 21 exist in the encryption unit 100 of FIG.
Further, the concealment algorithms A ₁ 20 and A ₃ 21 shown in FIG.
The random number generation circuit b22 exists in the encryption unit 100 of FIG. The reader / writer 100A of the IC card 5 also exists in the encryption unit 100. A user of this system purchases an IC card (including a prepaid card) 5 issued by an IC card issuing machine 4 at an authority at a store such as a service area before passing through the tollgate exit 2. .

Hereinafter, a method of issuing the IC card 5, a confidential communication method between the vehicle-mounted device 3 and the toll gates 1 and 2 from the toll gate entrance 1 to the toll gate exit 2, and an automatic toll collection method from the IC card 5 will be described. explain. FIG. 4 is a diagram showing a method of writing data necessary for the present system to a user data area of an IC card issued by an IC card issuing machine according to the embodiment of the present invention.

First, as shown in FIG.
As shown in FIG. 4B, the random number generated by the random number generation circuit a18 of the IC card issuing machine 4 in FIG. 1 is applied to the entire surface of the user data area 101 (or the important information area 102 to be kept secret). Write a bit string [104]. Next, as shown in FIG. 4C, the IC card balance (a, A) [107,
109] and the card identification ID number (b, B) [108, 1
10], [105, 10]
6] and a card usage count [111] is determined by a predetermined arrangement information (a part of the keys owned by the IC card issuing machine 4, the vehicle-mounted machine 3, and the toll gates 1, 2). Overwrites the position with a random number. In addition, 1
03 is a general information area.

Next, as shown in FIG. 4D, a pair of ranges 106 in the important information area 102 are concealed by an algorithm A ₂ 19 [this algorithm and its key (k ₂ )
C card issuing machine 4 and a unique one that only has toll gates 1 and 2]. Furthermore, concealing all user data area 101 of the IC card 5 Algorithm A ₁ 20 [this algorithm and its key (k ₁₎ is, IC
It is owned by the card issuing machine 4, the on-board unit 3, and the toll gates 1 and 2, and the algorithm may use a data encryption standard (DES) used in a bank online system or the like]. Issued as an IC card 5 for the system user.

The user of this system purchases the IC card 5 issued in this way before passing through the tollgate exit 2. Next, communication between each device from a tollgate entrance to a tollgate exit passage of a vehicle equipped with an on-vehicle device and a concealment algorithm process will be described. First, when the vehicle V equipped with the vehicle-mounted device 3 passes through the passage lane of the tollgate entrance 1, the transceiver 25 of the tollgate entrance 1 transmits the communication start command 9 to the vehicle-mounted device 3 in plain text [8] ]. Upon receiving the communication start command 9, the on-vehicle device 3 generates the random number generation circuit b22.
In, as shown in FIG. 5, a random random number bit string R ₁ 23 in each case have occurred a predetermined amount, ciphering algorithm A ₁
20 and its encryption key (k ₁ ), which is transmitted to the tollgate entrance 1 [10].
Such vehicle type information stored in the memory in the cryptographic unit 100 of the terminal 3 a [is encrypted already by ciphering algorithm A ₁ (k _1)], ciphering algorithm A ₃ 21 and part of the encryption key ( to k _3), to the combined random random number bit string R ₁ 23 as an encryption key, encrypts, and transmits the toll booth inlet 1 [11].

The tollgate inlet 1, as shown in FIG. 5 (a), a random random number bit string of the originally encrypted received a certain amount, ciphering algorithm A ₁ 20 and the key (k
Decoded in _1), to obtain a raw random random number bit string R ₁ 23. Next, as shown in FIG. 5B, the vehicle type information and the like encrypted by the concealment algorithms A ₁ (k ₁ ) 20 and A ₃ (k ₃ + R ₁ ) 21 are combined with the respective concealment algorithms and the R obtained above. Decoding using ₁ to obtain raw vehicle type information and the like.

Further, at the tollgate entrance 1, as shown in FIG. 5 (c), the entrance information itself is concealed by an algorithm A _1.
(K ₁ ) 20 and encrypted with A ₃ (k ₃ + R ₁ ) 21,
The data is transmitted to the on-vehicle device 3 [12]. The in-vehicle device 3 decodes in the reverse procedure to obtain entrance information and the like. Further, the tollgate entrance 1 notifies the system management center 26 of the vehicle type information and the entrance information obtained by the above-mentioned communication means to the system management center 26 online in real time through an online communication network 27 connecting the tollgate exit 2 and the system management center 26. I do.

The system management center 26 collectively manages toll gate entry / exit information and payment (withdrawal of remaining balance) information of the vehicles used in the present system.
The vehicle V that has passed through the tollgate entrance 1 receives the IC issued by the IC card issuing machine 4 before arriving at the tollgate exit 2.
The card 5 is purchased and inserted into the vehicle-mounted device 3. In-vehicle device 3
Is the encrypted data in the important information area 102 of the IC card 5 {[IC card balance (a, A) [107, 10
9], card identification ID numbers (b, B) [108, 11
0], the card usage count [111]｝ is read [6],
Ciphering algorithm A ₁ 20 and by the key (k _1),
Only the area 105 shown in FIG. 4C is decrypted to obtain the balance a107 of the IC card. This IC card balance a107 and the entrance information obtained at the tollgate entrance 1 are displayed on the display unit 30 of the vehicle-mounted device 3.
0 is displayed to notify the driver of the vehicle V.

When the vehicle V passes through the passage lane of the tollgate exit 2, the transceiver 28 of the tollgate exit 2 transmits the communication start command 14 to the vehicle-mounted device 3 in plain text [13]. The in-vehicle device 3 that has received the communication start command 14 uses the random number generation circuit b22 in FIG.
(A), the concealing a certain amount of random random number bit string R ₂ 24 newly generated algorithm A ₁ 20
If, then encrypted by the encryption key (k _1), and transmits to the tollgate exit 2 [15].

Further, as shown in FIG. 6B, the on-vehicle device 3 stores the encrypted data 112 of the important information area 102 read from the IC card 5 and the on-vehicle device 3.
Algorithm A ₁ (k ₁ ) 20 in the memory of the encryption unit
The vehicle type information and the entrance information 113 stored as encrypted with the encryption algorithm A ₃ 21 and a random number bit string R ₂ 24 random to a part (k ₃ ) of the encryption key.
Is encrypted as an encryption key, and toll gate exit 2
Is transmitted to [16].

The tollgate exit 2, first, first an amount of random random number bit string 23 is encrypted received ciphering algorithm A ₁ 20 and decrypted with the key (k _1), the raw random random number bit string R ₂ 24 is obtained. Next, the secret algorithm A ₃ (k ₃ + R ₂ ) 21 and the random number bit string R ₂ 24 determined above are used to decrypt and encrypt the data 112 of the important information area 102, the vehicle type information, and the entrance information. Etc. 113 are obtained.

Next, the concealment algorithm A ₁ (k ₁ ) 20
And the IC card balance a107, card identification ID number b108, IC card balance A × f [A
₂ (k ₂ )], card identification ID number B × f [A
₂ (k ₂ )], the number of times of card use 111, vehicle type information, entrance information, and the like 113 are obtained.

Further, the concealment algorithm A ₂ (k ₂ ) 1
9, decrypts the IC card balance A × f [A ₂ (k ₂ )] and the card identification ID number B × f [A ₂ (k ₂ )],
Further, according to the above arrangement information, the balance of the IC card A10
9. The card identification ID number B110 is obtained. at this point,
If the regular IC card 5 is used, the balance of the IC card a107 and the balance of the IC card A109 should match as described later, and the card identification ID number b1
08 and the card identification ID number B110 should also match.

If the two do not match, it is determined that the IC card is an unauthorized IC card in which data such as the balance of the IC card has been tampered with (such as an increase in the balance).
Is indicated to the specific payment area managed by the authority by the guidance display immediately after the non-stop lane, and payment by cash or the like is separately required. Also, the card usage count 111 is originally set to 1 every time the system passes the tollgate exit 2 of the present system.
It is managed by the computer of the system management center 26 through the online communication network 27 between the toll gate and the entrance together with the card identification ID number (b = B). , Is always stored in computer managed memory at all toll gates.

The IC card 5 is illegally copied and duplicated.
However, when the unauthorized IC card is used, when the authorized IC card is used, the card use frequency 111 may be duplicated with the same card identification ID number or may be one day ago, so that the unauthorized use is prohibited. Can be detected. In this case, the card identification ID number of this IC card 5 is notified to the system management center 26 and becomes invalid, and is also notified to all the toll gates 1 and 2, and the invalid card identification ID
Stored in memory as a number.

Also in this case, the vehicle V is guided to the specific payment area managed by the authority by the guidance display immediately after the non-stop passage lane, similarly to the case where the balance of the IC card balance or the like does not match. In the decryption processing at the tollgate exit 2, the balance of the IC card (a and A) [107 and 109] matches the card identification ID number (b and B) [108 and 110]. Is valid, toll gate exit 2
Calculates the amount of money to be collected for a traveling section from vehicle type information, entrance information, etc., and calculates the balance of the IC card (a = A) [107 = 10
9], the remaining amount is set as a new IC card balance (a '= A'), and the same encryption means as described above is used together with the exit information, as shown in FIG. 6 (c). Is further encrypted by the concealment algorithm A ₃ (k ₃ + R ₂ ) and transmitted to the vehicle-mounted device 3 [17].

In the vehicle-mounted device 3, the concealment algorithm A ₃ (k
₃ + R ₂ ), and the IC card balance a'107 and the IC card balance A'109, which have been subjected to the encryption means, are replaced with the IC card balance a107 of the original IC card.
And the balance of the IC card balance a107 and the balance of the IC card balance A109. In addition, the exit information and the like that have been encrypted are also written in the general information area (log information area and the like) of the IC card together with the entrance information and the like [7]. This is used later when the administrator of the authority checks the usage status of the IC card 5 or the like.

The toll booth exit 2 receives the balance of the IC card (a '=
A ') and the completion of the transmission of the exit information and the like, "Thank you" is displayed on the guidance display in front of the vehicle V to inform the driver of the acceptance of the passage. Also, the vehicle-mounted device 3 displays the acceptance of passing on the display unit 300 when the reception of the IC card balance (a '= A') and the exit information from the tollgate exit 2 is completed, to notify the driver.

The driver can pass through the passing lane without stopping while checking the reception display. Further, the encrypted IC card balance a 'is converted to a secret algorithm A.
₁ (k ₁ ) 20 and decrypts the IC card balance on the display unit 30
It is displayed at 0 to inform the driver and the amount of money collected is also displayed for a certain period of time. In the above description, the details of the data frame in the wireless communication between the on-vehicle device 3 and the toll gates 1 and 2, and particularly the data error and the correction method are not mentioned, but the accuracy of the conventional general transmission is confirmed. Needless to say, a cyclic redundancy code (CRC) is added to the end of the data frame, and a retransmission protocol when an error occurs is provided.

In this system, it is assumed that the vehicle passage time at the toll gate is about 300 msec.
This is the time when the vehicle can travel 5 to 6 m at a speed of km to 60 km. During this time, the communication between the toll gate and the in-vehicle device is completed, so that it is necessary to increase the speed of each process. In a general concealment algorithm, a method in which the encryption key and the decryption key owned by the sender and the receiver are common (shared key method) is a public key method or the like (the encryption key and the decryption key are different). In comparison, since high-speed arithmetic processing is possible, the former method is preferable for each concealment algorithm used in this embodiment.

The data encryption standard (DES) is known as the most common type of the shared key method, and can be adopted as the concealment algorithm A ₁ (k ₁ ) of the present system. However, it should be noted that DES is a block cipher in units of 64-bit plaintext messages, and that the algorithm is known. Generally, it is known that the algorithm of the shared key method takes only about several msec in the arithmetic processing using an 8-bit microprocessor, and it can be inferred that the algorithm can be adopted in this system.

Since the vehicle-mounted device is mounted on the vehicle, there is a possibility that the vehicle is stolen or remodeled. Therefore, in particular, the encryption unit must be structured to be incorporated in the communication processing unit.
When the communication processing unit is removed or the encryption unit is removed, the secret information stored in the memory (SRAM) inside the encryption unit (the secret algorithms A ₁ and A ₃ and their keys k ₁ and k _3, etc.) It is necessary to take precautionary measures so that they can be deleted instantaneously.

Specifically, by a battery different from the vehicle,
The memory (S) that stores the secret information content inside the encryption unit
RAM), and if the encryption unit or the communication processing unit is removed improperly, it is detected by various sensors or switches, the backup line of the battery is cut off, and the secret information contents (memory ).

The IC card (including the prepaid card) used in the present system may be a commercially available one. In particular, in this embodiment, since no processing or calculation is required inside the IC card, the memory card is not used. It is also possible to use a storage medium such as a card or a floppy disk. In addition, this system can be used if this IC card is purchased in a service area on the expressway and inserted into the on-board unit before the exit of the tollgate. Can be passed if the vehicle has an onboard device registered (stored in).

The balance of the IC card at the time of issuance is expected to be about 10,000 yen minimum to 100,000 yen maximum. In addition, since it is not necessary to write personal information, vehicle type information, and the like when the IC card is issued, the used IC card can be collected by an authority, reissued again, and sold. In the above-described embodiment, the case where an IC card is used as the information storage medium has been described. However, the present invention is not limited to this, and a general information storage medium such as FD or CD-ROM may be used. You may.

Correspondingly, the IC card issuing machine may be an information storage medium issuing machine, and important (secret) information on a general information storage medium (FD, CD-ROM, hard disk, memory) or the like. Information and the like may be stored. Further, the present invention is not limited to the above-described embodiment, and various modifications are possible based on the gist of the present invention, and they are not excluded from the scope of the present invention.

[0046]

As described above, according to the present invention, the following effects can be obtained. (A) According to the present invention, in order to secure security in the entire system, a plurality of concealment algorithms and their keys are distributed and owned by each device of the system. Even if it is found by means, the security of the entire system is ensured.

In particular, the concealment algorithm A ₂ (k ₂ )
Since only the information storage medium issuing machine and the toll gate are owned, it is difficult for a general user to steal. further,
This concealment algorithm has a built-in high-performance (high-speed processing) computer (microprocessor), etc., because the device (information storage medium issuing machine and toll gate) that owns the algorithm has no problem even if it is physically large. It is possible to employ an algorithm having higher security than DES or the like.

Further, it is apparent that the present invention greatly contributes to clearing the communication-enabled time (300 msec or less) restricted by the system when the vehicle passes through the toll gate. (B) When an information storage medium is issued by an information storage medium issuing machine, the information storage medium is filled with a random random number bit string generated for each information storage medium, and then the important information data is randomized by predetermined arrangement information. The method of writing data at an appropriate location and then encrypting it is very effective against an attack that collects a large number of information storage media, analyzes the sentence, and illegally falsifies important information.

This is because if the plaintext is all unknown random random numbers, the contrast sentence analysis becomes impossible at all, and even if the plaintext is half the random number, the plaintext (plaintext Position) cannot be assumed. Therefore, plaintext (plain data) for this total random number
The smaller the amount, the more effective.

These ratios should be determined to be more effective at the time of designing the system, based on the relationship between necessary information (plain text) and the data storage capacity of a storage medium such as an information storage medium.
Further, only the encrypted data exists inside the information storage medium, and it is impossible to steal a secret algorithm or the like. When the information storage medium is illegally copied and copied (copied), the number of times the information storage medium is used is managed through the communication network between the system management center and the toll gate as described above. Therefore, the authorized information storage medium and the copied unauthorized information storage medium
At the time of using each time, fraud is detected, and a corresponding action can be taken. For example, a fine or additional charge can be collected.

(C) Further, the security of the system of the present invention is such that a concealment algorithm A ₃ (k) used for encryption and decryption of only wireless communication between the onboard unit and the toll gate is used.
₃ + R _n ). Since this algorithm is also unique and has only an onboard unit and a toll gate, it is possible to store physical resources for high-speed processing even if a highly secure algorithm is adopted. Further, as described above, it is easy to respond to theft or modification of the vehicle-mounted device.

[0052] Further, in this confidential algorithm, the vehicle-mounted device whenever the communication with the key k ₃ were stored in memory when mounted on a vehicle, as a key together random numbers R _n generated by random number generating circuit of the vehicle-mounted machine Each time you communicate,
This means that a part of the key has been updated, and even if it is intercepted in the wireless space, it cannot be analyzed. This is because all important data in the wireless space (including R _n ) has been previously encrypted by another secret algorithm. The ratio between k ₃ and R _{n is such that} the greater the value of R _n , the higher the security.
_n should be increased.

(D) According to the present invention, as described above, since the information storage medium is not required at the entrance of the tollgate, the user purchases the information storage medium in the service area of the expressway and the like, and At the exit, a passing lane for automatic toll collection of the system can be used.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a main part of an automatic toll collection system for a highway, showing an embodiment of the present invention.

FIG. 2 is a basic configuration diagram relating to communication at a toll gate entrance showing an embodiment of the present invention.

FIG. 3 is a basic configuration diagram relating to communication of an on-vehicle device showing an embodiment of the present invention.

FIG. 4 is a diagram (part 1) illustrating a method of writing data required by the present system to a user data area of an IC card issued by the IC card issuing machine according to the embodiment of the present invention.

FIG. 5 is a diagram (part 2) illustrating a method of writing data required by the present system to a user data area of an IC card issued by the IC card issuing machine according to the embodiment of the present invention.

FIG. 6 is a diagram (part 3) illustrating a method of writing data necessary for the present system to a user data area of an IC card issued by the IC card issuing machine according to the embodiment of the present invention.

[Explanation of symbols]

V Vehicle k Algorithm key information 1 Toll gate entrance 2 Toll gate exit 3 On-board unit 4 IC card issuing unit 5 IC card (including prepaid card) 9,14 Communication start command 18 Random number generation circuit a 19 Security algorithm A ₂ 20 Security algorithm A ₁ 21 Concealment algorithm A ₃ 22 Random number generation circuit b 23 Random number bit sequence R ₁ 24 Random number bit sequence R ₂ 25,28 Transceiver 26 System management center 27 Online communication network 100 Encryption unit 101 User data area 102 Important information area 103 General information area 107 IC card balance a 108 Card identification ID number b 109 IC card balance A 110 Card identification ID number B 111 Card usage frequency 112 Data of important information area 113 Vehicle type information and entrance information 200 Communication processing 300 display unit

 ──────────────────────────────────────────────────続 き Continuation of the front page (72) Inventor Hayao Sumiyasu 1261-5-405, Wada, Tama-shi, Tokyo (72) Inventor Kiyomi Furuno 8-16-12, Okusawa, Setagaya-ku, Tokyo

Claims (7)

[Claims] 1. An automatic toll collection system having a security function on a toll road, wherein: (a) an information storage medium which is written and issued by a first encryption means by an information storage medium issuing machine; and (b) An in-vehicle device mounted on a vehicle having an encryption unit having a second encryption unit and a communication processing unit, which makes the information storage medium readable, and (c) two-way wireless communication with the in-vehicle device Automatic toll collection, characterized by comprising: a toll gate having an encryption unit and a communication processing unit; and (d) a communication network connecting each of the toll gates and the system management center. system. 2. The automatic toll collection system according to claim 1, wherein said means for writing a random number bit string to said information storage medium, means for writing important information to said information storage medium, and An automatic toll collection system comprising: means for encrypting with a plurality of concealment algorithms; and means for collecting and reissuing a used information storage medium. 3. The automatic toll collection system according to claim 1, wherein the information storage medium is an IC card. 4. An automatic toll collection method having a security function on a toll road, comprising: (a) writing a random random number bit string to an information storage medium by an information storage medium issuing machine; Writing the, the step of encrypting the important information by a plurality of concealment algorithms, and, when the information storage medium is mounted, decrypting the encrypted information storage medium balance, displaying the balance, (B) encrypting important information at the vehicle-mounted device and the toll gate, (c) encrypting a random random number bit string (R ₂ ) used each time of communication, and (d) the random random number bit string (R
₂ ) encrypting data over wireless communication using
(E) detecting a falsified information storage medium by means for decoding important information at a tollgate exit, (f) determining whether or not the information storage medium is a duplicated information storage medium based on information of a system management center; g) encrypting the information storage medium balance reduced by the collected amount; (h) encrypting data on wireless communication using the random random number bit string (R ₂ ); Decrypting the new information storage medium balance encrypted by the on-vehicle device; and (j) displaying the decrypted information storage medium balance and the collected amount on the display unit, and successfully completing the automatic charge collection. Informing the driver of the automatic toll collection. 5. The automatic toll collection method according to claim 4, wherein when the vehicle-mounted device is removed or disassembled from the vehicle,
An automatic toll collection method comprising a step of instantly deleting internal secret information. 6. The automatic toll collection method according to claim 4, wherein the plurality of concealment algorithms and their keys are distributed and owned by the information storage medium issuing machine, the on-vehicle machine, and the toll gate. Automatic toll collection method. 7. The automatic toll collection method according to claim 4, wherein an IC card is used as the information storage medium.