WO2015111109A1 - Position information authentication system, positioning terminal, and position information acquisition device - Google Patents

Abstract

Provided are: a position information authentication system (1) provided with a positioning terminal (200), an authentication center device (100), and a position information acquisition device (300, 300A); a positioning terminal (200); and a position information acquisition device (300, 300A). The authentication center device (100) is provided with a center-side satellite reception unit (110), a center-side authentication data creation unit (122), and an authentication data transmission unit (130). The positioning terminal (200) is provided with a terminal-side satellite reception unit (230), a key reception unit (211), a terminal-side authentication data creation unit (S54), an authentication determination unit (S56 to S60), an authentication completion message creation unit (S6 to S10), and a terminal-side transmission unit (212). The position information acquisition device (300, 300A) is provided with a terminal data acquisition unit (S70, S112), a key acquisition unit (S74, S96), a comparison data creation unit (S78, S100, S102), and a terminal determination unit (S80 to S84, S114 to S120).

Description

POSITION INFORMATION AUTHENTICATION SYSTEM, POSITIONING TERMINAL, AND POSITION INFORMATION ACQUISITION DEVICE Cross-reference of related applications

This application is based on Japanese Patent Application No. 2014-8904 filed on January 21, 2014, the contents of which are incorporated herein by reference.

The present disclosure relates to a position information authentication system capable of authenticating a navigation message received from a navigation satellite in order to calculate position information, a positioning terminal provided in the authentication system, and a position information acquisition device.

Positioning terminals that receive satellite radio waves from navigation satellites included in navigation satellite systems such as the global positioning system (hereinafter referred to as GPS) and calculate the current position using navigation messages included in the satellite radio waves are widely known. .

However, there are pseudo satellite radio wave generators that generate and broadcast fake satellite radio waves. There is a possibility that a malicious person may cause the positioning terminal to calculate an incorrect position using the false satellite radio wave generation device.

Therefore, as disclosed in Patent Document 1, there is a position information authentication system that can authenticate a navigation message in order to determine the reliability of the navigation message received from the navigation satellite in order to calculate the position information. Proposed.

This position information authentication system enables the positioning terminal to determine whether the navigation message received by the positioning terminal itself is a navigation message authenticated by the authentication center. If it can be determined that the navigation message received by the positioning terminal itself is a navigation message authenticated by the authentication center, the navigation message can be determined to have been transmitted by a navigation satellite.

With the technology of Patent Document 1, a positioning terminal that receives a navigation message can calculate a reliable current position.

The inventors of the present application have found the following.

As a use of the position information calculated by the positioning terminal, in addition to a use of the user who owns the positioning terminal to know the current position, a use of transmitting position information indicating the current position calculated by the positioning terminal to the surroundings can be considered. . For example, the position information is transmitted to a charge management device that manages a toll parking area and a toll road, and charging is automatically performed. In this application, even if the positioning terminal can calculate the current position with reliability, the positioning terminal receives the position information indicating the position different from the calculated current position and performs the charging process. If it is transmitted to the position information acquisition device, it cannot be charged correctly.

Thus, in a system in which the position information acquisition device acquires the position calculated by the positioning terminal and performs predetermined processing such as charging, it is not sufficient that the positioning terminal can correctly calculate the position. The positioning terminal indicates that the positioning terminal itself does not falsify the position information, and the position information acquisition device that acquires the position information needs to be able to determine that the positioning terminal is a reliable terminal that does not falsify the position information. is there.

Japanese published patent publication 2013-130395

The present disclosure has been made based on this circumstance, and the purpose of the present disclosure is to obtain position information from the positioning terminal that the positioning terminal is compatible with the position information authentication system. An object of the present invention is to provide a position information authentication system, a positioning terminal, and a position information acquisition apparatus that can be determined by an acquisition apparatus.

The position information authentication system according to an aspect of the present disclosure receives a navigation message, and when the received navigation message is a navigation message that can be authenticated, position information indicating the current position calculated using the navigation message is externally provided. Positioning terminal that transmits wirelessly, an authentication center device that transmits the center-created authentication data to a communication satellite that transmits center-created authentication data used for authentication by the positioning terminal, and position information that receives position information wirelessly transmitted by the positioning terminal An acquisition device.

The authentication center device includes a center side satellite receiving unit that receives a satellite radio wave including a navigation message from a navigation satellite included in the navigation satellite system, a cipher key, and the cipher key and the satellite received by the center side satellite receiving unit. Based on the navigation message included in the radio wave, a center side authentication data creation unit that creates center creation authentication data, and authentication data transmission that transmits the center creation authentication data created by the center side authentication data creation unit to the communication satellite A section.

The positioning terminal receives the center creation authentication data from the communication satellite, and also creates the encryption key or the encryption key from the terminal side satellite receiver that receives the satellite radio wave from the navigation satellite and the authentication center device. Authentication of terminal creation based on a key receiver that receives key-related data that is one of the data, key-related data received by the key receiver, and navigation messages extracted from satellite radio waves received by the terminal-side satellite receiver The terminal side authentication data creation unit that creates the data, the center creation authentication data and the terminal creation authentication data are compared, and if they match, the navigation message included in the satellite radio wave received by the terminal side satellite reception unit is Based on the key-related data received by the key receiving unit from the authentication center device, the terminal-side satellite receiving unit determines that the authentication has been successful. Authenticated creation unit that creates authenticated data indicating that the navigation message contained in the received satellite signal has been authenticated and the location information calculated based on the navigation message, as well as the authenticated creation unit created by the authenticated creation unit A terminal-side transmission unit that transmits data.

The location information acquisition device includes a terminal data acquisition unit that acquires the location information and authenticated data transmitted by the terminal side transmission unit from the communication unit, and a key acquisition unit that acquires key-related data from the authentication center device via the communication unit. Based on the key-related data acquired by the key acquisition unit, the comparison data generation unit that generates the authenticated comparison data for comparison with the authenticated data, and the authentication data and comparison data generated by the terminal data acquisition unit Compared with the authenticated comparison data created by the unit, the terminal includes a terminal determination unit that determines that the positioning terminal is a legitimate positioning terminal if they match.

According to the present disclosure, the positioning terminal authenticates the navigation message included in the satellite radio wave received from the navigation satellite. For this authentication, the key receiving unit receives from the authentication center device key-related data, which is key creation data that can be used to create the encryption key used by the authentication center device to create the center creation authentication data. is doing. If the authentication is successful, the key-related data received from the authentication center device is used to create authenticated data indicating that the authentication has been completed, and the authenticated data is transmitted together with the position information. .

Thus, the positioning terminal creates authenticated data using key-related data that is data acquired from the authentication center device, and transmits it together with position information. As a result, it is possible to prove that the positioning terminal itself is a legitimate positioning terminal trusted by the authentication center device that can communicate with the authentication center device.

Also, the key related data for creating the authenticated data is acquired from the authentication center device for authenticating the navigation message included in the satellite radio wave received by the positioning terminal itself. Therefore, it is not necessary to separately acquire data for creating authenticated data from the authentication center apparatus, and the process of creating authenticated data can be simplified.

Then, the location information acquisition device that has received the authenticated data together with the location information also acquires the key related data from the authentication center device. Then, based on the acquired key-related data, authenticated comparison data for comparison with the authenticated data is created. The terminal determination unit determines whether the positioning terminal that transmitted the position information is an authorized positioning terminal by comparing the authenticated comparison data with the authenticated data acquired by the terminal data acquisition unit. Can do.

When the positioning terminal according to another aspect of the present disclosure receives a navigation message and the received navigation message is a navigation message that can be authenticated, position information indicating the current position calculated using the navigation message is externally provided. Wireless transmission. The positioning terminal receives the center creation authentication data created by the authentication center device and transmitted to the communication satellite for use in authentication in the positioning terminal, and includes a navigation message from the navigation satellite provided in the navigation satellite system. Key-related data that is either an encryption key for creating center-created authentication data or key creation data that can create the encryption key from the terminal-side satellite receiver that receives satellite radio waves and the authentication center device A terminal side authentication data creation unit that creates terminal creation authentication data based on a key reception unit to be received, key related data received by the key reception unit, and a navigation message extracted from satellite radio waves received by the terminal side satellite reception unit And the center-created authentication data and the terminal-created authentication data are compared. Included in the satellite radio wave received by the terminal-side satellite receiver based on the key-related data received from the authentication center device by the authentication determination unit that determines that the navigation message contained in the received satellite radio wave has been authenticated. Terminal that sends the authenticated data created by the authenticated creation unit, together with the location information calculated based on the navigation message, and the authenticated creation unit that creates the authenticated data indicating that the navigation message being authenticated can be authenticated A transmission unit.

When the position information acquisition device according to another aspect of the present disclosure receives a navigation message and the received navigation message is a navigation message that can be authenticated, the position information indicating the current position calculated using the navigation message and Position information and authenticated data are received from a positioning terminal that wirelessly transmits authenticated data indicating that the received navigation message has been authenticated. The position information acquisition device includes a terminal data acquisition unit that acquires the position information and authenticated data transmitted by the positioning terminal from the communication unit, and the center creation authentication data that the positioning terminal uses for authentication from the authentication center device via the communication unit. A key acquisition unit that acquires key-related data that is either the encryption key used by the authentication center device or the key generation data that can generate the encryption key to generate the key, and the key relationship acquired by the key acquisition unit Based on the data, the comparison data creation unit that creates authenticated comparison data for comparison with the authenticated data, the authenticated data acquired by the terminal data acquisition unit, and the authenticated comparison data generated by the comparison data generation unit In the case of comparison and matching, the positioning terminal includes a terminal determination unit that determines that it is a legitimate positioning terminal.

According to the location information authentication system, the positioning terminal, and the location information acquisition device of the present disclosure, the location information acquisition device that acquires the location information from the positioning terminal indicates that the positioning terminal is compatible with the location information authentication system. I can judge.

The above and other objects, features and advantages of the present disclosure will become more apparent from the following detailed description with reference to the accompanying drawings. In the attached drawings
FIG. 1 is a configuration diagram of a location information authentication system according to the first embodiment. FIG. 2 is a block diagram showing in detail the configuration of the authentication center processing apparatus of FIG. FIG. 3 is a block diagram showing in detail the configuration of the in-vehicle device of FIG. FIG. 4 is a diagram showing the relationship between the navigation message included in the satellite radio wave and the RAND message. FIG. 5 is a flowchart showing processing executed by the control unit of the in-vehicle device. FIG. 6 is a flowchart showing in detail the navigation message authentication process in step S4 of FIG. FIG. 7 is a flowchart showing processing executed by the control unit of the roadside machine. FIG. 8 is a configuration diagram of a roadside machine in the second embodiment. FIG. 9 is a flowchart showing the pre-processing executed by the control unit included in the roadside machine, FIG. 10 is a flowchart illustrating processing executed when the control unit included in the roadside device receives position information and the like from the in-vehicle device.

(Embodiment 1)
Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. As illustrated in FIG. 1, the location information authentication system 1 of Embodiment 1 includes an authentication center device 100, an in-vehicle device 200 corresponding to the positioning terminal of the present disclosure, and a roadside device 300 corresponding to the location information acquisition device of the present disclosure. .

(Schematic configuration of the location information authentication system 1)
The authentication center apparatus 100 includes a monitor station apparatus 110, an authentication center processing apparatus 120, and a master control station apparatus 130. Hereinafter, the apparatus and the processing apparatus are omitted, the monitor station apparatus 110 is the monitor station 110, the authentication center processing apparatus 120 is the authentication center 120, and the master control station apparatus 130 is the master control station 130.

The monitor station 110 corresponds to the center-side satellite receiver of the present disclosure, and receives GPS radio waves transmitted by the GPS satellite 2 included in the GPS that is one of the navigation satellite systems. The GPS satellite 2 corresponds to the navigation satellite of the present disclosure, and the GPS radio wave corresponds to the satellite radio wave of the present disclosure. As is well known, navigation messages are included in GPS radio waves. The monitor station 110 demodulates the received GPS radio wave, extracts a navigation message, and sends it to the authentication center 120. When GPS radio waves are received from a plurality of GPS satellites 2, a navigation message is extracted from each GPS radio wave and sent to the authentication center 120.

The authentication center 120 creates parity data corresponding to the center creation authentication data of the present disclosure from the navigation message and the H matrix that is the encryption key. Then, a signal including the created parity data is sent to the master control station 130. In addition, communication is performed with the in-vehicle device 200 and the roadside device 300. Details of the authentication center 120 will be described with reference to FIG.

The master control station 130 corresponds to the authentication data transmission unit of the present disclosure, and transmits parity data received from the authentication center 120 to the quasi-zenith satellite (hereinafter, QZS satellite) 3.

The QZS satellite 3 corresponds to the communication satellite of the present disclosure, and broadcasts a navigation message including parity data toward the ground.

The in-vehicle device 200 is a navigation message authentication type in-vehicle device, and authenticates whether or not the navigation message received from the GPS satellite 2 can be authenticated by using parity data included in the navigation message received from the QZS satellite 3. . At the time of this authentication, communication with the authentication center 120 is performed. In addition, the current position is calculated using the navigation message received from the GPS satellite 2, and position information indicating the calculated current position is wirelessly transmitted to the outside together with a hash value to be described later. The hash value indicates that the navigation message has been authenticated, and corresponds to the authenticated data of the present disclosure. The in-vehicle device 200 will be described with reference to FIGS. 3, 5, and 6.

The roadside device 300 is managed by a service provider that provides a predetermined service using the position information transmitted by the in-vehicle device 200. Examples of the service include a service that charges a user of the vehicle when the vehicle on which the vehicle-mounted device 200 is mounted is parked in a toll parking area or when the vehicle travels on a toll road.

The roadside machine 300 includes a communication unit 310 and a control unit 320. The communication unit 310 performs wireless communication with the communication unit 126 (see FIG. 2) included in the authentication center 120 and the communication unit 210 (see FIG. 3) included in the in-vehicle device 200.

The control unit 320 is a computer including a CPU, a ROM, a RAM, and the like, and the CPU controls the communication unit 310 by executing a program stored in the ROM while using a temporary storage function of the RAM. Further, the hash value transmitted by the in-vehicle device 200 is acquired via the communication unit 310, and based on the hash value, it is determined whether the in-vehicle device 200 is a regular on-vehicle device. In this determination, communication with the authentication center 120 is performed.

(Detailed configuration of authentication center 120)
As shown in FIG. 2, the authentication center 120 includes a control unit 122, a data storage unit 124, and a communication unit 126.

The control unit 122 is a computer including a CPU, a ROM, a RAM, and the like, and controls the data storage unit 124 and the communication unit 126. In addition, the CPU executes a program stored in the ROM while using the temporary storage function of the RAM, so that the RAND message generation unit 1221, the SEED value generation unit 1222, the H matrix calculation unit 1223, the parity calculation unit 1224, A function as the signal processing unit 1225 is provided. The functions of these units 1221 to 1225 may be the same as the functions disclosed in Patent Document 1. In addition to these, the control unit 122 also includes an H matrix selection unit 1226. The control unit 122 corresponds to the center side authentication data creation unit of the present disclosure.

The RAND message generation unit 1221 means reference authentication navigation data (RAND: “Reference” Authentication “Navigation” Data), and is generated from the navigation message acquired from the monitor station 110.

Fig. 4 shows the relationship between RAND messages and navigation messages. As is well known, the navigation message is divided into subframes 1 to 5, and subframes 4 and 5 have 1 to 25 pages, respectively. Each subframe is divided into words 1-10.

In the RAND message, the elapsed time TOW (time of week, corresponding to the time information of the present disclosure) included in the word 2 of the subframe 1 and the TOC, AF0, AF1 included in the words 8 to 10 are arranged in order. It is out. Further, an AS Flag that is an anti-spoof flag and a PRN (Pseudo Random Noise) ID that is a satellite number are added. In FIG. 4, the numerical value shown in parentheses after each data constituting the RAND message means the number of bits of each data.

Since TOW changes every 6 seconds, it can be said that the RAND message including TOW and PRNID is a message indicating which GPS satellite transmitted when. Further, since TOW changes every 6 seconds and PRNID is included, a RAND message is generated every GPS satellite 2 received by the monitor station 110 and every 6 seconds.

The SEED value generation unit 1222 generates a single SEED value with the PC clock as an input. For example, the SEED value is generated by generating a random number with the PC clock as an input. In this embodiment, the SEED value is 36 bits.

The H matrix calculation unit 1223 uses the SEED value generated by the SEED value generation unit 1222 and calculates an H matrix corresponding to the SEED value on a one-to-one basis. This H matrix corresponds to the encryption key of the present disclosure. Further, since the H matrix can be created if the SEED value is determined, the SEED value corresponds to the key creation data of the present disclosure. As the H matrix, a known hash function may be used. For example, a parity check matrix for performing LDPC (Low Density Parity Check) encoding may be used. Furthermore, a generator matrix determined from a parity check matrix may be used.

The H matrix corresponds to an example of the encryption key of the present disclosure, and the H matrix or the SEED value corresponds to an example of the key related data of the present disclosure.

The parity calculator 1224 calculates parity data based on the RAND message created by the RAND message generator 1221 and the H matrix calculated by the H matrix calculator 1223. That is, parity data is calculated by multiplying the RAND message by this H matrix.

The signal processing unit 1225 inserts the parity data calculated by the parity calculation unit 1224 and the RAND message used for the calculation into the navigation message to be transmitted to the QZS satellite 3. Then, the inserted navigation message is sent to the master control station 130.

Further, the signal processing unit 1225 stores the parity data calculated by the parity calculation unit 1224, the RAND message used for calculating the parity data, the H matrix, and the SEED value used for the calculation of the H matrix in accordance with the signal insertion. Store in the storage unit 124.

The signal processing unit 1225 inserts the RAND message and parity data into the navigation message that causes the QZS satellite 3 to transmit each time the RAND message generation unit 1221 generates the RAND message. Therefore, the SEED value generation unit 1222, the H matrix calculation unit 1223, and the parity calculation unit 1224 also execute processing each time the RAND message generation unit 1221 generates a RAND message.

When the communication unit 126 receives the PRNID, TOW, and public key transmitted from the in-vehicle device 200, the H matrix selection unit 1226 converts the H matrix stored in the data storage unit 124 into the received PRNID and TOW. Select the corresponding H matrix. Then, the selected H matrix is encrypted with the public key, and the encrypted H matrix is transmitted to the in-vehicle device 200 that has transmitted PRNID or the like.

Further, when the communication unit 126 receives the PRNID, TOW, and public key transmitted from the roadside device 300, it corresponds to the received PRNID and TOW from the H matrix and parity data stored in the data storage unit 124. Select H matrix and parity data. Then, the selected H matrix and parity data are encrypted with the public key, and the encrypted H matrix and parity data are transmitted to the roadside device 300 that transmitted the PRNID and the like.

The communication unit 126 communicates with the communication unit 210 included in the in-vehicle device 200 and the communication unit 310 included in the roadside device 300.

The master control station 130 transmits the navigation message generated by the signal processing unit 1225 to the QZS satellite 3.

The QZS satellite 3 broadcasts the navigation message received from the master control station 130 toward the ground.

(Configuration of in-vehicle device 200)
The navigation message broadcast by the QZS satellite 3 is received by the satellite receiver 230 of the in-vehicle device 200. This in-vehicle device 200 includes a communication unit 210 and a control unit 220 in addition to the satellite reception unit 230.

The communication unit 210 includes a reception unit 211 and a transmission unit 212. The reception unit 211 corresponds to the key reception unit of the present disclosure, and the transmission unit 212 corresponds to the terminal side transmission unit of the present disclosure. The communication unit 210 has a narrow area communication function and a wide area communication function. The narrow area communication function has a communication distance of several hundred meters, for example. The wide-area communication function has a communication distance of, for example, several kilometers, and can communicate with other communication devices within the communication area of the public communication network by communicating with the base station of the public communication network. The narrow area communication function communicates with the communication unit 310 of the roadside machine 300, and the wide area communication function communicates with the communication unit 126 of the authentication center 120.

The satellite receiver 230 corresponds to the terminal-side satellite receiver of the present disclosure, and receives radio waves transmitted by the GPS satellite 2 and the QZS satellite 3 at a constant period.

The control unit 220 is a computer including a CPU, a ROM, a RAM, and the like, and controls the communication unit 210 and the satellite reception unit 230. Further, the CPU executes the program shown in FIG. 5 by executing the program stored in the ROM while using the temporary storage function of the RAM.

The processing shown in FIG. 5 is executed each time the satellite receiving unit 230 receives GPS radio waves from four or more GPS satellites 2. The reason why the number is four or more is that it is necessary to receive GPS radio waves from four or more GPS satellites 2 in order to calculate the current position.

In step S2, the current position is calculated based on the GPS radio wave. In step S4, navigation message authentication processing is executed. Details of this processing are shown in FIG.

In step S42, the navigation message received from the QZS satellite 3 is acquired from the receiving unit 211.

In step S44, PRNID, TOW, and parity data corresponding to the navigation message used to calculate the current position are extracted from the navigation message acquired in step S42. Note that PRNID and TOW may be extracted from the navigation message used to calculate the current position.

In step S46, the PRNID and TOW extracted in step S44 are transmitted from the transmission unit 212 to the authentication center 120 together with the public key. As described above, the authentication center 120 encrypts the H matrix determined by the PRNID and TOW with the public key and transmits the encrypted H matrix to the in-vehicle device 200.

In step S48, the encrypted H matrix transmitted from the authentication center 120 is acquired from the receiving unit 211. In step S50, the encrypted H matrix acquired in step S48 is decrypted with the secret key.

In step S52, a RAND message is created from GPS radio waves that include the same PRNID as the PRNID transmitted in step S46 in the navigation message.

In step S54, comparison parity data is created from the RAND message created in step S52 and the H matrix decoded in step S50. The comparison parity data created here corresponds to the terminal creation authentication data of the present disclosure, and S54 corresponds to the terminal side authentication data creation unit of the present disclosure.

Subsequently, steps S56 to S60 corresponding to the authentication determination unit of the present disclosure are executed. In step S56, it is determined whether or not the comparison parity data created in step S54 matches the parity data extracted in step S44.

The H matrix decoded in step S50 is the same as the H matrix used by the authentication center 120 to create parity data. The parity calculation unit 1224 of the authentication center 120 calculates parity data based on the H matrix and the RAND message.

Therefore, when the comparison parity data created in step S54 matches the parity data extracted in step S44, it can be considered that the RAND message created in step S52 is the same as the RAND message created by the authentication center 120. . Therefore, if the comparison parity data created in step S54 matches the parity data extracted in step S44, the process proceeds to step S58 and authentication is established. On the other hand, if the two parity data do not match, the process proceeds to step S60 and authentication is not established.

Return the explanation to FIG. After step S4 is executed, steps S6 to S10 corresponding to the presently disclosed authenticated creation unit are executed. In step S6, it is determined whether or not the processing result of the navigation message authentication process is authentication establishment.

If this determination is No, that is, if authentication is not established, the processing in FIG. 4 is terminated. On the other hand, if the determination in step S6 is Yes, the process proceeds to step S8.

In step S8, it is determined whether or not transmission of position information is necessary. As a case where transmission of position information is necessary, for example, there is a case where a request signal for position information is received from the communication unit 310 of the roadside device 300. Further, the position information may be transmitted at a constant transmission cycle. If the determination in step S8 is No, the process in FIG. 4 is terminated. On the other hand, if the determination in step S8 is also Yes, the process proceeds to step S10.

In step S10, a hash value is created from a hash function using the H matrix, which is data created by the authentication center 120, and parity data as input keys. This hash value corresponds to the authenticated data of the present disclosure.

In step S12, the position information indicating the current position calculated in step S1, the hash value created in step S8, the PRNID extracted in step S44, and the TOW are transmitted from the transmission unit 212 to the communication unit 310 of the roadside device 300.

(Processing of roadside machine 300)
The control unit 320 of the roadside machine 300 periodically transmits a request signal for requesting transmission of position information around the roadside machine 300. When the in-vehicle device 200 receives this request signal, the in-vehicle device 200 transmits position information, a hash value, and the like as described above.

When the communication unit 310 of the roadside device 300 receives position information, a hash value, and the like from the in-vehicle device 200, the control unit 320 of the roadside device 300 executes the process shown in FIG.

In step S70, the location information, hash value, PRNID, and TOW received by the communication unit 310 are acquired from the communication unit 310. This step S70 corresponds to the terminal data acquisition unit of the present disclosure.

In Step S72, the PRNID and TOW acquired in Step S70 are transmitted from the communication unit 310 to the authentication center 120 together with the public key. This public key is a public key that is uniquely stored in the roadside device 300, and is a key that is different from the public key that the in-vehicle device 200 transmits to the authentication center 120.

As described above, the authentication center 120 encrypts the H matrix and parity data determined by the PRNID and TOW with the public key and transmits the encrypted data to the roadside device 300. These H matrix and parity data are input keys for creating a hash value.

In step S 74, the encrypted H matrix and parity data transmitted from the authentication center 120 are acquired from the communication unit 310. This step S74 corresponds to the key acquisition unit of the present disclosure.

In step S76, the encrypted H matrix and parity data acquired in step S74 are decrypted with the secret key.

In step S78, a comparison hash value is created from a hash function stored in advance as the one used by the legitimate vehicle-mounted device 200 using the H matrix and parity data decrypted in step S76 as input keys. This comparison hash value corresponds to the authenticated comparison data of the present disclosure, and step S78 corresponds to the comparison data creation unit of the present disclosure.

Subsequently, steps S80 to S84 corresponding to the terminal determination unit of the present disclosure are executed. In step S80, it is determined whether or not the comparison hash value created in step S78 matches the hash value acquired in step S70.

When the two hash values match, it can be considered that the hash value transmitted by the in-vehicle device 200 also uses the H matrix created by the authentication center 120 as an input key. Therefore, if the two hash values match, the process proceeds to step S82, and it is assumed that the in-vehicle device 200 that transmitted the position information, the hash value, and the like is a regular in-vehicle device. On the other hand, if the two hash values do not match, the process proceeds to step S84, and it is assumed that the in-vehicle device 200 that transmitted the position information, the hash value, etc. is an unauthorized in-vehicle device.

As described above, according to the first embodiment described above, the in-vehicle device 200 authenticates the navigation message included in the satellite radio wave received from the GPS satellite 2 (S4). For this authentication, the authentication center 120 acquires the H matrix used for generating the parity data from the authentication center 120 (S48). When the authentication is successful, a hash value is created to indicate that the authentication has been completed using the H matrix acquired from the authentication center 120 (S10), and the hash value is transmitted together with the position information. (S12).

In this way, the in-vehicle device 200 creates a hash value, which is data indicating that it has been authenticated, using the H matrix acquired from the authentication center 120 and transmits it together with the position information. Accordingly, it is possible to prove that the in-vehicle device 200 itself is a regular on-vehicle device that can communicate with the authentication center 120 and is trusted by the authentication center 120.

Further, the H matrix for creating the hash value is obtained from the authentication center 120 in order to authenticate the navigation message included in the satellite radio wave received by the in-vehicle device 200 itself. Therefore, since it is not necessary to separately acquire data for creating a hash value from the authentication center 120, the process of creating a hash value can be simplified.

Also, instead of transmitting the H matrix itself, a hash value created from the H matrix using a hash function is transmitted. Since the hash function is an irreversible one-way function, it is possible to prevent the H matrix from being known to a third party.

The roadside device 300 that has received the hash value together with the location information also acquires the H matrix from the authentication center 120, and also acquires parity data (S74). A comparison hash value is created from these H matrix, parity data, and a hash function stored in advance as one used by the regular vehicle-mounted device 200 (S78). By comparing this comparison hash value with the hash value acquired from the in-vehicle device 200, it can be determined whether or not the in-vehicle device 200 that transmitted the position information is a regular on-vehicle device.

(Embodiment 2)
Next, Embodiment 2 will be described. In the following description of the second embodiment, elements having the same reference numerals as those used so far are the same as the elements having the same reference numerals in the previous embodiments unless otherwise specified. In addition, when only a part of the configuration is described, the embodiment described above can be applied to other parts of the configuration.

In the second embodiment, the roadside device 300A includes a satellite receiver 330 as shown in FIG. This satellite receiver 330 corresponds to the acquisition device side satellite receiver of the present disclosure. In the second embodiment, the processing of the control unit 320A is partially different from the control unit 320 of the first embodiment. The processing of the control unit 320A will be described with reference to FIGS. Control unit 320A executes the process shown in FIG. 9 at a constant GPS radio wave acquisition cycle, and also executes the process shown in FIG. 10 at a constant cycle.

FIG. 9 shows pre-processing that is performed before acquiring position information and the like from the vehicle-mounted device 200. This will be described from FIG. In step S 90, the navigation message included in the GPS radio wave received by the satellite receiver 330 is acquired from the satellite receiver 330. When the satellite receiving unit 330 receives GPS radio waves from a plurality of GPS satellites 2, the navigation message for all GPS radio waves received by the satellite receiving unit 330 is acquired.

In step S92 corresponding to the radio wave information extraction unit of the present disclosure, PRNID and TOW are extracted from all the navigation messages acquired in step S90.

In step S94 corresponding to the radio wave information transmission processing unit of the present disclosure, the PRNID and TOW extracted in step S92 are transmitted from the communication unit 310 to the authentication center 120 together with the public key. The authentication center 120 encrypts the H matrix and parity data determined by the PRNID and TOW with a public key and transmits the encrypted data to the roadside device 300.

In step S96, the encrypted H matrix and parity data transmitted from the authentication center 120 are acquired from the communication unit 310.

In step S98, the encrypted H matrix and parity data acquired in step S96 are decrypted with the secret key. This step S96 corresponds to the key acquisition unit of the present disclosure.

In step S100, a comparison hash value is created from a hash function stored in advance as the one used by the authorized vehicle-mounted device 200, using the H matrix and parity data decrypted in step S98 as input keys. This comparison hash value is created for all GPS radio waves received by the satellite receiver 330.

In step S102, a comparison hash value table is created. This comparison hash value table shows the correspondence between the comparison hash value created in step S100, the H matrix used to create the comparison hash value, and the PRNID and TOW transmitted to the authentication center 120 to obtain parity data. It is a table to show.

Next, FIG. 10 will be described. In step S110, it is determined whether the communication unit 310 has received data such as position information transmitted by the in-vehicle device 200 by executing step S12 of FIG. If this determination is No, the processing in FIG. 10 is terminated. On the other hand, if determination of step S110 is Yes, it will progress to step S112.

In step S112, the location information, hash value, PRNID, and TOW received by the communication unit 310 from the in-vehicle device 200 are acquired.

Subsequently, steps S114 to S120 corresponding to the terminal determination unit of the present disclosure are executed. In step S114, if the comparison hash value table created in the pre-processing in FIG. 9 includes the PRNID and TOW acquired in step S112, the comparison hash value corresponding to the PRNID and TOW is used as the comparison hash value used for the current comparison. To decide. In the pre-processing in FIG. 9, comparison hash values for all GPS radio waves received by the satellite receiver 230 are created. Therefore, it is highly likely that the hash value corresponding to the PRNID and TOW acquired in step S112 is included in the comparison hash value table. However, depending on the position and size of the radio wave shield around the roadside device 300, the satellite wave received by the satellite receiving unit 230 of the in-vehicle device 200 may not be received by the satellite receiving unit 330 of the roadside device 300. In this case, hash values corresponding to the PRNID and TOW acquired in step S112 are not included in the comparison hash value table. If the hash values corresponding to the PRNID and TOW acquired in step S112 are not included in the comparison hash value table, the processing of steps S72 to S78 in FIG. 7 is executed to create a comparison hash value.

In step S116, it is determined whether or not the hash value acquired in step S112 matches the comparison hash value determined in step S114.

If the two hash values match, the process proceeds to step S118, and it is assumed that the in-vehicle device 200 that transmitted the position information, the hash value, etc. is a regular in-vehicle device. On the other hand, if the two hash values do not match, the process proceeds to step S120, and it is assumed that the in-vehicle device 200 that transmitted the position information, the hash value, etc. is an unauthorized in-vehicle device.

As described above, according to the second embodiment described above, the roadside device 300 includes the satellite receiving unit 230, so that it exists around the roadside device 300 and may transmit a hash value to the roadside device 300. Satellite radio waves can be received from the same GPS satellite 2 as the in-vehicle device 200.

In the first embodiment, the PRNID and TOW are received from the in-vehicle device 200, and the PRNID and TOW are transmitted to the authentication center 120 to acquire the H matrix and parity data. However, in the second embodiment, satellite radio waves can be received from the same GPS satellite 2 as the in-vehicle device 200. Therefore, the PRNID and TOW are extracted from the navigation message received by the satellite receiver 330 without waiting for the PRNID and TOW to be received from the in-vehicle device 200. Then, the extracted PRNID and TOW are transmitted to the authentication center 120 to acquire the H matrix and parity data, and a comparison hash value table is created (FIG. 9).

Thereby, after receiving the positional information from the in-vehicle device 200 (S110: Yes), the comparison hash corresponding to the PRNID and TOW received from the in-vehicle device 200 with reference to the comparison hash value table created in advance. What is necessary is just to determine a value (S112, S114). That is, after receiving PRNID and TOW from the in-vehicle device 200, there is a high possibility that the processing of steps S72 to S78 in FIG. be able to.

In particular, when the roadside device 300 recognizes the vehicle-mounted device 200 as a regular vehicle-mounted device and performs processing based on the recognition result, and the vehicle-mounted device 200 is running, There is a high need to make a judgment. As processing based on the authorization result, for example, transmitting to the in-vehicle device 200 that it is a regular in-vehicle device, or opening and closing a gate provided in the vehicle travel path based on being authorized as a regular in-vehicle device. There is processing. The second embodiment is particularly useful when it is necessary to quickly determine whether or not the vehicle is a regular vehicle-mounted device.

As mentioned above, although embodiment of this indication was described, this indication is not limited to the above-mentioned embodiment, and the following modification is also included in the technical scope of this indication, and also a summary other than the following is given. Various modifications can be made without departing from the scope.

(Modification 1 and Modification 2)
For example, in the above-described embodiment, the hash value and the comparison hash value are created using the H matrix and the parity data as the input keys of the hash function (authenticated creation unit: S10, comparison data creation unit: S100). However, the present invention is not limited to this, and a hash value and a comparison hash value may be created using only the H matrix as the input key of the hash function (Modification 1). Further, instead of the H matrix that is the encryption key, the hash value and the comparison hash value may be created using the SEED value that is the key creation data as the input key of the hash function (Modification 2).

(Modification 3)
Also, an H matrix can be created from the SEED value. Therefore, even if the authenticated creation unit and the comparison data creation unit obtain the SEED value as the key-related data, the SEED value is not used as an input key as it is, but an H matrix is created from the SEED value, and the H matrix is used as the input key. A hash value may be created as

(Modification 4)
The authenticated creation unit and the comparison data creation unit do not use the hash value as authenticated data or authenticated comparison data, but use the H matrix or SEED value used to create the hash value as authenticated data or authenticated comparison data. Also good.

(Modification 5)
In the second embodiment, comparison hash values for all GPS radio waves received by the satellite reception unit 330 are created. However, comparison hash values for some of the GPS radio waves received by the satellite reception unit 330 are created. May be. For example, the comparison hash value may be created only for GPS radio waves received from a preset number of GPS satellites 2 that can be satisfactorily received.

(Modification 6)
In the above-described embodiment, the roadside devices 300 and 300A have been described as position information acquisition devices, but the present invention is not limited to this. The position information acquisition device may be a mobile device such as mounted on a crackdown vehicle that cracks down on illegal use of toll parking lots and toll roads.

(Modification 7)
In the above-described embodiment, the vehicle-mounted device 200 has been described as a positioning terminal, but the present invention is not limited to this. The positioning terminal may be a portable terminal carried by a person or a terminal mounted on a mobile body other than a car.

The flowchart described in this application or the process of the flowchart is composed of a plurality of steps (or referred to as sections), and each step is expressed as, for example, S2. Further, each step can be divided into a plurality of sub-steps, while a plurality of steps can be combined into one step.

In the present embodiment, each part in the control unit 122 focuses on the function of the control unit 122 and is classified for convenience, and the inside of the control unit 122 corresponds to each part. It does not mean that they are physically separated. Accordingly, each “unit” can be realized as software as a part of a computer program, or can be realized as hardware using an IC chip or a large-scale integrated circuit.

The embodiments, configurations, and aspects of the present disclosure have been illustrated above, but the embodiments, configurations, and aspects according to the present disclosure are not limited to the above-described embodiments, configurations, and aspects. For example, embodiments, configurations, and aspects obtained by appropriately combining technical units disclosed in different embodiments, configurations, and aspects are also included in the scope of the embodiments, configurations, and aspects according to the present disclosure.

Claims (6)

1. A positioning terminal (200) that receives a navigation message and wirelessly transmits position information indicating the current position calculated using the navigation message to the outside when the received navigation message is a navigation message that can be authenticated;
   An authentication center device (100) for transmitting the center creation authentication data to a communication satellite (3) for transmitting center creation authentication data used for authentication by the positioning terminal (200);
   A location information authentication system (1) comprising a location information acquisition device (300, 300A) for receiving location information wirelessly transmitted by the positioning terminal (200),
   The authentication center device (100)
   A center side satellite receiver (110) for receiving satellite radio waves including a navigation message from a navigation satellite (2) provided in the navigation satellite system;
   A center-side authentication data creating unit that creates an encryption key and creates the center-created authentication data based on the encryption key and a navigation message included in the satellite radio wave received by the center-side satellite receiver (110) (122)
   An authentication data transmission unit (130) for transmitting the center creation authentication data created by the center side authentication data creation unit (122) to the communication satellite (3),
   The positioning terminal (200)
   A terminal-side satellite receiver (230) for receiving the center creation authentication data from the communication satellite (3) and receiving the satellite radio wave from the navigation satellite (2);
   A key receiving unit (211) for receiving key-related data which is either the encryption key or key creation data capable of creating the encryption key from the authentication center device (100);
   Terminal side authentication data creation for creating terminal creation authentication data based on the key related data received by the key receiving unit (211) and the navigation message extracted from the satellite radio wave received by the terminal side satellite receiving unit (230) Part (S54),
   The center creation authentication data and the terminal creation authentication data are compared, and if they match, authentication for determining that the navigation message included in the satellite radio wave received by the terminal-side satellite receiver (230) has been authenticated. A determination unit (S56 to S60);
   Based on the key-related data received by the key receiving unit (211) from the authentication center device (100), a navigation message included in the satellite radio wave received by the terminal-side satellite receiving unit (230) can be authenticated. An authenticated creation unit (S6 to S10) for creating authenticated data indicating that;
   Along with the position information calculated based on the navigation message, a terminal side transmission unit (212) that transmits the authenticated data created by the authenticated creation unit (S6 to S10),
   The position information acquisition device (300, 300A)
   A terminal data acquisition unit (S70, S112) for acquiring the location information and the authenticated data transmitted from the terminal side transmission unit (212) from a communication unit;
   A key acquisition unit (S74, S96) for acquiring the key related data from the authentication center device (100) via the communication unit;
   A comparison data creation unit (S78, S100, S102) that creates authenticated comparison data for comparison with the authenticated data based on the key-related data acquired by the key acquisition unit (S74, S96);
   The authenticated data acquired by the terminal data acquisition unit (S70, S112) is compared with the authenticated comparison data generated by the comparison data generation unit (S78, S100, S102). A location information authentication system including a terminal determination unit (S80 to S84, S114 to S120) that determines that the terminal (200) is a legitimate positioning terminal.
2. In claim 1,
   The authenticated creation unit (S6 to S10) uses the key related data received by the key receiving unit (211) to create the authenticated data using a hash function.
3. In claim 2,
   The authenticated creation unit (S6 to S10) uses the terminal creation authentication data together with the key related data received by the key receiving unit (211) to create the location information for creating the authenticated data by the hash function. Authentication system.
4. In any one of claims 1 to 3,
   The position information acquisition device (300A)
   An acquisition device-side satellite receiver (330) that receives the satellite radio waves from the navigation satellite (2);
   A radio wave information extraction unit (S92) for extracting a satellite number and time information from the satellite radio wave received by the acquisition device side satellite reception unit;
   A radio wave information transmission processing unit (S94) that periodically transmits the satellite number and time information extracted by the radio wave information extraction unit from the communication unit to the authentication center;
   The key acquisition unit (S96) acquires the key related data transmitted from the authentication center based on the fact that the communication unit has transmitted the satellite number and time information to the authentication center, from the communication unit,
   The comparison data creation unit (S100, S102) receives the authenticated data, in addition to creating the authenticated comparison data, the correspondence between the authenticated comparison data and the satellite number and time information. Before you decide,
   The terminal determination unit (S114 to S120) performs the authenticated comparison when there is authenticated comparison data determined based on the satellite number and time information acquired by the terminal data acquisition unit (S70, S112) and the correspondence relationship. A location information authentication system for comparing data with authenticated data acquired by the terminal data acquisition unit (S70, S112).
5. A positioning terminal (200) that receives a navigation message and wirelessly transmits position information indicating a current position calculated using the navigation message to the outside when the received navigation message is a navigation message that can be authenticated,
   The center creation authentication data created by the authentication center device (100) and transmitted to the communication satellite (3) for use in authentication at the positioning terminal (200) is received from the communication satellite (3), and the navigation satellite system is provided. A terminal-side satellite receiver (230) that receives satellite radio waves including a navigation message from the navigation satellite (2);
   A key receiving unit (211) that receives key-related data, which is either an encryption key for creating the center creation authentication data or key creation data that can create the encryption key, from the authentication center device (100). )When,
   Terminal side authentication data creation for creating terminal creation authentication data based on the key related data received by the key receiving unit (211) and the navigation message extracted from the satellite radio wave received by the terminal side satellite receiving unit (230) Part (S54),
   The center creation authentication data and the terminal creation authentication data are compared, and if they match, authentication for determining that the navigation message included in the satellite radio wave received by the terminal-side satellite receiver (230) has been authenticated. A determination unit (S56 to S60);
   Based on the key-related data received by the key receiving unit (211) from the authentication center device (100), a navigation message included in the satellite radio wave received by the terminal-side satellite receiving unit (230) can be authenticated. An authenticated creation unit (S6 to S10) for creating authenticated data indicating that;
   A positioning terminal comprising: a terminal side transmission unit (212) for transmitting the authenticated data generated by the authenticated generation unit (S6 to S10) together with the position information calculated based on the navigation message.
6. When the navigation message is received and the received navigation message is a navigation message that can be authenticated, position information indicating the current position calculated using the navigation message and authenticated data indicating that the received navigation message can be authenticated A position information acquisition device (300, 300A) that receives the position information and the authenticated data from a positioning terminal (200) that wirelessly transmits to the outside,
   A terminal data acquisition unit (S70, S112) for acquiring the location information and the authenticated data transmitted from the positioning terminal (200) from a communication unit;
   An encryption key used by the authentication center device (100) or the encryption key used to create center creation authentication data used for authentication by the positioning terminal (200) from the authentication center device (100) via the communication unit A key acquisition unit (S74, S96) that acquires key-related data that is any of the key generation data that can generate
   A comparison data creation unit (S78, S100, S102) that creates authenticated comparison data for comparison with the authenticated data based on the key-related data acquired by the key acquisition unit (S74, S96);
   The authenticated data acquired by the terminal data acquisition unit (S70, S112) is compared with the authenticated comparison data generated by the comparison data generation unit (S78, S100, S102). A position information acquisition device including a terminal determination unit (S80 to S84, S114 to S120) that determines that the terminal (200) is a legitimate positioning terminal.
   
   

Images