JP2000099781A - Authentication system for automatic fare collection system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To surely prevent a user other than legal ones from pretending to be a legal user by comparing the data on the physical features of an applicant of application with the data on the physical features of a previously registered legal user to authenticate the applicant and judging the propriety of application of an automatic fare collection system for the applicant. SOLUTION: A reading means 1f can read physical features, e.g. fingerprint, etc., of an applicant who wants to use an automatic fare collection system (ETC system) A as the computer readable data. A sensor is connected to the means 1f. Thus, the means 1f reads the physical features of the applicant via the sensor as the computer readable data. Also, two types of means 1f are available, that is, a single-function means 1f can read only the fingerprints, for example, and a multifunction means 1f can read plural physical features including fingerprints, voiceprints, etc. For instance, the fingerprints, voiceprints, iris spots, retinal spots, face outlines, etc., are included in the physical features of applicants.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication system in an automatic toll collection system, and more particularly to an authentication system in an automatic toll collection system that saves authentication work and is excellent in security.

[0002]

2. Description of the Related Art On a toll road such as an expressway, a car must be temporarily stopped at a toll booth in order to pay a toll, and the suspension of the car is a major factor in congestion. In order to alleviate such traffic congestion and to make the toll booth unmanned and cashless, in recent years, an automatic toll collection system (Electric Toll Collecti) that allows payment of tolls without stopping vehicles at toll booths
on, hereinafter referred to as "ETC system". ) Construction is in progress. It is considered that most of the ETC system is a payment method using an IC card (prepaid credit) which can process a large amount of information and has an excellent security function.

As shown in FIG. 3, an ETC system 100
Functions with the road device 110 and the in-vehicle device 120, of which the IC card 121 is inserted into the in-vehicle device 120 to read and write information of the IC card 121.
C card reader 122, monitor 12 for notifying various information
3. A speaker 124 is provided. Further, an in-vehicle antenna 125 for transmitting information obtained from the IC card 121 or the like to the road antenna 111 or receiving various information transmitted from the road antenna 111 is provided. Although not shown, a main control unit and the like for controlling the vehicle-mounted device 120 are provided.

As shown by a solid line in FIG.
In the case where the car M equipped with a "0" uses a toll road such as an expressway, the notice antenna 111 installed at the entrance of the toll road is used.
A, a road device 110 having an entrance antenna 111B, a camera device 113, etc. detects various information such as validity of the IC card 121, entrance information such as place and time of entry, and vehicle type information. It is determined whether the vehicle can pass without stopping at the entrance. At the exit of the toll road, the road device 110 detects the automobile M indicated by the virtual line by the charging antenna 111C, and the road communication processing device 112 calculates the toll from the entrance information and the vehicle type information obtained at the entrance, Perform billing (automatic fee collection) processing. Then, the road apparatus 110 detects the billing information by the tollgate antenna 111D and determines whether or not the vehicle can pass without stopping. If there is a toll booth at the entrance of the toll road, the charging antenna 111 is installed at the entrance.
C is provided, and charging (automatic toll collection) processing is performed at the entrance.

On the other hand, when the IC card 121 is a postpaid (credit) type card, the central processing center 130
The fee is subsequently deducted from the user's savings account associated with 1. When the IC card 121 is of a prepaid type, a charge paid electronically from the balance of the amount of money stored electronically in the IC card 121 is received as it is. .

[0006] Therefore, the user can use the ETC system 100.
Possesses a predetermined IC card 121 corresponding to
This is mounted on an instrument panel (hereinafter referred to as an “instrument panel”) of the vehicle M when the vehicle is mounted.
0 to receive the service of the ETC system 100. At this time, the user inputs a password, a password, and the like, and is authenticated as a valid user. In the authentication, a person who is not a legitimate user impersonates the legitimate user and fraudulently uses the IC card 121 and thus fraudulently the ETC system 1.
This is an operation (process) necessary to prevent the use of 00. With this authentication, unauthorized use due to so-called “spoofing” can be prevented.

As the IC card 121, a semiconductor chip (integrated circuit IC) sealed in a credit card-sized plastic card is used. IC card 121
Is used for electronic toll collection in various business transactions such as the ETC system 100.
The card 121 has high security and is easy to use. Although not shown, the configuration of the IC card 121 includes a memory for storing a balance of money, user information, a use history, a data control circuit for performing data transfer and encryption processing, and a data control circuit for the IC card reader 122. A communication unit for performing communication is provided. In the IC card 121, all important processing is executed by a hardware-based program called internal firmware, so that important information is not read out to an external memory during the processing.
Therefore, security is ensured, and unauthorized use and theft or falsification of data are almost impossible.

[0008]

However, the input of a password or a password is very troublesome even if the password is short, and labor saving of the authentication work is desired. Further, with only the password and the password, all important processing is performed internally, and although the IC card 121 is excellent in security, illegal use cannot be completely excluded. In other words, your PIN is often the same as your birthday, your home or work phone number,
Passwords that are easy to remember and use are often used. Therefore, a personal identification number or the like is relatively easily detected. On the other hand, if a complicated password or password is given, it is difficult to detect the password, but the user may forget the password and cannot remember it.

[0009] Furthermore, the authentication work is usually performed during boarding. However, when the IC card 121 is forgotten to be inserted at the time of boarding, or when a route change is made during driving and the use of a toll road is attempted in a hurry, the authentication work is performed during running. There may be occasions to do. However, it is not preferable from the viewpoint of safe driving to input a password or a password for an authentication operation during traveling. Therefore, development of an authentication method that can perform labor-saving authentication work that does not hinder safe driving is expected.

In addition, the door opening / closing operation (locking /
In the case of a keyless entry vehicle that performs (unlocking) using a keyless entry, a password for authentication is registered in advance in a remote control device that locks and unlocks the door,
By inputting the operation of opening the door, it is possible to simultaneously input a password for authentication and the like. This can save labor in the authentication work. However, if the remote control device is lost, the personal identification number registered in the remote control device may be stolen and misused.

SUMMARY OF THE INVENTION The present invention has been made in view of the above-mentioned conventional problems, and provides an authentication method in an automatic toll collection system which can save labor of authentication work and further improve security. As an issue.

[0012]

SUMMARY OF THE INVENTION In order to achieve the above object, the present invention provides a method for collecting tolls in a commercial transaction between a vehicle-mounted device installed on a car and a road device installed on the road by two-way wireless communication. In an automatic toll collection system in which processing is performed electronically using an IC card, (a) the in-vehicle device reads, as computer-readable data, the physical characteristics of a user who intends to use the automatic toll collection system (A) comparing the read data of the physical characteristics of the use applicant with the data of the physical characteristics of a registered valid user in advance to authenticate the use applicant. And determining whether or not the automatic toll collection system can be used. This eliminates the need to enter complicated passwords and passwords, saves labor in the authentication work, and performs authentication using the physical characteristics of human beings. As a result, it is possible to surely prevent unauthorized use by a person other than the authorized user impersonating the authorized user.

The present invention also proposes an authentication method in the automatic toll collection system according to claim 1, wherein the physical feature is at least one of a fingerprint, a voiceprint, and an iris spot. (Claim 2). That is, the fingerprint,
Voiceprints and iris spots can be read by the reading means while traveling while ensuring safety, so that the authentication work can be performed safely and reliably without burdening the user even while driving the car. .

Further, according to a third aspect of the present invention, the data of the physical characteristics of the authorized user are stored in the IC card, and the authentication is performed in the IC card. An authentication method in the automatic toll collection system according to claim 1 or claim 2 is proposed.
According to this, authentication is performed inside an IC card having excellent security.

[0015] Further, the present invention, when the car is a keyless entry car, authenticates the use applicant by using a password for unlocking the car in addition to the physical characteristic data. The present invention proposes an authentication method in the automatic toll collection system according to any one of claims 1 to 3, wherein the authentication method is performed (claim 4). According to this, even when a personal identification number or the like is input, the burden of input can be reduced, and the authentication work can be performed more reliably by combining the personal identification number and the like with physical characteristics.

[0016]

Embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram of the authentication system of the present invention. FIG. 2 is a flowchart showing an authentication operation according to the authentication method of the present invention.

<Apparatus Configuration> An apparatus used in the authentication method of the present invention, that is, an in-vehicle apparatus 1 is, as shown in FIG. A card reader unit 1b for reading and writing the contents, a communication unit 1c for performing two-way wireless communication with the road device 2, an operation unit 1d for operating the vehicle-mounted device 1, a display unit 1e for displaying various information, and the physical condition of the applicant. There is provided a reading unit 1f for reading the feature as computer-readable data. When the user authentication is performed by the in-vehicle device 1, the in-vehicle device 1 requires an authentication unit (not shown) for performing authentication. It is necessary to have a configuration capable of transferring the data of the physical characteristics of the use applicant read by the reading means 1f to (for example, an IC card C).

1) Main controller 1a and card reader 1b
The (IC card reader) and the like may be the same as those used in the conventional in-vehicle device 100. However, when the user is authenticated in the in-vehicle device 1, the main control unit 1a also serves as an authentication unit. Is also good. Further, if the car is a keyless entry car, and if the structure is such that a password for authentication or the like can be input when the door of the car is unlocked by the keyless entry, the main control unit 1 a The in-vehicle device 1 needs an input / output device for receiving and transferring a personal identification number or the like so that the device can receive the password and transfer it to a place where the authentication is performed. The operation unit 1d
The display unit 1e may also be used as an operation unit and a display unit of an automobile provided that the automobile has a car navigation device or the like.

2) The reading means 1f has a configuration capable of reading physical characteristics of a user who intends to use the ETC system A, such as a fingerprint, as computer-readable data. A sensor (not shown) is connected to the reading means 1f, and reads the physical characteristics of the applicant as computer-readable data via the sensor. Note that the reading unit 1f may be a single function that can read only a fingerprint, for example, or a composite function (hybrid) that can read a plurality of physical features such as a fingerprint and a voiceprint. Good. The physical characteristics may be those that can identify individuals stably. For example, fingerprints, voiceprints, iris spots, retinal patches, facial contours, and the like can be used as physical characteristics in the present invention.

Of these, fingerprints, voice prints, and iris spots can be easily and reliably read while ensuring safety while driving a car by appropriately selecting the reading means 1f as described later. it can. In addition, they have been used in criminal investigations and have a proven track record, and can reliably identify individuals. Therefore, the authentication method of the present invention is excellent as a physical feature used for authentication. Hereinafter, fingerprints, voice prints, and iris spots will be described.

A) Fingerprints: Fingerprints are imprints formed by skin ridges on the palm sides of the fingertips, and are broadly classified into arcuate prints, hoof prints, and spiral prints. The appearance frequency of each pattern varies depending on the finger type, left and right, gender, race, and the like. Fingerprints are formed at the age of three to four months, and no two forms are exactly the same, and they are used for personal identification because they are life-long. b) Voiceprint: A voiceprint is a sonar graph that represents the result of frequency analysis of a human voice, and is characterized by individuals and is used in criminal investigations and the like. c) Iris patch: The iris patch is a pattern of the iris (iris), which is a ring-shaped membrane in front of the crystalline lens of the eyeball and surrounding the pupil. The iris is formed by elongation of the choroid, and the pupil dilatation muscle is arranged radially and the pupil sphincter is arranged annularly. It acts reflexively to light, opening and closing the pupil and adjusting light and darkness. Brown eyes, blue eyes, etc. are obtained depending on the pigment contained. The iris spot, which is a pattern of the iris, is used for identifying an individual similarly to a fingerprint or the like.

If a sensor (not shown) of the reading means 1f is installed, if a fingerprint is to be read, a driver who is an applicant for use may place a finger on this sensor while ensuring safety during driving. It is good to set up where possible. For example, a place where the finger is often touched during normal driving, such as in the vicinity of the instrument panel, the steering wheel, or the gear lever, is preferable. In addition, since the use applicant may sit on the front passenger seat, it is preferable that the user be provided at a place where the finger can be placed on the sensor from both the driver seat and the front passenger seat without any trouble. If a CCD camera, for example, is installed as a sensor of the reading means 1f, a fingerprint can be easily input by placing a finger on a lens portion (prism portion) or the like of the CCD camera. The CCD camera is a camera using a solid-state imaging device and is extremely small and lightweight, and thus is suitable for this application.

If a voiceprint is to be read, for example,
By providing a microphone in the vehicle as a sensor of the reading means 1f, it is possible to easily read the voice (voiceprint) of the use applicant. The use applicant utters, for example, a specified specific word (a word or a meaningless word, for example) to a microphone serving as a sensor. It is preferable to use a microphone having a high directivity so that ambient noise does not enter, or to provide an electronic filter capable of removing environmental sounds. If a specific word is uttered, this also plays a role of a password.

If the iris spot is read, for example, a CCD camera is provided in the instrument panel of the automobile as a sensor of the reading means 1f, and the user (driver) looks at the lens of the camera so that the iris spot is instantaneously detected. It is better to be able to read the data. In addition, even if the use applicant does not look at the lens, if the lens is turned to the eyes of the use applicant in advance, the iris spot can be read without requiring the use applicant to perform a special operation. In this regard, a technology has been developed in which a driver's eyes during driving are photographed with a camera, and a drowsiness is detected based on eye movements to warn the driver. The CCD camera is preferably provided with a swing mechanism so that the lens can be directed to the passenger seat. Thus, the iris spot can be read whether the user is sitting on the driver's seat or the passenger seat.

The fingerprints and the like read by the reading means 1f are all converted into computer-readable electric signals (or optical signals) and then transferred to the main control section 1a, and then transferred to a place where authentication is performed. . As described above, the reading unit 1f may be a single-function device capable of reading any one of a fingerprint, a voiceprint, an iris spot, and the like, or a multi-function device capable of reading an arbitrary combination. For example, when the authentication is performed only with the fingerprint, the reading means 1f may be of a single function capable of reading only the fingerprint. When the authentication is performed together with the voiceprint and the iris spot, the reading means 1f may be replaced with the voiceprint. And a multifunction capable of reading iris spots. By combining a plurality of physical characteristics, unauthorized use by "spoofing" can be more reliably prevented.

3) Next, the IC card C will be described. As described in the conventional example, the IC card C has a configuration in which all important processing related to security is performed inside the IC card C (particularly, firmware), thereby ensuring security.

The IC card C has a CPU as shown in FIG.
Can be roughly divided into a data control circuit Ca and a memory Cb which is a storage device. This is the same as a normal IC card. In the data control circuit Ca, various logical operations including encryption processing are performed.

For example, when the use applicant is authenticated inside the IC card C, the memory Cb stores the physical characteristics of the authorized user (owner of the IC card C) permitted to use the ETC system A. Data is stored in advance. This I
Using the data of the physical characteristics of the authorized user stored in the C card C as a reference, the data of the physical characteristics of the use applicant read from the reading means 1f inside the IC card C is compared to perform authentication. It is.

At this time, the data on the physical characteristics of the authorized user stored in the IC card C in advance is the fingerprint described above. Regarding this fingerprint, fingerprints of a plurality of fingers may be stored. Regarding the iris spots, the iris spots are slightly different between bright and dark, so several patterns such as bright iris spots and dark iris spots should be registered in advance. In the case where one IC card C is used jointly by a plurality of persons, data of physical characteristics for the number of persons can be input.

<Authentication Operation> In general, the authentication operation is performed by manually inputting a personal identification number or the like from the in-vehicle apparatus. However, such an intrusive operation is unnecessary in the in-vehicle apparatus 1 used in the authentication method of the present invention. I have to. Hereinafter, an example of an authentication operation according to the authentication method of the present invention will be described with reference to FIG. In this example, the authentication is performed only inside the IC card C.

1) First, as a stage before step ST0 in FIG. 2, a use applicant (driver or the like) intending to use the ETC system A gets on a car and sits in a driver's seat or the like. The use applicant prepares the IC card C and inserts it into the card reader unit 1b (IC card reader) provided in the vehicle-mounted device 1.

2) Next, in step ST1 of FIG. 2, the reading means 1f reads the data of the physical characteristics of the use applicant and inputs the data into the vehicle-mounted device 1. a) If the reading means 1f reads a fingerprint using a CCD camera, the user applies a finger to a lens portion (prism portion) of the camera or the like. b) If the reading means 1f reads a voice by a microphone, the use applicant makes a voice toward the microphone. c) If the reading means 1f reads the iris spots with a CCD camera, the use applicant looks at the lens portion. If the CCD camera is aimed at the applicant, there is no need to look at the camera. By these operations, the data of the physical characteristics of the use applicant are read by the reading means 1f and input to the in-vehicle device 1. This step ST1 may be performed during traveling or while stopped. In particular, if the reading means 1f reads a fingerprint, a voiceprint, and an iris spot, the reading means 1f can read safely and input to the in-vehicle apparatus 1 during traveling unlike a case of inputting a password.

3) Next, the read data of the physical characteristics of the use applicant are read from the main control unit 1a and the card reader unit 1e.
Is sent to the IC card C via the server (ST2 in FIG. 2).

4) Data control circuit Ca of IC card C
Performs authentication by comparing the physical characteristics of the authorized user stored in the memory Cb with the physical characteristics of the transmitted use applicant and judging the authenticity (ST in FIG. 2).
3). Judgment as to whether or not the user is a legitimate user is made based on physical characteristics, so that the individual can be surely identified.

5) If the use applicant is a valid user, authentication is performed, and use of the IC card C is permitted (ST4.5 in FIG. 2). That is, the benefits of the automatic toll collection by the ETC system A can be obtained. On the other hand, if the use applicant is not a valid user, the authentication is not performed and the use of the IC card C is not permitted (ST4.6). That is,
ETC system A cannot be used.

6) If the car is a keyless entry car and it is configured so that a password or the like for authentication can be input when unlocking by keyless entry,
Authentication may be performed by using the input personal identification number or the like. According to this, there is no need to input a personal identification number, and the reliability of authentication is improved.

7) In the above example, the authentication of the use applicant is performed in the IC card. However, the authentication is performed not in the IC card C but in the vehicle-mounted device 1 (main control unit 1a), the road device 2, or the like. It may be. The authentication may be performed not only in the IC card C but also in the in-vehicle device 1 or the road device 2. Although the security is slightly inferior to the case where authentication is performed only inside the IC card C, since the data of the physical characteristics are used, the security is much more remarkable than the conventional authentication using only a password. Excellent in terms of surface. Further, the labor saving of the authentication work (reduction of the load on the driver or the like) is the same as the processing performed only in the IC card C. In this case, the physical characteristics of the authorized user may be stored in the in-vehicle device 1 itself or the road device 2 in addition to the IC card C in advance.

Although the embodiments of the present invention have been described above, the present invention is not necessarily limited to the means and methods described above, and achieves the objects of the present invention and has the effects of the present invention. Changes can be made as appropriate within the scope. In addition, the present invention relates to ET for toll roads.
The present invention can be applied not only to the C system but also to authentication in automatic toll collection at a drive-through type shop, gas station, and the like.

In the above-described configuration, the authentication is performed not by the IC card C but by the main control unit 1a of the vehicle-mounted device 1 or by the road device 2 or the like.
It is possible to effectively prevent improper use by "spoofing", to save labor for authentication work, and to enable authentication work while traveling.

[0040]

As described above, according to the present invention,
Since the physical characteristics of a person are used for the authentication, the effort of inputting a password or the like can be omitted. In addition, since the physical characteristics of human beings are used, it is possible to reliably prevent a person other than the legitimate user from impersonating the legitimate user, such as being able to find and misuse the personal identification number. Further, there is no possibility that the legitimate user forgets the personal identification number or the like and cannot use it.

If at least one of the fingerprint, voiceprint, and iris spot among the physical features is used for authentication,
They not only identify you correctly,
Since it is of a nature that can be easily read by the reading unit even during traveling, authentication can be performed safely and reliably without putting a burden on the user even while driving the car. Therefore, even if the driver forgets to insert the IC card in front of the toll road or forgets to perform the authentication during the traveling, the authentication can be performed without panic.

Further, if the authentication is performed only inside the IC card, unauthorized use can be more reliably eliminated while saving labor in the authentication work.

Furthermore, if a password such as a password for authentication is input when unlocking by keyless entry, the troublesome input of the password and the like can be eliminated and labor can be saved, and physical characteristics can be achieved. By performing authentication together with this data and the personal identification number, unauthorized use by "spoofing" can be more reliably eliminated.

[Brief description of the drawings]

FIG. 1 is a block diagram of an authentication method in an automatic toll collection system of the present invention.

FIG. 2 is a flowchart showing an authentication operation by an authentication method in the automatic toll collection system of the present invention.

FIG. 3 is a conceptual diagram of an automatic toll collection system.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 In-vehicle apparatus 1a ... Main control part 1b ... Card reader part (IC card reader) 1c ... Communication part 1d ... Operation part 1e ... Display part 1f ... Reading means 2 Roadside device A ETC system (automatic toll collection System) C IC card Ca Data control circuit Cb Memory 100 ETC system (automatic toll collection system) 110 Roadside device 111 Roadside antenna 112 Roadside communication processing device 113 Camera device 120 In-vehicle device 121 IC card 122 IC card reader 123 Monitor 124 Speaker 125 In-vehicle antenna 130 Central processing center 140 Partner financial institution

Claims (4)

[Claims] 1. An automatic toll collection system in which a toll collection process in a commercial transaction is performed electronically with an IC card by a two-way wireless communication between an in-vehicle device installed in an automobile and a road device installed on the road. (A) The in-vehicle device includes a reading unit that can read, as computer-readable data, a physical characteristic of a use applicant who intends to use the automatic toll collection system,
(B) comparing the read data of the physical characteristics of the use applicant with the data of the physical characteristics of a legitimate user registered in advance to perform authentication of the use applicant; An authentication method in an automatic toll collection system, characterized in that it is determined whether or not use is possible. 2. The authentication method according to claim 1, wherein the physical feature is at least one of a fingerprint, a voiceprint, and an iris spot. 3. The IC card according to claim 1, wherein the data of the physical characteristics of the authorized user are stored in the IC card, and the authentication is performed in the IC card. 2. The authentication method in the automatic toll collection system described in 2. 4. In the case where the car is a keyless entry car, authentication of the use applicant is performed using a password for unlocking the car in addition to the physical characteristic data. An authentication method in the automatic toll collection system according to any one of claims 1 to 3, wherein: