JP2000196588A - System and method for etc authentication - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a method for ETC authentication which enable a roadside machine and a central processing unit to directly authenticate the legitimacy of an IC card. SOLUTION: When a vehicle passes by a tollgate roadside machine 13, response data stored on an IC card 11, namely, a random number generated by the roadside machine 13 when passing by the roadside machine 13 is transmitted to the IC card 11 as challenge data through an on-vehicle device 12, and the data after being enciphered by a regular secret key Kicc is sent to the tollgate roadside machine 13. At this time, the ID (ICCID) of the IC card 11 and an IC card individual key certificate CERT-Kicc are both sent to the roadside machine 13. The roadside machine 13 divides the sent data into three, i.e., the E as response data (Kicc, RND), the ICCID and the IC card individual key certificate CERT-Kicc. Here, IC card individual key certificate CERT-Kicc is decoded (DEC) with a verifying key PC and then pieces of information which are Kicc and ICCID can be extracted. This ICCID is compared with the ICCID which is divided and taken out as mentioned above to decide their matching and when they do not match each other, the signature of the IC card ID is confirmed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an ETC (automatic toll collection) authentication system and an authentication method, and more particularly, to a configuration in which a roadside device and a central processing unit can directly authenticate the validity of an IC card.

[0002]

2. Description of the Related Art In a conventional ETC authentication system, a roadside device authenticates an on-vehicle device and an on-vehicle device uses an IC
The two-step authentication of authenticating the card is performed, and the roadside device can only indirectly authenticate the IC card.

[0003] This will be described with reference to FIGS. 4 and 5.
FIG. 4 is a diagram for explaining a mutual authentication operation between the IC card and the vehicle-mounted device. In FIG. 4, (1) The IC card 41 is provided to the on-board unit 42 by the I
The C card verification key certificate CERT-PICP and the IC card individual key certificate CERT-KICC of the IC card issuing center are sent. (2) The in-vehicle device 42 uses the verification key Pc1 of the ETCS key center to send the I
Recoverable signature verification R from C card verification key certificate CERT-PICP
The verify key PICP of the IC card issuing center is extracted by verify (Pc1, CERT-PICP). (3) The in-vehicle device 42 uses the PICP to retrieve the recovery type signature verification Rverify (PICC, CERT) from the IC card individual key certificate CERT-KICC.
-KICC) to extract the IC card individual key KICC.
On the other hand, in order to authenticate the vehicle-mounted device using the IC card, the random number R2 generated by the IC card is transferred to the vehicle-mounted device 42 as a challenge. (4) The in-vehicle device 42 generates the session key Ks1 and performs encryption using the IC card individual key KICC extracted as described above, that is, performs E (KICC, Ks1) processing to perform IC card processing.
Return to 41. Further, as a response to the random number R2, an encrypted one, that is, E (Ks1, R1‖R2) is returned to the IC card 41. The IC card 41 compares the decrypted result with the generated random number R2.
Authenticates and continues the following transaction. If they do not match, abort the transaction. (5) The in-vehicle device 42 transfers the random number R1 generated by the in-vehicle device to the IC card 41 as a challenge, and the IC card 41 encrypts the data using the session key Ks2, that is, E (Ks1,
R1‖Ks2) processing and the
To return. (6) The in-vehicle device 42 decrypts the request using the session key Ks1, compares the result with the generated random number R1, and if they match, authenticates the IC card 41 as valid and continues the transaction. If they do not match, abort the transaction.

[0004] By executing the authentication protocol in this way, first, mutual authentication between the IC card 41 and the vehicle-mounted device 42 is realized as a first step. Next, as a second step, mutual authentication between the on-vehicle device and the roadside device will be described.

FIG. 5 is a diagram for explaining a mutual authentication operation between a vehicle-mounted device and a roadside device. In FIG. 5, (1) the on-vehicle device 51 encrypts the random number K using the on-vehicle device individual key certificate CERT-KOBE and the individual key KOBE as keys, that is, E (KOB
E, K) The processed product is delivered to the roadside device 52. (2) The roadside device 52 obtains the OB from the on-vehicle device individual key certificate CERT-KOBE using the signature verification key Pc2 of the ETCS key center according to the following equation.
Take out EID @ KOBE. X = c1P + c2Q = OBEID @ KOBE (3) The on-board unit 51 is the challenge data K generated by the on-board unit.
Is sent to the roadside device 52, and the roadside device 52 is authenticated by confirming that the roadside device 52 can correctly decode the data using KOBE. (4) The roadside device 52 authenticates the challenge data R2 generated by the roadside device.
Is encrypted using KOBE, that is, E (KOBE, K‖R2)
Then, the in-vehicle device 51 is authenticated by confirming that the in-vehicle device 51 can decrypt it.

[0006]

As described above, the conventional ET is used.
The C authentication system performs two-step authentication in which the roadside device authenticates the in-vehicle device and the in-vehicle device authenticates the IC card, and the roadside device can only indirectly authenticate the IC card. There is a problem that data cannot be directly exchanged between the IC card and the roadside device when passing under the roadside device. Further, since two-step authentication is performed, there is a problem that the system must be complicated and expensive.

Accordingly, an object of the present invention is to provide an ETC authentication system and an authentication method in which a roadside device and a central processing unit can directly authenticate the validity of an IC card.

[0008]

An ETC authentication system according to the present invention receives challenge data generated by a roadside device via a vehicle-mounted device when passing through the roadside device, and encrypts the challenge data with a regular secret key. Encrypting means, encrypted data storing means for storing data encrypted by the encrypting means, IC card ID and IC card individual key certificate data previously assigned to the IC card, and the encrypted data An IC card including a response data transmitting unit that transmits the encrypted data stored in the storage unit as response data to the roadside device via the in-vehicle device, and a division unit that divides the transmitted response data into three Means, decryption means for decrypting the IC card individual key certificate data divided by the division means based on a verification key, and a result of decryption A roadside device including: a matching detection unit configured to detect the extracted IC card ID and the IC card ID obtained by the division; and a challenge data transmitting unit configured to transmit challenge data to the IC card. A central unit comprising: a challenge data storage unit configured to store the generated challenge data; and a match determination unit configured to receive the challenge data decrypted by the roadside device and perform a match determination with the challenge data stored in the challenge data storage unit. And a signature verification process for the signature information received by the roadside device at the same time as the IC card ID, and a match determination of the challenge data encrypted by the central processing unit with the IC card decrypted by the roadside device. Is performed to directly authenticate the ID of the IC card.

With this configuration, according to the present invention, the signature information received by the roadside device at the same time as the IC card ID is subjected to signature verification processing and encrypted by the central processing unit using the IC card decrypted by the roadside device. By performing the match determination of the challenge data, the ID of the IC card can be directly authenticated.

[0010]

BEST MODE FOR CARRYING OUT THE INVENTION
Upon receiving the challenge data generated by the roadside device via the roadside device when passing through the roadside device, the encryption means for encrypting the challenge data with a proper secret key, and the data encrypted by the encryption means are stored. Encrypted data storage means and an IC
The data of the IC card ID and the IC card individual key certificate assigned to the card and the encrypted data stored in the encrypted data storage means are sent as response data to the roadside device via the onboard device. An IC card including a response data transmitting unit for transmitting, a dividing unit for dividing the transmitted response data into three, and a decryption process of the IC card individual key certificate data divided by the dividing unit based on a verification key. Decryption means, match detection means for detecting the match between the IC card ID taken out as a result of decryption and the IC card ID obtained by the division, and challenge data transmission means for transmitting challenge data to the IC card A roadside device; challenge data storage means for storing challenge data generated by the roadside device; A central processing unit that receives the challenge data decrypted in the above, and a match determination unit that performs a match determination with the challenge data stored in the challenge data storage unit. The received signature information is subjected to signature verification processing, and the central processing unit decrypts the I
An ETC authentication system characterized by performing direct authentication of an IC card ID by performing a match determination of challenge data encrypted with a C card,
The signature information received by the roadside machine at the same time as the IC card ID is
The signature verification process is performed, and the central processing unit determines whether the challenge data encrypted by the IC card decrypted by the roadside device matches, thereby directly authenticating the ID of the IC card.

According to a second aspect of the present invention, the challenge data generated by the roadside device when the vehicle passes through the roadside device is transmitted to the IC card via the vehicle-mounted device, and the challenge data is encrypted with a proper secret key. Storing the encrypted data; and storing an IC card ID and an IC in addition to the stored data.
Transmitting each data of the card individual key certificate as response data to the roadside device via the on-vehicle device; dividing the transmitted response data into three in the roadside device; Decrypting the certificate data based on the verification key; detecting a match between the IC card ID extracted as a result of the decryption and the IC card ID obtained by dividing the certificate data; Determining the match of the challenge data decrypted by the roadside device, and
At the same time, the signature information received is subjected to signature verification processing, and the central processing unit performs direct authentication of the ID of the IC card by determining whether the challenge data encrypted by the IC card decrypted by the roadside device matches. The ETC authentication method is characterized in that the roadside machine is an IC
The signature information received at the same time as the card ID is subjected to signature verification processing, and the central processing unit determines whether the challenge data encrypted by the IC card decrypted by the roadside machine is identical, thereby directly authenticating the IC card ID. It has the effect of being able to.

According to a third aspect of the present invention, an ID sending means for sending an IC card ID immediately before passing through the first roadside device, and the ID sending means being generated by the roadside device when passing through the first roadside device. An encryption means for receiving the challenge data and the current time via the on-vehicle device and encrypting the challenge data with a proper secret key; an IC card ID and an IC previously assigned to the IC card;
An IC card including a response data transmitting unit for transmitting each data of the card individual key certificate and the encrypted data as response data to the second roadside device via the on-vehicle device, and dividing the response data into three parts First
And I divided by the first dividing means.
Decryption means for decrypting the C-card individual key certificate data based on the verification key; and coincidence detection means for detecting the coincidence between the IC card ID extracted as a result of the decryption and the IC card ID obtained by the division. A second roadside unit comprising: a first roadside unit; a second dividing unit for dividing the challenge data generated by the first roadside unit and the IC card ID; a challenge data decrypted by the second roadside unit and an IC card ID And a central processing unit including a match determination unit that determines a match between the challenge data obtained from the second and third division units, and the second roadside unit includes: The signature information received at the same time as the IC card ID,
The signature processing is performed, and the second processing is performed by the central processing unit.
Of the IC card is determined by determining whether the challenge data encrypted by the IC card decrypted by the roadside device is identical.
An ETC authentication system characterized in that the roadside device performs a signature verification process on the signature information received at the same time as the IC card ID by the roadside device and decrypts the IC card with the central processing unit by the roadside device. By performing the match determination of the challenge data encrypted in the above, the ID of the IC card can be directly authenticated.

According to a fourth aspect of the present invention, in the second roadside device, the second roadside device may be configured to output the I / O extracted as a result of decoding by the decoding means.
Another decrypting means for decrypting the encrypted data extracted and divided based on the private key of each C card, and a decryption means for decrypting the encrypted data which has passed through the first roadside device according to the decryption result of the decrypting means 4. An ETC authentication system according to claim 3, further comprising: checking means for extracting time information and checking whether a difference between the time information and the current time is within a predetermined time. It is determined whether the time required for passing is correct or not, and if incorrect, the IC card ID can be placed on the negative list as an illegal traffic.

Further, the invention according to claim 5 is a step of receiving a card ID from an IC card via an on-vehicle device immediately before passing through the first roadside device; The challenge data generated by the roadside device and the current time are transmitted to the IC card via the on-vehicle device and encrypted with a proper secret key.
Transmitting each data of a card ID and an IC card individual key certificate as response data to the second roadside device via the on-vehicle device, and dividing the transmitted response data into three in the second roadside device Decrypting the divided IC card individual key certificate data based on the verification key; and extracting the IC card I obtained as a result of decryption.
Detecting the coincidence between D and the IC card ID obtained by the division, and determining whether the challenge data obtained from the first roadside device matches the challenge data decoded by the second roadside device in the central processing unit. Performing the steps of
The signature information received by the second roadside device at the same time as the IC card ID is subjected to signature verification processing, and the central processing unit determines whether the challenge data encrypted by the IC card decrypted by the roadside device matches. This is an ETC authentication method characterized by performing direct authentication of an IC card ID. The roadside device performs signature verification processing on the signature information received at the same time as the IC card ID, and the central processing unit allows the roadside device to By judging the coincidence of the challenge data encrypted with the decrypted IC card, the ID of the IC card can be directly authenticated.

Further, the invention according to claim 6 includes a step of decrypting the divided and extracted encrypted data based on an individual secret key of the IC card extracted in the step of decrypting; According to the result of the decoding process, the first
6. The method according to claim 5, further comprising the step of: extracting current time information when the vehicle has passed through the roadside device, and confirming whether a difference between the time information and the current time is within a predetermined time. It is determined whether the time required for passing is correct or not, and if it is not correct, the IC card ID can be put on the negative list as an illegal traffic.

According to a seventh aspect of the present invention, there is provided an ID transmitting means for transmitting an IC card ID immediately before passing through the first roadside device, and the ID transmitting means being generated by the roadside device when passing through the first roadside device. Encrypting means for receiving the challenge data via the on-vehicle device and encrypting the challenge data with a proper secret key; an IC card ID and an IC card individual key certificate previously assigned to the IC card; An IC card including a response data transmitting unit that transmits the obtained data as response data to the second roadside device via the on-vehicle device; a first dividing unit that divides the response data into three; Decryption means for decrypting the IC card individual key certificate data divided by the division means based on the verification key; and an IC card ID extracted as a result of decryption and A second roadside device provided with a coincidence detecting means for detecting the coincidence of the IC card ID, a second dividing means for dividing the challenge data generated by the first roadside device and the IC card ID, Third to divide challenge data and IC card ID decrypted by roadside machine
, And a central processing unit having a coincidence determining means for determining the coincidence of the challenge data obtained from the second and third dividing means.
The signature information received at the same time as the C card ID is subjected to signature verification processing, and the central processing unit determines whether or not the challenge data encrypted by the IC card decrypted by the second roadside machine is coincident with the ID information of the IC card. An ETC authentication system characterized in that the roadside device performs a signature verification process on the signature information received at the same time as the IC card ID by the roadside device and decrypts the IC card with the central processing unit by the roadside device. By performing the match determination of the challenge data encrypted in the above, the ID of the IC card can be directly authenticated.

The invention according to claim 8 is a step of receiving a card ID from an IC card via an on-vehicle device immediately before passing through the first roadside device, and a step of receiving a card ID from the IC card via the first roadside device. Transmitting the challenge data generated by the roadside device to the IC card via the vehicle-mounted device and encrypting it with a proper secret key;
And transmitting each data of the IC card individual key certificate as response data to the second roadside device via the on-vehicle device, and dividing the transmitted response data into three in the second roadside device; Decrypting the divided IC card individual key certificate data based on a verification key; and detecting a match between the IC card ID extracted as a result of decryption and the IC card ID obtained by the division. Determining whether the challenge data obtained from the first roadside device matches the challenge data decrypted by the second roadside device in the central processing unit, wherein the second roadside device and the IC card ID The received signature information
An ETC authentication method comprising: performing a signature verification process; and performing direct authentication of an IC card ID by performing a match determination of challenge data encrypted by the IC card decrypted by the roadside device in the central processing unit. The signature information received by the roadside device at the same time as the IC card ID is subjected to signature verification processing, and the central processing unit determines whether the challenge data encrypted by the IC card decrypted by the roadside device matches. This has the effect that the ID of the IC card can be directly authenticated.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a diagram for explaining an ETC authentication system according to a first embodiment of the present invention. The ETC authentication system according to the first embodiment includes an IC
Direct dynamic one-way authentication of cards (challenge response)
Is performed.

In FIG. 1, when passing through the tollgate roadside device 13, the response data stored in the IC card 11, that is, the random number (RND) generated by the roadside device 13 when passing through the tollgate roadside device 13 is obtained. The challenge data is transmitted to the IC card 11 via the on-vehicle device 12 and is transmitted to the authorized secret key Kicc.
Is transmitted to the tollgate roadside device 13. At this time, the ID (ICCID) of the IC card 11 and the IC card individual key certificate CERT-Kicc are both transmitted.

The roadside device 13 divides the transmitted data into three, that is, E (Kicc, RN) which is response data.
D), ICCID, and IC card individual key certificate CERT-Kicc.

Next, the IC card individual key certificate CERT-Kicc
Is decrypted (DEC) based on the verification key PC.
And ICCID information. This ICCID
And the ICCIDs extracted and divided above are compared to determine whether they match, and if they match, the signature of the IC card ID can be confirmed. As a result, it is found that the IC card individual key certificate CERT-Kicc is correct.
It turns out that Kicc taken out together is also correct. Then, the response data that was to be sent first using this Kicc as a key, that is, the encrypted E (Kicc, RND)
Is decrypted (DEC) to extract the challenge data generated by the tollgate roadside device 13, that is, a random number (here, RND ').

This data is combined with the above-mentioned ICCID and sent from the tollgate roadside machine 13 to the center device 14, where the above RND 'is taken out again, and the random number RND from the tollgate roadside machine 13 is sent to the IC card. The random number RN that was also sent to the center device 14 and stored therein when it was stored in 11
D is extracted and a match is determined.

As a result, in the center device 14, the same IC
When the random number RND with CID matches the random number RND ', IC
Since it can be confirmed that the card 11 has the regular secret key Kicc, the IC card ID can be dynamically and unidirectionally directly authenticated as the roadside device center device 14.

In parallel with this operation, the toll gate roadside machine
The challenge data (random number RND) generated in 13 is
When 2 passes through the toll gate, the on-board unit 1
Passed to 2. This random number RND is used for the onboard unit 12 and the tollgate roadside unit 13
After the end of a predetermined communication procedure (DSRC) between
Is sent to the IC card 11 and encrypted by the IC card 11,
That is, the processing of E (Kicc, RND) is performed. The encrypted data is stored in the IC card 11 as response data.

(Second Embodiment) FIG. 2 is a diagram for explaining an ETC authentication system according to a second embodiment of the present invention. In the ETC authentication system according to the second embodiment, the same toll gate is used. By combining the roadside device and the roadside device, the direct dynamic authentication of the IC card is performed in the same manner as in the first embodiment.

In FIG. 2, before the toll gate, for example, 30
m, the ID (ICCID) stored in the IC card 21 is transmitted to the notice roadside device 24 via the in-vehicle device 22 when passing through the notice roadside device 24 provided in m. The notice roadside device 24 combines the ICCID sent from the IC card 21 with the random number (RND) generated by the notice roadside device 24 and the current time (Time), and one of them is the IC card 21 and the other is the lane device 25. Send to

The IC card 21 encrypts the data of the random number (RND) and the current time (Time) in the received data with the regular secret key Kicc, that is, E (Kicc, Time).
(RND) is executed while moving from the notice roadside machine 24 to the tollgate. Then, the ID of the IC card 21 (ICC
ID) and the IC card individual key certificate CERT-Kicc are transmitted to the tollgate roadside machine 23.

In the tollgate roadside unit 23, the transmitted data is divided into three parts, namely, E (Kicc, TimeNDRND) and ICCI
D and the IC card individual key certificate CERT-Kicc.

Next, the IC card individual key certificate CERT-Kicc
Is decrypted (DEC) based on the verification key PC.
And ICCID information. This ICCID
And the ICCIDs extracted and divided above are compared to determine whether they match, and if they match, the signature of the IC card ID can be confirmed. As a result, it is found that the IC card individual key certificate CERT-Kicc is correct.
It turns out that Kicc taken out together is also correct. E (Kicc, Tim) encrypted using this Kicc as a key
e‖RND) is decoded (DEC), and the random number (here, RND ′) generated by the notice roadside device 24 and the current time (here, Tim
Take out e ').

The extracted current time (here, Time '),
The difference from the current time (Time) at the time of passing the notice roadside machine 24 is determined, and if the value is within a predetermined value (for example, n minutes), it is determined that the time required for passing is correct, and the predetermined value If it exceeds (for example, n minutes), it is determined that the time required for passing is not correct, and the IC card ID can be put on the negative list as illegal traffic.

The random number extracted in the same manner (here, RND ')
Is sent to the lane device 25 from the tollgate roadside machine 23 and combined with the ICCID divided and taken out as described above,
At 25, the above-mentioned RND 'is taken out again, and the random number (RND) already sent from the notice roadside machine 24 to the lane device 24 is taken out, and a match is determined.

As a result, the same ICCID
Since the random number RND and the random number RND 'match, and as a result, it can be confirmed that the IC card 21 has the proper secret key Kicc, the IC card ID can be directly and dynamically authenticated as the lane device 25. Can be.

(Third Embodiment) FIG. 3 is a diagram for explaining an ETC authentication system according to a third embodiment of the present invention. The ETC authentication system according to the third embodiment includes an entrance tollgate. By combining the roadside device and the exit roadside device, direct dynamic authentication of the IC card is performed as in the second embodiment.

In FIG. 3, when the vehicle-mounted device 32 into which the IC card 31 is inserted passes below the entrance tollgate roadside unit 34, data is exchanged between the ID card 31 and the entrance tollgate roadside unit 34. That is, the card ID (ICCI
When D) is sent to the tollgate roadside unit 34, the tollgate roadside unit 34 generates a random number (RND) as challenge data, and sends the random number (RND) from the tollgate roadside unit 34 to the IC card 31.

At the same time, the entrance tollgate roadside machine 34
The D (ICCID) and the random number (RND) are transmitted to the center device 35. Up to this point, the processing is performed during the passage through the entrance tollgate roadside unit 34.

After passing through the entrance tollgate roadside machine 34,
In the C card 31, before the next tollgate, that is, the exit tollgate roadside machine 33, the received random number (RND) is subjected to encryption processing (ENC), that is, E (Kicc, RND) processing. And store the encryption result.

As a result, the encrypted data is stored in the IC card 31, so that the next time the IC card 31 inserted into the vehicle-mounted device 32 passes through the exit tollgate roadside device 33, the encrypted data is already stored. The transmitted data can be transmitted to the exit tollgate roadside unit 33.

At this time, not only the encrypted data but also the IC card ID (ICCID) and the IC card individual key certificate CERT-Kicc are transmitted. These data are received by the exit roadside unit 33, and E (Kicc, RND), ICCID, I
C card individual key certificate CERT-Kicc

When the IC card individual key certificate CERT-Kicc is decrypted (DEC) based on the verification key PC possessed by the exit tollgate roadside unit 33, information of Kicc and ICCID can be extracted.

This ICCID and the I divided and taken out
The CCID is compared to determine the match, and if they match, the signature of the IC card ID can be confirmed. If they match, the IC card individual key certificate CERT-Kic
Since c is correct, Ki taken out together
It turns out that cc is also correct. Then, the encrypted data E (Kicc, RND) is decrypted (DEC) using the Kicc as a key, and a random number (here, RND ') generated by the entrance tollgate roadside unit 34 is first extracted.

The extracted data is combined with the ICCID extracted and divided above and sent from the exit tollgate roadside unit 33 to the center device 35. The center device 35 extracts the above-mentioned random number RND 'again, and already has the entrance tollgate. It compares with the random number RND sent from the roadside device 34 and stored, and determines the coincidence.

As a result, in the center device 35, the random number RND and the random number
Since the match of RND 'can be determined, it can be confirmed that the IC card 31 has the proper secret key Kicc, and the IC card ID can be dynamically authenticated as the center device 35.

As described above, according to the third embodiment, two roadside units are installed at the entrance tollgate and the exit tollgate, and the random number data can be collected in the center device by combining them. IC card authentication can be performed.

In the above description, the formal secret key Kicc has been described with an encryption scheme having a public key exclusively, that is, one used in the DES scheme in mind. However, the present invention is not limited to this public key. Needless to say, a key used in various cryptosystems such as an elliptic curve cryptosystem, which is an encryption system, and RAS may be used.

In this case, for example, by adopting a dedicated LSI of the elliptic curve cryptosystem, a signature verification process can be performed within the toll gate transit time even at the entrance toll booth of the two-antenna system.

[0047]

As described above, the ETC authentication system of the present invention receives challenge data generated by a roadside device via a vehicle-mounted device when passing through the roadside device, and encrypts the challenge data with a regular secret key. Encryption means for storing data encrypted by the encryption means, an encrypted data storage means for storing data encrypted by the encryption means, an IC card ID and an IC card individual key certificate previously assigned to the IC card, An IC card including a response data transmitting unit for transmitting the encrypted data stored in the data storage unit as response data to the roadside device via the on-vehicle device; and dividing the transmitted response data into three. Dividing means; decrypting means for decrypting the IC card individual key certificate data divided by the dividing means based on a verification key; A roadside device including: a matching detection unit configured to detect the extracted IC card ID and the IC card ID obtained by the division; and a challenge data transmitting unit configured to transmit challenge data to the IC card. A central unit comprising: a challenge data storage unit configured to store the generated challenge data; and a match determination unit configured to receive the challenge data decrypted by the roadside device and perform a match determination with the challenge data stored in the challenge data storage unit. And a signature verification process for the signature information received by the roadside device at the same time as the IC card ID, and a match determination of the challenge data encrypted by the central processing unit with the IC card decrypted by the roadside device. Is performed to directly authenticate the ID of the IC card. The signature information received by the roadside device at the same time as the IC card ID is subjected to signature verification processing, and the central processing unit determines whether the challenge data encrypted by the IC card decrypted by the roadside device matches, thereby obtaining the ID of the IC card. Has an excellent effect that the user can be directly authenticated.

Further, the ETC authentication system of the present invention uses two roadside devices, performs a writing process on the IC card while moving from the first roadside device to the second roadside device, and writes the data on the IC card. The second roadside device can directly authenticate the ID of the ID card using the data (response data) obtained, and also determines whether the challenge data encrypted with the IC card decrypted by the roadside device in the central processing unit. Has an excellent effect that the ID of the IC card can be directly authenticated.

[Brief description of the drawings]

FIG. 1 is a block diagram for explaining an ETC authentication system according to a first embodiment of the present invention;

FIG. 2 is a block diagram for explaining an ETC authentication system according to a second embodiment of the present invention;

FIG. 3 is a block diagram for explaining an ETC authentication system according to a third embodiment of the present invention;

FIG. 4 is a diagram for explaining a mutual authentication operation between an IC card and a vehicle-mounted device which is a part of a conventional ETC authentication system;

FIG. 5 is a diagram for explaining a mutual authentication operation between a vehicle-mounted device and a roadside device, which is a part of a conventional ETC authentication system.

[Explanation of symbols] 11, 21, 31, 41 IC card 12, 22, 32, 42, 51 On-board unit 13, 23 Toll gate roadside unit 14, 35 Center unit (central processing unit) 24 Notice roadside unit 25 Lane unit ( (Central processing unit) 33 Exit tollgate roadside machine 34 Entrance tollgate roadside machine 52 Roadside machine

────────────────────────────────────────────────── ───

[Procedure amendment]

[Submission date] November 8, 1999 (1999.11.
8)

[Procedure amendment 1]

[Document name to be amended] Statement

[Correction target item name] Claims

[Correction method] Change

[Correction contents]

[Claims]

[Procedure amendment 2]

[Document name to be amended] Statement

[Correction target item name] 0008

[Correction method] Change

[Correction contents]

[0008]

According to the present invention, there is provided an ETC authentication system comprising : an encryption unit for receiving , via a vehicle-mounted device, challenge data generated by the roadside device when passing through the roadside device, and encrypting the challenge data with a secret key ; , the encrypted data storing means for storing the encrypted data by the encryption means, I D及
Response data transmitting means for transmitting to the roadside device via the vehicle device and data that is encrypted and stored in the micro-card data and the encrypted data storing means individual key certificate as a response data Doo and IC card and a dividing means for dividing divides the response data to which the transmitted, decoding means for decoding on the basis of the individual card key certificate data divided by said dividing means in the verification key, the decryption roadside comprising: a match detecting means for results retrieved I D and detecting matches the I D obtained is divided by the dividing means decoding means, and a challenge data transmission means for transmitting the challenge data to the IC card Machine and
Challenge data storage means for storing the challenge data generated by the roadside device; coincidence determination means for receiving the challenge data decrypted by the roadside device and performing a coincidence determination with the challenge data stored in the challenge data storage means comprises a central processing unit including bets, the card the roadside device has received at the same time as the ID individual Kagisho
By well as matching detection with the decoded ID of Akirasho data performs matching determination of the challenge data encrypted in the IC card in which the roadside device has decoded by said central processing unit directly authentication of ID of the IC card It is characterized by performing.

[Procedure amendment 3]

[Document name to be amended] Statement

[Correction target item name] 0010

[Correction method] Change

[Correction contents]

[0010]

BEST MODE FOR CARRYING OUT THE INVENTION
Challenge data generated in the roadside device when passing through the roadside device received via the vehicle-mounted device, and encryption means for encrypting a private key, the encrypted data storage for storing the encrypted data by the encryption means means and, in I D及beauty card individual key certificate data to the roadside device via the vehicle device and data the is encrypted and stored in the encrypted data storage unit as response data an IC card and a response data transmission means for transmitting a dividing unit operable to divide the response data transmitted, decoding processing based on the verification key to the individual card key certificate data divided by said dividing means and decoding means, said decoding hands
And coincidence detection means for matching detecting I D obtained is divided by I D and the dividing means taken out by the result of decoding stages,
A roadside device including challenge data transmitting means for transmitting challenge data to the IC card; a challenge data storage means for storing challenge data generated by the roadside device; and receiving the challenge data decrypted by the roadside device; comprises a central processing unit and a coincidence determination unit for performing matching decision challenge data stored in said challenge data storage means, said roadside device is the I
D to restore the card individual key certificate data received
The IC by performing the matching determination of the Chi <br/> catcher range data encrypted by said IC card in which the roadside device is decoded in the central processing unit as well as ID and coincidence detection Goshi
ET characterized by direct authentication of card ID
C authentication system, wherein the roadside machine decrypts the card individual key certificate data received at the same time as the ID.
By performing matching determination of the challenge data encrypted in the IC card in which the roadside device is decoded in the central processing unit with consistent detection and ID, and effect that it is possible to authenticate the ID of the IC card directly Have.

[Procedure amendment 4]

[Document name to be amended] Statement

[Correction target item name] 0011

[Correction method] Change

[Correction contents]

[0011] According to a second aspect of the invention, reaches Den challenge data generated by said roadside device when passing through the roadside device via the vehicle-mounted device, comprising the steps of encrypting a private key, the dark <br / > and storing the Goka data, the step of transmitting to the roadside device via the vehicle device out of the stored the data in the data of the I D and card individual key certificate as a response data and , the method comprising split response data the transmission in the roadside device, the method comprising: decoding based the divided the individual card key certificate data to the verification key,
Obtained by the I D and the previous SL divider retrieved as a result of the decoding
A step of matching detecting I D was in the central processing unit and a step of performing a match determination of the challenge data decrypted by the roadside device, the individual card key certificate data the roadside device has received at the same time as the ID Decrypt and match with ID
ETC authentication method characterized by performing a direct authentication of ID of the IC card by performing a match determination of the challenge data encrypted in the IC card in which the roadside device is decoded in the central processing unit as well as output is obtained by a, the mosquitoes roadside device has received at the same time as the ID
By performing matching determination of the challenge data encrypted in the IC card in which the roadside device is decoded in the central processing unit with consistent detection and ID to decode over de individual key certificate data, ID of the IC card Can be directly authenticated.

[Procedure amendment 5]

[Document name to be amended] Statement

[Correction target item name] 0012

[Correction method] Change

[Correction contents]

[0012] According to a third aspect of the ID sending means for sending the I D immediately before passing through the first roadside equipment, in the first roadside device when passing through the first roadside device Receives the generated challenge data and current time via the on-board device , and
The through-vehicle device encryption means for encrypting, and is I D及beauty card data and the encrypted individual key certificates that have been heretofore applied on the IC card data as the response data Mitsukagi A response data transmitting means for transmitting the response data to the second roadside device;
A first dividing means for split, decoding means for decoding processing based on the first dividing means the individual card key certificate data verification key divided by, retrieved in the result of decoding of said decoding means the I D and the first and second roadside unit and a coincidence detection means for matching detecting I D obtained is divided by the dividing means, the first challenge data generated by roadside device and I a second dividing means for dividing D, the third dividing means for dividing the challenge data and I D decoded processed by the second roadside equipment, the challenge data obtained from the second and third dividing means A central processing unit comprising:
The individual card key of the roadside machine has received at the same time as the ID
Direct ID of the IC card by performing a match determination of challenge data and the second roadside device is encrypted with the IC card decoded by said central processing unit as well as the match detection and the decoded ID certificate data An ETC authentication system characterized by performing authentication.
The card number of the second roadside equipment is received at the same time as the ID
By performing the match determination of the challenge data encrypted in the IC card the second roadside device is decoded in the central processing unit as well as the match detection and the decoded ID another key certificate data, the ID of the IC card It has the effect of being able to directly authenticate.

[Procedure amendment 6]

[Document name to be amended] Statement

[Correction target item name] 0013

[Correction method] Change

[Correction contents]

According to a fourth aspect of the present invention, in the second roadside device, the second roadside device may be configured to output the I / O extracted as a result of decoding by the decoding means.
And another decoding means for decoding the encrypted data retrieved is the divided based on C individual card secret key, before
The current time information when the vehicle passed through the first roadside device is taken out according to the result of decoding by the separate decoding means, and it is confirmed whether or not the difference between this time information and the current time is within a predetermined time. 4. A confirmation means, further comprising:
Is obtained by the ETC authentication system according, whether correct time required for passage to determine the constant, if not correct, an effect that can be placed as an illegal way, the IC card ID in the negative list .

[Procedure amendment 7]

[Document name to be amended] Statement

[Correction target item name] 0014

[Correction method] Change

[Correction contents]

Further, according to the present invention, the ID from the IC card via the vehicle-mounted device immediately before passing through the first roadside device.
Receiving a prior upon passing through the first roadside device
Serial first challenge data and the current time generated by the roadside device and transmitted to the IC card via the vehicle-mounted device, comprising the steps of encrypting the secret key, the ID and the number outside the encrypted data <br / > a method for transmitting data in another key certificate in the second roadside equipment via the on-vehicle device as the response data, the method comprising split the transmission is response data in the second roadside equipment, the a step of decoding on the basis of the divided said individual key certificate data to the verification key, the steps of matching detecting I D obtained is I D and split retrieved as a result of decoding, the central processing unit and a step of performing a match determination of the challenge data decrypted by said second roadside equipment and the challenge data obtained from the first roadside equipment, the individual key certificate in which the second roadside equipment is received at the same time as the ID Book
Direct authentication ID of the IC card by performing a match determination of challenge data and the second roadside device is encrypted with the IC card decoded by said central processing unit as well as the match detection and the decoded ID of over data is obtained by the ETC authentication method characterized by performing, the individual key certificate data by the second roadside equipment is received at the same time as the ID
It decrypts and detects the coincidence with the ID, and the second
By the roadside device performs the match determination of the challenge data encrypted in the IC card decoded, an effect that can authenticate the ID of the IC card directly.

[Procedure amendment 8]

[Document name to be amended] Statement

[Correction target item name] 0015

[Correction method] Change

[Correction contents]

Further, an invention according to claim 6, wherein the steps of decoding the encrypted data retrieved the divided based on individual IC card secret key retrieved at the stage of the decoding process, the Extracting the current time information when the vehicle passed through the first roadside device based on the result of the decoding process, and checking whether a difference between the time information and the current time is within a predetermined time. it is obtained by the ETC authentication method of claim 5, wherein including, in the case whether the or not the right time to take the passage determine constant, incorrect, as an illegal traffic, negative list of the IC card ID Has the effect of being able to be mounted on

[Procedure amendment 9]

[Document name to be amended] Statement

[Correction target item name] 0016

[Correction method] Change

[Correction contents]

[0016] The invention of claim 7, wherein includes ID sending means for sending the I D immediately before passing through the first roadside equipment, before
Challenge data generated by the first roadside device when passing through the serial first roadside device receives via the vehicle-mounted device, and encryption means for encrypting a private key, the granted to advance in an IC card an IC card and a response data transmission means for transmitting the ID及beauty individual separate key certificate data and the encrypted data to the second roadside equipment via the on-vehicle unit as response data, the response a first dividing means for dividing divides the data, decoding means for decoding processing based on the first of said individual key certificate data verification key that has been divided by the dividing means, taken in the result of decoding of said decoding means obtained is divided by the I D and the first dividing means
A second roadside device including a coincidence detecting means for coincidence detection of ID, and challenge data generated by the first roadside device.
A second dividing means for dividing the ID, the third dividing means for dividing the ID and decoding the challenge data in the second roadside equipment, challenge obtained from the second and third dividing means includes a central processing unit, a and a coincidence determination unit for performing matching decision data, said individual key certificate data to which the second roadside equipment is received at the same time as the ID
Before by performing matching determination of challenge data and the second roadside device is encrypted with the IC card decoded by said central processing unit as well as the match detection and the decoded ID of
And performing a direct authentication of the ID of the serial IC card is obtained by the ETC authentication system, the individual key certificate data by the second roadside equipment is received at the same time as the ID
It decrypts and detects the coincidence with the ID, and the second
By the roadside device performs the match determination of the challenge data encrypted in the IC card decoded, an effect that can authenticate the ID of the IC card directly.

[Procedure amendment 10]

[Document name to be amended] Statement

[Correction target item name] 0017

[Correction method] Change

[Correction contents]

Further, according to the present invention, the ID from the IC card via the vehicle-mounted device immediately before passing through the first roadside device.
Receiving a prior upon passing through the first roadside device
Challenge data generated by the serial first roadside device and transmitted to the IC card via the vehicle-mounted device, comprising the steps of encrypting the secret key, the ID and the individual-specific key certificate outside the encrypted data
A step for transmitting the data to the second roadside equipment via the on-vehicle device as the response data, the method comprising the split response data transmitted in the second roadside equipment,
A step of decoding on the basis of the divided said individual key certificate data to the verification key, and I D taken out by the result of the decoding
A step of matching detecting I D obtained is split, and performing a match determination of the challenge data decrypted challenge data and the second roadside device obtained from the first roadside device in a central processing unit wherein the second roadside equipment is pre
Decrypts the individual key certificate data received at the same time as the ID
ID and the central processing unit
The IC by performing the matching determination of challenge data encrypted in the IC card the second roadside device is decoded
ET characterized by direct authentication of card ID
C authentication method, wherein the second roadside device has the ID
At the same time , it decrypts the received individual key certificate data and
By performing the match determination of the challenge data encrypted in the IC card the second roadside device is decoded in the central processing unit with match detection and, ID of the IC card
Can be directly authenticated.

[Procedure amendment 11]

[Document name to be amended] Statement

[Correction target item name] 0045

[Correction method] Change

[Correction contents]

[0045] In the above description, the secret key Kicc regular, have been described in mind those used in cryptography i.e. DES scheme exclusively with the target key is not limited to this encryption method, other Needless to say, a key used in various cryptosystems such as an elliptic curve cryptosystem which is an encryption system and an RSA may be used.

[Procedure amendment 12]

[Document name to be amended] Statement

[Correction target item name] 0047

[Correction method] Change

[Correction contents]

[0047]

ETC authentication system of the present invention described above, according to the present invention receives the challenge data generated by said roadside device when passing through the roadside device via the vehicle-mounted device, encryption means for encrypting the secret key When the encrypted data storage means for storing the encrypted data by the encryption means, I D及
Response data transmitting means for transmitting to the roadside device via the vehicle device and data that is encrypted and stored in the micro-card data and the encrypted data storing means individual key certificate as a response data Doo and IC card and a dividing means for dividing divides the response data to which the transmitted, decoding means for decoding on the basis of the individual card key certificate data divided by said dividing means in the verification key, the decryption roadside comprising: a match detecting means for results retrieved I D and detecting matches the I D obtained is divided by the dividing means decoding means, and a challenge data transmission means for transmitting the challenge data to the IC card Machine and
Challenge data storage means for storing the challenge data generated by the roadside device; coincidence determination means for receiving the challenge data decrypted by the roadside device and performing a coincidence determination with the challenge data stored in the challenge data storage means comprises a central processing unit including bets, the card the roadside device has received at the same time as the ID individual Kagisho
By well as matching detection with the decoded ID of Akirasho data performs matching determination of the challenge data encrypted in the IC card in which the roadside device has decoded by said central processing unit directly authentication of ID of the IC card it is characterized in performing, roadside device is consistent with the decoded ID of the individual card key certificate data received at the same time as the ID
The roadside device is decoded in the central processing unit and detects
By performing matching determination of the challenge data encrypted in the IC card, it has an excellent effect that it is possible to authenticate the ID of the IC card directly.

Claims (8)

[Claims] An encryption means for receiving, via an on-vehicle device, challenge data generated by the road-side device when passing through the road-side device, and encrypting the challenge data with a proper secret key; Means for storing encrypted data, and an IC card ID previously assigned to the IC card
Response data transmitting means for transmitting each data of the IC card individual key certificate and the encrypted data stored in the encrypted data storage means as response data to the roadside device via the on-vehicle device. An IC card; dividing means for dividing the transmitted response data into three parts; decrypting means for decrypting the IC card individual key certificate data divided by the dividing means based on a verification key; A roadside device comprising: a match detection unit for detecting the match between the obtained IC card ID and the IC card ID obtained by the division; a challenge data transmitting unit for transmitting challenge data to the IC card; Challenge data storage means for storing the challenge data, and the challenge data decrypted by the roadside device. A central processing unit comprising: a match determination unit for determining a match with the challenge data stored in the challenge data storage unit; and signing the signature information received by the roadside device at the same time as the IC card ID. An ETC authentication system, wherein a verification process is performed, and the central processing unit performs direct authentication of an ID of an IC card by determining whether or not challenge data encrypted by the IC card decrypted by the roadside device is matched. 2. A step of transmitting challenge data generated by the roadside device to the IC card via the vehicle-mounted device when passing through the roadside device, encrypting the challenge data with a proper secret key, and storing the encrypted data. And transmitting the data of the IC card ID and the IC card individual key certificate as response data to the roadside device via the in-vehicle device in addition to the stored data, and transmitting the transmitted data in the roadside device. Dividing the response data into three, and the divided IC
Decrypting the card individual key certificate data based on the verification key; detecting a match between the IC card ID extracted as a result of the decryption and the IC card ID obtained by the division; Performing a match determination of the challenge data decrypted by the roadside device, the signature information received by the roadside device simultaneously with the IC card ID,
An ETC authentication method, wherein signature verification processing is performed, and the central processing unit performs direct authentication of an ID of the IC card by determining whether the challenge data encrypted by the IC card decrypted by the roadside device matches. 3. An ID sending means for sending an IC card ID immediately before passing through the first roadside device, and a challenge data and current time generated by the roadside device when passing through the first roadside device are transmitted to the on-board device. Via an IC card ID and an IC card individual key certificate previously assigned to the IC card, and the encrypted data. An IC card including a response data transmitting unit that transmits the response data to the second roadside device via the on-vehicle device, a first dividing unit that divides the response data into three,
Decryption means for decrypting the IC card individual key certificate data divided by the first division means based on the verification key; an IC card ID taken out as a result of the decryption; and an IC obtained by the division A second roadside device including a coincidence detecting unit that detects a coincidence of a card ID, a second dividing unit that divides the challenge data generated by the first roadside device and an IC card ID, and the second roadside device A central processing unit comprising: third division means for dividing the challenge data decrypted by the above and the IC card ID; and coincidence determination means for determining coincidence between the challenge data obtained from the second and third division means; An IC card that the signature processing received by the second roadside device at the same time as the IC card ID is subjected to signature verification processing, and that the second roadside device decrypts the central processing unit. ETC, characterized in that the direct authentication of ID of the IC card by performing the matching determination of the encrypted challenge data
Authentication system. 4. The apparatus according to claim 1, wherein the second roadside device performs another decryption process on the divided and extracted encrypted data based on an individual secret key of the IC card extracted as a result of the decryption by the decryption means. Decoding means, and, based on the decoding result of the decoding means, retrieves current time information at the time of passing through the first roadside device, and determines whether a difference between the time information and the current time is within a predetermined time. The ETC authentication system according to claim 3, further comprising: a confirmation unit for confirming. 5. A step of receiving a card ID from an IC card via an in-vehicle device immediately before passing through the first roadside device, and challenge data generated by the roadside device when passing through the first roadside device. And the current time to the IC card via the vehicle-mounted device, encrypting it with the regular secret key, and responding with IC card ID and IC card individual key certificate data in addition to the encrypted data Transmitting the data as data to the second roadside device via the in-vehicle device; dividing the transmitted response data into three in the second roadside device; and transmitting the divided IC card individual key certificate data to the second roadside device. Decrypting based on the verification key, detecting the coincidence between the IC card ID extracted as a result of the decryption and the IC card ID obtained by the division, and Determining whether the challenge data obtained from the roadside device matches the challenge data decrypted by the second roadside device. The signature information received by the second roadside device at the same time as the IC card ID is subjected to a signature verification process. And the IC decoded by the roadside device by the central processing unit.
An ETC authentication method, wherein direct authentication of an IC card ID is performed by performing a match determination of challenge data encrypted by a card. 6. The IC extracted at the stage of the decoding process
Decrypting the encrypted data extracted and divided based on the private key of each card; and extracting current time information when the vehicle passed through the first roadside device based on the decryption result of the decryption process 6. The ETC authentication method according to claim 5, further comprising the step of checking whether a difference between the time information and the current time is within a predetermined time. 7. An ID sending means for sending an IC card ID immediately before passing through a first roadside device, and receiving challenge data generated by the roadside device when passing through the first roadside device via a vehicle-mounted device. And an encryption means for encrypting the data with an authorized private key, and each data of an IC card ID and an IC card individual key certificate previously assigned to the IC card and the encrypted data as response data. An IC card including a response data transmitting unit that transmits the response data to the second roadside device via the on-vehicle device; a first dividing unit that divides the response data into three;
Decryption means for decrypting the IC card individual key certificate data divided by the first division means based on the verification key; an IC card ID taken out as a result of the decryption; and an IC obtained by the division A second roadside device including a coincidence detecting unit that detects a coincidence of a card ID, a second dividing unit that divides the challenge data generated by the first roadside device and an IC card ID, and the second roadside device A central processing unit comprising: third division means for dividing the challenge data decrypted by the above and the IC card ID; and coincidence determination means for determining coincidence between the challenge data obtained from the second and third division means; An IC card that the signature processing received by the second roadside device at the same time as the IC card ID is subjected to signature verification processing, and that the second roadside device decrypts the central processing unit. ETC, characterized in that the direct authentication of ID of the IC card by performing the matching determination of the encrypted challenge data
Authentication system. 8. A step of receiving a card ID from an IC card via an in-vehicle device immediately before passing through the first roadside device, and a challenge data generated by the roadside device when passing through the first roadside device. Is transmitted to the IC card via the in-vehicle device, and the encrypted data is encrypted with the proper secret key. In addition to the encrypted data, each data of the IC card ID and the IC card individual key certificate is set as the response data. Transmitting the transmitted response data to the second roadside device via the on-vehicle device, dividing the transmitted response data into three, and using the divided IC card individual key certificate data as a verification key. Decoding based on the first roadside unit in the central processing unit, and detecting whether the IC card ID extracted as a result of the decoding matches the IC card ID obtained by the division. The obtained challenge data and the second
Determining whether or not the challenge data decoded by the roadside device of the second roadside device coincides with the second roadside device. An ETC authentication method comprising: performing direct authentication of an ID of an IC card by determining whether challenge data encrypted by an IC card decrypted by the IC card matches.