JP2001216543A - On-vehicle equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide on-vehicle equipment which can safely and surely use various applications using DSRC radio. SOLUTION: Plural IC cards and security modules (SAM) for use in applications using DSRC radio are provided; and when data is received through DSRC radio, a preliminarily set command table is searched in accordance with ID information included in this reception data to specify an application which uses this reception data (S310). After access destinations of the SAM and the IC card to be used in the specified application are set in accordance with registered contents of the command table (S329 and S330), an application program is started (S340). Since the setting of SAMs and IC cards is automatically switched in accordance with applications, IC card replacing operation is made unnecessary.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an in-vehicle apparatus for performing external communication using DSRC wireless communication and executing various applications using data obtained by the communication.

[0002]

2. Description of the Related Art In recent years, DSRC (Dedicated Sort-Range Community) has been used as an elemental technology of ETC (Automatic Billing System).
ication) Wireless is attracting attention. The DSRC radio is a two-way narrow-area communication using millimeter wave (5.8 GHz) radio waves.
DT-55 ".

The DSRC radio is not limited to the ETC elemental technology, but has a large transmission capacity (1.024M in this case).
ITS (Inteligent Transport S)
ystem) It is expected to be applied to various applications in general.

[0004]

By the way, as applications utilizing DSRC radio, for example, payment at a gas station or a fast food drive-through, acquisition of various pay information, and the like, toll collection besides ETC are involved. When a plurality of applications are enabled, a different IC card may be used for each application.

[0005] These various applications are
Due to the narrow range of the SRC radio, it can be used only within a limited area of about several meters to several tens of meters. For this reason, as shown in FIG. 10, when the application areas A and B of different applications are arranged close to each other on the traveling route R of the vehicle M, if any application is used,
The driver (user) must insert and remove the IC card during driving.

However, such operation during driving is not only troublesome, but if the operation is troublesome, the user passes through the application providing area B and cannot use a desired application. Since the attention of the driver is dispersed, a problem that is not preferable in traveling safety is assumed.

In practice, a vehicle traveling at a speed of 60 km / h requires six seconds to travel at a speed of 100 m. That is, when the interval between the application providing areas is only 50 m, for example, the replacement of the IC card must be performed within 3 seconds, and such an operation is practically impossible.

The present invention has been made in order to solve the above problems.
It is an object of the present invention to provide an in-vehicle device that can safely and reliably use various applications using DSRC radio.

[0009]

According to a first aspect of the present invention, there is provided an on-vehicle apparatus, wherein the communication means communicates with the outside using a DSRC radio, and communicates with the outside via the communication means. Based on the data obtained, the execution means:
The application using this data is executed. The reader / writer is configured to be able to mount a plurality of IC cards, and the first storage unit stores the correspondence between the IC card mounted on the reader / writer and the application.

Then, when the identification means identifies the application to be executed by the execution means, the switching means uses the reader / writer in accordance with the identification result by the identification means based on the correspondence stored in the first storage means. The specification of the IC card that can be performed is switched.

That is, an IC card corresponding to an application is automatically selected from a plurality of IC cards mounted in advance in a reader / writer, and data is read / written from / to the selected IC card. ing. Therefore, according to the in-vehicle device of the present invention, a plurality of types of applications provided through the DSRC
It can be used safely and reliably without performing the operation of inserting and removing the C card.

By the way, in the case of an application in which a charge is settled using an IC card, data transmitted and received by DSRC wireless communication is simply encrypted so that an ID code or the like required for the charge is not stolen by others. To prevent unauthorized manipulation of data by the user.
It is necessary to encrypt the input / output data of the C card. For this purpose, a so-called security module (SAM) for encrypting and decrypting DSRC wireless transmission / reception data and encrypting / decrypting input / output data of an IC card is mounted. To prevent leaked raw data from leaking outside,
The encryption circuit and the decryption circuit of such a security module are usually constituted by one chip.

When the encryption method used differs depending on the application, such a SAM needs to be provided for each application as in the case of the above-mentioned IC card. Therefore, when there are a plurality of security means for encrypting and decrypting at least one of data transmitted / received via the communication means and data input / output to / from the IC card as in the SAM, As described in claim 2, the second storage means is provided with a second storage means for storing the correspondence between the security means and the application, and the switching means is an IC based on the first storage means.
In addition to the switching of the designation of the card, the security means to be used may be switched in accordance with the application identified by the identification means based on the correspondence stored in the second storage means.

[0014]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram showing a D of an embodiment to which the present invention is applied.
It is a perspective view showing the appearance of an in-vehicle device corresponding to SRC radio (hereinafter, referred to as “DSRC radio unit”), where (a) is viewed from the front and (b) is viewed from behind (X direction in the figure). is there. FIG. 2 is a block diagram showing the functional configuration.

As shown in FIG. 1, the DSRC of this embodiment
The wireless unit 2 includes three IC card holders 4 (4a, 4b, 4) in which IC cards including various members' cards and the like in addition to cash cards and prepaid cards are detachably mounted.
c), and a circuit board 6 attached to the end of the IC card holder 4 opposite to the card insertion slot. The IC card holder 4 and the circuit board 6
Are stored in the housing 8 as shown by the dashed line in the figure, and the IC card 5 (5
In order to prevent the theft of (a, 5b, 5c), the mounting portion of the IC card 5 is not visible from the outside. Where I
A portion P1 facing the card insertion slot of the C card holder 4,
The installation site P2 of the expansion slots S1 to S3 for mounting security modules 7 (7a, 7b, 7c) described later provided on the circuit board 6 is the same as the IC card 5 (5a to 5).
c) and is configured to be freely openable and closable in order to facilitate attachment and detachment of the security module 7.

The DSRC radio unit 2 configured as described above is installed, for example, on a dashboard or the like so that radio waves from a base station provided near the road can be satisfactorily received. Next, on the circuit board 6, as shown in FIG. 2, an input device for inputting various commands, a display device for displaying information obtained through the DSRC wireless communication unit, various operation procedures, and the like, Human interface (HMI) unit 10 including a speaker or the like for reproducing audio information
And a LAN (Local Area Network,
An external device for communicating with other in-vehicle devices, such as a navigation device, an audio device, and a meter unit for displaying a speedometer, a tachometer, or the like on a liquid crystal panel provided in an instrument panel, via a "vehicle LAN". A device interface unit 11, an IC card reader / writer 12 for reading / writing data from / to an IC card held in an IC card holder 4, and a DSRC wireless communication unit 13 as a communication unit for performing wireless communication by a DSRC wireless system
An external memory reading device 14 for reading data from an external memory such as a CD-ROM or a DVD, an EEPROM 15 for storing various data that can be rewritten and stored even when the power is turned off, A plurality of expansion slots S1 to S3 for mounting a security module (SAM) 7 that performs encryption processing on transmission / reception data via the DSRC wireless communication unit 13 and input / output data via the IC card reader / writer 12 are provided. A security section 16 and a control section 17 which is composed of a well-known microcomputer mainly composed of a CPU, a ROM and a RAM and controls the above-described sections to execute various applications are provided.

The circuit board 6 receives a power supply from a vehicle-mounted battery, and supplies the power supply voltage + B (12 V DC in the present embodiment) to the operating voltage VDD (DC 5 V in the present embodiment).
Power supply circuit 1 for converting the power to V
8 and an ACC signal monitoring unit 19 for monitoring an accessory signal indicating an operation state of the ignition key.

The ROM of the control unit 17 has a DSR
A program for performing main processing for starting an application program corresponding to reception data obtained via the C wireless communication unit 4 and registering and updating the application program, and a part of application programs prepared in advance Etc. are stored.

In addition to the application programs registered and updated by the main processing, the EEPROM 14 specifies an application program to be started based on an application ID given to received data for identifying an application. Command table, SAM7 mounted in expansion slots S1 to S3
A SAM information table or the like including information on the

FIG. 3A shows the command table.
As shown in FIG. 5, in association with the application ID, the storage address of the application program, the necessity of the SAM 7, the slot identification information for identifying the expansion slot in which the SAM to be used is mounted, and the type of the IC card 5 to be used are set. Card type information to be specified, holder identification information for identifying the IC card holder 4 in which a usable IC card is mounted, and the like are registered, and this corresponds to the first and second storage means of the present invention.

In the SAM information table, the presence or absence of SAM 7 installation, the presence or absence of marriage processing for the installed SAM 7, and the marriage processing are created in association with the slot numbers assigned to the respective expansion slots S1 to S3. Authentication information (such as an encryption key), an application ID of an application that uses the attached SAM, and the like are registered.

FIG. 4 shows an IC card reader / writer 12.
FIG. 5 is a block diagram showing an electrical connection relationship of the security unit 16. First, as shown in FIG. 4, the IC card reader / writer 12 includes three connectors C1 to C3 arranged in the IC card holders 4a to 4c, respectively.
Power is supplied (connection of VCC and GND) to the IC card 5 inserted into each IC card holder 4 via the IC card holder 3, and a clock signal CLK and a reset signal RST from the control unit 17 are supplied to the IC card 5. 5 and the control unit 17 can input and output the serial data SD. Each connector Ci (i = 1, 2, 3) has an I
A detection terminal used to detect the mounting state of the C card 5 is provided. This detection terminal is pulled up to the power supply voltage VCC via the resistor Ri, and is short-circuited to the ground line by the mounting of the IC card 5. Connected so that

The power supply VCC / GND, clock signal CLK, and serial data SD are connected to each connector C.
1 to C3, a reset signal RS
As for T and the detection signal DTC, individual signals are used for each of the connectors C1 to C3. Note that the reset signal RSTi to the connector Ci is output from an output port POi provided in the control unit 17, and the detection signal DTCi from the connector Ci is input to the input port P
It is connected so as to be input to Ii.

In the IC card reader / writer 12 configured as described above, the signal level of the detection signal DTCi of the connector Ci is high when the IC card 5 is not mounted,
When the card 5 is mounted, the level is low. By monitoring the signal level of the detection signal DTCi, the mounting state of the IC card 5 to the connector Ci can be determined.

Usually, output ports PO1 to PO3
Are set so that the reset signals RST1 to RST3 are all at the active level.
All the IC cards 5 attached to C3 are kept in the reset state. Then, only the reset signal RSTi to the connector Ci to which the IC card 5 to be accessed is attached is set to the inactive level, and the reset state is released, so that the desired IC card 5 can be accessed. It is to be.

On the other hand, the security section 16 is provided with three expansion slots S1 to S3 as shown in FIG.
Via these expansion slots Sj (j = 1, 2, 3),
The control unit 17 is provided to the SAM 7 connected to the expansion slot Sj.
Signal ADR, chip select signal CS
i, supply control signals such as read / write signal RW,
The input / output of the parallel data PD between the control unit 17 and the SAM 7 is enabled.

As for the address signal ADR, the parallel data PD, and the read / write signal RW, those common to the slots S1 to S3 are used, and the chip select signal CSj is individual for each slot Sj. Connected to be used. Therefore, the control unit 17 can access a desired SAM 7 by appropriately selecting the chip select signal CSj.

Although not shown, the security unit 16
However, as in the case of the IC card reader / writer 12, the power supply and the clock are supplied and the mounting state of the SAM 7 is detected through the slots S1 to S3. Next, the main processing executed by the control unit 17 will be described with reference to the flowchart shown in FIG.

This processing is performed by the ACC signal monitoring unit 19
The activation is started when the activation of the C signal is detected and the power supply to the control unit 17 is started. When this process is started, first, in S110, an initialization process for initializing the unit 2 is executed. As one of the initialization processes, a process of confirming the mounting state of the SAM 7 is performed. Specifically, the expansion slots S1 to S3 are searched, and the SAM7 is searched.
The presence / absence of attachment is written in the SAM information table (see FIG. 3B). When the attachment of the SAM 7 is confirmed, the mutual authentication processing is executed on the one for which the later-described marriage processing has been executed with reference to the marriage information. Then, the fact that the SAM 7 that has succeeded in the mutual authentication process can be used is registered in the command table, and that the failed SAM 7 cannot be used in the command table. Thereby, the SAM mounted in the expansion slots S1 to S3
7 and the application that uses the SAM 7 are associated with each other.

The mutual authentication process is to determine whether or not both can create the same cipher by using the encryption key created by the marriage process and the random number generated by both the SAM 7 and the control unit 17. Are mutually known, and are well-known technologies, and thus detailed description thereof is omitted here.

In the following S120, by monitoring the input ports PI1 to PI3 of the control unit 17, it is determined whether or not the IC card 5 has been inserted or removed by the IC card reader / writer 12, and if there is no insertion or removal, the process proceeds to S130. . In addition,
It is assumed that the IC card 5 inserted in advance at the time of activation of this process is determined to have been inserted when this step is first executed.

In S130, it is determined whether or not the external memory (CD, DVD) has been mounted on the external memory reader 14, and if not, the process proceeds to S140. In S140, it is determined whether or not new communication via the DSRC wireless communication unit 13 has been started. If not, the process returns to S120.

On the other hand, if it is determined at S120 that the IC card 5 has been inserted or removed,
After the card 5 is recognized, the process proceeds to S160. Also, if it is determined in S130 that the external memory has been mounted, or if it is determined in S140 that a new communication has been started, the process proceeds to S160.

The recognition processing of the IC card 5 (S15)
0), when the IC card 5 is inserted,
Application ID or I read from C card 5
According to the C card type information, the identification number of the IC card holder 4 (or the connector Ci) into which the IC card 5 is inserted is written in the holder identification information of the command table. Thus, the IC card 5 mounted on the IC card holder 4
And the application using the IC card 5 are associated with each other. On the other hand, when the IC card 5 is removed, the holder identification information corresponding to the IC card holder 4 on which the IC card 5 is mounted is deleted from the command table. However, the holder identification information of the command table is cleared at the time of initialization (S110).

Then, in S160, it is determined whether or not the setup (ie, registration and update of the application program) should be performed. That is, in the present embodiment, it is assumed that the application program to be registered and updated is provided by an IC card or an external memory (CD, DVD), and that the application program is provided by communication via DSRC radio. Therefore, if an affirmative determination is made in any of S120 to S140, the necessity of setup is determined.

This determination is based on the application ID assigned to the provided application program.
And whether the application ID is already registered in the command table or not. That is, if the read application ID is not registered in the command table, it is determined that the setup should be performed, and the process shifts to S170 to execute the setup process. If the application ID has already been registered in the command table, The flow shifts to S180, where other normal processing is executed.

A setup-specific application ID may be provided, and the setup process may be performed when the read application ID is the setup-specific application ID. next,
FIG. 7 illustrates the setup process started in S170.
This will be described along the flowchart shown in FIG.

As shown in FIG. 7, when the present process is started, first in S210, the setup information of the provided application program is read, and then in S220
Then, based on the setup information, it is determined whether or not the SAM 7 is required to execute the application program, and if necessary, the process proceeds to S230.

In S230, the initializing process (S11
0), based on the SAM recognition result, that is, the contents of the SAM information table,
It is determined whether or not it has been inserted into any of 1 to S3. And if the required SAM7 is not inserted,
The process proceeds to S270, in which a SAM insertion request notification is output to the HMI 12, thereby causing the HMI 12 to perform a screen display or a sound display to that effect, and terminates the processing.

If it is determined in step S230 that the required SAM 7 has been inserted, the process proceeds to step S240, and the required SAM 7 is determined to have been inserted by referring to the marriage information in the SAM information table. Is determined, and if the marriage has not been completed, the flow shifts to S250 to execute a marriage process.

Here, the marriage processing means that the SAM 7
There is a process of creating an encryption key to be used with the unit 2 (control unit 17) to which the SAM 7 is attached. Once the marriage process is completed, each SAM 7 and each expansion slot S1 are processed unless a special release process is performed. Re-marriage is not accepted in any of S3 to S3. Then, by the marriage processing, the marriage information and the encryption information of the SAM information table are registered.

Since such a marriage process is a known technique, a detailed description thereof will be omitted. However, in the present embodiment, both the unit 2 and the SAM 7 use a unique serial number and expansion slot identification information. The encryption key is generated using the SAM 7 that has been married so that it will not operate even if it is inserted into another unit 2 or the same unit 2 in another expansion slot.

After the completion of the marriage processing in S250, or when it is determined in the previous S220 that the SAM 7 is unnecessary, or when it is determined in the previous S240 that the SAM 7 has been married, the process proceeds to S260. The process is shifted, the setup program is read and executed, whereby the application program is registered, the command table is updated, and the process ends.

Next, an application starting process for starting an application using the DSRC radio will be described.
This will be described with reference to the flowchart shown in FIG. This process is executed as a part of the normal process in S180, and is started when the DSRC wireless communication unit 13 acquires received data through communication with the outside.

When this processing is started, as shown in FIG. 8, first, in S310, a command table is searched according to the application ID included in the data received by the DSRC radio communication unit 13, and the received data is used. To determine which application to run.

At S320, the SAM 7 is set according to the slot identification information registered in the command table for the specified application. That is,
If the slot number to be used is registered in the slot identification information, an access destination (which chip select signal CSi to use) when the SAM 7 is used in the application program is set according to the registered slot number.

In the following S330, the IC card 5 is similarly stored in accordance with the holder identification information registered in the command table.
Is set. That is, if a holder number (connector number) to be used is registered in the holder identification information, an access destination when the IC card 5 is used by the application program is set according to the registered holder number (connector number). In particular,
The reset signal RSTi to the connector Ci to which the corresponding IC card 5 is attached is set to the inactive state, and the reset state of the IC card 5 is released. If the holder identification information is not registered in spite of the application requiring the use of the IC card 5 (card type information is registered), the application for prompting insertion of the IC card 5 is performed. Display and notification are performed via the HMI unit 10 and I
It waits until the insertion of the C card 5 is confirmed. afterwards,
When the insertion of the IC card 5 is confirmed, an IC card recognition process similar to that in S150 is performed, and the access destination is set according to the holder identification information set thereby.

In the following S340, the application program is started in accordance with the program storage address registered in the command table, and this processing ends. In this process, S310 corresponds to an identification unit, S320 and S330 correspond to a switching unit, and S340 corresponds to an execution unit.

Here, FIG. 9 shows the DSRC radio communication unit 13.
FIG. 6 is a timing chart illustrating the operation of each unit when application execution data is received by the application. However, here
According to the command table, the application A is associated with the SAM 7a mounted in the slot S1 and the IC card 5a held in the IC card holder 4a,
It is assumed that the SAM 7c mounted in the slot S3 and the IC card 5c held in the IC card holder 4c are associated with the application C.

As shown in FIG. 9, when there is received data in the DSRC radio communication unit 13 (time t1) while the power supply VCC and the clock CLK are being supplied, the application ID of the received data is checked. If it is found that the data is application execution data for the application A, the chip select signal CS1 is set as an access signal to the SAM according to the command table, and the signal level of the reset signal RST1 is set to an inactive level indicating reset release. And IC card 5
Data can be input / output to / from a (time t2). Thereafter, the encrypted data is processed via the SAM 7a, and the data for settlement and the like are processed by the IC card 5a.

Thereafter, when the processing for the application A is completed (time t3), the chip select signal CS
The setting of the SAM as a signal for accessing the SAM is released, and the signal level of the reset signal RST1 is returned to the active level indicating reset.

Subsequently, when the application execution data for the application B is received by the DSRC radio communication unit 13 (time t4), the chip select signal is automatically generated in accordance with the command table, just as in the case of the application A. CS3 is set as a signal for accessing the SAM, the reset signal RST3 is set to the inactive level, and data can be input / output to / from the IC card 5c (time t5). Thereafter, the encrypted data is processed via the SAM 7c, and the data for settlement is processed by the IC card 5c.

Thereafter, when the processing for the application B is completed (time t6), the chip select signal CS
3 is released as a signal for accessing the SAM, and the signal level of the reset signal RST3 is returned to the active level indicating reset.

As described above, the DSR of this embodiment is
In the C wireless unit 2, a plurality of IC cards 5 and a plurality of SAMs 7 can be mounted at the same time, and when data for application execution is received via the DSRC wireless communication unit 13, the data is set in advance based on the application ID included in the received data. According to the registered contents of the command table, the IC card 5 and the SAM 7 to be used in the application are automatically selected.

Therefore, according to the DSRC radio unit 2 of the present embodiment, a plurality of types of applications provided by using the DSRC radio can be switched without performing IC card replacement or SAM switching operation during operation. , Can be used safely and reliably.

Although one embodiment of the present invention has been described above, the present invention is not limited to the above-described embodiment, and can be implemented in various modes without departing from the gist of the present invention. . For example, in the present embodiment, the HMI unit 10, the IC card reader / writer 12, and the external memory reader 14 are incorporated in the DSRC wireless unit 2, but instead of these, other in-vehicles mounted in the vehicle in advance are used. A similar device incorporated in the device may be configured to be used via the external device interface unit 11.

Also, in this embodiment, the SAM 7 has the DSR
C code applied to transmission / reception data of C radio and IC card 5
Is configured to collectively process both encryption applied to input and output data. However, separate SAMs 7 are provided for the DSRC wireless communication and the IC card, and the SAM 7 is used for an application using the same encryption method. May be configured to be shared.

Further, in the present embodiment, an EEPROM is used to store an application program and a command table.
The ROM 15 is used. Instead, any memory can be used, such as a flash ROM or a backed-up RAM, so long as the stored contents can be rewritten and the stored contents are retained even when the power is turned off. Is also good.

Further, a connector C is used as the IC card 5.
1 to C3, but not limited thereto, a contactless IC card using light or electromagnetic induction, or a frequently used SAM may be used as expansion slots S1 to S3.
3 may be fixedly incorporated in the DSRC wireless unit 2 beforehand, for example.

[Brief description of the drawings]

FIG. 1 is a perspective view illustrating an appearance of a DSRC wireless unit according to an embodiment.

FIG. 2 is a block diagram illustrating a functional configuration of a DSRC wireless unit according to the embodiment.

FIG. 3 is an explanatory diagram showing a configuration of a command table and a SAM information table.

FIG. 4 is a circuit diagram illustrating a configuration of an IC card reader / writer.

FIG. 5 is a block diagram illustrating a connection relationship of a security unit.

FIG. 6 is a flowchart illustrating the contents of a main process executed by a control unit.

FIG. 7 is a flowchart showing the contents of a setup process.

FIG. 8 is a flowchart showing the contents of an application activation process.

FIG. 9 is a timing chart illustrating the operation of each unit of the unit.

FIG. 10 is an explanatory diagram showing a conventional problem.

[Explanation of symbols]

2 DSRC wireless unit, 4 (4a-4c) IC card holder, 5 (5a-5c) IC card, 6 circuit board, 7 (7a-7c) security module (S
AM), 8: enclosure, 10: human interface (HMI) unit, 11: external device interface unit, 12
... IC card reader / writer, 13 ... DSRC wireless communication unit, 14 ... external memory reader, 16 ... security unit, 17 ... control unit, 18 ... power supply circuit, 19 ... ACC signal monitoring unit, C1-C3 ... connectors, S1- S3: Expansion slot

Claims (2)

[Claims] 1. Communication means for performing communication with the outside using a DSRC wireless device, and execution means for executing an application using the data based on data obtained through the communication means. A reader / writer configured to allow a plurality of IC cards to be mounted in the in-vehicle device and reading / writing data from / to one of the specified IC cards; and a correspondence between the IC card mounted on the reader / writer and the application. A first storage unit for storing a relationship, an identification unit for identifying an application executed by the execution unit, and the identification unit based on the correspondence stored in the first storage unit. According to the application
Switching means for switching designation of an IC card which can be used by the reader / writer; 2. The in-vehicle device according to claim 1, wherein the data transmitted and received via the communication unit and the IC
A plurality of security means for encrypting and decrypting at least one of data input / output to / from a card; and a second storage means for storing a correspondence between the security means and the application. The switching means is used in accordance with the application identified by the identification means based on the correspondence stored in the second storage means, in addition to the switching of the designation of the IC card based on the first storage means. An in-vehicle device for switching security means.