JP2004139380A - On-vehicle equipment setup method and its system, and on-vehicle equipment - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide other services at low cost while maintaining a sufficient security level as required by utilizing a setup system for existing ETC on-vehicle equipment. <P>SOLUTION: The setup system comprises an on-vehicle equipment manufacture ID receiving part 22 for receiving an on-vehicle equipment manufacture ID 20 from an on-vehicle equipment manufacturer 3 and storing it in an on-vehicle equipment information storage part 21 and a setup key generating part 27 for generating a code key 23 (an on-vehicle equipment key 24 and an IC card key 25) for setup of the on-vehicle equipment 4 in accordance with the received on-vehicle equipment manufacture ID and storing it in a setup key storage part 26. Furthermore, it has a setup key issuing part 28 for issuing the generated on-vehicle equipment key 24 to the on-vehicle equipment manufacturer 3, a setup processing part 29 for proper setup processing when an setup application is submitted from a setup provider 5, a code/decode processing part 30 for signing up the on-vehicle equipment key 24 and the IC card key 25 with a system secret key and coding them, and a service information receiving/updating part 32 for accepting the application of registering a new service from a service provider 9 and registering it into a service information storage part 31. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an on-vehicle device information management method, an information management system, and an on-vehicle device mainly used for automatic toll collection on toll roads.
[0002]
[Prior art]
2. Description of the Related Art In recent years, as a part of an intelligent transport system (ITS), an ETC (Electronic Toll Collection) has been put to practical use.
[0003]
In this ETC, a short-range wireless communication system called DSRC (Dedicated Short Range Communication: ARIB STD-T55, STD-T75) is adopted, and a short time during which a vehicle passes near a toll gate (usually a radius of about 30 m). A large amount of data such as personal information (billing information) and vehicle information can be transmitted and received instantaneously.
[0004]
The use of the DSRC has been limited to toll collection on toll roads. However, the amendment of the Radio Law Enforcement Regulations in April 2001 has enabled the DSRC to be applied to various services. This allows, for example, payment of tolls at toll parking lots and gas stations, acceptance of orders through fast food drive-through, distribution of music and video content according to user requests, and route information to destinations. Various services such as distribution of (maps, optimal routes, traffic jams, etc.) and surrounding area information (weather, accommodation, restaurants, events, etc.) can be expected. For example, the following system has been proposed as a system using DSRC in such a wide field.
[0005]
[Patent Document 1]
JP-A-2002-32452.
[0006]
Also, when DSRC becomes available in a wide range of fields, it is expected that the value of use of the on-board ETC device as a communication device of the DSRC will increase, and a secondary effect of promoting the spread of the on-board ETC device can be expected. As a result, the number of ETC users (vehicles) increases, and the main purpose of ETC, such as "elimination of traffic congestion due to non-stop passage through toll booths", can be achieved.
[0007]
[Problems to be solved by the invention]
However, in order to apply DSRC to services other than ETC, it is necessary to solve the problem of the cost of the roadside device and the vehicle-mounted device. For example, the current ETC roadside machines installed at tollgates are expensive at tens of millions of yen per unit, and this is a bottleneck in the spread of paying parking lots, gas stations, fast food stores, etc. Can easily be expected.
[0008]
One of the causes of such high costs is that the ETC secures high security. That is, since the current ETC aims to receive a toll-based toll based on taxes, a robust security system has been constructed to prevent falsification and unauthorized use. Specifically, a dedicated SAM for encrypting / decrypting input / output data to / from an ETC card (IC card) inserted into the vehicle-mounted device during traveling and data transmitted / received between the vehicle-mounted device and the roadside device. (SecureApplication Module) is mounted on the vehicle-mounted device and the roadside device. The hardware and software costs required for such encryption / decryption processing have become enormous.
[0009]
In general, the SAM is configured with one chip such as an LSI in order to prevent the leakage of the decrypted data. However, when the SAM is expanded to a service other than the ETC, the SAM is used in the execution application. It is necessary to provide a SAM for each application according to the encryption method used. That is, a SAM is prepared for each of a plurality of services and stores, and a security module of a preset level is activated when using the service. Therefore, as the application range of the DSRC is expanded, more LSIs are required, and the on-vehicle device and the roadside device become more expensive.
[0010]
Such a strong security system is not necessarily required for small-amount payments or provision of area information in fast food or the like, so it is desired to lower the level of security and reduce costs accordingly.
[0011]
On the other hand, it is also conceivable to reduce costs required for security by constructing a unique service providing system using DSRC in a specific industry or region. However, in order to identify whether the OBE has been properly manufactured and sold, an authentication system using an encryption key is indispensable. Therefore, it is necessary to issue an encryption key, manage it, and install it on the OBE (setup). It is necessary to build a new mechanism for this. In addition, even if the amount is small, it is necessary to settle the usage fee, so the billing system must be independently constructed. As described above, when a new system (structure) is constructed, the cost required for security can be reduced, but the cost of the entire system increases.
[0012]
An object of the present invention is to provide an on-board unit information management method and system that can provide other services at a low cost while maintaining a necessary and sufficient security level by using an existing ETC on-board unit setup system (mechanism). And an on-vehicle device.
[0013]
Another object of the present invention is to make it possible to set a security level for each of a plurality of services, thereby realizing low-cost deployment to services other than ETC, promoting the spread of on-board devices, and using ETC. To provide systems and methods that can increase the number of people.
[0014]
[Means for Solving the Problems]
According to a first main aspect of the present invention, for an in-vehicle device in which a plurality of application programs for receiving a plurality of services are stored, an in-vehicle device identification information acquiring step of acquiring identification information of the in-vehicle device. An OBE authentication information issuing step of issuing OBE authentication information associated with the obtained OBE identification information, and I want to receive the OBE authentication information and provision from a setup person who installs predetermined information in the OBE. A setup application receiving step of acquiring the above service information and accepting an application for setup, and an in-vehicle device that authenticates the in-vehicle device based on whether the received in-vehicle device authentication information matches the issued in-vehicle device authentication information. An authentication step and an application for receiving provision of a plurality of services including one or more services according to the application when the authentication is valid. A program activation information acquisition step of acquiring program activation information for enabling the execution of a program, and a setup information issuing step of issuing the acquired program activation information and predetermined information to be installed in the vehicle-mounted device to the setup person. An on-vehicle device information management method is provided. Here, the vehicle-mounted device stores an application program for automatic toll collection of tolls, and the setup application receiving step is for installing predetermined information required for automatic toll collection from the setup person. Preferably, a setup application is accepted, and the program activation information acquiring step acquires program activation information for enabling execution of an application program for receiving a plurality of services including automatic toll collection.
[0015]
According to such a configuration, it becomes possible to provide other services to the user by using the communication function of the on-board ETC device, so that the use value of the on-board ETC device can be increased and the spread thereof can be promoted. it can. In this case, by using the setup mechanism of the existing ETC on-board unit, it is not necessary to construct a new authentication system or a security protocol for data communication, and various services can be provided at low cost. become. Further, when an application for setting up the on-board ETC device is received, the activation information of an application program for receiving other services is acquired and issued, so that the spread of ETC can be promoted. Become. Even when the on-board unit for ETC is used only for services other than ETC, the authentication of the on-board unit by a public organization can be unified by using the existing authentication system and charging system. And reliability of the service can be ensured.
[0016]
According to a second main aspect of the present invention, for an in-vehicle device storing a plurality of application programs for receiving a plurality of services, an in-vehicle device identification information acquiring step of acquiring identification information of the in-vehicle device. An OBE authentication information issuing step of issuing OBE authentication information associated with the obtained OBE identification information, and I want to receive the OBE authentication information and provision from a setup person who installs predetermined information in the OBE. A setup application receiving step of acquiring the above service information and accepting a setup application, an on-board unit authentication step of performing authentication of the on-board unit based on the received on-board unit authentication information, and A program that disables an application program for receiving one or more services other than the application service A vehicle disabling information acquiring step of acquiring validation information, and a setup information issuing step of issuing predetermined information to be installed in the acquired program disabling information in-vehicle device to the setup person. A device information management method is provided.
[0017]
According to such a configuration, similarly to the above-described vehicle-mounted device information management method according to the first aspect, it is possible to enable a part of an application program for receiving provision of a plurality of services simultaneously with the setup of the vehicle-mounted device. It is possible to promote the on-board equipment.
[0018]
According to a third main aspect of the present invention, a program storage means for storing a plurality of application programs for receiving a plurality of services including automatic toll collection on a toll road, and a roadside device installed on the roadside Communication means for performing communication between the plurality of application programs, execution instruction information acquiring means for acquiring execution instruction information of one or more application programs based on information acquired from the roadside device by the communication means, and execution instruction information. In this case, the vehicle-mounted device is provided with a program execution unit that extracts an application program according to the execution instruction from the program storage unit and executes the application program.
[0019]
According to such a configuration, it is possible to obtain an in-vehicle device that can suitably implement the in-vehicle device information management method according to the first or second aspect.
[0020]
According to a fourth main aspect of the present invention, for an in-vehicle device in which a plurality of application programs for receiving a plurality of services are stored, an in-vehicle device identification information acquiring means for acquiring identification information of the in-vehicle device. A vehicle-mounted device authentication information issuing means for issuing the vehicle-mounted device authentication information associated with the obtained vehicle-mounted device identification information; and a user who wants to receive the vehicle-mounted device authentication information and provision from a setup person who installs predetermined information in the vehicle-mounted device. A setup application receiving means for acquiring the above service information and accepting a setup application, and an on-board unit for authenticating the on-board unit based on whether the received on-board unit authentication information matches the issued on-board unit authentication information. An authentication means, and an application for receiving provision of a plurality of services including one or more services for the application when the authentication is valid. Program start information obtaining means for obtaining program start information enabling execution of the application program, and setup information issuing means for issuing the obtained program start information and predetermined information to be installed in the vehicle-mounted device to the setup person. An on-board device information management system is provided.
[0021]
According to such a configuration, it is possible to obtain an in-vehicle device information management system that can suitably implement the in-vehicle device information management method according to the first or second aspect. In particular, this system is preferably used in cooperation with the vehicle-mounted device according to the third aspect.
[0022]
According to a fifth main aspect of the present invention, for an in-vehicle device storing a plurality of application programs for receiving a plurality of services, an in-vehicle device identification information acquiring means for acquiring identification information of the in-vehicle device; A vehicle-mounted device authentication information issuing means for issuing the vehicle-mounted device authentication information associated with the obtained vehicle-mounted device identification information; and a user who wants to receive the vehicle-mounted device authentication information and provision from a setup person who installs predetermined information in the vehicle-mounted device. A setup application receiving means for acquiring the above service information and accepting an application for setup, an on-vehicle device authentication means for performing authentication of the on-vehicle device based on the received on-vehicle device authentication information, and A program that disables an application program for receiving one or more services other than the application service A vehicle disabling information acquiring means for acquiring activation information, and a setup information issuing means for issuing the acquired program disabling information and predetermined information to be installed in the vehicle-mounted device to the setup person. A container information management system is provided.
[0023]
The other features and remarkable effects of the present invention will be more clearly understood by referring to the following description of embodiments of the invention and the accompanying drawings.
[0024]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following embodiment, the provision of a fast-food drive-through service (hereinafter abbreviated as “fast food service”) and a content distribution service (hereinafter abbreviated as “distribution service”) together with the ETC using an on-board device for ETC. This is an example that can be received.
[0025]
(overall structure)
First, an overall image of this embodiment will be described with reference to FIG.
The in-vehicle device information management system denoted by reference numeral 1 in this figure is installed in a server of an information management center 2 which is a national institution or a public institution similar thereto. The on-vehicle device information management system 1 is online or online with a setup company 5 for setting up the on-vehicle device manufacturer 3 and the on-vehicle device 4 and a card issuing company 6 for issuing an ETC-dedicated IC card (hereinafter referred to as an “ETC card”). Connected offline.
[0026]
The card issuing company 6 has been issued in advance with information security standards and key information for encryption and the like from the information management center 2. The card issuing company 6 creates an ETC card conforming to the issued standards and issues it to the user 7.
[0027]
The information on the standard and the key is also issued to an ETC SAM manufacturer (not shown). The SAM manufacturer manufactures a SAM (IC chip) conforming to the issued standards and sells the SAM to the vehicle-mounted device manufacturer 3. The vehicle-mounted device manufacturer 3 manufactures the vehicle-mounted device 4 by incorporating the SAM purchased from the SAM manufacturer. The vehicle-mounted device manufacturer 3 notifies the vehicle-mounted device information management center 2 of the manufacturing ID of the manufactured vehicle-mounted device 4, obtains the setup key of the vehicle-mounted device 4, and transfers the vehicle-mounted device 4 storing the setup key to the vehicle-mounted device 4. It sells to the user 7 through the store 5 (the same as the setup company in this example). The on-vehicle device manufacturing ID is a number unique to the on-vehicle device 4, and is generated, for example, by combining the manufacturer ID and the manufacturing number.
[0028]
The user 7 who has purchased the vehicle-mounted device 4 presents individual vehicle information (vehicle verification information and the like), charging information, and the like of the vehicle on which the vehicle-mounted device 4 is mounted to the setup company 5 and requests a setup. The setup company 5 sends the information received from the user and the vehicle-mounted device manufacturing ID of the vehicle-mounted device 4 to the vehicle-mounted device information management center, applies for the setup, and obtains necessary information through predetermined authentication by the management center 2. And complete the setup. The user 7 can receive an ETC (automatic toll collection) service and other services to be described later by mounting the vehicle-mounted device 4 whose setup has been completed on the vehicle and traveling on a toll road. The setup process of the vehicle-mounted device 4 will be described later in detail.
[0029]
The on-vehicle device manufacturer 3 acquires an application program 10 for receiving the provision of a predetermined service from an affiliated service provider 9 other than the road operator 8 that oversees and manages the ETC service, and stores the application program 10 on the on-vehicle device 4. . The application program 10 is stored not in an IC chip such as the SAM but in a storage medium such as a ROM of the vehicle-mounted device 4. The information stored in such a storage medium is easier to read and the like than the SAM (IC chip), so the level of security is reduced. However, the information stored in the vehicle-mounted device 4 and the roadside device communicating with the vehicle-mounted device 4 is correspondingly reduced. Can be manufactured at low cost. Further, it is also possible to add, change, or delete an application program after setting up the vehicle-mounted device 4, and the usability of the vehicle-mounted device 4 is improved. Thereby, spread promotion of the vehicle-mounted device 4 can be expected.
[0030]
In the present embodiment, since services other than ETC are provided by using the on-board unit 4 for ETC, the on-board unit manufacturer 3 transmits an application program for ETC from the on-board unit information management center 2 or the like in advance. It shall be acquired and stored. Further, in this embodiment, the application program is provided directly from the service provider 9 to the vehicle-mounted device manufacturer 3. However, the vehicle-mounted device information management center 2 once receives the application program from the service provider 9 and, like the ETC, The services to be provided and the application programs therefor may be managed in a unified manner.
[0031]
When the user 7 who has completed the setup of the vehicle-mounted device 4 mounts the vehicle-mounted device 4 on a registered vehicle and travels on a toll road, the vehicle-mounted device 4 communicates necessary information with the roadside device and the toll is automatically set. Settled. FIG. 2 schematically shows this state.
[0032]
That is, in this figure, when the vehicle 11 equipped with the vehicle-mounted device 4 passes through the tollgate 12 and enters the communication area 15 of the roadside device 14 installed in front of the passage gate 13, the vehicle 11 and the roadside device 14 Perform two-way wireless communication. Thereby, the payment of the usage fee is performed based on the vehicle information stored in the vehicle-mounted device 4 and the user information stored in the ETC card 16.
[0033]
Further, since the toll system on a toll road in Japan differs greatly depending on the type of vehicle (large, small, etc.), a sensor 17 for determining the type of the vehicle 11 is provided in front of the passage gate 13. If the vehicle type determined by the sensor 17 does not match the vehicle type information transmitted from the vehicle-mounted device 4, the gate 13 is not opened and the vehicle 11 cannot pass.
[0034]
(Configuration of OBE information management system)
Next, a schematic configuration of the vehicle-mounted device information management system 1 according to the present embodiment will be described with reference to FIG.
This system 1 is based on the vehicle-mounted device manufacturing ID receiving unit 22 that receives the vehicle-mounted device manufacturing ID 20 unique to the vehicle-mounted device 4 from the vehicle-mounted device manufacturer 3 and stores it in the vehicle-mounted device information storage unit 21, based on the received vehicle-mounted device manufacturing ID 20. A setup key generation unit 27 that generates a setup encryption key 23 (an on-board unit key 24 and an IC card key 25) and stores the setup encryption key 23 in the setup key storage unit 26; The setup key issuing unit 28 issues the on-board device key 24 to the on-board device manufacturer 3 and issues the IC card key 25 to the IC card. A setup processing unit 29 for performing the above processing, the vehicle-mounted device key 24 and the IC card key 25 are signed and encrypted with a system secret key, and the vehicle-mounted device An encryption / decryption processing unit 30 for encrypting information to be provided to the maker 3 with a public key of the vehicle-mounted device maker 3 and receiving an application for registration of a new service from the service provider 9 or a change in the content of the service being provided A service information receiving / updating unit 32 for updating the registered contents of the service information storage unit 31 is provided.
[0035]
The service information storage unit 31 stores start information 35 for starting application programs for fast food service and distribution service, and security program start information 36 that is started when these application programs are started. What to store. The start information 35, 36 of the program is, for example, key information generated by applying an identification code given to a provided service to a predetermined random number. A plurality of security programs are prepared, and which program is activated is set in advance for each application program.
[0036]
In addition, the setup processing unit 29 obtains individual vehicle information and billing information, the on-vehicle device manufacturing ID 20, and the type of service to be provided from the setup company 5, and receives a setup application receiving unit 37 for receiving a setup application. The in-vehicle device authentication unit 38 that authenticates the in-vehicle device 4 pertaining to the application based on whether the in-vehicle device manufacturing ID 20 that has been registered matches the one registered in the in-vehicle device information storage unit 21, and the acquired individual vehicle information are not shown. A vehicle type discriminator 39 that applies to the vehicle type discrimination model to determine the code of the vehicle type of the vehicle to which the application applies, and communication between the vehicle-mounted device 4 and the roadside device 14 when passing through a toll gate or the like based on the vehicle-mounted device manufacturing ID 20. A communication key generation unit 40 that generates a communication key and stores it in a communication key storage unit (not shown); and the vehicle type code, the communication key, and the setup IC card key 25, A vehicle type code / communication key issuing unit 41 for issuing a setup IC card, and an application program starting information extracting unit 42 for extracting starting information for starting an application program for a service related to the application from the service information storing unit 31. And a security program activation information extraction unit 43 for extracting activation information of a security program that is activated simultaneously with activation of the extracted application program from the service information storage unit 31.
[0037]
These components are actually a certain area secured in a storage medium of a computer system constituting a server of the information management center 2 and a program installed in this area, and are called into a RAM by a CPU (not shown). When executed, the functions of the present invention are achieved in cooperation with an OS (operation system).
[0038]
(Configuration of onboard equipment and roadside equipment)
The vehicle-mounted device 4 for which setup and the like are performed by the vehicle-mounted device information management system 1 and the roadside device 14 that communicates with the vehicle-mounted device 4 have a configuration as shown in FIG.
[0039]
First, the roadside machine 14 shown in FIG. 4 is installed at, for example, entrances and exits of toll roads, various stores such as fast food, public institutions, roadsides of general roads and toll roads, entrances and exits of parking lots, distribution centers, and car ferry ports. ing.
[0040]
The roadside device 14 includes a roadside host 45 and a DSRC wireless antenna 46. The DSRC wireless antenna 46 is configured to enable communication according to the DSRC wireless protocol (ARIB standard). The roadside host 45 controls the DSRC wireless antenna 46 to manage application information, and exchanges information with the vehicle-mounted device 4. Further, the roadside host 45 has a function of generating application execution instruction information according to the installed location or the type of service to be provided and transmitting the generated information to the vehicle-mounted device 4. Although illustration is omitted, the roadside host 45 is connected to a management computer installed in an area management center that supervises a plurality of tollgates and performs a charge calculation and the like. Is transmitted to the management computer.
[0041]
On the other hand, the vehicle-mounted device 4 includes an RF module 48 having a DSRC wireless antenna 47 for communicating with the roadside device 14, a control processing unit (microcomputer) 50 including a DSRC control unit 49, a display 51, a speaker 52, and the like. , A security module (SAM) 54 composed of a dedicated LSI, a program storage unit 55, and an interface (I / F) 58 for the ETC card 16. .
[0042]
The RF module 48 is a functional block corresponding to the DSRC wireless antenna 46 of the roadside device 14, and is capable of communication based on the DSRC wireless protocol (ARIB standard).
[0043]
The control processing unit 50 configured by a microcomputer performs processing of DSRC wireless communication information via the RF module 48, controls the HMI 53, and the like. The control processing unit 50 adds a predetermined processing command to the information acquired from the roadside device 14 by DSRC wireless communication and inputs the information to the SAM 54, for example, to decrypt the encrypted information, In order to transmit the information, it requests a process of acquiring information from the ETC card 16 and encrypting the information. Further, the control processing unit 50 controls a plurality of security programs, which will be described later, to execute respective processing commands based on a predetermined priority order, and controls the security programs to be executed prior to the application programs.
[0044]
The SAM 54 performs decryption of encrypted information, reading of information from the ETC card 16, encryption of information, and the like in response to the request from the control processing unit 50. Since the configuration and function of the SAM 54 can be conventionally known, further detailed description will be omitted.
[0045]
The program storage unit 55, which is one of the features of the present embodiment, includes an application program 10 for receiving a plurality of services including ETC, and a security program 56 that is activated when the application program 10 other than ETC is executed. And activation information 57 for activating these programs 10 and 56. As described above, the ETC security program 59 is stored in the SAM 54 to ensure a high level of security against falsification and leakage of information. On the other hand, in the fast food service and the distribution service according to the present embodiment, since the usage fee is relatively low or free, the security level is relaxed, and the manufacturing of the on-vehicle device (SAM or the like) is reduced accordingly. The cost required for information management is reduced.
[0046]
(Application program)
Here, each application program 10 will be briefly described.
First, the ETC program mainly includes a communication function unit for communicating with the roadside device 14 and an encryption / decryption function unit for encrypting / decrypting information to be communicated. 55. The communication function includes a function of receiving a frame control message (FCM: Frame Control Message) and a beacon service table (BST: Beacon Service Table) from the roadside unit 14 at the tollgate, and an activation channel when the FCM is received. A function of transmitting an ACTC (Activation Channel) or a vehicle service table (VST: Vehicle Service Table) to the roadside device 14 is included. The FCM, BST, ACTC, and VST are all frames used for a link sequence defined by the ARIB standard. The operation sequence of these functions will be described later.
[0047]
The fast food service program has a function of communicating with a roadside device 14 installed near the entrance of a fast food store. This communication function is substantially the same as the ETC application program described above.
[0048]
Further, the distribution service program has a function of communicating with a simple roadside device attached to a road sign or information panel installed on the roadside of the road or a roadside device for other services, music and It has a function of receiving information such as area information, converting the information into voice signals and character information, and outputting the converted information to the speaker 52 and the display 51 of the vehicle-mounted device 4. Here, when the distribution service is provided free of charge, there is no need to specify the user 7 or the vehicle-mounted device 4, and information can be distributed from the roadside device 14 to the vehicle-mounted device 4 in one way. Therefore, there is no risk of leakage of personal information or the like, and it is sufficient to simply manage to prevent inappropriate information (fake traffic congestion information or the like) from being delivered to the user 7.
[0049]
(Security program)
Next, for example, a security program as shown in FIG. 5 is stored. That is, the mutual authentication function between the vehicle-mounted device 4 and the terminal of the roadside device 14 shown in FIG. 5A, the authentication function for data transmitted and received between the vehicle-mounted device 4 and the roadside device 14 shown in FIG. ) Is an encryption function for data transmitted and received.
[0050]
The mutual authentication of the terminals is to authenticate whether the in-vehicle device 4 is manufactured and sold properly to prevent impersonation of the terminal. The mutual authentication of the terminal is based on the matching between the data transmitted and encrypted and the data obtained and decrypted by communication in both the vehicle-mounted device 4 and the roadside device 14 to determine whether the terminal of the other party is legitimate. Is determined between the terminals.
[0051]
The data authentication is to authenticate whether the data received by the roadside device 14 is legitimate and to prevent data falsification. This data authentication is based on whether the data generated by the on-board unit 4 is received by the roadside unit 14 and based on whether the data matches the data registered in the roadside unit 14. Is to be determined.
[0052]
The data encryption is to encrypt received data to prevent wiretapping and disclosure of the data.
[0053]
The functions of the application program and the security program described above are read out onto the memory of the vehicle-mounted device 4 by the control processing unit 50 and the DSRC control unit 49 and executed as needed.
[0054]
FIG. 6 shows an example of the relationship between such application programs and the set security program.
The example of this figure is a case where the user 7 also desires to use fast food when applying for the setup of the on-board ETC device 4. The security programs a, b, and c correspond to (a), (b), and (c) of FIG. 5, respectively. In ETC, all abc security programs are set to start. For the information distribution service, only c (data encryption) having the lowest security level is set. In the illustrated example, common startup information is set for the application program and the security program. In addition, common startup information is set for fast food and gas stations. That is, when an application for any of these services is made, the other service can also be used. The service information receiving / updating unit 32 registers (updates) the cooperation of the plurality of service providers 9 at any time.
[0055]
Further, no start information is set in the information distribution. This means that, regardless of the application for any service including ETC, the information distribution service program is activated by the activation information of the application program of the service.
[0056]
From the above, in the illustrated example, when the setup of the vehicle-mounted device 4 of the user 7 is completed, the provision of the fast food service, the gas station settlement service, and the information distribution service in addition to the ETC can be provided.
[0057]
(Communication sequence between roadside unit and OBE)
Next, an example of a communication sequence between the roadside device 14 and the vehicle-mounted device 4 will be described with reference to FIG.
When the vehicle 11 equipped with the vehicle-mounted device 4 enters the communication area 15 of the roadside device 14 (see FIG. 2), communication starts according to the DSRC wireless protocol. First, a frame control message (FCM) is transmitted from the roadside device 14 to the vehicle-mounted device 4, and in response to this, the vehicle-mounted device 4 transmits an activation channel (ACTC). Next, the roadside device 14 transmits an FCM, subsequently transmits a beacon service table (BST), and transmits the FCM again. When the vehicle-mounted device 4 transmits the vehicle service table (VST) in response thereto, the roadside device 14 transmits the FCM. Thereby, the link connection between the roadside device 14 and the vehicle-mounted device 4 is established.
[0058]
Next, substantial information is exchanged. In the illustrated example, the information A including the cipher text is transmitted from the roadside device 14 and the information B including the cipher text is also transmitted from the vehicle-mounted device 4 to simplify the description.
[0059]
The information A (cipher text) is transmitted from the roadside device 14, and the control processing unit 50 of the vehicle-mounted device 4 that has obtained the information A adds a decryption request command to the information A and inputs the information A to the SAM 54. The SAM 54 decodes the information A according to the command and sends it to the control processing unit 50. Next, when the control processing unit 50 requests the encryption of the information B, the SAM 54 transmits the information B including the information read in advance from the ETC card 16 and stored in the RAM, the unique information of the vehicle-mounted device 4, and the like. The data is encrypted and sent to the control processing unit 50. The control processing unit 50 waits for the FCM from the roadside device 14 and transmits the encrypted information B to the roadside device 14.
[0060]
The communication ends when all the information is transmitted and received from both the roadside device 14 and the vehicle-mounted device 4 or when the vehicle-mounted device 4 moves out of the communication area 15. FIG. 7 shows an example in which the communication between the roadside device 14 and the vehicle-mounted device 4 is normally performed.
[0061]
(Processing process of onboard equipment information management system)
Hereinafter, the operation of the vehicle-mounted device information management system 1 will be described with reference to FIG. Note that S1 to S11 in this figure are symbols indicating the processing order.
[0062]
First, the vehicle-mounted device ID receiving unit 22 receives the vehicle-mounted device manufacturing ID 20 generated by the vehicle-mounted device manufacturer 3 and registers it in the vehicle-mounted device information storage unit 21 (Step S1). Then, the setup key generation unit 27 generates the vehicle-mounted device key 24 and the IC card key 25 as the setup encryption key 23 by applying the obtained vehicle-mounted device manufacturing ID 20 to a predetermined encryption key generation algorithm (step S2). ). The vehicle-mounted device key 24 and the IC card key 25 are stored in the vehicle-mounted device information storage unit 21 in association with the vehicle-mounted device manufacturing ID 20. The setup key on-board unit key 24 is transmitted to the on-board unit manufacturer 3 by the setup key issuing unit 28 (step S3).
[0063]
The vehicle-mounted device manufacturer 3 stores the vehicle-mounted device key 24 for setup in a security function (for example, a security chip) mounted on the vehicle-mounted device 4, and then stores the vehicle-mounted device 4 in the store 5 (a setup company in this embodiment). Through to the user 7. Since the vehicle-mounted device 4 has not yet been installed in the vehicle, no basic charging information (attribute information) such as vehicle information and user 7 information is installed.
[0064]
Next, the setup application receiving unit 37 of the on-vehicle device information management system 1 provides the individual vehicle information of the vehicle-mounted device 4 and one or more services that the user 7 desires to use from the user 7 fixing the purchased on-vehicle device 4 to the inspected vehicle. Is received together with the vehicle-mounted device manufacturing ID 20 (step S4). Here, the vehicle-mounted device 4 according to the application is properly manufactured and sold based on whether the vehicle-mounted device manufacturing ID received by the vehicle-mounted device authentication unit 38 is registered in the vehicle-mounted device information storage unit 21. Authentication is performed (step S5).
[0065]
If the authentication is valid, the application program activation information extraction unit 42 extracts the activation information 35 of the application program for receiving the service related to the application from the program storage unit 55 (step S6). Further, the security program activation information extraction unit 43 extracts from the program storage unit 55 the activation information 36 of the security program set for the service related to the application (step S7).
[0066]
Further, the vehicle type determining unit 39 determines the charging vehicle type code of the vehicle of the user 7 by applying the received individual vehicle information to the vehicle type determining model, and based on the on-vehicle device manufacturing ID 20, the communication key generating unit 40. Generates an encryption key for communication between the vehicle-mounted device 4 and the roadside device 14 (step S8).
[0067]
The vehicle type code / communication key issuing unit 41, the setup key issuing unit 28, the application program activation information extraction unit 42, and the security program activation information extraction unit 43 include a vehicle type code, a communication key, an IC card key 25, The application program launch information 35 and the security program launch information 36 are extracted and issued (stored) in the setup IC card (step S9). The issuance of various types of information to the setup IC card is performed by the card reader / writer as an output device installed in the store of the setup company 5 or the information management center 2 as described above.
[0068]
Finally, the setup IC card storing various information is delivered to the user 7 (or setup company 5), for example, by mail (step S10).
[0069]
The user 7 inserts the setup IC card into the slot of the vehicle-mounted device 4 so that the information stored in the setup IC card is read by a card reader built in the vehicle-mounted device 4. Authentication using the set-up encryption key 23 (on-vehicle device key 24, IC card key 25) between the vehicle-mounted device 4 and the vehicle type code and other information (attribute information) in the IC card to the on-vehicle device 4 Forward. Thus, the setup of the vehicle-mounted device 4 ends.
[0070]
In addition, at this time, the activation information 35 and 36 of the application program and the security program for receiving the service desired by the user 7 are also transferred to the vehicle-mounted device 4. Thus, the user 7 can receive other services using the vehicle-mounted device 4 in addition to the ETC service. Furthermore, since the application for other services is accepted at the same time as setting up the on-board equipment for ETC, it is not necessary to newly establish an authentication system or a billing system for each service provided, and various services are provided at low cost can do.
[0071]
In addition, since the information management center 2, which is a public organization, authenticates a predetermined vehicle-mounted device 4 and issues start-up information 35 of an application program for another service, the reliability of the provided service can be improved. Property can be ensured.
[0072]
Further, as an additional effect, the service provider 9 can collect information on the user 7 who uses each service by receiving an application for a service to be used from the user 7 when setting up the vehicle-mounted device 4. The information will be available for marketing.
[0073]
On the other hand, if the in-vehicle device manufacturing ID 20 pertaining to the application is not registered in the in-vehicle device information storage unit 21 in step S5, it is determined that the in-vehicle device 4 has not been properly manufactured and sold. An error message is output to the operator's terminal or the like, and the process ends (step S11).
[0074]
During the above steps, the vehicle-mounted device key 24 and the IC card key 25 are supplied in a state of being signed and encrypted with the system secret key of the vehicle-mounted device information management system 1. The vehicle-mounted device 4 and the setup IC card perform mutual authentication by using the public key (or secret key) of the system and a random number, and after confirming that the devices are authenticated by the information management center 2, It is configured to transfer information. The signature / encryption for this is executed by the encryption / decryption processing unit 30.
[0075]
(Modification)
Note that the present invention is not limited to the above embodiment, and can be variously modified without changing the gist of the invention.
[0076]
For example, the present system 1 has been described by taking the on-board device for ETC as an example, but is not limited to this. A system that is sold through a predetermined set-up and that is configured to enable users to receive services by communicating with roadside equipment and transmitting and receiving user information, etc., and a vehicle-mounted device for such a system. The invention is applicable.
[0077]
In the above-described embodiment, the service to be provided can be selected by an application from a user. However, when a setup is applied, activation information of all service application programs is issued and all services are used. May be enabled. Thereby, the configurations of the vehicle-mounted device and the system can be simplified.
[0078]
Further, in the above-described embodiment, the security program is preset for each application during the manufacture of the vehicle-mounted device and stored in the vehicle-mounted device. However, different security programs are set for each vehicle-mounted device according to the selection of the setup company (user) at the time of setup. May be executed. Thus, for example, when a setup fee or a service usage fee is set according to the security level, the security level can be selected at the responsibility of the user, and the degree of freedom of the user's selection can be increased.
[0079]
Further, in the above-described embodiment, the execution instruction information of the application program is generated by the roadside device 14 and transmitted to the in-vehicle device 4. However, the roadside device 14 outputs the attribute of the roadside device 14 such as the installation location and the service type. Only the information may be transmitted, and the execution instruction information of one or more application programs may be generated based on the attribute information of the roadside device 14 acquired by the vehicle-mounted device 4. Thereby, the structure of the roadside device 14 can be simplified, and the burden on the service provider can be reduced.
[0080]
Furthermore, a platform for a security program common to a plurality of application programs can be created and stored in a ROM or the like of the vehicle-mounted device. This makes it possible to maintain the security level of data stored in the vehicle-mounted device to some extent while suppressing an increase in the manufacturing cost of the vehicle-mounted device, so that various services using the vehicle-mounted device can be realized.
[0081]
Further, other services may be provided by a card other than the ETC card, or a different card may be used for each service.
[0082]
Further, in addition to the services described above, the present invention can be applied to a driving support system (AHS: Automated Highway System) using DSRC. The AHS is a system that detects an obstacle or the like on a road and transmits it to a vehicle by DSRC as a part of the ITS. By using the security platform described above for the AHS, information can be provided only to authorized on-vehicle devices, and the reliability of the provided information can be ensured. In this case, it is preferable to use the AHS-dedicated on-board unit rather than the EHS or the on-board unit for other services.
[0083]
【The invention's effect】
As described above, according to the present invention, by using the existing ETC on-board unit setup system, it is possible to provide other services at low cost while maintaining a necessary and sufficient security level. A method, a system, and a vehicle-mounted device can be provided.
[0084]
Further, according to the present invention, it is possible to set a security level for each of a plurality of services, thereby realizing low-cost deployment to services other than ETC, promoting the spread of on-vehicle devices, and providing users of ETC. Can be increased.
[Brief description of the drawings]
FIG. 1 is a conceptual diagram showing an overall image of an embodiment of the present invention.
FIG. 2 is a schematic diagram showing a state in which a vehicle equipped with an on-vehicle device passes through a toll gate;
FIG. 3 is a block diagram showing a schematic configuration of an on-vehicle device information management system according to an embodiment of the present invention.
FIG. 4 is a block diagram showing a schematic configuration of the vehicle-mounted device and the roadside device.
FIG. 5 is a schematic diagram for explaining an example of a security program.
FIG. 6 is a diagram showing an example of a combination of an application program and a security program for each service.
FIG. 7 is a diagram showing a communication sequence between the roadside device and the vehicle-mounted device.
FIG. 8 is a flowchart showing processing steps for setting up the on-vehicle device.
[Explanation of symbols]
1. In-vehicle device information management system
2. OBE information management center
3: Onboard equipment manufacturer
4: Onboard equipment
5… Setup company (OBE distributor)
6 ... Card issuing company
7 ... User
8 ... Road company
9 ... Service provider
10. Application program
11 ... Vehicle
12 ... Toll booth
13 ... Passing gate
14. Roadside machine
15 ... Communication area
16. ETC card
17 ... Sensor
20… In-vehicle device manufacturing ID
21… Onboard equipment information storage
22… In-vehicle device manufacturing ID receiving unit
23 ... Encryption key for setup
24… Key for vehicle-mounted device for setup
25 ... IC card key
26 ... Setup key storage
27 setup key generation unit
28 Setup key issuing unit
29 ... Setup processing section
30: encryption / decryption processing unit
31 ... Service information storage
32: Service information receiving / updating unit
35 ... Application program startup information
36 ... Security program start information
37… Setup application reception section
38 OBE authentication section
39 ... Vehicle type discriminator
40 ... communication key generation unit
41 ... Car code / communication key issuing unit
42 ... Application program start information extraction unit
43 security program activation information extraction unit
45. . . Roadside host
46. . . DSRC wireless antenna (roadside unit)
47… DSRC wireless antenna (vehicle unit)
48… RF module
49. . . DSRC control unit
50 ... Control processing unit
53. . . Human Machine Interface (HMI)
54. . . Security Module (SAM)
55 Program storage unit
56 ... Security Program
57 ... Program start information
58… IC card interface
59 ... Security program for ETC

Claims (31)

For an in-vehicle device in which a plurality of application programs for receiving a plurality of services are stored, an in-vehicle device identification information acquiring step of acquiring identification information of the in-vehicle device,
OBE authentication information issuing step of issuing OBE authentication information associated with the obtained OBE identification information,
A setup application receiving step of receiving a request for setup by obtaining the on-board device authentication information and information of one or more services to be provided, from a setup person installing predetermined information in the on-vehicle device;
The vehicle-mounted device authentication step of performing authentication of the vehicle-mounted device based on whether the received vehicle-mounted device authentication information matches the issued vehicle-mounted device authentication information,
A program activation information acquisition step of acquiring program activation information for enabling execution of an application program for receiving provision of a plurality of services including one or more services according to the application when the authentication is valid;
An on-vehicle device information management method, comprising: a setup information issuing step of issuing the acquired program start information and predetermined information to be installed in the on-vehicle device to the setup person. The method of claim 1, wherein
The vehicle-mounted device stores an application program for automatic toll collection of tolls,
The setup application receiving step is for receiving a setup application for installing predetermined information required for automatic fee collection from the setup person,
The method according to claim 1, wherein the step of acquiring program activation information acquires program activation information that enables an application program for receiving a plurality of services including automatic toll collection. 3. The method of claim 2, wherein
The program start information obtaining step includes, when obtaining program start information for enabling execution of an automatic toll collection application program, all application programs other than the automatic toll collection application program stored in the in-vehicle device. A method for acquiring program activation information for enabling execution. The method of claim 1, wherein
The onboard unit stores a security program for monitoring tampering, leakage or unauthorized use of data stored in the onboard unit,
The method further comprises a security program start information obtaining step of obtaining security program start information enabling the security program to be executed. The method of claim 4, wherein
The security program includes a plurality of security programs,
In the security program activation information acquisition step, a security program is selected for each of a plurality of services including one or more services according to the application, and security program activation information for enabling execution of the selected security program is acquired. The method characterized by the above. The method of claim 5, wherein
The plurality of security programs are communicated with a program that executes terminal authentication between the vehicle-mounted device and a roadside device installed by a service provider, and a program that executes authentication of data communicated between these terminals. A method for encrypting data. The method of claim 5, wherein
Further, the method further includes a security program registration step of registering information of one or more security programs executed when the service is provided by using the on-vehicle device for each service.
The security program activation information obtaining step includes extracting a security program executed for each of the plurality of services from the plurality of registered security programs, and obtaining security program activation information that enables the extracted security program to be executed. A method characterized in that: The method of claim 5, wherein
The setup application receiving step obtains information of one or more services to be provided by the setup person and information of one or more security programs executed for the services, and receives a setup application.
The security program activation information acquiring step acquires security program activation information that enables execution of one or more security programs according to the application for each of a plurality of services including one or more services according to the application. Features method. The method of claim 1, wherein
Furthermore, for a plurality of services that can be provided by the vehicle-mounted device, a service information registration step of registering program activation information that enables execution of an application program for receiving provision of each service,
The method according to claim 1, wherein the program start information acquiring step is to extract and acquire the program start information registered in the service information registering step for the service related to the application. The method of claim 9,
The service information registration step is a method of receiving and registering, from a service provider that provides a service, program start information that enables execution of an application program for receiving the service. The method of claim 1, wherein
The program activation information acquisition step is for acquiring program activation information for enabling execution of all application programs stored in the vehicle-mounted device when the authentication in the vehicle-mounted device authentication step is valid. Method. For an in-vehicle device in which a plurality of application programs for receiving a plurality of services are stored, an in-vehicle device identification information acquiring step of acquiring identification information of the in-vehicle device,
OBE authentication information issuing step of issuing OBE authentication information associated with the obtained OBE identification information,
A setup application receiving step of receiving a request for setup by obtaining the on-board device authentication information and information of one or more services to be provided, from a setup person installing predetermined information in the on-vehicle device;
An on-board unit authentication step of performing authentication of the on-board unit based on the received on-board unit authentication information,
A program invalidation information acquiring step of acquiring program invalidation information for making an application program for receiving one or more services other than the service applied to the application unexecutable when the authentication is valid;
An on-board unit information management method, comprising: a setup information issuing step of issuing the acquired program invalidation information and predetermined information to be installed in the on-board unit to the setup person. Program storage means for storing a plurality of application programs for receiving provision of a plurality of services including automatic toll collection of a toll road;
Communication means for communicating with a roadside device installed on the roadside,
Execution instruction information acquisition means for acquiring execution instruction information of one or more application programs based on information acquired from the roadside device by the communication means;
An on-vehicle device comprising: a program execution unit that extracts an application program according to an execution instruction from the program storage unit and executes the application program when the execution instruction information is acquired. The vehicle-mounted device according to claim 13,
Further, with respect to the application program stored in the program storage unit, the information on the vehicle-mounted device user stored in the vehicle-mounted device basic information storage unit or the information on the vehicle on which the vehicle-mounted device is mounted, the falsification, leakage, or An on-vehicle device comprising a security program storage unit for storing a security program for monitoring unauthorized use in association with any of the plurality of services. The vehicle-mounted device according to claim 14,
The program execution means includes: an extraction means for extracting a security program registered in association with the application program that has acquired the execution instruction information; and a program for executing the extracted security program prior to the application program according to the execution instruction. An on-vehicle device comprising: an execution control unit. The vehicle-mounted device according to claim 15,
The security program storage means stores a plurality of security programs,
The extracting means is for extracting one or more security programs registered in association with the application program that has acquired the execution instruction information,
The vehicle-mounted device, wherein the program execution control means controls the execution priority of the extracted one or more security programs and the application program according to the execution instruction. The vehicle-mounted device according to claim 14,
The execution instruction information acquiring means acquires execution instruction information of one or more application programs and a security program executed together with the application programs from the roadside device,
The vehicle-mounted device, wherein the program execution means includes a program execution control means for executing the security program prior to an application program according to the execution instruction. The vehicle-mounted device according to claim 13,
The execution instruction information acquiring means acquires attribute information of the roadside device from the roadside device, and generates execution instruction information of one or more application programs based on the acquired attribute information of the roadside device, thereby executing the execution instruction. An in-vehicle device characterized by acquiring information. The vehicle-mounted device according to claim 18,
The roadside machine is installed at any of entrances and exits of toll roads, various stores, public institutions, roadsides, parking lots, distribution centers, car ferry ports, and the attribute information of the roadside machine is the location information of the place where the roadside machine is installed. Different information is assigned according to the type,
The in-vehicle device according to claim 1, wherein the execution instruction information acquiring means acquires the execution instruction information by generating execution instruction information of one or more application programs based on the acquired attribute information of the roadside device. . For an in-vehicle device in which a plurality of application programs for receiving a plurality of services are stored, an in-vehicle device identification information acquiring means for acquiring identification information of the in-vehicle device,
OBE authentication information issuing means for issuing OBE authentication information associated with the obtained OBE identification information,
Setup application receiving means for receiving from the setup person installing predetermined information in the in-vehicle device, the in-vehicle device authentication information and information of one or more services to be provided and receiving an application for setup;
OBE authentication means for performing authentication of the OBE based on whether the received OBE authentication information matches the issued OBE authentication information,
Program activation information acquisition means for acquiring program activation information for enabling execution of an application program for receiving provision of a plurality of services including one or more services according to the application when the authentication is valid;
An on-vehicle device information management system comprising: a set-up information issuing means for issuing the acquired program activation information and predetermined information to be installed in the on-vehicle device to the setup person. 21. The system of claim 20,
The vehicle-mounted device stores an application program for automatic toll collection of tolls,
The setup application receiving means is for receiving a setup application for installing predetermined information required for automatic fee collection from the setup person,
The system according to claim 1, wherein said program activation information acquiring means acquires program activation information for enabling execution of an application program for receiving a plurality of services including automatic toll collection. The system according to claim 21,
The program activation information acquisition means, when acquiring program activation information for enabling the application program for automatic toll collection, executes all application programs other than the application program for automatic toll collection stored in the vehicle-mounted device. A system for acquiring program activation information for enabling execution. 21. The system of claim 20,
The onboard unit stores a security program for monitoring tampering, leakage or unauthorized use of data stored in the onboard unit,
The system further comprises security program activation information acquisition means for acquiring security program activation information enabling the security program to be executed. The system of claim 23,
The vehicle-mounted device stores a plurality of security programs,
The security program activation information acquisition means selects a security program for each of a plurality of services including one or more services according to the application, and acquires security program activation information for enabling execution of the selected security program. A system characterized by the following. The system of claim 24,
The plurality of security programs are communicated with a program that executes terminal authentication between the vehicle-mounted device and a roadside device installed by a service provider, and a program that executes authentication of data communicated between these terminals. A system that includes at least one of programs for executing data encryption. The system of claim 24,
Furthermore, security program type registration means for registering, for each service, one or more types of security programs to be executed when the vehicle-mounted device provides a service,
The security program activation information acquisition means extracts a type of a security program executed for each of the plurality of services from the security program type registration means, and acquires security program activation information that enables the extracted security program to be executed. A system characterized in that: The system of claim 24,
The setup application accepting unit acquires information on one or more services to be provided by the setup person and information on one or more security programs executed for the services, and accepts an application for setup.
The security program activation information acquisition means acquires security program activation information that enables execution of one or more security programs according to the application for each of a plurality of services including one or more services according to the application. Features system. 21. The system of claim 20,
Furthermore, for a plurality of services that can be provided by using the on-vehicle device, a service information registration unit that registers program activation information that enables execution of an application program for receiving the provision of each service,
The system according to claim 1, wherein said program activation information acquisition means extracts and acquires program activation information registered by said service information registration means for the service applied for. 29. The system of claim 28,
The system according to claim 1, wherein said service information registration means receives and registers program start information for enabling execution of an application program for receiving provision of the service from a service provider that provides the service. 21. The system of claim 20,
The program activation information acquisition means acquires program activation information for enabling execution of all application programs stored in the vehicle-mounted device when the authentication by the vehicle-mounted device authentication unit is valid. system. For an in-vehicle device in which a plurality of application programs for receiving a plurality of services are stored, an in-vehicle device identification information acquiring means for acquiring identification information of the in-vehicle device,
OBE authentication information issuing means for issuing OBE authentication information associated with the obtained OBE identification information,
Setup application receiving means for receiving from the setup person installing predetermined information in the in-vehicle device, the in-vehicle device authentication information and information of one or more services to be provided and receiving an application for setup;
OBE authentication means for authenticating the OBE based on the received OBE authentication information,
A program invalidation information acquisition unit that acquires program invalidation information that disables an application program for receiving one or more services other than the service applied for when the authentication is valid;
An on-vehicle device information management system comprising: a setup information issuing unit for issuing the acquired program invalidation information and predetermined information to be installed in the on-vehicle device to the setup person.

Images