JP2006267024A - Position authentication system, position calculator, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system or the like for authenticating and securing rightness of positional information of a terminal device calculated based on time information transmitted from time information distribution satellites. <P>SOLUTION: This position authentication system 1 concerned in one embodiment of the present invention is provided with a terminal 3 for receiving the pieces of time information transmitted from satellites 21-2n as pieces of terminal side time information, a base station 41 in charge that is a base station for radio communication of the terminal 3, and a position calculator 5 for receiving the terminal side time information from the terminal 3 via the base station 41 in the charge, and for finding the positional information of the terminal 3, based on the terminal side time information. The base station 41 in the charge receives the pieces of time information transmitted from satellites 21-2n as pieces of base station side time information, when receiving the terminal side time information from the terminal 3, transmits the base station side time information to the position calculator 5, and the position calculator 5 prepares authentication information for securing the rightness of the positional information of the terminal 3, when a difference between the terminal side time information and the base station side time information is within an allowable range. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a position calculation technique for a terminal device using a satellite.

  In GPS (Global Positioning System), a plurality of time information distribution satellites each transmitting time information is used to obtain position information of a terminal device that receives the time information.

In normal GPS, a terminal device receives a plurality of time information transmitted from a plurality of time information distribution satellites. The terminal device transmits a plurality of time information to the position calculation server. The position calculation server calculates position information of the terminal device based on a plurality of time information received from the terminal device.
JP-A-9-282372

  In conventional GPS, position information is calculated based on time information transmitted from a terminal device to a position calculation server. Therefore, when the time information is falsified in the terminal device, and the falsified time information is transmitted from the terminal device to the position calculation server, the position calculation server obtains incorrect position information different from the actual position information of the terminal device. It will be.

  For example, when grasping and evaluating the behavior of an employee who is out based on the position information of the terminal device, the user holding the terminal device intentionally falsifies the time information, and incorrect position information is calculated. It is a problem. In addition, it is difficult to verify whether or not falsification has occurred in the conventional GPS after the fact.

  The present invention has been made in view of the above circumstances, and authenticates and guarantees the validity of the location information of the terminal device calculated based on the time information transmitted from the time information distribution satellite, thereby An object of the present invention is to provide a position authentication system that prevents falsification of position information calculated based on time information from an information distribution satellite.

  Specific means taken for realizing the present invention will be described below.

  A position authentication system according to a first aspect of the invention includes a terminal device that receives a plurality of time information transmitted from a plurality of time information distribution satellites as a plurality of terminal side time information, and a base when the terminal device performs wireless communication. A base station device that functions as a station, and a position calculation device that receives a plurality of terminal-side time information from the terminal device via the base station device and obtains position information of the terminal device based on the plurality of terminal-side time information The base station apparatus in charge receives a plurality of time information transmitted from a plurality of time information distribution satellites as a plurality of base station side time information when receiving a plurality of terminal side time information from the terminal apparatus, A plurality of base station side time information is transmitted to the position calculating device, and the position calculating device has a difference between the plurality of terminal side time information and the plurality of base station side time information received from the responsible base station device within a predetermined allowable range. In the case of Create an authentication information to guarantee the validity of the position information of the terminal device.

  A position authentication system according to a second aspect of the invention includes a terminal device that receives a plurality of time information transmitted from a plurality of time information distribution satellites as a plurality of terminal side time information, and a base when the terminal device performs wireless communication. A base station device that functions as a station, and a position calculation device that receives a plurality of terminal-side time information from the terminal device via the base station device and obtains position information of the terminal device based on the plurality of terminal-side time information The base station device in charge, when receiving a plurality of terminal side time information from the terminal device, transmits its own base station ID to the position calculation device, and the position calculation device received from the base station device in charge The coverage area information of the responsible base station device represented by the base station ID is acquired, and it is determined whether the location of the terminal device is within the coverage area of the responsible base station device based on the location information and the coverage area information of the terminal device. Create an authentication information the position of the terminal device to ensure the validity of the position information of the terminal apparatus when it is determined that within the coverage area of the serving base station.

  The position calculation device according to the third aspect of the invention receives a plurality of terminal-side time information transmitted from a plurality of time information distribution satellites and received by the terminal device via the responsible base station device, and from the plurality of time information distribution satellites. Communication means for receiving a plurality of base station side time information transmitted and received by a responsible base station apparatus, a conversion means for obtaining position information of the terminal apparatus based on the plurality of terminal side time information, and a plurality of terminal side time information And a means for creating authentication information for guaranteeing the validity of the location information of the terminal device when the difference between the time information and the plurality of base station side time information is within a predetermined allowable range.

  A position calculation device according to a fourth aspect of the invention receives a plurality of terminal-side time information transmitted from a plurality of time information distribution satellites and received by a terminal device via a responsible base station device, and indicates a responsible base station device Communication means for receiving the station ID from the assigned base station apparatus, conversion means for obtaining the position information of the terminal apparatus based on a plurality of terminal side time information, and cover area information of the assigned base station apparatus represented by the base station ID And determining means for determining whether the position of the terminal device is within the cover area of the responsible base station device based on the location information of the terminal device and the cover area information, and the position of the terminal device within the coverage area of the responsible base station device And a guaranteeing means for creating authentication information that guarantees the validity of the location information of the terminal device.

  In addition, said aspect is expressed as a system and an apparatus. However, the present invention is not limited to this, and the above aspect may be expressed by a program, a method, a computer-readable storage medium, and the like.

  According to the present invention, the correctness of the position of the terminal device calculated based on the time information from the satellite can be authenticated and guaranteed, and the position information calculated based on the time information from the satellite is falsified. Can be prevented.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In addition, the same code | symbol is attached | subjected about the same part in each following figure, and description is abbreviate | omitted.

  FIG. 1 is a block diagram showing an example of the configuration of the location authentication system according to the present embodiment.

  FIG. 2 is a conceptual diagram showing an example of an outline of the relationship between each component of the position authentication system according to the present embodiment. In FIG. 2, only the time information distribution satellite 21 is illustrated among the time information distribution satellites 21 to 2n illustrated in FIG. 1, and the other time information distribution satellites 22 to 2n are omitted.

  The position authentication system 1 includes a plurality of time information distribution satellites 21 to 2n, a terminal device 3, a plurality of base station devices (wireless base station devices) 41 to 4m, and a position calculation server 5.

  In this location authentication system 1, a communication service for the terminal device 3 is provided by a plurality of base station devices 41 to 4 m, and the location information of the location information is obtained by a cooperative operation between the plurality of base station devices 41 to 4 m and the location calculation server 5. A location authentication service that authenticates and guarantees the calculation and the validity of the calculated location information is provided. The position authentication system 1 is in a wireless environment in which various information and requests can be transmitted and received wirelessly.

  The plurality of time information distribution satellites 21 to 2n are artificial satellites that distribute GPS information including time information for calculating position information of the terminal device 3 by radio waves. The GPS information includes, for example, time information, satellite ID, satellite orbit information, and the like. As the time information distribution satellites 21 to 2n, for example, GPS information distribution satellites, quasi-zenith satellites, and the like are used.

  The terminal device 3 is a position measurement target device, a device that uses a position authentication service, and is carried by the user 6. As the terminal device 3, for example, a mobile communication device such as a mobile phone, a PHS (Personal Handyphone System), a PDA (Personal Digital Assistants) having a wireless communication function, or a notebook PC can be used.

  The terminal device 3 transmits the GPS information received from the plurality of time information distribution satellites 21 to 2n to the responsible base station device 41 in charge of the cover area 71 where the terminal device 3 exists. The terminal device 3 includes a basic function for performing wireless communication, a function for receiving GPS information from the time information distribution satellites 21 to 2n, a terminal-side function for performing position authentication, and the like.

  The base station devices 41 to 4 m realize communication by the terminal device 3 when the terminal device 3 is within a predetermined coverage area 71 to 7 m. Each base station apparatus 41-4m functions as a base station for performing wireless communication. The back of each base station apparatus 41-4m is connected so that communication is possible by a wired or wireless network. The base station devices 41 to 4m may be, for example, devices for mobile phone base stations or devices for wireless LAN (Local Area Network) connection points. Further, the base station devices 41 to 4m provide an authentication service for confirming whether the communication by the terminal device 3 and the position of the terminal device 3 are valid. That is, it is assumed that the base station devices 41 to 4m are operated by a location authentication service provider.

  The base station devices 41 to 4m are used for measuring the position of the base station devices 41 to 4m themselves from the basic functions for communicating with the terminal device 3 carried by the user 6, from the time information distribution satellites 21 to 2n. A function of receiving GPS information. The base station apparatuses 41 to 4m do not move, and store absolute position information related to the absolute position of the base station apparatuses 41 to 4m, or store the base station Id associated with the absolute position information.

  In the present embodiment, the terminal device 3 and the responsible base station device 41 in charge of the cover area 71 where the terminal device 3 exists perform communication for location authentication using a location authentication protocol.

  The position calculation server 5 receives the GPS information received by the terminal device 3 from the terminal device 3 via the responsible base station device 41 in charge of the cover area 71 where the terminal device 3 exists. The position information of the terminal device is obtained based on the GPS information from.

  The position calculation server 5 receives the GPS information received by the assigned base station apparatus 41 from the assigned base station apparatus 41, and the position of the assigned base station apparatus 41 based on the GPS information from the assigned base station apparatus 41. Ask for information. The position calculation server 5 may receive position information of the assigned base station apparatus 41 from the assigned base station apparatus 41.

  Then, the position calculation server 5 determines the consistency between the position indicated by the position information of the terminal device 3 and the position indicated by the position information of the assigned base station apparatus 41, and authentication information that guarantees the correctness of the position when matching is made. Create and perform location authentication.

  FIG. 3 is a block diagram illustrating an example of the configuration of the terminal device 3.

  The terminal device 3 includes a GPS information receiving unit 3a, a central processing unit 3b, and a communication unit 3c, and realizes functions required on the user 6 side in order to perform position authentication. Various components such as the GPS information receiving unit 3a, the central processing unit 3b, and the communication unit 3c included in the terminal device 3 may be mounted inside the terminal device 3 or connected to the outside of the terminal device 3. May be implemented.

  The GPS information receiving unit 3a includes an antenna that receives GPS information transmitted from the time information distribution satellites 21 to 2n and a function of decoding the received GPS information. The GPS information receiving unit 3a has a function of correctly receiving and correctly decoding GPS information distributed from the time information distribution satellites 21 to 2n. For example, when the time information distribution satellites 21 to 2n are GPS information distribution satellites as in the present embodiment, a general GPS information reception unit can be used as the GPS information reception unit 3a according to the present embodiment. The GPS information received by the GPS information receiving unit 3a includes the time information, the satellite ID, and the orbit information of the satellite as described above. The GPS information provided from the GPS information receiving unit 3a to the central processing unit 3b is also the time information. Information, satellite ID, and satellite orbit information are included.

  The central processing unit 3b transmits and receives necessary information to and from the responsible base station device 41 according to the location authentication protocol using the communication unit 3c, and performs communication with the responsible base station device 41.

  In addition, as the central processing unit 3b, a device mounted on the terminal device 3 may be used, and in this case, a function capable of executing the location authentication protocol only needs to be implemented in software or hardware.

  The communication unit 3 c has a function of performing communication between the terminal device 3 and the assigned base station device 41.

  FIG. 4 is a block diagram illustrating an example of the configuration of the assigned base station apparatus 41.

  The assigned base station apparatus 41 includes a storage unit 4a, a GPS information receiving unit 4b, a central processing unit 4c, and a communication unit 4d, and realizes functions required on the base station side for performing location authentication. Various components such as the storage unit 4a, the GPS information receiving unit 4b, the central processing unit 4c, and the communication unit 4d included in the assigned base station device 41 may be mounted inside the assigned base station device 41, or the assigned base station You may mount in the format connected to the exterior of the station apparatus 41. FIG.

  The storage unit 4a stores unique information 4e of the assigned base station device 41 and the like. Various types of information stored in the storage unit 4a can be referred to from the GPS information receiving unit 4b, the central processing unit 4c, and the communication unit 4d, and are used for respective operations.

  The GPS information receiving unit 4b includes an antenna for receiving GPS information transmitted from the time information distribution satellites 21 to 2n and a function for decoding the received GPS information.

  The central processing unit 4c uses the communication unit 4d to transmit / receive necessary information to / from the terminal device 3 according to the location authentication protocol, and to transmit necessary information to / from the location calculation server 5 according to the location authentication protocol. Send and receive.

  Further, the central processing unit 4c identifies a request from the terminal device 3, and validates the location authentication function on the base station side in response to the location authentication request.

  The communication unit 4 d has a function of performing communication between the terminal device 3 and the assigned base station device 41 and between the assigned base station device 41 and the position calculation server 5. The communication unit 4d may perform communication using a network to which the assigned base station device 41 is connected. In this case, the assigned base station device 41 includes the terminal device 3, the other base station devices 42 to 4m, An interface capable of communicating with the position calculation server 5 is used.

  FIG. 5 is a block diagram illustrating an example of the configuration of the position calculation server 5.

  FIG. 6 is a block diagram illustrating an example of the storage unit 5 f included in the position calculation server 5.

  The position calculation server 5 is a server that provides a main function of the position authentication service. The position calculation server 5 may be installed in any one of the base stations, and may be connected so as to be communicable with each of the base station devices 41 to 4m via a network.

  The position calculation server 5 may be realized by hardware or a computer that reads and executes software.

  The location calculation server 5 receives the location authentication request from the terminal device 3 via the responsible base station device 41 in accordance with the location authentication protocol, and performs location authentication of the terminal device 3 in a format that can be subsequently verified in response to the location authentication request. .

  The position calculation server 5 includes a conversion unit 5a, a communication unit 5b, a signature generation unit 5c, a central processing unit 5d, a GPS information reception unit 5e, and a storage unit 5f.

  The conversion unit 5a converts the terminal-side GPS information, which is GPS information received by the terminal device 3, into position information of the terminal device 3, and converts the base station-side GPS information, which is GPS information received by the responsible base station device 41, into the position information. The information is converted into position information of the base station apparatus 41 in charge.

  The communication unit 5b communicates with other devices connected via the network with the position calculation server 5 such as the terminal device 3 and the base station devices 41 to 4m. Communication by the communication unit 5b may be either wireless or wired.

  The central processing unit 5d uses the communication unit 5b to perform various processes such as a process of transmitting / receiving necessary information to / from various devices according to the location authentication protocol. The central processing unit 5d includes an error calculation unit 51, a correction unit 52, a determination unit 53, and a guarantee unit 54.

  The error calculation unit 51 acquires the absolute position information of the assigned base station device 41 in the base station information 55 stored in the storage unit 5f from the base station ID indicating the assigned base station device 41, and is obtained by the conversion unit 5a. The position measurement error is calculated based on the position information of the assigned base station apparatus 41 and the absolute position information of the assigned base station apparatus 41.

  The correction unit 52 corrects the position information of the terminal device 3 obtained by the conversion unit 5a based on the position measurement error.

  Based on the terminal-side GPS information and the base station-side GPS information, the determination unit 53 determines whether the difference between the terminal-side time information and the base station-side time information regarding the same satellite ID is within a certain allowable range. Judge. The time information received from the same time information distribution satellites 21 to 2n by the terminal device 3 and the responsible base station device 41 is considered to be within a slight error unless the time information is falsified.

  Here, the predetermined allowable range may be a range determined based on a function in which a value indicating the predetermined allowable range decreases as the moving speed of the terminal increases, for example. More specifically, the predetermined permissible range may be determined by setting a value obtained by dividing the value of the predetermined distance by the value of the moving speed of the terminal as an absolute value of a value indicating the predetermined permissible range. The predetermined distance value or the predetermined allowable range value may be determined in advance, or may be dynamically determined according to the moving speed of the terminal.

  Further, the determination unit 53 obtains the cover area information in the base station information 55 stored in the storage unit 5f from the base station ID indicating the responsible base station device 41, and the correction of the terminal device 3 corrected by the correction unit 52. It is determined whether or not the position information is within the cover area 71 of the assigned base station apparatus 41.

  The guarantee unit 54 uses the signature generation unit 5c, and the difference between the time information on the terminal side and the time information on the base station side for the same satellite ID is within an allowable range, and the corrected position information of the terminal device 3 is in charge. If it is within the cover area 71 of the base station apparatus 41, authentication information indicating that the position information of the terminal apparatus 3 is valid is created.

  In accordance with a request from the guarantee unit 54 of the central processing unit 5d, the signature generation unit 5c uses, for example, the corrected location information of the terminal device 3 using the secret key information 56 of the location calculation server 5 in the storage unit 5f, The signature of the position calculation server 3 is attached to the processing contents such as the position authentication result.

  The GPS information receiving unit 5e receives GPS information transmitted from the time information distribution satellites 21 to 2n, and acquires a satellite ID for identifying the time information distribution satellites 21 to 2n, time information, and satellite orbit information. .

  The storage unit 5f stores various information such as base station information 55, secret key information 56, certificate information 57, satellite orbit information 58, and the like.

  FIG. 7 shows a specific example of the base station information 55. In the base station information 55, the cover area information representing the cover areas 71 to 7m of each base station apparatus 41 to 4m and the absolute position information are linked to the unique base station ID of each base station apparatus 41 to 4m. It is attached information.

  The base station information 55 can be one when the position calculation server 5 is realized by a single computer, but is divided into a plurality of locations when the position calculation server 5 is realized by a plurality of computers. Each of a plurality of computers may hold the base station information 55.

  The cover area information is information for specifying the cover area. Cover area information, for example, may be expressed as an effective radius centered on the base station, taking the cover area as a circle, may be described using various geographic information description languages, numerical map data, etc. Various description methods can be used.

  The absolute position information is predetermined for the location where the base station is located, and is information indicating in detail the position of the GPS information receiving antenna of the base station.

  The secret key information 56 is a secret key of the position calculation server 5 and is information that should not be leaked to other devices. The signature generation unit 5 c performs signature using this secret key information 56.

  The certificate information 57 is certificate information of the position calculation server 5 and includes public key information and basic information of the position calculation server 5. Various standardized certificate information formats may be applied to this certificate information.

  As described above, the location authentication protocol is a protocol used for communication between the terminal device 3, the responsible base station device 41, and the location calculation server 5 and used for authenticating the location information of the terminal device 3. , With multiple transmissions. Using this position authentication protocol, the position authentication system 1 performs position authentication of the terminal device 3.

  FIG. 8 is a sequence diagram illustrating an example of a request or information transmission / reception state among the terminal device 3, the serving base station device 41, and the position calculation server 5 according to the location authentication protocol.

  FIG. 9 is a block diagram illustrating an example of terminal-side GPS information (terminal-side position authentication request) used in the position authentication protocol.

  FIG. 10 is a block diagram illustrating an example of base station side GPS information used in the location authentication protocol.

  FIG. 11 is a block diagram illustrating an example of a base station side location authentication request (a combination of terminal side GPS information and base station side GPS information) used in the location authentication protocol.

  When a request for location authentication occurs, the terminal device 3 generates authentication request information (user authentication information) for performing the location authentication request.

  When the authentication request information is generated, the central processing unit 3b of the terminal device 3 receives the GPS information including the time information and the satellite ID transmitted from the time information distribution satellites 21 to 2n to the GPS information receiving unit 3a. An instruction is issued to receive 81 to 8n.

  The central processing unit 3b of the terminal device 3 calculates a hash value 9 (digest) for the authentication request information before an answer to the command is returned from the GPS information receiving unit 3a.

  The GPS information receiver 3a of the terminal device 3 receives the satellite ID and time information transmitted from the time information distribution satellites 21 to 2n as the terminal side satellite ID and the terminal side time information, respectively. The GPS information receiving unit 3a of the terminal device 3 needs to receive satellite IDs and time information from at least three time information distribution satellites and can capture only less than three time information distribution satellites. Cancels the location authentication. The GPS information receiver 3a of the terminal device 3 captures four time information distribution satellites if possible.

  When the GPS information receiving unit 3a of the terminal device 3 receives the satellite ID and the time information from three or more time information distribution satellites 21 to 2n, the GPS information receiving unit 3a of the terminal device 3 can supplement the time information that can be supplemented. The GPS information 81-8n combining the terminal-side satellite ID and the terminal-side time information from the distribution satellites 21-2n is returned to the central processing unit 3b of the terminal device 3.

  The central processing unit 3b of the terminal device 3 combines the calculated hash value and the GPS information 81 to 8n which are return values from the GPS information receiving unit 3a of the terminal device 3 as shown in FIG. Information 10 is generated, and this terminal-side GPS information 10 is transmitted as a terminal-side location authentication request to the responsible base station device 41 using the communication unit 3c of the terminal device 3. The terminal device 3 uses the base station device connected to the terminal device 3 at the time of use among the plurality of base station devices 41 to 4m as a responsible base station device 41.

  Upon receiving the terminal side location authentication request 10 from the terminal device 3, the communication unit 4d of the responsible base station device 41 passes the received terminal side location authentication request 10 to the central processing unit 4c.

  The central processing unit 4c of the assigned base station device 41 receives the GPS information 111-1 including the time information and the satellite ID transmitted from the time information distribution satellites 21-2n to the GPS information receiving unit 4b of the assigned base station device 41. Issue a command to receive 11n.

  The GPS information receiving unit 4b of the responsible base station apparatus 41 receives the satellite ID and time information transmitted from the time information distribution satellites 21 to 2n as the base station side satellite ID and the base station side time information, respectively. The GPS information receiving unit 4b of the responsible base station apparatus 41 preferably captures four or more time information distribution satellites 21 to 2n, and base station side satellite IDs from the four or more time information distribution satellites 21 to 2n and The GPS information 111 to 11n combined with the base station side time information is returned to the central processing unit 4c of the assigned base station apparatus 41 as a return value.

  The central processing unit 4c of the assigned base station device 41 further adds the GPS information 111 to 11n from the time information distribution satellites 21 to 2n, which is a return value from the GPS information receiving unit 4b of the assigned base station device 41, to the assigned base station. The base station side GPS information 13 as shown in FIG. 10 is generated by combining the base station ID 12 of the device 41.

  Further, the central processing unit 4c of the assigned base station device 41 combines the terminal-side GPS information 10 and the base station-side GPS information 13 received from the terminal device 3 to combine the base station-side location authentication request 14 as shown in FIG. The base station side location authentication request 14 is transmitted to the location calculation server 5 using the communication unit 4d of the assigned base station device 41.

  The GPS information reception unit 5e of the position calculation server 5 constantly receives satellite orbit information transmitted from the time information distribution satellites 21 to 2n, and associates satellite orbit information with accurate time information 58. Is stored in the storage unit 5f. For accurate time information, time information distributed from the time information distribution satellites 21 to 2n may be used, or time information held in the position calculation server 5 may be used.

  When the base station side location authentication request 14 is received from the responsible base station device 41 to the location calculation server 5, the central processing unit 5 d of the location calculation server 5 sends the base station side location authentication request 14 to the terminal side GPS information 10. The base station side GPS information 13 is divided.

  Further, the determination unit 53 of the central processing unit 5d of the position calculation server 5 performs the terminal-side time information in the terminal-side GPS information 10 and the terminal-side time in the base station-side GPS information 13 that are related to the common satellite ID. The information is compared with each other to determine whether each time information is within an allowable range.

  The terminal side time information received by the terminal device 3 from the time information distribution satellites 21 to 2n and the base station side time information received from the time information distribution satellites 21 to 2n by the assigned base station device 41 are not falsified. When automatic processing is performed in the system 1, it is within an extremely small error range. If the error does not fall within a certain allowable range, the time information that does not fall within the allowable range is regarded as unreliable and discarded, and the position calculation server 5 is located in the responsible base station apparatus 41 and the terminal apparatus 3. Send a message that information authentication was unsuccessful. If the time information is reliable, the process proceeds to the next process.

  The central processing unit 5d of the position calculation server 5 further receives the base station side GPS information 13 which is divided and extracted, and the GPS information (base station) received by the responsible base station device 41 from the base station ID 12 and the time information distribution satellites 21 to 2n. Side time information and base station side satellite ID) 111-11n. The central processing unit 5 d of the position calculation server 5 sends the GPS information 111 to 11 n received by the assigned base station device 41 from the time information distribution satellites 21 to 2 n to the conversion unit 5 a of the position calculation server 5.

  The conversion unit 5a of the position calculation server 5 divides the GPS information 111 to 11n received by the assigned base station device 41 from the time information distribution satellites 21 to 2n into each information, and acquires each satellite ID.

  Next, the conversion unit 5a of the position calculation server 5 acquires the satellite orbit information 58 corresponding to each acquired satellite ID, and based on the satellite orbit information 58 and the base station side time information, The position information of the observation point is calculated, and the calculated position information of the assigned base station device 41 is returned to the central processing unit 5d of the position calculation server 5 as a return value.

  The central processing unit 5d of the position calculation server 5 temporarily stores the return value from the conversion unit 5a, and stores it based on the base station ID of the base station apparatus 41 in charge obtained by dividing the base station side GPS information 13 The absolute position information of the assigned base station device 41 stored in the unit 5 f is acquired from the base station information 55.

  The central processing unit 5d of the position calculation server 5 compares the absolute position information acquired from the base station information 55 with the position information of the assigned base station apparatus 41 that has been temporarily stored, and uses the time information distribution satellites 21 to 2n. A position measurement error at a certain measured time is calculated, and the position measurement error is temporarily stored.

  The central processing unit 5d of the position calculation server 5 uses the GPS information (terminal value 3) received by the terminal device 3 from the hash value 9 for authentication and the time information distribution satellites 21 to 2n as the terminal side GPS information 10 obtained by the previous separation. The terminal side time information and the terminal side satellite ID are combined) 81 to 8n. The central processing unit 5 d of the position calculation server 5 sends the GPS information 81 to 8 n received by the terminal device 3 from the time information distribution satellites 21 to 2 n to the conversion unit 5 a of the position calculation server 5.

  The conversion unit 5a of the position calculation server 5 divides the GPS information 81 to 8n received by the terminal device 3 from the time information distribution satellites 21 to 2n into each information, and acquires each satellite ID.

  Next, the conversion unit 5a of the position calculation server 5 acquires satellite orbit information 58 corresponding to each acquired satellite ID, and is carried by the user 6 based on the satellite orbit information 58 and the terminal-side time information. The current position information of the observation point of the terminal device 3 is calculated, and the calculated position information of the terminal device 3 is returned to the central processing unit 5d of the position calculation server 5 as a return value.

  The correction unit 52 of the central processing unit 5d of the position calculation server 5 corrects the calculated current position information of the terminal device 3 by moving it by the temporarily stored position measurement error, and the corrected position of the terminal device 3 is corrected. Create information.

  The determination unit 53 of the central processing unit 5d of the position calculation server 5 determines the position of the terminal device 3 based on the corrected position information of the terminal device 3 and the covered area information of the responsible base station device 41. It is determined whether it is included in the cover area 71. Specifically, the determination unit 53 of the central processing unit 5d of the position calculation server 5 acquires the cover area information corresponding to the base station ID of the assigned base station device 41 acquired from the base station information 55, The previously obtained position indicated by the corrected location information of the terminal device 3 is compared with the cover area 71 indicated by the cover area information of the assigned base station device 41, and the terminal device is detected from within the cover area 71 handled by the assigned base station device 41. 3 is determined whether the terminal-side location authentication request 10 is transmitted. However, even if there is some error, the corrected position of the terminal device 3 may be determined to be within the cover area 71 of the assigned base station device 41.

  When it is determined that the corrected position of the terminal device 3 is within the cover area 71 of the assigned base station device 41, the guarantee unit 54 of the central processing unit 5d of the position calculation server 5 uses the signature generation unit 5c to The signature processing is performed on the hash value 9 in the terminal-side GPS information 10 included in the side position authentication request 14.

  Specifically, the guarantee unit 54 of the central processing unit 5d of the position calculation server 5 combines the hash value 9 of the terminal-side GPS information 10 and the corrected position information of the terminal device 3 calculated previously. A request is created and sent to the signature generation unit 5c. The signature request may include other information such as time information and information regarding the assigned base station apparatus 41, for example. The time information included in the signature request may be a representative value or an average value of the terminal-side time information included in the terminal-side GPS information 10. By including the corrected location information and time information of the terminal device 3 in the signature request, it becomes possible to simultaneously authenticate the location of the terminal device 3 and the time at which the terminal device 3 existed at that location. The signature generation unit 5c encrypts the received signature request using the private key information 56, generates authentication information (signature information), and sends it to the guarantee unit 54 of the central processing unit 5d of the position calculation server 5. return.

  Then, the central processing unit 5d of the position calculation server 5 returns authentication information as a position authentication result to the terminal device 3 via the assigned base station device 41 using the communication unit 5b. The central processing unit 5d of the position calculation server 5 may return the authentication information to the terminal device 3 without using the communication base unit 41 using the communication unit 5b. Further, a return value may be returned instead of the authentication information.

  When the terminal device 3 receives the authentication information, the position authentication is performed. On the terminal device 3 side, by using this authentication information, it is possible to receive a service in various formats such as a service limited to a region.

  FIG. 12 is a sequence diagram illustrating an example of a request or information transmission / reception state between the terminal device 3, the position verification device operated by the verifier, and the position calculation server 5 when verifying the authentication information.

  When the authentication information received by the terminal device 3 is to be verified later, the public key information in the certificate information 57 stored in the location calculation server 5 is required to verify whether the authentication information is appropriate. .

  Therefore, first, the terminal device 3 transmits the authentication information to the position verification device 15 operated by the verifier.

  The location verification device 15 receives the authentication information from the terminal device 3 and transmits a certificate information request to the location calculation server 16.

  When receiving the certificate information request using the communication unit 5b, the central processing unit 5d of the position calculation server 5 reads the certificate information 57 stored in the storage unit 5f.

  Then, the central processing unit 5d of the position calculation server 5 returns the certificate information 57 to the position verification device 15 using the communication unit 5b.

  Upon receiving the certificate information 57 returned from the position calculation server 5, the position verification device 15 verifies the certificate information 57, and if the certificate information 57 is confirmed to be valid, the certificate information 57 The authentication information is decrypted using the public key information in 57. Thereby, the position of the authenticated terminal device 3 becomes clear. Further, when the time information is included in the authentication information, the time information corresponding to the authenticated terminal position 3 is obtained.

  When the location authentication processing log for location authentication is stored together with the location information in the location calculation server 5, the location verification device 15 issues a log confirmation request including the authenticated location information and time information. A log corresponding to the log confirmation request may be acquired by transmitting to the position calculation server 5. Thereby, the positional information of the authenticated terminal device 3 and the content of the log can be compared, and the reliability of the positional information of the terminal device 3 can be further enhanced.

  In the present embodiment described above, the difference between the terminal-side time information and the base station-side time information regarding the same satellite ID is within an allowable range, and the corrected position information of the terminal device 3 is In the case of the cover area 71, the validity of the location information of the terminal device 3 is guaranteed, the alteration of the location information of the terminal device 3 can be prevented, and a service according to the location of the terminal device 3 is provided appropriately. be able to.

  Further, in the present embodiment, by registering the absolute position information of the base station apparatus 41 in advance, the position measurement error can be calculated, and the accurate position information of the terminal apparatus 3 can be obtained.

  Further, in the present embodiment, at least one of the terminal-side time information received by the terminal device 3 and the base-station-side time information received by the responsible base station device 41, or the time information for which location authentication has been performed, Then, the time at which the authentication of the position of the terminal device 3 is performed can be specified by associating it with the position information of the authenticated terminal device 3 and including it in the authentication information.

  In the present embodiment, the terminal side time information corresponding to the same satellite ID and the base station side time information are compared to determine whether or not the difference is within an allowable range. When the difference is within the allowable range, the terminal side time information is determined. Assuming that the information has not been tampered with, the position information of the terminal device 3 is guaranteed. Therefore, in this embodiment, in addition to ensuring that the terminal device 3 exists in the cover area 71 of the base station apparatus 41 in charge at a specific time, it is possible to ensure that the terminal apparatus 3 can be verified afterwards. When the time information is falsified, this falsification can be detected, and the reliability of the terminal-side time information can be guaranteed.

  In the present embodiment, the GPS information receiver 3a of the terminal device 3 receives only the time information and satellite ID transmitted from the time information distribution satellites 21 to 2n, and is transmitted from the time information distribution satellites 21 to 2n. The satellite orbit information is received by the GPS information receiving unit 5e of the position calculation server 5, so that the processing speed of the terminal device 3 can be increased, and the terminal device 3 can authenticate with low power. Can be processed for.

  In this embodiment, each component may be rearranged as long as the same operation can be realized, each component may be freely combined, and each component may be freely divided. Some components may be deleted. That is, the present embodiment is not limited to the above-described configuration as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage.

  For example, the error calculation unit 51, the correction unit 52, the determination unit 53, and the guarantee unit 54 of the position calculation server 5 may be independent units. Further, at least one of the error calculation unit 51 and the correction unit 52 and the conversion unit 5a may be combined. At least one of the determination unit 53 and the guarantee unit 54 may be combined with the signature generation unit 5c. Further, for example, any of the base station apparatuses 41 to 4m and the position calculation server 5 may be combined. In the position calculation server 5, the function for calculating the position information and the authentication function for determining the validity of the position information may be realized by different devices.

  The position calculation server 5 according to the present embodiment may be realized by the computer 16 reading and executing a program 17a recorded on the recording medium 17 as shown in FIG. The program 17a can be applied to the computer 16 that operates as the position calculation server 5 by writing in the recording medium 17 such as a magnetic disk (flexible disk, hard disk, etc.), an optical disk (CD-ROM, DVD, etc.), and a semiconductor memory. . The program 17a can also be applied to the computer 16 by being transmitted through a communication medium. The computer 16 implements the function as the position calculation server 5 by reading the program 17a and controlling the operation by the program 17a. The program 17a may be distributed and arranged in a plurality of computers, and the processing may be executed while the plurality of computers cooperate with each other.

  That is, in the present embodiment, functions realized by hardware may be realized by software.

  The present invention is effective in a field where information from a time information distribution satellite is received by a terminal device and position information of the terminal device is obtained.

The block diagram which shows an example of a structure of the position authentication system which concerns on embodiment of this invention. The conceptual diagram which shows an example of the outline of the relationship of each component of the position authentication system which concerns on this Embodiment. The block diagram which shows an example of a structure of a terminal device. The block diagram which shows an example of a structure of a charge base station apparatus. The block diagram which shows an example of a structure of a position calculation server. The block diagram which shows an example of the memory | storage part with which the position calculation server is equipped. The figure which shows the specific example of base station information. The sequence diagram which shows the example of the state of transmission / reception of the request | requirement or information between the terminal device according to a position authentication protocol, a responsible base station apparatus, and a position calculation server. The block diagram which shows an example of the terminal side GPS information used with a position authentication protocol. The block diagram which shows an example of the base station side GPS information used with a position authentication protocol. The block diagram which shows an example of the base station side position authentication request | requirement used with a position authentication protocol. The sequence diagram which shows the example of the state of the transmission / reception of the request | requirement or information between a terminal device, the position verification apparatus which a verifier operates, and a position calculation server in verifying authentication information. The block diagram which shows the example of the computer which functions as a position calculation server.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Location authentication system, 21-2n ... Time information distribution satellite, 3 ... Terminal device, 41-4m ... Base station device, 5 ... Location calculation server, 6 ... User, 71-7m ... Cover area, 3a, 4b, 5e ... GPS information receiving unit, 3b, 4c, 5d ... Central processing unit, 3c, 4d, 5b ... Communication unit, 4a, 5f ... Storage unit, 4e ... Unique information, 5a ... Conversion unit, 5c ... Signature generation unit, 51 ... Error calculation unit 52 ... correction unit 53 ... determination unit 54 ... guarantee unit 55 ... base station information 56 ... private key information 57 ... certificate information 58 ... satellite orbit information 81-8n GPS information DESCRIPTION OF SYMBOLS 9 ... Hash value, 10 ... Terminal side GPS information, 111-11n ... GPS information, 12 ... Base station ID, 13 ... Base station side GPS information, 14 ... Base station side location authentication request, 15 ... Location verification apparatus, 16 ... Computer, 17 ... recording medium, 17 ... program

Claims (13)

In the location authentication system,
A terminal device for receiving a plurality of time information transmitted from a plurality of time information distribution satellites as a plurality of terminal side time information;
A responsible base station device that functions as a base station when the terminal device performs wireless communication;
A position calculation device that receives the plurality of terminal-side time information from the terminal device via the responsible base station device, and obtains the position information of the terminal device based on the plurality of terminal-side time information;
When the responsible base station apparatus receives the plurality of terminal side time information from the terminal apparatus, the base station apparatus receives a plurality of time information transmitted from the plurality of time information distribution satellites as a plurality of base station side time information. , Transmitting the plurality of base station side time information to the position calculating device,
When the difference between the plurality of terminal side time information received from the responsible base station device and the plurality of base station side time information is within a predetermined allowable range, the position calculation device A location authentication system characterized by creating authentication information for guaranteeing validity. The position authentication system according to claim 1,
Each of the plurality of time information distribution satellites transmits time information and a satellite ID indicating itself,
The terminal device receives a plurality of time information and a plurality of satellite IDs transmitted from the plurality of time information distribution satellites as the plurality of terminal side time information and a plurality of terminal side satellite IDs, respectively. Side time information and the plurality of terminal-side satellite IDs are transmitted to the position calculation device via the assigned base station device,
When the assigned base station apparatus receives the plurality of terminal side time information and the plurality of terminal side satellite IDs from the terminal apparatus, the plurality of time information transmitted from the plurality of time information distribution satellites and the plurality of time information Are received as the plurality of base station side time information and the plurality of base station side satellite IDs, respectively, and the plurality of base station side time information and the plurality of base station side satellite IDs are received by the position calculation device. Send
The position calculation device may calculate a difference between the terminal-side time information and the base station-side time information for each of the plurality of time-information distribution satellites based on the plurality of terminal-side satellite IDs and the plurality of base station-side satellite IDs. And generating authentication information that guarantees the validity of the position information of the terminal device when the difference obtained for each of the plurality of time information distribution satellites is within the predetermined allowable range. Authentication system. In the position authentication system according to claim 1 or 2,
When the responsible base station device receives the plurality of terminal-side time information from the terminal device, it transmits its own base station ID to the position calculation device,
The position calculating device acquires absolute position information obtained in advance for the serving base station device represented by the base station ID received from the serving base station device, and based on the plurality of base station side time information The position information of the base station apparatus is determined, the position measurement error is determined based on the absolute position information and the position information of the base station apparatus, and the position information of the terminal apparatus is corrected based on the position measurement error. A position authentication system characterized by: In the location authentication system,
A terminal device for receiving a plurality of time information transmitted from a plurality of time information distribution satellites as a plurality of terminal side time information;
A responsible base station device that functions as a base station when the terminal device performs wireless communication;
A position calculation device that receives the plurality of terminal-side time information from the terminal device via the responsible base station device, and obtains the position information of the terminal device based on the plurality of terminal-side time information;
When the responsible base station device receives the plurality of terminal-side time information from the terminal device, it transmits its own base station ID to the position calculation device,
The location calculation device acquires the coverage area information of the serving base station device represented by the base station ID received from the serving base station device, and based on the location information of the terminal device and the coverage area information Determining whether the position of the terminal device is within the coverage area of the serving base station device, and determining that the location of the terminal device is within the coverage area of the serving base station device, A location authentication system characterized by creating authentication information that guarantees The position authentication system according to claim 4, wherein
When the responsible base station apparatus receives the plurality of terminal side time information from the terminal apparatus, the base station apparatus receives a plurality of time information transmitted from the plurality of time information distribution satellites as a plurality of base station side time information. , Transmitting the plurality of base station side time information to the position calculating device,
The position calculation device obtains position information of the assigned base station device based on the plurality of base station side time information received from the assigned base station device, and the assigned base station device represented by the base station ID Obtain absolute position information obtained in advance, obtain a position measurement error based on the absolute position information and the position information of the base station apparatus in charge, and correct the position information of the terminal apparatus based on the position measurement error A position authentication system characterized by: In the position authentication system according to any one of claims 1 to 5,
The terminal device receives only a plurality of time information and a plurality of satellite IDs transmitted from the plurality of time information distribution satellites. In the position calculation device,
A plurality of terminal-side time information transmitted from a plurality of time information distribution satellites and received by a terminal device are received via a responsible base station device, and transmitted from the plurality of time information distribution satellites and received by the responsible base station device. A communication means for receiving a plurality of base station side time information;
Conversion means for obtaining position information of the terminal device based on the plurality of terminal side time information;
A guaranteeing means for creating authentication information for guaranteeing the validity of the location information of the terminal device when a difference between the plurality of terminal side time information and the plurality of base station side time information is within a predetermined allowable range; A position calculation device provided. The position calculation device according to claim 7,
The communication means receives a plurality of terminal-side satellite IDs transmitted from the plurality of time information distribution satellites and received by the terminal device via a responsible base station apparatus, and is transmitted from the plurality of time information distribution satellites and transmitted to the responsible base station. Receiving a plurality of base station side satellite IDs received by the station device;
Based on the plurality of terminal side satellite IDs and the plurality of base station side satellite IDs, a difference between the terminal side time information and the base station side time information is obtained for each of the plurality of time information distribution satellites, A judgment means for judging whether a difference obtained for each time information distribution satellite is within the predetermined allowable range;
The position calculating device, wherein the guarantee unit creates the authentication information when a difference obtained for each of the plurality of time information distribution satellites is within the predetermined allowable range. In the position calculation apparatus according to claim 7 or 8,
The communication means receives a base station ID indicating the responsible base station device from the responsible base station device,
The conversion means obtains position information of the base station apparatus in charge based on the plurality of base station side time information,
Error calculation for obtaining a position measurement error based on the absolute position information and the position information of the serving base station apparatus, which is obtained in advance for the serving base station apparatus represented by the base station ID Means,
A position calculation apparatus, further comprising: a correction unit that corrects position information of the terminal device based on the position measurement error. In the position calculation device,
A plurality of terminal-side time information transmitted from a plurality of time information distribution satellites and received by a terminal device are received via a responsible base station device, and a base station ID indicating the responsible base station device is received from the responsible base station device. Communication means;
Conversion means for obtaining position information of the terminal device based on the plurality of terminal side time information;
Cover area information of the base station apparatus in charge represented by the base station ID is acquired, and the position of the terminal apparatus is covered by the base station apparatus based on the position information of the terminal apparatus and the cover area information. Judgment means for judging whether within the area,
A position calculation apparatus comprising: a guarantee unit that creates authentication information for guaranteeing the validity of the position information of the terminal device when the position of the terminal device is determined to be within the coverage area of the assigned base station device. The position calculation apparatus according to claim 10,
The communication means receives a plurality of base station side time information transmitted from the plurality of time information distribution satellites and received by the responsible base station device,
The conversion means obtains position information of the base station apparatus in charge based on the plurality of base station side time information,
Error calculation for obtaining a position measurement error based on the absolute position information and the position information of the serving base station apparatus, which is obtained in advance for the serving base station apparatus represented by the base station ID Means,
A position calculation apparatus, further comprising: a correction unit that corrects position information of the terminal device based on the position measurement error. On the computer,
A plurality of terminal-side time information transmitted from a plurality of time information distribution satellites and received by a terminal device are received via a responsible base station device, and transmitted from the plurality of time information distribution satellites and received by the responsible base station device. Communication function to receive multiple base station side time information,
A conversion function for obtaining position information of the terminal device based on the plurality of terminal-side time information;
Realizing a guarantee function for creating authentication information for guaranteeing the validity of the location information of the terminal device when the difference between the plurality of terminal side time information and the plurality of base station side time information is within a predetermined allowable range Program to let you. On the computer,
A plurality of terminal-side time information transmitted from a plurality of time information distribution satellites and received by a terminal device are received via a responsible base station device, and a base station ID indicating the responsible base station device is received from the responsible base station device. Communication function,
A conversion function for obtaining position information of the terminal device based on the plurality of terminal-side time information;
Cover area information of the base station apparatus in charge that is stored in the storage means and represented by the base station ID is acquired, and the position of the terminal apparatus is determined based on the position information of the terminal apparatus and the cover area information. Judgment function for judging whether it is within the coverage area of the responsible base station device,
A program for realizing a guarantee function for creating authentication information for guaranteeing validity of position information of the terminal device when the position of the terminal device is determined to be within a cover area of the assigned base station device.

Images