JP2014174730A - Ic card reader writer and on-vehicle device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card reader writer and an on-vehicle device capable of detecting an abnormality that a power source line of an IC card is in a cut state even while a user uses it and notifying the user of it.SOLUTION: The on-vehicle device, in a state that a high-level signal for reset release is given to an RST terminal (S4) at an RST monitor timing (S8:YES, S19:YES), when the voltage of the RST becomes a threshold or less (S10:threshold or less, S21:threshold or less), notifies the user of an abnormality in an IC card 300 (S11). By this, the user can confirm the abnormality in the IC card in an usage state.

Description

  The present invention relates to an IC card reader / writer that supplies power to a mounted IC card via a power supply terminal, and an on-vehicle device including the IC card reader / writer.

  Patent Document 1 proposes a method of determining whether an error factor during card communication is on the IC card side or the IC card reader / writer side. That is, the I-V characteristic between the two contact points of the power supply terminal and the signal terminal is measured and compared with the normal IV characteristic, and the I-V when the IV characteristic measured when the communication error occurs is normal. If it approximates the V characteristic, the IC card reader is determined to be normal.

Japanese Patent No. 3228492

By the way, the signal terminal is generally pull-up connected to a power supply line via a diode for the purpose of protection against electrostatic breakdown or the like. In such a configuration, even if the power supply line of the IC card is broken due to static electricity or the like and power is not supplied to the IC chip, if the signal terminal is in a high level state, the IC is connected from the signal terminal to the IC via the diode. Power is supplied to the chip. In other words, the IC card is out of order, but the IC chip is in a partially broken state where it operates.
However, the thing of patent document 1 has a problem that the half-broken state mentioned above cannot be detected by a user's use state, and a half-broken state will be left for a long period of time.
The present invention has been made in view of the above circumstances, and an object thereof is to provide an IC card reader / writer and an in-vehicle device capable of detecting an abnormality of an IC card and notifying a user even when the user is in use. There is.

  According to the present invention, when a high level is applied to a predetermined signal terminal in a state where the power line of the IC card is disconnected, power is supplied from the signal terminal to the power line through the diode. It will be in a state to be. In such a half-broken state, the physical quantity corresponding to the amount of current flowing through the predetermined signal terminal greatly fluctuates, and the detection means detects the fluctuation. When it deviates from the normal value, it is determined to be abnormal. Thereby, since a notification means notifies abnormality, the user can confirm abnormality of an IC card in use condition.

Electrical circuit diagram showing the configuration of the main parts of the vehicle-mounted device and IC card Functional block diagram showing OBE and IC card Diagram showing IC card connector terminals Flow chart for determining card abnormality Timing diagram showing voltage changes at each signal terminal during normal operation Fig. 5 equivalent diagram showing abnormal conditions

Hereinafter, an embodiment in which the present invention is applied to an ETC (registered trademark) vehicle-mounted device (hereinafter, vehicle-mounted device) will be described with reference to the drawings.
As shown in FIG. 2, the vehicle-mounted device 100 mounted on the vehicle performs wireless communication with the antenna 201 of the roadside device 200 provided at the toll gate in the ETC system. The vehicle-mounted device 100 is provided in the vicinity of, for example, a dashboard portion or a driver's seat of the vehicle, and is configured so that the IC card 300 can be mounted.

  The control circuit 101 of the vehicle-mounted device 100 includes a microcomputer, ROM, RAM, and the like (not shown), and a program is incorporated in advance so as to perform an operation corresponding to the billing process of the ETC system. A wireless unit 102 for communicating with the roadside device 200 is connected to the control circuit 101, and the wireless unit 102 performs wireless communication with the roadside device 200 via the antenna 103. In wireless communication with the roadside device 200, communication processing employing a DSRC (Dedicated Short Range Communication) system is performed. The antenna 103 includes an antenna provided integrally with the main body of the vehicle-mounted device 100, an antenna provided as an independent configuration from the main body via a cable, and an antenna mounted on a windshield.

  In addition to this, the control circuit 101 includes an external device connection unit 104, a storage unit 105, a notification unit 106, an input operation unit 107, and an IC card control unit 108 (corresponding to power supply means, detection means, abnormality determination means, and reset release means). Etc. are connected. The external device connection unit 104 is configured to be connectable with, for example, a car navigation device, and provides information useful to the user by using information mutually by exchanging data. . The storage unit 105 is a non-volatile storage unit typified by a flash memory. The storage unit 105 stores data in which vehicle information and the like are registered in advance when mounted on a vehicle, and stores various data necessary for billing processing. It is configured to be.

The notification unit 106 is a notification means such as an LED, a speaker, or a buzzer, and notifies the user that the billing process is being executed by displaying, or gives a warning or the like by displaying or sounding. The notification unit 106 is provided with LEDs of different colors such as “green” for displaying processing, “red” for displaying a warning, a liquid crystal display unit, a BEEP sound by a buzzer, Talk to the speaker. The input operation unit 107 receives operation inputs for performing various setting operations and displaying predetermined information using operation buttons.
As the notification means, a car navigation device connected to the notification unit 106 or the external device connection unit 104 can be used. Information for voice guidance is transmitted from the control circuit 101 using, for example, a speaker of a car navigation device, thereby enabling voice notification.

The IC card control unit 108 functions as an IC card reader / writer that recognizes the IC card 300 attached to the IC card connector 109 and exchanges data. The IC card connector 109 is a connector provided with a contact terminal (not shown) that is in electrical contact with an electrode portion provided on the IC card 300.
Each unit of the vehicle-mounted device 100 is supplied with power from the power supply unit 110. The power supply unit 110 is connected from an in-vehicle battery via an accessory switch (ACC switch) of a key switch, and is configured to generate and supply a predetermined DC voltage when the accessory switch is turned on.

  An IC chip 301 is built in the IC card 300. The IC chip 301 includes a control unit 301a and a storage unit 301b as storage means, and is provided with an electrode unit (not shown) for exchanging data with the outside. The control unit 301a is configured mainly with a microcomputer or the like, and outputs information stored in the storage unit 301b to the in-vehicle device 100 in response to a request, or the data to be written required by the on-vehicle device 100. The writing process is performed. As the storage unit 301b, a non-volatile storage unit represented by a flash memory is provided.

Next, the IC card connector 109 that connects between the vehicle-mounted device 100 and the IC card 300, that is, eight contact terminals that connect the vehicle-mounted device 100 and the IC card 300 will be described with reference to FIG.
The terminal of the terminal number C1 is a terminal that supplies a circuit voltage with a terminal name of VCC, and is an input to the IC card 300 and an output to the vehicle-mounted device 100.
The terminal of the terminal number C2 is a terminal that has a terminal name RST and supplies a reset signal, and is an input to the IC card 300 and an output to the vehicle-mounted device 100.
The terminal of the terminal number C3 is a terminal that supplies a clock signal with the terminal name CLK, and is an input to the IC card 300 and an output to the vehicle-mounted device 100.
The terminal with the terminal number C4 has a terminal name of RFU and is a spare terminal.
The terminal of terminal number C5 is a terminal for supplying a zero voltage with the terminal name GND, and is an input to the IC card 300 and an output to the vehicle-mounted device 100.
The terminal with the terminal number C6 is an unused terminal with the terminal name VPP.
The terminal with the terminal number C7 has a terminal name of I / O and is a terminal for data input / output, and is an input / output for the IC card 300 and the vehicle-mounted device 100.
The terminal with the terminal number C8 is a spare terminal with the terminal name RFU.

  The IC card control unit 108 controls communication with the IC card 300 in response to an instruction from the control circuit 101, and includes a buffer unit 111 and peripheral circuits as shown in FIG. The buffer unit 111 shapes the waveform of the signal input from the IC card control unit 108 and outputs the waveform to the IC card 300, and shapes the signal input from the IC card 300 and outputs the waveform to the IC card control unit 108. Specifically, the input terminal of the buffer 111 a is connected to the EN terminal of the IC card control unit 108, and its output terminal is connected to the base of the PNP transistor 113 via the resistor 112. The emitter of the transistor 113 is connected to the 5V power source 114. A resistor 115 is connected between the emitter and base of the transistor 113. The collector of the transistor 113 is connected to the VCC terminal 109 a of the IC card connector 109 via the VCC line 116. The input terminal of the buffer 111b is connected to the I / O terminal 109b of the IC card connector 109 via the protective resistor 117 and is pulled up to the VCC line 116 via the resistor 118, and its output terminal is the IC card control unit. 108 is connected to the IN terminal. The base of the NPN transistor 111c is connected to the OUT terminal of the IC card control unit 108, the collector is connected to the common connection point of the protective resistor 117 and the resistor 118, and the emitter is connected to the ground line 119. The input terminal of the buffer 111d is connected to the RST terminal (reset terminal) of the IC card control unit 108, and the output terminal thereof is connected to the RST terminal 109c of the IC card connector 109 via a protective resistor 120 (corresponding to a resistor). . The input terminal of the buffer 111 e is connected to the CLK terminal of the IC card control unit 108, and the output terminal is connected to the CLK terminal 109 d of the IC card connector 109 via the protective resistor 121. The ground line 119 is connected to the GND terminal 109 e of the IC card connector 109.

  Here, the voltage detection circuit 122 is connected to the RST terminal 109 c side terminal of the protective resistor 120. The input terminal of the buffer 111 f is connected to the voltage detection circuit 122, and the output terminal is connected to the DET terminal of the IC card control unit 108. The voltage detection circuit 122 detects the voltage on the RST terminal 109c side in the protective resistor 120 and notifies the IC card control unit 108 of the detected voltage.

  On the other hand, the IC card 300 is provided with a VCC terminal 302a (corresponding to a power supply terminal) as an electrode portion, an I / O terminal 302b, an RST terminal 302c, a CLK terminal 302d, and a GND terminal 302e as signal terminals. Are inserted into and mounted on the vehicle-mounted device 100, and the terminals 302a to 302e are electrically contacted with the terminals 109a to 109e of the IC card connector 109, respectively, thereby conducting electrical connection therebetween. The VCC terminal 302a is connected to the VCC terminal of the IC chip 301 via a VCC line 303 (corresponding to a power supply line). The I / O terminal 302b is connected to the I / O terminal of the IC chip 301, the RST terminal 302c is connected to the RST terminal of the IC chip 301, and the CLK terminal 302d is connected to the CLK terminal of the IC chip 301. The GND terminal is connected to the GND terminal of the IC chip 301 through the ground line 304. The I / O terminal 302b, the RST terminal 302c, and the CLK terminal 302d are connected to the VCC line 303 via a diode 305 and pulled down to a ground line 304 via a diode 306, respectively. These diodes 305 and 306 are provided for absorbing surges generated by static electricity or the like.

  When the user inserts and attaches the IC card 300 to the IC card slot of the vehicle-mounted device 100, the contact terminals described above are connected to the electrode portions of the IC card 300, and predetermined activation processing and mutual authentication processing are executed. As a result, the vehicle-mounted device 100 is in a state in which charging processing by wireless communication with the roadside device 200 of the toll gate of the ETC system is possible. After that, when the vehicle passes through the toll gate on the toll road, wireless communication is performed between the roadside device 200 and the vehicle-mounted device 100, and usage fee billing processing and the like are appropriately executed. ing.

  Communication (exchange of commands, data, etc.) is executed between the vehicle-mounted device 100 and the IC card 300 via the I / O terminals 109b and 302b. For example, when “command + data” is transmitted from the vehicle-mounted device 100 to the IC card 300, a “response” is transmitted from the IC card 300 to the vehicle-mounted device 100. For example, when “command” is transmitted from the vehicle-mounted device 100 to the IC card 300, “response + data” is transmitted from the IC card 300 to the vehicle-mounted device 100.

Next, the operation of the above configuration will be described.
The IC card control unit 108 of the vehicle-mounted device 100 performs an activation process when detecting card insertion as shown in FIG. In this activation process, VCC is first supplied (S1). That is, a low level signal is output from the EN terminal of the IC card control unit 108, and the low level signal is applied to the base of the transistor 113. As a result, the 5V power supply 114 is supplied with power to the VCC terminal 302a of the IC card 300 via the VCC line 116 and the VCC terminal 109a, so that 5V is supplied to the IC chip 301 of the IC card 300 via the VCC line 303. At this time, the I / O terminal of the IC card connector 109 is pulled up to 5V. Next, CLK oscillation is started (S2). That is, a pulse signal is output from the CLK terminal of the IC card control unit 108, and the pulse signal is given to the CLK terminal of the IC chip 301 of the IC card 300.

  Next, a cold reset process is performed. In this cold reset process, first, after waiting for a fixed time until oscillation stabilizes (S3), RST is released (S4). That is, a high level signal is output from the RST terminal of the IC card control unit 108, and the high level signal is applied to the RST terminal of the IC chip 301. As a result, the reset state of the IC chip 301 is released, so that the IC card 300 operates from the initialized state. Next, it is determined whether or not an ATR (Answer To Reset) has been received from the IC card 300 (S5). ATR is a command that the IC card 300 sends out spontaneously when the IC card 300 is electrically activated and RST is released.

  If the ATR is not received as a result of the above cold reset processing (S5: YES), it is notified to the control circuit 101 that the IC card 300 is not used because it is a user factor or a card failure (S6). Not being an IC card 300 means that a card other than a contact terminal type such as a magnetic card or a wireless card, or a non-standard card is inserted even if it is a contact terminal type. The control circuit 101 notifies the user of the abnormal content. When the in-vehicle device 100 notifies that the IC card is not an IC card, the user inserts the ETC card into the in-vehicle device 100. On the other hand, when ATR is received (S6: YES), it is determined whether it is an ETC card (S7). If the card is a contact terminal type card but is not an ETC card (S7: NO), the control circuit 101 is notified that the card is an IC card that is not an ETC card because it is a user factor (S23). The control circuit 101 notifies the user of the abnormal content. When the in-vehicle device 100 informs that the IC card is not an ETC card, the user inserts the original ETC card into the on-vehicle device 100. When ATR is received, the communication speed and card identification information are read based on the ATR.

  As a failure of the IC card 300, for example, there is a disconnection due to electrostatic breakdown of various internal lines. Such disconnection may occur even when the vehicle-mounted device 100 is mounted. When the line connected to the I / O terminal 302b, the RST terminal 302c, and the CLK terminal 302d is disconnected, there is no response from the IC card 300, so it can be determined that the card is abnormal (no ATR response).

  However, since the I / O terminal 302b, the RST terminal 302c, and the CLK terminal 302d are pulled up to the VCC line 303 via the diode 305, even if the VCC line 303 is disconnected, any signal When the terminal is at a high level, power is supplied to the IC chip 301 from the signal terminal, that is, the IC card 300 is broken, but the IC chip 301 can be operated in a semi-broken state.

  In this embodiment, in order to detect such a half-broken state of the IC card 300, disconnection detection is performed by detecting a level change of the current supplied to the IC chip 301 via the signal terminal. . In this case, since the power is supplied to the IC chip 301 with the signal terminal in the high level state, the disconnection can be detected when the signal terminal is in the high level state, but the CLK terminal 302d and the I / O terminal 302b are detected. Oscillates with LO / HI and is not suitable for level detection. For this reason, the RST terminal 302c that is at the high level in the reset release state is used for detecting the disconnection of the VCC line 303, and the disconnection is detected as follows.

  When the inserted IC card 300 is an ETC card (S7: YES), the IC card control unit 108 determines whether it is the RST monitoring timing (S8) or the mutual authentication timing (S12). The RST monitoring timing is generated at a constant cycle as indicated by an upward arrow in FIG. When the RST monitoring timing comes (S8: YES), the RST voltage is detected (S9). At this time, in a state where the VCC line 303 is not disconnected and is supplied to the IC chip 301 via the VCC terminal 302a, the amount of current that can be supplied from the VCC line 303 is sufficiently large. Even if the amount of current increases, the voltage drop of the VCC line 303 does not occur. That is, the amount of current supplied through the RST terminal 302c is extremely small. For example, when the resistance value of the protective resistor 120 is 1 KΩ, the voltage drop at the resistor 1 KΩ is extremely small. Specifically, if a current of 10 μA flows in a normal state with respect to a resistance of 1 KΩ, the voltage drop at the resistance of 1 KΩ is only 0.01V.

  As shown in FIG. 5, the total current Iic to the IC card 300 increases stepwise at the start of VCC power supply and the start of clock oscillation, and further increases due to reset release, but a sufficient current flows through the VCC line 303. Since the voltage is supplied, the voltage at the RST terminal 302c does not decrease. Therefore, when the IC card 300 is normal, the RST voltage does not drop significantly at the RST monitoring timing and does not become lower than a predetermined threshold (for example, 3.5 V) (S10: above the threshold). Transition.

  On the other hand, when the mutual authentication timing comes (S12: YES), the IC card control unit 108 starts mutual authentication (S13), and changes the RST monitoring cycle to be shorter as shown in FIG. 5 (S14). In other words, when mutual authentication is performed, a heavy load encryption / decryption process is performed. As a result, the amount of current consumed by the IC chip 301 of the IC card 300 is maximized. This is because the determination accuracy can be increased by shortening the length. Next, it is determined whether the mutual authentication is completed (S15) or whether it is the RST monitoring timing (S19). When the RST monitoring timing comes (S19: YES), the RST voltage is detected (S20), and the voltage is determined (S21). During this mutual authentication period, the consumption current of the IC card 300 becomes maximum as shown in FIG. 5, but when the IC card 300 is normal, a large voltage drop due to the protective resistor 120 does not occur. Therefore, since the RST voltage is equal to or higher than the threshold (S21: higher than the threshold), the process proceeds to step S15.

  When the mutual authentication is completed (S15: YES), the IC card control unit 108 returns (longens) the RST monitoring cycle (S16), and determines the authentication result (S17). If OK (S17: OK), the normal authentication completion is notified (S18), and the RST monitoring is continuously executed by moving to step S8. On the other hand, in the case of NG (S17: NG), because of other factors, authentication failure is notified to the control circuit 101 (S22). The control circuit 101 notifies the user of authentication failure. When a failure in authentication is notified from the vehicle-mounted device 100, the user re-authenticates by removing the IC card 300 from the vehicle-mounted device 100 and inserting it again.

  By the way, when the VCC line 303 of the IC card 300 is disconnected due to, for example, electrostatic breakdown, the power supply to the IC chip 301 via the VCC line 303 is cut off. As shown by the broken line in FIG. 1 through the RST terminal 302C in which the high level state continues, the IC chip 301 is in a half-broken state. In such a half-broken state, if a current of 2 mA flows through the RST terminal 109c, the voltage drop in the protective resistor 120 becomes 2V. Therefore, as shown in FIG. 6, the terminal voltage (corresponding to a physical quantity) on the RST terminal 109c side of the protective resistor 120 is monitored, and if the voltage is 3.5 V or less (a voltage drop of 1.5 V or more occurs) The control circuit 101 is notified that the IC card 300 has failed. In this case, since the voltage drop in the protective resistor 120 is large, high accuracy is not required as means for detecting the voltage by the voltage detection circuit 122, and determination by an A / D port of the microcomputer or a logic IC is possible.

  In order to make such an abnormality determination, in the mutual authentication period in which the consumption current of the IC card 300 is maximized (S13), by shortening the RST monitoring cycle (S14), the voltage due to the increase in consumption current A descent can be reliably detected. If the result of the RST voltage detection (S19, S20) is below the threshold (S21: below the threshold), the card circuit abnormality is notified to the control circuit 101 because it is the cause of the ETC card (S11). The control circuit 101 notifies the user of card abnormality. When the card abnormality is notified from the vehicle-mounted device 100, the user requests an inspection of the IC card 300 from the dealer because the IC card 300 is abnormal.

  Of course, when the RST voltage becomes equal to or lower than the threshold during a period other than the mutual authentication period (S10: equal to or lower than the threshold), the card abnormality is naturally notified (S11). In addition, even if the normal authentication completion is notified as a result of mutual authentication, if the VCC line 303 is subsequently disconnected due to, for example, electrostatic breakdown, it is determined that the threshold value is below the threshold by the RST voltage determination. Even during the operation, the abnormality of the IC card 300 can be reliably determined.

According to such an embodiment, the following effects can be produced.
The in-vehicle device 100 determines that the IC card 300 is abnormal when the RST voltage is equal to or lower than the threshold value in a state where a high-level RST signal for reset release is applied to the IC card 300, and the abnormality content is determined by the user Therefore, the user can confirm the abnormality of the IC card 300 in the usage state.
Since the abnormality of the IC card 300 is determined in the reset release state with respect to the IC card 300, the abnormality of the IC card 300 can be reliably detected with the high level signal applied.
Since the reset current amount flowing through the IC card 300 is detected as a voltage drop of the protective resistor 120, a change in the reset current amount can be detected with a simple configuration.
Since the mutual authentication period with the IC card 300 is set to shorten the determination cycle, the detection accuracy of the voltage drop of the resistor 120 can be increased.

(Other embodiments)
The present invention is not limited to the above embodiment, and can be modified or expanded as follows.
Instead of the RST signal, the voltage drop of the corresponding protective resistor may be detected at the timing when the other signal becomes high level.
Instead of detecting the voltage drop of the protective resistor 120, the amount of current flowing through the RST terminal 302c may be directly detected by the current detecting means.

In the drawing, 100 is a vehicle-mounted device, 106 is a notification unit (notification unit), 108 is an IC card control unit (IC card reader / writer, power supply unit, detection unit, abnormality determination unit, reset release unit), and 120 is a protective resistor (resistance) , 122 is a voltage detection circuit, 300 is an IC card, 302a is a VCC terminal (power supply terminal), 302c is an RST terminal (reset terminal), 303 is a VCC line (power supply line), and 305 is a diode.

Claims (6)

When the IC card (300) is mounted, the IC card (300) is provided with a power supply means (108) for supplying a power supply voltage via the power supply terminal (302a) of the IC card, and a predetermined signal of the IC card is supplied in a power supply state by the power supply means. In an IC card reader / writer that outputs a signal that changes between a low level and a high level via terminals (302b, 302c, 302d),
In the IC card, the signal terminal is pulled up to a power line (303) connected to the power terminal via a diode (305).
Detection means (108) for detecting a physical quantity corresponding to an amount of current flowing through the signal terminal in a state where the signal terminal is changed to a high level;
An abnormality determination unit (108) that periodically determines whether the physical quantity detected by the detection unit deviates from a predetermined normal value, and determines that the IC card is abnormal when it is detected that the physical quantity has deviated.
When the abnormality determination means determines an abnormality, a notification means (106) for notifying the abnormality;
An IC card reader / writer characterized by comprising: The signal terminal is a reset terminal (302c),
Reset release means (108) for releasing the reset state of the IC card by giving a high level to the reset terminal of the IC card;
2. The IC card reader / writer according to claim 1, wherein the detecting means detects a physical quantity corresponding to an amount of current flowing from the reset releasing means to the reset terminal in a reset release state by the reset releasing means. The detection means includes a resistor (120) interposed between the reset release means and the reset terminal, and a voltage detection circuit (122) for detecting the reset terminal side voltage of the resistor,
3. The IC card reader / writer according to claim 1, wherein the abnormality determination unit determines that the voltage is out of a normal value when a voltage detected by the voltage detection circuit falls below a predetermined threshold value. 4.   4. The IC card reader / writer according to claim 1, wherein the abnormality determination unit shortens a determination cycle during a processing load increase period in which current consumption of the IC card increases. 5.   5. The IC card reader / writer according to claim 4, wherein the processing load increase period is a mutual authentication period with the IC card.   An on-vehicle device comprising the IC card reader / writer according to any one of claims 1 to 5.

Images