JP3509664B2 - Automatic toll collection system and vehicle-mounted device for the system - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a fixed station communication device installed corresponding to a toll facility such as a toll road and a toll parking lot and an on-vehicle device mounted on a vehicle. An automatic toll collection system that is performed based on wireless communication between the two, especially, a prepaid system that performs fee payment in a format that withdraws the stored amount information in the information storage medium mounted on the vehicle-mounted device side. The present invention relates to an automatic toll collection system and a vehicle-mounted device used in the system.

[0002]

2. Description of the Related Art In recent years, a non-stop automatic toll collection system (ETC (Electronic) which automatically collects tolls on toll roads without stopping the vehicle.
TollCollection) system) has been developed. In this system, bidirectional communication between the fixed station communication device (roadside wireless device) installed at the tollgate and the vehicle-mounted device mounted on the vehicle is based on the stored information in the IC card mounted on the vehicle-mounted device side. It is configured to perform wireless communication and automatically pay the fee by the communication.

In order to use such an ETC system, a vehicle-mounted device and an IC card are required, which are to be prepared (purchased or rented) by the user. In this case, it is considered to prepare an IC card issued by a credit company and an IC card issued by a toll road company, but a credit method and a prepaid method are considered as settlement methods. .
When a user purchases or rents an IC card, ID information such as personal information for identifying the user and contract information, and key information (information such as confidentiality and data tampering prevention are encrypted). (Setting information) is required to be set up. At the time of such a setup process, important data relating to money is stored in both the credit system and the prepaid system IC cards (in the case of the credit system, data such as bank account information,
In the case of the prepaid method, data such as balance information corresponding to the prepaid amount will be written.

[0004] The ETC system currently under study is considered to be operated by the credit system, but it is also necessary to consider the operation by the prepaid system. When operating with the prepaid method, at present, the following system is considered. That is,
Even in the case of the prepaid method, the IC is used as in the credit method.
The card is not a disposable card, but is configured so that the stored balance information can be repeatedly accumulated (increased) as needed. Such accumulation of the balance information can be performed, for example, through an IC card balance accumulation terminal scheduled to be installed in a service area or a parking area in the toll road. That is, in the balance accumulation terminal, for example, when the user inserts cash with the IC card set, the balance accumulation is performed such that balance information corresponding to the input price is written in the IC card. .

[0005]

In the ETC system operated by the prepaid system as described above, when the balance information of the IC card becomes insufficient, the user installs the balance accumulation terminal for the IC card. There is a problem in that it is necessary to go to each place one by one, which increases the burden. In addition, since it is not possible to accumulate the balance information when not having cash, it is necessary to have cash at all times, and it is very complicated to have to have such an attitude. However, there is a problem that the burden on the user side increases.

The present invention has been made in consideration of the above-mentioned circumstances and the fact that the popularity of mobile phones has increased significantly in recent years.
Accumulation of storage amount information in the information storage medium used for settlement of facility usage fee can be easily and reliably performed by data communication via the mobile phone line, dramatically reducing the burden on the user side. An object of the present invention is to provide an automatic toll collection system and an in-vehicle device for the system, which have the effects such as.

[0007]

According to the automatic fee collection system of claim 1, the usage fee of the pay facility depends on the wireless communication between the fixed station communication device and the vehicle-mounted device mounted on the vehicle. Then, the amount of money stored in the information storage medium mounted on the vehicle-mounted device is automatically withdrawn. When the stored amount information (balance information) in the information storage medium becomes insufficient, the mobile phone interface unit on the vehicle-mounted device sends an addition request signal requesting the addition of the stored amount information to the mobile phone. Send over the line. Then, on the system management base station side connected to the vehicle-mounted device through the mobile phone line, the response means deducts the additional amount requested by the additional request signal from the predetermined account, and the withdrawal amount information. The balance update command signal including the answer will be answered back through the mobile phone line. In this way, when the balance update command signal is answered back, on the vehicle-mounted device side, the control means accumulates the stored amount information in the information storage medium based on the amount information included in the balance update command signal. Like

Therefore, even in the case of the prepaid system in which the amount information stored in the information storage medium can be repeatedly accumulated (increased) as needed, the accumulation can be easily performed by the data communication through the mobile telephone line. And it can be done reliably. As a result, the user of the vehicle-mounted device does not have to go to the terminal for accumulating the balance one by one when accumulating the amount information, and it is not necessary to carry cash at all times, which is a burden on the user side. You will be able to significantly reduce.

According to the automatic fee collection system of the second aspect, the transmission / reception operation between the vehicle-mounted device and the system management base station through the mobile phone line, that is, the amount information stored in the information storage medium of the vehicle-mounted device is performed. If the transmission / reception operation for additional charge is cut off in the middle, retry processing to retransmit the additional request signal will be executed on the in-vehicle device side a predetermined number of times, so the reliability of the operation of increasing the amount information is improved. Come to do.

As in the automatic toll collection system according to the third aspect, when the additional request signal and the balance update command signal transmitted and received through the mobile telephone line are encrypted, the security against interception by a third party is improved. Come to do.

According to the automatic toll collection system of the fourth aspect, the additional request signal transmitted from the vehicle-mounted device includes the password input through the password input means provided on the vehicle-mounted device side. Then, the response means on the system management base station side carries out the answer back operation of the balance update command signal only when the personal identification number included in the received additional request signal matches the one registered in advance for each vehicle-mounted device. Therefore, security against interception by a third party can be further improved.

According to the vehicle-mounted device of the fifth aspect, when the stored amount information (balance information) in the information storage medium used for settlement of the facility usage fee is insufficient, the stored amount information is stored. The additional request signal that requests additional
It transmits to the system management base station for the automatic toll collection system through the mobile phone interface and the mobile phone line. In response to this, when the balance update command signal including the accumulated amount information is answered back from the system management base station side through the mobile phone line, the control means,
Based on the balance update command signal, the storage amount information in the information storage medium is accumulated.

Therefore, even in the case of the prepaid system in which the amount information stored in the information storage medium can be repeatedly accumulated (increased) as needed, the accumulation can be easily performed by the data communication through the mobile telephone line. And it can be done reliably. As a result, the user does not have to go to the terminal for accumulating the balance one by one when accumulating the amount information, and it is not necessary to carry cash at all times, which significantly reduces the burden on the user side. become able to.

According to the vehicle-mounted device of the sixth aspect, the transmission / reception operation with the system management base station through the mobile telephone line, that is, the transmission / reception operation for accumulating the amount information stored in the information storage medium is performed on the way. When the trace is exhausted, the retry process of retransmitting the additional request signal is executed a predetermined number of times, so that the reliability of the operation of increasing the amount information is improved.

In the case where the vehicle-mounted device according to the seventh aspect is configured to transmit the additional request signal in an encrypted state, the security against interception by a third party is improved.

According to the vehicle-mounted device of the eighth aspect, since the additional request signal including the personal identification number input through the personal identification number input means is transmitted, the additional request signal received by the system management base station is received. If a function to verify the personal identification number is added, the security against interception by a third party can be further improved.

[0017]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment in which the present invention is applied to an automatic toll collection system for toll roads and an on-vehicle device for the system will be described with reference to the drawings. Figure 1
Shows schematically the configuration of the main part of an ETC (Electronic Toll Collection) system. In FIG. 1, a vehicle 1 that uses the ETC system has a vehicle-mounted device 2 having a wireless communication function fixed to its dashboard (or another appropriate position).
The card 3 (corresponding to an information storage medium) is detachably attached. The vehicle-mounted device 2 stores in advance vehicle information (information necessary for determining the vehicle number and vehicle type) and vehicle-mounted device setup information (set-up date of vehicle-mounted device 2, expiration date (if there is an expiration date, etc.)) as permanent information. In addition, information regarding entry and route of toll roads (passage toll gate number, passage date and time, etc.), payment information of the IC card 3, and the like are stored as temporary information. The IC card 3 is of a prepaid type or a prepaid / credit type, which includes user contract information (including bank account information for deducting usage charges and credit company account information), issuance information, etc. In addition to being written as permanent information, prepaid amount information (hereinafter referred to as balance information), transit history information, usage statement information, etc. are written as temporary information.

At the toll booth 4 of the toll road, for example, a pillar 4a arranged on the roadside is provided with a DSRC (Dedi
Cated Short Range Communication: A roadside wireless device 5 (corresponding to a fixed station communication device) for performing roadside-vehicle communication by dedicated narrow area communication) is installed. The tollgate 4 is provided with a vehicle detector 6 that uses, for example, an optical sensor in the entry area of the vehicle 1. The vehicle detector 6 is capable of detecting the vehicle height and vehicle length of the passing vehicle 1, and outputs the detection output, an axle length detector (not shown), and a camera for imaging the license plate portion of the vehicle 1 (both shown in FIG. Vehicle type of passing vehicle 1 (vehicle type according to toll charge category) based on output etc.)
It is configured to be able to determine.

In the starting area (exit area) of the toll booth 4, a starting controller 7 for preventing illegal traffic, a passage detector 8 for detecting passage of the vehicle 1, for example, using an optical sensor, a toll A roadside indicator 9 for displaying the charge,
An illegal traffic photographing camera 10 and the like for controlling illegal traffic is provided.

Each of the tollgate devices (roadside wireless device 5, vehicle detector 6, start controller 7, passage detector 8, roadside display device 9, unauthorized traffic photographing camera 10, axle length detector (not shown), etc. The license plate imaging camera, etc.) is connected to the lane control device 11.
1 is configured to perform charge settlement and control operation of tollgate equipment. The lane control device 11 sends and receives data to and from a tollgate system 12 for controlling the tollgate as a whole, and the tollgate system 12 performs a settlement process for performing operation commands and management of toll roads. It is connected to the center 13 (corresponding to a system management base station) online.

FIG. 2 shows an electric configuration of the vehicle-mounted device 2 by combining functional blocks together with a peripheral configuration, and an outline of each component will be described below. That is, the control processing unit 14 is for performing link connection control such as link setting / releasing with the roadside apparatus 5 and transmission / reception control of data through the communication interface unit 15, and the ETC processing unit 16 (control unit). Corresponding) is configured to exchange data with. The communication interface unit 15 is composed of a modulation / demodulation unit 15a, a transmission / reception unit 15b, and an antenna unit 15c, and demodulates and controls a signal (synchronization signal for starting communication, communication data, etc.) received from the roadside apparatus 5. The signal is supplied to the processing unit 14, and the signal (vehicle-mounted device ID, communication data, etc.) supplied from the control processing unit 14 is modulated and transmitted.

The ETC processing unit 16 includes the control processing unit 14
In addition to exchanging data with the HMI control unit, an HMI control process through a human machine interface unit (hereinafter abbreviated as HMI unit) 17 (operation key input or charge collection success or failure display lamp (eg LED), Notification by a speaker (or buzzer), charge notification display output by a display device (for example, LCD panel, etc.) is performed, and data transmission / reception with the security module unit 18 and a mobile phone interface unit 19 are performed. It is configured to perform control. The HMI section 17 is
It is configured to have the function of a personal identification number input means for inputting a personal identification number.

The security module section 18 is mounted I
Data reading and data rewriting control (file access control) of the C card 3 are performed through the IC card interface unit 20, and the vehicle-mounted device 2 and the roadside wireless device 5 are mutually operated by a predetermined authentication method. The authentication and the mutual authentication between the vehicle-mounted device 2 and the IC card 3 are provided through the ETC processing unit 16 and the IC card interface unit 20, respectively. Further, the security module unit 18 encrypts / decrypts communication data between the vehicle-mounted device 2 and the roadside apparatus 5, and stores and protects security information (personal information, contract information, vehicle information, key information, etc.). Also do.

The mobile phone interface section 19 is an ETC.
The data communication processing between the processing unit 16 and the above is performed through a mobile telephone network. For example, a data communication expansion card detachably provided in the vehicle-mounted device 2 or built in the vehicle-mounted device 2 in advance. It is composed of a data communication expansion board, and is connected to the mobile phone 21 via a data communication cable 22. The power supply unit 23 for the vehicle-mounted device 2 is configured to output a stabilized voltage using a dedicated battery or a vehicle-mounted battery as a power source. Further, if a means for performing data communication by a wireless system (wireless communication system) is provided, the data communication cable 22 can be eliminated.

As schematically shown in FIG. 3, the settlement processing center 13 is provided with a host computer 13a (corresponding to a response means) for performing settlement processing of tolls on toll roads. The computer 13a is configured to perform data communication with the mobile phone 21 connected to the vehicle-mounted device 2 through the mobile phone base station 24. Further, the host computer 13a is configured so as to be able to acquire the account data authenticated by the user of the vehicle-mounted device 2 among the personal accounts set in the bank 25 and the credit company 26, and the settlement processing for the account. (The processing of deducting the designated amount of money (which is a concept including overdraft processing of the designated amount of money)) can be performed. In addition, the personal identification number applied by the user is stored in the above personal account.
It is registered in advance for each vehicle-mounted device 2 or for each user, and the host computer 13a performs the settlement processing of the corresponding account only when the personal identification number obtained from the vehicle-mounted device 2 side as described later matches the registered personal identification number. I am supposed to do it.

4 and 5, parts of the control contents on the vehicle-mounted device 2 side and the host computer 13a side, which are relevant to the gist of the present invention, are shown respectively, and these will be described below. That is, FIG. 4 shows the contents of the balance accumulation routine executed for accumulating the balance information (stored prepaid amount information) in the IC card 3 on the vehicle-mounted device 2 side.
It is executed when a request for increasing the balance is input through the unit 17. The input operation of the balance accumulation request may be performed through the operation unit of the mobile phone 21.

In the balance accumulation routine, first, it is determined whether or not the mobile phone 21 is in a usable state (the mobile phone interface unit 19 is connected via a data communication cable and the power is turned on). Is determined (step A1). If “NO” is determined here, after performing step A2 for displaying a message prompting the mobile phone 21 to be switched to the usable state through the HMI unit 17, cancel until a predetermined time elapses or through the HMI unit 17. The steps A1 and A2 are executed until an operation is performed (step A
3). Then, when a certain time has elapsed without switching the mobile phone 21 to the usable state or when the cancel operation is performed (“YE” in step A3).
S ”), the process directly returns.

When "YES" is determined in the step A1, a telephone calling routine A4 for connecting the mobile telephone 21 to the settlement processing center 13 is executed, and this routine A4 executes the telephone line in the next step A5. Will continue until it is determined that is connected. At this time, if the connection is not successful even if the telephone call is made a predetermined number of times, the calling operation of the mobile phone 21 is repeated a predetermined number of times with a predetermined pause time. After notifying the effect through the HMI unit 17, the process returns.

When the mobile phone 21 is connected to the settlement processing center 13 ("YES" in step A5), a message prompting the user to input a personal identification number is output through the HMI section 17 (step A6). This step A6 is executed only for a period until the input of the personal identification number is completed (“YES” in step A7) or until a fixed time has elapsed or a cancel operation is performed (“YES” in step A8). .

If "YES" is determined in step A8, the process directly returns, but "YE" is determined in step A7.
When it is determined to be "S" (when a personal identification number having a predetermined number of digits is input), the data request signal including the input personal identification number is transmitted in an encrypted state through the mobile phone 21 (step A9). The data request signal includes the unique code of the vehicle-mounted device 2 as well as the personal identification number.

After this, the account information, the mismatch signal, which is answered back from the settlement processing center 13 side as described later,
Wait until one of the reject signals is received (step A
10, A11, A12). Here, as will be apparent from the description below, the above-mentioned account information is the amount information that can be debited or overdrawn from the account of the bank 25 or the credit company 26 corresponding to the personal identification number, the name of the bank or the credit company, etc. , And is answered back in an encrypted state. The non-coincidence signal is a signal that is answered when the personal identification number in the transmitted data request signal does not match the one registered in advance on the settlement processing center 13 side, and the refusal signal is the settlement processing center. This is a signal to be answered back when a data request signal including a personal identification number that does not match the personal identification number registered in advance on the 13 side is repeatedly transmitted a predetermined number of times.

When a mismatch signal is received (step A1)
If "YES" in 1), the process returns to step A6. When a refusal signal is received (“YE” in step A12)
S)) indicates that the acceptance of the data request signal is rejected (the input personal identification number is different).
7 (or the display unit of the mobile phone 21) is executed, and then the process returns.

When the account information is received (step A10)
"YES"), the decryption / data display routine A14
To execute. In this routine A14, the received account information is decrypted, and the amount information (data indicating the amount that can be debited or overdrafted), the bank name or the credit company name in the decrypted information is used in the HMI unit 17 (or the mobile phone 21). Display).

After this, until the additional amount is input through the HMI unit 17 (“YE” in step A15).
S ”), or until a certain time elapses or HM
It waits for a period until the cancel operation is performed through the I section 17 (“YES” in step A16).

If "YES" is determined in step A16, the process directly returns, but if "YES" is determined in step A15 (additional amount is input), the input additional amount or the like is added to the HMI unit. 17
(Or, it is displayed on the display unit of the mobile phone 21) (step A17). This step A17 is performed by the HMI unit 17
(Or "YES" in step A18, or until a certain time elapses or a cancel operation is performed ("YES" in step A19)) only for a period of time (or "operation unit of the mobile phone 21") The maximum upper limit of the accumulated amount falls within the range of the amount information indicated by the account information.

If "YES" is determined in step A19, the process directly returns, but if "YES" is determined in step A18 (when the transmission permission input is made in the display state (confirmation screen) such as the additional amount), Transmits the balance update request signal including the input additional amount in an encrypted state through the mobile phone 21 (step A
20). The balance update request signal includes the unique code of the vehicle-mounted device 2 as well as the accumulated amount.

After that, the process waits until balance adjustment information to be answered back is received from the settlement processing center 13 side as described later, or until a fixed time elapses (steps A21 and A22). As will be apparent from the description below, the balance update information is a concept that includes the accumulated amount of the balance information of the IC card 3, the new balance information, and the new account balance (overdraft amount (negative amount)). It includes each amount information indicating each of the above, and is answered back in an encrypted state.

When a certain period of time has passed without receiving the balance update information ("YES" in step A22),
After performing step A23 of outputting a message for prompting to redo the operation for increasing the balance from the beginning through the HMI unit 17 (or the display unit of the mobile phone 21), the process returns. On the other hand, when the balance update information is received (“YES” in step A21), the decryption / IC card balance update routine A24 is executed. In this routine A24, the received balance update information is decrypted, and the new balance information in the decrypted information is controlled to be added to the balance information in the IC card 3.

Decryption / IC card balance update routine A
After 24 is completed, a reception signal indicating that the balance update of the IC card 3 has been normally completed is transmitted through the mobile phone 21 (step A25), and after that, it is determined that the series of balance accumulation processing is normally completed. Or wait until a fixed time has elapsed (steps A26, A
27). When the balance accumulation process ends normally before the lapse of a certain period of time (“YES” in step B26), the new balance information in the IC card 3 and the new balance of the account to be withdrawn (or the overdraft amount). ), Reception date,
Information such as the reception number is displayed through the HMI unit 17 (or the display unit of the mobile phone 21) (step A2).
8). This display step A27 is executed until the specified time has elapsed (step A29), and when the specified time has elapsed, the balance accumulation routine is normally terminated and the process returns.

When the predetermined time has elapsed before the balance accumulation process ends normally ("YE" in step A27).
In step S30), it is determined whether the number of transmissions of the reception signal has reached the set number of retries (step A30). If "NO" is determined here, the process proceeds to the step A25 to perform the operation of transmitting the reception signal 21, and if "YES" is determined, the step A31 for forcibly disconnecting the mobile phone line is executed and then the process is returned. To do.

In the vehicle-mounted device 2, if the mobile telephone line is cut off in the middle of the above balance increasing process, the retry process of re-executing the balance increasing routine is repeated a set number of times. When the balance accumulation process routine is not normally completed in spite of the retry process, the control for forcibly disconnecting the mobile phone line is performed.

On the other hand, FIG. 5 shows the host computer 13a.
3 shows the content of a balance update routine that is executed when the vehicle-mounted device 2 requests that the balance information (stored prepaid amount information) in the IC card 3 be accumulated. The execution of this balance update routine is started, for example, when the mobile phone receives an incoming call from the vehicle-mounted device 2 side.

In the balance update routine, first, the process waits until a data request signal is received from the vehicle-mounted device 2 side or until a preset time elapses (step B1,
B2). When "YES" is determined in step B2, that is, when the set time has elapsed without receiving the data request signal after the incoming of the mobile phone, steps B1 and B2 are executed until the preset number of retries is reached. (Step B3). The number of retries here means
The mobile phone line is cut off during the balance update routine,
This is the number of retries for the balance update routine when the set time has elapsed without receiving a data request signal after an incoming call, and the mobile phone line is cut off in the middle even when the retry process is performed ( If the answer is "YES" in step B3, step B4 for forcibly disconnecting the mobile phone line is executed and the process returns.

When the data request signal is received ("YES" in step B1), the number of times of reception N (initial value is "0") is incremented by "1" in step B5.
After executing the above, the received data request signal is decoded (step B6), and then the validity check routine B7 is executed.

In this routine B7, the legitimacy of the data request signal (the registration code applied by the user for the above-mentioned password is based on the code number in the decrypted data request signal and the unique code of the vehicle-mounted device 2). It is checked whether or not it matches the number, whether or not there is information on the amount of money that can be debited or overdrafted in the corresponding account, and whether or not the above-mentioned unique code belongs to the on-vehicle equipment.

Then, it is judged whether or not the check result in the validity check routine B7 is "valid" (step B8), and if "NO" is determined, "no validity".
It is determined whether the reason is that there is no information on the amount of money that can be debited or overdrafted in the corresponding account, or that the unique code does not match that of the contracted on-board device (step B).
9). If it is determined to be "YES" here, Step B for transmitting (answer back) the refusal signal to the vehicle-mounted device 2
10. Step B11 forcibly disconnecting the mobile phone line
And then returns.

On the other hand, if "NO" is determined in the step B9, it is determined whether or not the reception number N is less than the upper limit value (step B12). If the number of receptions N has reached the upper limit value (“NO” in step B12), the rejection signal transmission step B10 and the line disconnection step B11 are performed.
And then return. If the number of receptions N is less than the upper limit value (“YES” in step B12), the mismatch signal is transmitted to the vehicle-mounted device 2 (answer back).
After performing step B13
Re-execute the following control.

If "YES" is determined in step B8, the corresponding contract account information (bank or credit company name, account number, account balance, overdraftable amount, etc.)
Is encrypted (step B14), and the encrypted account information is transmitted (answer back) to the vehicle-mounted device 2 (step B1).
5).

After transmitting the account information in this way, the process waits until the balance update request signal transmitted from the vehicle-mounted device 2 side as described above is received or until a fixed time elapses (steps B16, B17). . When the fixed time has elapsed without receiving the balance update request signal (“YES” in step B17), the line disconnection step B11 is executed and then the process returns.

On the other hand, when the balance update request signal is received before the elapse of a certain period of time (“Y” in step B16).
ES ”) executes the step B18 of decoding the content of the balance update request signal and then executes the balance calculation routine B19.
To execute. In this routine B19, the new account balance (or new overdraftable balance) is calculated by subtracting the additional amount included in the received balance update request signal from the account balance (or overdraftable balance) of the corresponding contract account. In addition, the new balance information of the IC card 3 is also calculated.

After this, the balance update information including the accumulated amount of the balance information of the IC card 3 and the new balance information and each amount information indicating the new account balance (a concept including the overdraft amount (negative amount)). Is encrypted (step B2
0), and transmits (answer back) the encrypted balance update information to the vehicle-mounted device 2 (step B21).

After transmitting the balance update information in this way, the process waits until the reception signal transmitted from the vehicle-mounted device 2 side as described above is received or until a fixed time has elapsed (steps B22, B23). Then, when a certain time has passed without receiving the reception signal (step B2
3) is “YES”), it is determined that an error has occurred in the processing of the balance accumulation routine on the vehicle-mounted device 2 side, the communication contents up to that point are recorded (step B24), and then the mobile phone line is forced. After executing step B25 of disconnecting to, the process returns.

On the other hand, when the reception signal is received before the elapse of a certain time (“YES” in step B22).
Forcibly disconnect the mobile phone line Step B26
After executing, the settlement processing routine B27 is executed and the process returns. In this routine B27, control for rewriting the account balance (or overdraftable balance) of the contract account to the new account balance (or new overdraftable balance) calculated in the balance calculation routine B19, that is, the account balance of the contract account (Or the balance that can be overdrafted)
The control is performed to reduce the amount of money added to the balance information in the card 3. In addition, by recording the processing contents up to this point, a series of balance update routines will be completed normally. It is considered that the account settlement of the bank 25 is immediately performed by using, for example, the POS system, and the account settlement of the credit company 26 is performed at a later date by a method such as direct debit of the account.

In short, according to the above-described embodiment, wireless communication is performed between the roadside wireless device 5 installed at the tollgate 4 of the toll road and the vehicle-mounted device 2 mounted on the vehicle 1 to pass through the toll road. In the ETC system that automatically deducts the charge from the balance information (prepaid amount information) in the IC card 3 mounted on the vehicle-mounted device, when it is necessary to add the balance information in the IC card 3, Vehicle-mounted device 2
On the side, an addition request signal for requesting the addition of the above balance information is transmitted through the mobile phone line.

Then, in the settlement processing center 13 connected to the vehicle-mounted device 2 through the mobile telephone line, the host computer 13a withdraws the additional amount requested by the additional request signal from the previously contracted account and withdraws the additional amount. The balance update command signal including the amount information is answered back to the vehicle-mounted device 2 side through the mobile phone line. In this way, when the balance update command signal is answered back, the vehicle-mounted device 2 side, through the security module unit 18, based on the amount information included in the balance update command signal, the balance information in the IC card 3 Additional processing is performed, and the host computer 1
On the 3a side, the balance of the corresponding account is reduced by the amount corresponding to the above-mentioned accumulated amount information.

Therefore, even in the case of the prepaid system in which the balance information stored in the IC card 3 can be repeatedly accumulated (increased) as needed, the accumulation can be easily performed by the data communication through the mobile telephone line. And it can be done reliably. As a result, the user of the vehicle-mounted device 2
When accumulating balance information, it is not necessary to go to the terminal for accumulating balance installed in the service area or parking area in the toll road one by one as in the past, and it is not necessary to carry cash at all times. The burden on the user side can be dramatically reduced.

In this case, the vehicle-mounted device 2 through the mobile phone line
When the transmission / reception operation between the payment processing center 13 and the settlement processing center 13, that is, the transmission / reception operation for accumulating the balance information (prepaid amount information) stored in the IC card 3 on the vehicle-mounted device 2 side is cut off on the way, the vehicle-mounted device 2 side Since the retry process of retransmitting the additional request signal is executed a predetermined number of times, the reliability of the operation of increasing the balance information is improved.

Further, since the additional request signal and the balance update command signal transmitted / received between the vehicle-mounted device 2 and the settlement processing center 13 through the mobile telephone line are encrypted, the security against interception by a third party is improved. Like
Moreover, the additional request signal transmitted from the vehicle-mounted device 2 is
The host computer 13a on the settlement processing center 13 side is made to include the personal identification number input through the HMI unit 17 (or the operation unit of the mobile phone 21) provided on the vehicle-mounted device 2 side, and receives the additional request signal. Since the answerback operation of the balance update command signal will be performed only when the personal identification number included in the password matches the one registered in advance for each vehicle-mounted device 2 or each user, the security against interception by a third party is further improved. You can do it.

The present invention is not limited to the above-mentioned embodiment, but the following modifications or expansions are possible. The automatic toll collection system for toll roads and the vehicle-mounted device for the system were taken as an example, but the automatic toll collection system such as the system for automatically collecting the toll parking fee and the system for automatically collecting the ferry boarding fee and its It can also be applied to in-vehicle devices for the system. Although the IC card 3 is given as an example of the information storage medium, other information storage media can be used. The mobile phone referred to in the present invention is a concept including PHS and car phone. As the information for authenticating the vehicle-mounted device, the personal identification number registered in advance by the user's application is used, but the information that can authenticate the user (for example, personal information such as fingerprint, palm print, voice print, iris pattern, etc.). It is also possible to register in advance information that can identify the information and information that encodes the electronic signature of the user, etc., and use this information as onboard device authentication information.

[Brief description of drawings]

FIG. 1 is a diagram schematically showing a configuration of a main part of an ETC system according to an embodiment of the present invention.

FIG. 2 is a functional block diagram showing an electrical configuration of the vehicle-mounted device.

FIG. 3 is a diagram schematically showing the configuration of the entire system for accumulating balance information.

FIG. 4 is a flowchart showing the contents of a balance accumulation routine set on the vehicle-mounted device side.

FIG. 5 is a flowchart showing the contents of a balance update routine set on the host computer side.

[Explanation of symbols]

1 is a vehicle, 2 is a vehicle-mounted device, 3 is an IC card (information storage medium), 4 is a tollgate, 5 is a roadside wireless device (fixed station communication device), 13 is a settlement processing center (system management base station),
13a is a host computer (response means), 14 is a control processing section, 15 is a communication interface section, 16 is an ETC processing section (control means), 17 is a human machine interface section (personal identification number input means), 18 is a security module section, Reference numeral 21 denotes a mobile phone.

Claims (8)

(57) [Claims] 1. A wireless communication is performed between a fixed station communication device installed corresponding to a pay facility and an onboard device mounted on a vehicle, and a facility usage fee is stored in an information storage medium mounted on the onboard device. In the automatic toll collection system that automatically deducts the stored amount information from the storage amount information, a mobile device capable of transmitting a storage request signal to the vehicle-mounted device side through the mobile phone line to request the storage amount information stored in the information storage medium. When the balance update command signal including the money amount information is answered in response to the telephone interface unit and the transmission of the additional charge request signal, the stored amount information in the information storage medium is increased based on the balance update command signal. A control means for performing the operation is provided to the system management base station side to which the vehicle-mounted device is connected through a mobile phone line, and the additional charge is added from a predetermined account. With withdraws the recharging amount requested by the signal, the automatic toll collection system which is characterized in that a response means for answer back through the cellular telephone network the balance updating command signal including the debits information. 2. A retry process of retransmitting the addition request signal on the vehicle-mounted device side when the transmission / reception operation between the vehicle-mounted device and the system management base station via the mobile phone line is cut off in the middle of the process. The automatic fee collection system according to claim 1, wherein the automatic fee collection system is executed a predetermined number of times. 3. The automatic fee collection system according to claim 1, wherein the additional request signal and the balance update command signal are transmitted in an encrypted state. 4. The vehicle-mounted device is provided with a personal identification number input means, and is configured to transmit an additional request signal including the personal identification number input through the personal identification number input means, and the response means receives the additional request for the additional storage. The answerback operation of the balance update command signal is performed only when the personal identification number included in the signal matches the one registered in advance for each of the vehicle-mounted devices. The automatic toll collection system described in Crab. 5. A wireless communication is performed with a fixed station communication device installed corresponding to a pay facility, and the facility usage charge is automatically deducted from the stored amount information in the information storage medium mounted on itself. In the vehicle-mounted device for the automatic toll collection system described above, an additional request signal for requesting additional storage amount information in the information storage medium is transmitted to the system management base station for the automatic toll collection system through the mobile phone line. A possible mobile phone interface unit, and when the balance update command signal containing the additional amount information from the system management base station side in response to the transmission of the additional request signal is answered back through the mobile phone line, the balance update command signal. Automatic charge collection, which is provided with control means for accumulating stored amount information in the information storage medium based on The vehicle-mounted device of the stem. 6. A configuration in which when a transmission / reception operation with a system management base station through a mobile telephone line is cut off in the middle, a retry process of retransmitting the additional request signal is executed a predetermined number of times. The on-vehicle device for the automatic toll collection system according to claim 5, wherein: 7. The vehicle-mounted device for an automatic fee collection system according to claim 5, wherein the additional request signal is transmitted in an encrypted state. 8. The personal identification number input means is provided, and the additional request signal including the personal identification number input through the personal identification number input means is transmitted, and the additional number request signal is transmitted. In-vehicle device for the automatic toll collection system described in.