JP3555383B2 - In-vehicle device used in automatic toll collection system and information storage method for in-vehicle device used in automatic toll collection system - Google Patents

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention provides, by mutually communicating usage fee information, between a vehicle passing through a toll road and a roadside machine installed at a tollgate, or between a roadside machine installed at a roadside of a road, The present invention relates to an automatic toll collection system that automatically collects usage fees, and an in-vehicle device mounted on a vehicle for this purpose.
[0002]
[Prior art]
The in-vehicle device mounted on the vehicle has an individual number (ID). When the vehicle passes through the tollgate, the individual number (ID) is transmitted from the in-vehicle device to the roadside device, whereby the usage fee is deducted from a predetermined account. When the usage fee differs depending on the vehicle type such as a passenger car and a large truck, the vehicle type classification number is provided in the vehicle-mounted device in addition to the individual number (ID), and the usage fee is determined by communication. In this method, for example, a vehicle type discriminating device is provided on the road side as means for preventing an in-vehicle device having a vehicle type classification number of a passenger car from being mounted on a large truck and illegally passing therethrough, and communicating with the discrimination result obtained by the vehicle type discriminating device. There is a method of collating the vehicle type classification numbers obtained by the above. As a form of payment of the usage fee, an IC card is inserted into the vehicle-mounted device, and the usage fee is deducted from the account recorded on the IC card. Alternatively, there is a method in which the usage fee is subtracted from the amount of money accumulated and recorded in the IC card in advance.
[0003]
[Problems to be solved by the invention]
With the above-described conventional method, for example, it is impossible to prevent illegal traffic such that two vehicles exchange in-vehicle devices of the same vehicle type and pass through the vehicle while traveling up and down a toll road. As a method of preventing such illegal traffic, as described in Japanese Patent Application Laid-Open No. 8-235490, "Automatic Toll Collection System", vehicle verification information including a license plate number, a vehicle length and a vehicle width is stored in an on-board unit. There is a method in which the vehicle verification information is transmitted from the vehicle-mounted device to the roadside device when passing through the tollgate, the license plate number is read by the vehicle number recognition camera at the tollgate, and collated with the vehicle verification information obtained by the communication.
[0004]
Also, as an example of a method for preventing the usage fee from being fraudulent due to unauthorized communication, there is a method proposed by the present applicant as Japanese Patent Application No. 8-210812, entitled "In-vehicle device of automatic toll collection system". In Japanese Patent Application No. 8-210812, identification information unique to an in-vehicle device is held, and mutual authentication is performed between the in-vehicle device and the roadside device.
[0005]
However, there were the following problems.
[0006]
1. When selling an in-vehicle device, there arises a problem of who and how to record the vehicle verification information in the in-vehicle device. Or how to prevent unauthorized recording of vehicle verification information at this time. Also, when an automobile manufacturer mounts an in-vehicle device on a new vehicle at a factory, there is no license plate number yet, and vehicle verification information cannot be recorded on the in-vehicle device. In addition, when the license plate number is changed at the time of selling a used car, it is not possible to change the vehicle verification information of the on-vehicle device already mounted and fixed on the vehicle. It is necessary for the vehicle sales dealer or the owner to record the vehicle verification information in the vehicle-mounted device. How to prevent unauthorized recording of the vehicle verification information at this time.
[0007]
2. As a method of preventing unauthorized traffic due to unauthorized communication, there are authentication using a public key and a secret key, and encrypted communication using a common key. Do you want to update?
[0008]
[Means for Solving the Problems]
The user who has acquired the onboard unit for the automatic toll collection system sends a copy of the vehicle verification to the toll road manager, and the toll road manager records the vehicle verification information on the OBE card (the vehicle verification information and other information recorded on the IC card). ). The user inserts the sent OBE card into the IC card insertion slot of the vehicle-mounted device, and transfers and transcribes the vehicle verification information and the like from the OBE card to the vehicle-mounted device.
[0009]
When updating the digital key for the encrypted communication held by the vehicle-mounted device, an OBE card (a digital key or the like recorded on an IC card) in which the digital key is recorded is issued. The user inserts the sent OBE card into the IC card insertion slot of the vehicle-mounted device, and transfers and transcribes the digital key and the like from the OBE card to the vehicle-mounted device.
[0010]
BEST MODE FOR CARRYING OUT THE INVENTION
One embodiment of the automatic toll collection system is shown in FIG. When the vehicle 2 equipped with the vehicle-mounted device 3 passes through the tollgate 1, two-way communication is performed between the roadside device installed in the tollgate 1 and the vehicle-mounted device 3, and the toll road is calculated based on the amount recorded in the IC card 4. Or the usage fee is subtracted from the account number recorded on the IC card 4. Various forms and functions are conceivable as the form of the vehicle-mounted device 3 as shown in FIG. There are two types: sold vehicles, that is, types that are retrofitted to vehicles that are already in use by users, and types that are built into new vehicles by automakers at production plants. Further, a single-function type dedicated to the automatic toll collection system, a type combined with a radio or a navigation unit, and the like can be considered.
[0011]
However, since the toll on the toll road is expensive, various unauthorized traffic related to the automatic toll collection system is expected. For example, as shown in FIG. 3, it is conceivable that an in-vehicle device for a mini car is mounted on a truck and travels illegally. Alternatively, as shown in FIG. 4, it is conceivable that an in-vehicle device is exchanged on the way and the vehicle passes, and fraudulent payment of a short section usage fee is made.
[0012]
FIG. 5 shows an example of the usage fee classification according to the vehicle type of the toll road. Toll roads have different toll categories depending on the road manager. FIG. 6 shows a more detailed example of both toll classifications by vehicle type. The factors that determine usage fees are complex and varied. In addition to this example, there are various toll roads in local areas, and the usage fee categories are not uniform.
[0013]
As a method for solving this problem, there is a method of recording the vehicle verification information shown in FIG. It is not necessary to record all the information shown in FIG. 7, and it is sufficient to record necessary and sufficient information for specifying the use category.
[0014]
FIG. 8 shows an example of a device related to an automatic toll collection system at a tollgate and an example of arrangement thereof. In FIG. 8, when the vehicle equipped with the in-vehicle device on which the vehicle verification information is recorded passes through the communication area of the notice antenna, mutual communication with the in-vehicle device confirms that the vehicle has the proper in-vehicle device. Then, the vehicle is guided to the lane of the toll booth where automatic toll collection is being performed by using a notice guidance display device. If the IC card has not been inserted because it was forgotten to be inserted, for example, an alarm sound of the on-vehicle device is activated, or the display is displayed on the display device. When the vehicle further advances and passes through the vehicle detector, the detector detects the length, width, shaft length, and the like of the vehicle.
[0015]
Further, the communication between the antenna in front of the tollgate and the on-vehicle device allows the roadside processing device at the tollgate to obtain vehicle verification information. The vehicle number recognition camera reads the registration number (license plate number) of the vehicle. Various illegal traffic is detected by comparing the vehicle length, width, axis length, etc. obtained by the vehicle detector with the vehicle registration number obtained by the vehicle number recognition camera and the vehicle verification information obtained by the roadside processing device. be able to. When an illegality is detected, the driver and the license plate are photographed as one photograph by the illegal vehicle photographing camera, and are stored in the image recording device as a photograph of the illegal traffic.
[0016]
As described above, recording the vehicle verification information in the on-vehicle device 3 and using it for communication information for use fee settlement at a tollgate is extremely effective in preventing unauthorized traffic.
[0017]
However, there is a problem that who, when, when, where and how to record the vehicle verification information in the in-vehicle device, and how to prevent the recording of unauthorized information.
[0018]
FIG. 9 shows an example of a distribution route until the in-vehicle device 3 and the IC card 4 reach the customer. As shown in FIG. 2, the in-vehicle devices 3 can be broadly classified into a retrofitted type and a new type. In FIG. 9, in the case of retrofitting of a sold vehicle, it is considered that the in-vehicle device 3 is generally mounted on a vehicle by an automobile parts sales specialist. In the case of a new car mounting type, it is likely that the car manufacturer will perform mounting work on the vehicle at the car production factory. However, at the time when an automobile manufacturer performs mounting work on a vehicle at an automobile production factory, the vehicle is unregistered and has no vehicle verification information. Therefore, in the case of a new car, it is necessary for the car dealer to write and record the car verification information after the vehicle inspection registration. In this case, when a general employee performs the work of writing and recording the vehicle verification information on the vehicle-mounted device 3, there is a high possibility that the illegal information is written and recorded.
[0019]
Therefore, as shown in FIG. 10, there is a method in which the security chip 5 is incorporated into the vehicle-mounted device 3, and the vehicle-mounted device issuing center encrypts and records the vehicle verification information and the like on the security chip 5 and then mounts the vehicle on the vehicle. However, according to this method, an automobile manufacturer cannot perform mounting work on a vehicle at an automobile production factory.
[0020]
FIG. 11 is a block diagram of an on-vehicle device circuit configuration example illustrating the principle of the present invention. The security chip 5 sends and receives various data to and from the communication processing unit and the IC card R / W unit via the CPU. At this time, mutual authentication by encryption and transmission / reception by encrypted data are performed.
[0021]
Unauthorized use and tampering of the information recorded in the onboard equipment memory becomes extremely difficult. An OBE card 6 is a card showing an embodiment of the present invention. The vehicle verification information of the OBE card can be recorded and inserted into the IC card R / W unit, and the vehicle verification information can be transcribed in the on-vehicle device memory safely without fraud. The IC card 4 is a card that is also used as a card exclusively for automatic fee payment and a bank / credit card. Needless to say, it is also possible to record the vehicle verification information on this IC card so that it can also be used as an OBE card. Hereinafter, an embodiment of the OBE card system of the present invention will be described. FIG. 12 is a view showing the outer shape of an IC card conforming to the ISO standard. When the card shown in the figure is used for a bank / credit card, an IC card having the same outer shape can be used as the OBE card. It goes without saying that a non-contact type IC card can be similarly used.
[0022]
FIG. 13 is a diagram of an embodiment showing a flow of information of mutual recognition between the on-vehicle device and the IC card and an encryption communication using various encryption keys.
[0023]
The center 1301 signs the IC card public key 1304 with the center secret key 1306, creates E (IC card public key) 1309, and distributes it to the IC card 1302. Similarly, the in-vehicle device public key is signed to create an E (in-vehicle device public key) 1310 and distributed to the in-vehicle device 1303.
[0024]
First, the onboard unit 1303 generates a random number 11307 and transmits it to the IC card 1302.
[0025]
The IC card 1302 encrypts the received random number 11307 with the IC card secret key 1308 to generate e (random number 1) 1317 and transmits it to the in-vehicle device 1303 together with E (IC card public key) 1309.
[0026]
In-vehicle device 1303 decrypts E (IC card public key) 1309 using center public key 1310. Further, the e (random number 1) 1317 is decrypted by using the decrypted IC card public key 1306, the transmitted random number 1 is compared with the received random number 1, and if they match, the in-vehicle device 1303 authenticates the IC card 1302 by the center 1301. Judge that it was done.
[0027]
Next, the IC card 1302 generates a random number 21311 and transmits it to the on-vehicle device 1303.
[0028]
The in-vehicle device 1303 encrypts the received random number 21311 and the in-vehicle device identification information 1314 with the in-vehicle device secret key 1312 to generate e (random number 2 + in-vehicle device identification information) 1315 and combines it with E (in-vehicle device public key) 1313 and the IC card 1302. Send to
[0029]
In-vehicle device 1303 decrypts E (in-vehicle device public key) 1313 using center public key 1310. Further, e (random number 2 + in-vehicle device identification information) 1315 is decrypted using decrypted in-vehicle device public key 1305, and random number 2 transmitted and compared with received random number 2 are compared. Is determined to have been authenticated by the center 1301, and the in-vehicle device identification information is compared. If they match, the IC card 1302 transmits the vehicle information + the roadside communication encryption key 1316 to the in-vehicle device 1303.
FIG. 14 is a block diagram showing an embodiment of the present invention, and is a diagram showing an example of information distribution and update using an OBE card. The in-vehicle device has a built-in TRM (tamper-register-module) including various memories and a CPU (arithmetic unit), and has an IC card socket. At the stage of manufacturing the vehicle-mounted device, the ROM stores the encryption algorithm and the program for controlling the vehicle-mounted device. The production number unique to the on-vehicle device, that is, the on-vehicle device ID is recorded in the flash memory for production and shipped. The in-vehicle device is sold without input of the vehicle information and the communication OBE key, and the in-vehicle device is attached to the vehicle in such a manner that the in-vehicle device cannot be easily detached.
[0030]
After the vehicle registration, an OBE card is created by sending a copy of the vehicle verification and the like. The issued OBE card records authentication information of the corresponding on-vehicle device, OBE key for communication, vehicle information, ICC key for card authentication, and the like. The recorded OBE card is sent to the OBE card applicant by registered mail or the like. The applicant inserts the received OBE card into the IC socket of the vehicle-mounted device. At this time, mutual authentication is performed between the in-vehicle device and the OBE card, and various information is transferred from the OBE card to the in-vehicle device only when both are authorized devices. When it is confirmed that the information has been properly transferred, the transfer information in the OBE card is automatically erased to prevent unauthorized use of the information. Alternatively, the number of times of information transfer may be limited to a plurality of times in consideration of an operation error at the time of information transfer, and the transfer information in the OBE card may be erased when the number of times exceeds the limit.
[0031]
As described above, the OBE card has the same shape as the bank / credit card, so that the OBE card and the automatic payment card can be used together. At this time, it is required that the capacity of the nonvolatile memory EEPROM or the like in the card is sufficiently large. As the automatic toll payment card, a plurality of history details of credit information and toll road traffic information are recorded in an EEPROM.
[0032]
FIG. 15 is a diagram showing an example of a fraudulent act using an OBE card. By properly receiving the OBE card for a small car and transferring and recording the information to an in-vehicle device of a large car, it is conceivable that a large car passes at a small car fee. However, since the sent OBE card is compatible with the in-vehicle device of a small car, even if the OBE card is inserted into the in-vehicle device of a large car, mutual authentication is not established between the in-vehicle device and the OBE card, and information is transferred. Absent. Next, when applying for creation and transmission of an OBE card for an in-vehicle device of a large vehicle, it is conceivable that fraudulent transmission of a vehicle verification copy of a small vehicle. In this case, the transmitted OBE card can transfer and record the information to the on-vehicle device of the large vehicle, but the recorded information is the vehicle verification information of the small vehicle, and therefore, as described in FIG. Each time the vehicle passes a tollgate, the vehicle verification information obtained by communication does not match the information obtained by the various devices of the tollgate, and is recorded as an unauthorized vehicle. Later, the total amount of all illegal traffic will be added up, and it will be possible to charge a further fine.
[0033]
FIG. 16 is a diagram showing an example in which an OBE card is issued alone. Thereby, the information of the OBE card can be transferred and recorded in the vehicle-mounted device owned by the user. FIG. 17 is a diagram showing an example of a case where an OBE card is issued that also functions as an IC card having the functions and information of a bank / credit card.
[0034]
【The invention's effect】
Even after an automobile manufacturer installs an in-vehicle device on a new vehicle at a factory and performs vehicle inspection registration, it is possible to easily record vehicle verification information and the like on the in-vehicle device. Even when the license plate number is changed, it is possible to change the vehicle verification information and the like of the already mounted vehicle-mounted device. Further, unauthorized recording of the vehicle verification information and the like can be prevented.
[0035]
Also, the digital key for the encrypted communication held by the on-vehicle device can be easily updated as needed.
[Brief description of the drawings]
FIG. 1 is a diagram showing an embodiment of an automatic toll collection system.
FIG. 2 is a diagram showing an example of a form of various on-vehicle devices.
FIG. 3 is a diagram showing an example of unauthorized use of an in-vehicle device.
FIG. 4 is a diagram showing an example of an incorrect route due to an in-vehicle device exchange.
FIG. 5 is a table showing an example of usage fee classification by vehicle type.
FIG. 6 is a table showing an example of elements of a usage fee category.
FIG. 7 is a table showing an example of vehicle verification information.
FIG. 8 is a diagram showing an example and an arrangement example of devices related to an automatic toll collection system at a tollgate.
FIG. 9 is a diagram showing an example of a distribution route between an in-vehicle device and an IC card.
FIG. 10 is a diagram showing an example of a membership contract-issuing an in-vehicle device (without attaching an OBE card).
FIG. 11 is a block diagram of an on-vehicle device circuit configuration example illustrating the principle of the present invention.
FIG. 12 is an external view of an IC card.
FIG. 13 is a diagram showing a flow of mutual authentication and encrypted communication between the vehicle-mounted device and the IC card.
FIG. 14 is a block diagram showing an embodiment of the present invention.
FIG. 15 is a diagram showing an example of fraudulent activity using an OBE card.
FIG. 16 is a diagram showing an example in which an OBE card is issued alone.
FIG. 17 is a diagram showing an example of issuing an OBE card that also serves as an IC card.
[Explanation of symbols]
1. Toll booth, 2 .... vehicle, 3 .... in-vehicle device, 4 .... IC card, 5 .... security chip, 6 .... OBE card.

Claims (12)

In-vehicle equipment used in an automatic toll collection system that wirelessly communicates toll collection information related to toll payment with a roadside machine installed at a tollgate on a toll road, etc., and automatically collects usage charges based on the toll information. In the in-vehicle device,
A CPU for performing calculations required for the in-vehicle device;
A memory in which a control program or the like for causing the CPU to execute an operation is stored;
Transmitting and receiving means for transmitting and receiving toll payment information to and from the roadside machine,
IC card reading means for reading out the vehicle inspection certificate information from an IC card in which vehicle inspection certificate information necessary for passing through the roadside device is stored;
A writable memory for storing the vehicle inspection certificate information read by the IC card reading means; a vehicle-mounted device used in an automatic toll collection system; 2. The vehicle writable memory according to claim 1, wherein the vehicle inspection certificate information is not input to the writable memory when the vehicle-mounted device is shipped, and the vehicle inspection certificate information is read from the IC card by the IC card reading means and stored. An in-vehicle device used for an automatic toll collection system. 2. The in-vehicle device for automatic toll collection according to claim 1, wherein the IC card storing the vehicle inspection certificate information is issued by an administrator. In-vehicle device used in an automatic toll collection system that wirelessly communicates toll collection information related to toll payment with a roadside device installed at a tollgate on a toll road, etc., and automatically collects usage fees based on the toll information. Wherein the on-vehicle device executes a CPU required for the on-vehicle device,
A memory in which a control program or the like for causing the CPU to execute an operation is stored;
Transmitting and receiving means for transmitting and receiving toll collection information to and from the roadside device,
IC card reading means for reading the roadside device communication encryption key from an IC card in which a roadside device communication encryption key for communicating with the roadside device when passing through the roadside device,
An in-vehicle device used in an automatic toll collection system, comprising: a writable memory for storing the roadside device communication encryption key read by the IC card reading means. 5. The road-side device communication encryption key according to claim 4, wherein the road-side device communication encryption key is not entered in the writable memory when the vehicle-mounted device is shipped, and the road-side device communication encryption key is read from the IC card by the IC card reading means. An in-vehicle device used in an automatic toll collection system, which is issued and stored. 5. The in-vehicle device for automatic toll collection according to claim 4, wherein the IC card storing the roadside device communication encryption key for communicating with the roadside device is issued by an administrator organization. In-vehicle device used in an automatic toll collection system that wirelessly communicates toll collection information related to toll payment with a roadside device installed at a tollgate on a toll road, etc., and automatically collects usage fees based on the toll information. Wherein the on-vehicle device executes a CPU required for the on-vehicle device,
A memory in which a control program or the like for causing the CPU to execute an operation is stored;
Transmitting and receiving means for transmitting and receiving toll payment information to and from the roadside machine,
The roadside machine communication encryption key and the vehicle inspection certificate information are stored from the IC card in which the roadside machine communication encryption key for communicating with the roadside device and the vehicle inspection certificate information necessary for passing through the roadside machine are stored. IC card reading means for reading,
A writable memory for storing the roadside machine communication encryption key read by the IC card reading means and the vehicle inspection certificate information; Machine. 8. The roadside device according to claim 7, wherein the writable memory is in a state in which the roadside device communication encryption key and the vehicle inspection certificate information have not been input at the time of shipment of the onboard device, and the IC card reading means reads the IC card from the IC card. An in-vehicle device used in an automatic toll collection system, wherein a communication encryption key and the vehicle inspection certificate information are read and stored. 8. The IC card according to claim 7, wherein the roadside machine communication encryption key for communicating with the roadside machine and the IC card storing the vehicle inspection certificate information necessary for passing through the roadside machine are issued by an administrator organization. Characteristic on-board equipment for automatic toll collection. In-vehicle equipment used in an automatic toll collection system that wirelessly communicates toll collection information related to toll payment with a roadside machine installed at a tollgate or the like on a toll road, and automatically collects usage fees based on the toll information. In the in-vehicle device,
A CPU for performing calculations required for the in-vehicle device;
A memory in which a control program or the like for causing the CPU to execute an operation is stored;
Transmitting and receiving means for transmitting and receiving toll payment information to and from the roadside machine,
The vehicle inspection certificate information and the vehicle inspection certificate information are stored from both an IC card in which vehicle inspection certificate information necessary for passing through the roadside device and a fee payment IC card in which information relating to fee payment is stored between the vehicle and the roadside device. IC card reading means for reading information on the fee payment;
At the time of shipment of the vehicle-mounted device, the vehicle inspection certificate information is not input, and the IC card reading means reads out the vehicle inspection certificate information from the IC card in which the vehicle inspection certificate information is stored and writes the information. An in-vehicle device used in an automatic toll collection system provided with a possible memory. In-vehicle equipment used in an automatic toll collection system that wirelessly communicates toll collection information related to toll payment with a roadside machine installed at a tollgate on a toll road, etc., and automatically collects usage charges based on the toll information. And wherein the on-vehicle device executes a CPU required for the on-vehicle device,
A memory in which a control program or the like for causing the CPU to execute an operation is stored;
A memory that stores identification information unique to the onboard unit,
Transmitting and receiving means for transmitting and receiving toll payment information to and from the roadside machine,
IC card reading means for reading information from the IC card;
At the time of shipment of the in-vehicle device, information is provided with a writable memory in an uninput state,
On storing the vehicle inspection certificate information in the vehicle-mounted device via the IC card reading means from the IC card storing the vehicle inspection certificate information of the vehicle in which the vehicle-mounted device is installed and the identification information unique to the vehicle-mounted device,
The CPU checks whether the identification information of the IC card and the identification information unique to the on-vehicle device correspond to each other properly,
An information storage method for an in-vehicle device used in an automatic toll collection system, wherein when the vehicle is properly supported, the vehicle inspection certificate information is read from the IC card and stored in the writable memory. 12. The vehicle inspection certificate information according to claim 11, wherein it is confirmed that the vehicle inspection certificate information is stored in the writable memory from the IC card. An information storage method for an in-vehicle device used in an automatic toll collection system.

Images