JP3813673B2 - Mutual authentication system and mutual authentication method of toll road toll collection system and toll collection system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a mutual authentication system that performs toll collection by wireless authentication with an in-vehicle device mounted on a moving body such as a vehicle on a toll road, for example, a toll road toll collection system, and a toll collection method for a toll collection system About.
[0002]
[Prior art]
Conventionally, for example, at a toll gate equipped with a terminal device of a toll collection device on a toll road, entrance information (toll gate identification number, vehicle type, time, etc.) at a toll gate entrance terminal device for vehicles entering the toll road main line Is issued at the exit of other toll booths connected to the toll gate above the toll gate, and the exit information of the toll booth issued at the toll booth is provided at the exit of this toll booth. The toll is calculated by using the terminal device, and the toll is collected.
[0003]
This toll collection device is installed at each toll gate with a plurality of terminal devices. Each terminal device at the entrance of the toll gate issues a pass ticket recording entrance information (toll gate identification number, vehicle type, time, etc.) to the vehicle entering the toll road main line. Each terminal device at the exit of the toll booth stores a table for calculating tolls, for example, section charges with all toll booths, tolls by vehicle type, etc., and the toll gate entrance at the toll booth exit. The toll is calculated by searching the toll table stored in the memory based on the entrance information of the toll ticket issued in (1).
[0004]
On the other hand, a toll collection system that collects charges wirelessly with in-vehicle devices mounted on vehicles and ground (toll booth) side communication devices has received attention as a means to provide users with non-contact and non-stop benefits. ing.
[0005]
In the case of a wireless card type toll collection system on a toll road, charging information is transmitted and received by wireless communication between a roadside device installed on the road side and an in-vehicle device mounted on the vehicle. Here, a configuration using an in-vehicle device in which the in-vehicle device does not have a direct relationship with the payment request destination and an IC card carrying information on the payment request destination is assumed.
[0006]
Conventionally, in an authentication system using an IC card, a code called a message authentication code is used to identify the owner (author) of a communicated message and confirm that the message has not been tampered with. This will be briefly described with reference to FIG.
[0007]
It is assumed that the message created by the sender A is transmitted to the recipient B as a message created by A by the communication means. Of course, if there is no problem in the transmission path during this period, both messages are the same, and if the communication path is fixed to one, it can be said that it is a message created by A.
[0008]
However, there is no such guarantee in a general communication channel. Someone can masquerade as A and make a message, or someone can tamper with the message created by A so that it is convenient for the communication process. There is also a fear. Therefore, B must make sure that the message he received is indeed made by A and has not been tampered with.
[0009]
For this reason, the sender A and the receiver B share the same information (referred to as a common key). Using this key, Mr. A creates a message authentication code (MAC) by using a function called a hash function. The hash function is a kind of one-way function, and it is extremely difficult to calculate the original value from the result of this function. For example, algorithms called MD5 and SHA are well known.
[0010]
A attaches this to the message and sends it to B. Upon receiving this, B creates a message authentication code for the received message using the same common key in the same process as A did. If the message has been tampered with, the received message authentication code does not match the message authentication code that you created. Further, since it is extremely difficult to create a message authentication code that matches this other than A that shares a common key owned by B, B can confirm that the author of this message is A.
[0011]
This is a one-way authentication where B verifies the validity of A's message. Now, if the IC card is A, if the device to insert the IC card is B, if this IC card is used for entry / exit, that is, the device that authenticates the IC card is surely the place. Authentication is sufficient in one direction.
[0012]
However, when communication using a network or the like is used and the other party to be authenticated cannot be specified, one-way is not sufficient, and mutual authentication in which each other authenticates each other is indispensable. In this case, it is clear that this can be easily realized by exchanging messages with message authentication codes.
[0013]
This is illustrated in FIG. According to the above procedure, B authenticates A's validity by verifying the message authentication code according to A's request. Next, the authentication result is returned to A, and A verifies the validity of B using the authentication code. After that, mutual communication is performed.
[0014]
In recent years, attempts have been made to use authentication systems using such IC cards in various fields. This includes a toll collection system for toll expressways. The toll collection system in this case is characterized in that the IC card and the roadside system at the entrance and exit of the expressway are in a very short time when the vehicle equipped with the IC card passes through the entrance and exit gates on the expressway. The point is to perform authentication.
[0015]
However, the following problems occur when this mutual authentication method is applied to a toll road toll collection system.
First, since A, that is, an IC card cannot expect high-speed calculation, B, that is, the roadside system cannot be completely authenticated. Therefore, the communication performed as a result of the vehicle performing the mutual authentication procedure communication in the entrance roadside system and authenticating the entrance roadside system is made to wait until the next exit roadside system. And when the vehicle passes the exit, it is necessary to authenticate the roadside system of the exit as well, and this also requires the same time, so after all, the entrance roadside system and the exit roadside system are fully authenticated Therefore, it becomes impossible to perform toll collection communication based on that.
[0016]
Further, as a safe charging method that can be easily considered between the roadside system and the IC card, an individual secret encryption key K is stored in the IC card, and the roadside system preliminarily determines the key K from the identification number of the IC card. The roadside system confirms that the vehicle is equipped with a valid IC card by performing cryptographic communication with the IC card via the in-vehicle device, and charges the target person specified from the card. There is a system to do. Here, the encryption communication performed by the IC card and the roadside system is, for example, a mutual authentication protocol including the following four steps.
(1) The IC card generates a random number R1 and sends it to the roadside system.
(2) The roadside system generates the second random number R2, encrypts the concatenated R1 and R2 with the key K, and sends the result to the IC card.
(3) The IC card decrypts the received ciphertext with the key K, confirms that the same R1 as sent in (1) is obtained in a predetermined format, and extracts R2 from the decrypted text to the roadside system. Send back.
(4) The roadside system confirms that the returned message matches R2 generated in (2).
[0017]
The mutual authentication protocol of such a procedure allows the roadside system to confirm that the IC card has the same key K as the roadside system. Since the key K is issued with a different value for each card, the charging destination can be specified by specifying the key K. In order to be able to carry out this procedure, the roadside system needs to have the same key as the IC card. For example, the roadside system has a card identification number and a list of keys stored in the card. Means such as deriving a key from a card identification number by a secret conversion algorithm can be used.
[0018]
Such a mutual authentication procedure can be easily implemented if the IC card to be used has a high-speed communication function.
However, the standard contact type IC card standardized by ISO has a communication speed of 9.6 kbps, and in the toll collection system in which the vehicle passes through the toll gate (entrance and exit roadside system) non-stop, Such a mutual authentication protocol cannot be directly performed between the IC card and the roadside system. Even if the communication speed is improved, the calculation capability of the processor mounted on the IC card is usually small, and it is impossible to perform the encryption operation for mutual authentication within this time.
[0019]
[Problems to be solved by the invention]
As described above, in a toll collection system that collects charges wirelessly using an encryption key between an IC card mounted on a vehicle and a toll gate on the toll road (entrance and exit roadside system), the IC card Since the communication speed is slow, mutual authentication cannot be performed, and since the calculation capability of the IC card is small, there is a problem that the encryption operation for mutual authentication cannot be performed in time.
[0020]
Therefore, the present invention provides a mutual authentication system and a toll road toll collection system which can collect charges by wirelessly performing mutual authentication using an encryption key even when the communication speed of the IC card is slow and the calculation capacity is small. The purpose is to provide a mutual authentication method for the toll collection system.
[0021]
[Means for Solving the Problems]
  The mutual authentication system of the present inventionofIC cards owned by usersAnd this IC cardCard reading / writing device for reading and writing information to and fromAnd saidFirst authentication device provided at the entrance of the facilityAnd saidSecond authentication device provided at the exit of the facilityAnd havingIn the mutual authentication system, the first authentication device includes:Authentication standard information transmitting means for transmitting authentication standard information to the IC card reader / writer, first authentication means for verifying the validity of the first authentication information received from the IC card reader / writer, A second authentication information generating unit configured to generate second authentication information when the first authentication unit authenticates that the first authentication information received from the IC card reading / writing device is valid; A second authentication information transmitting unit configured to transmit the second authentication information generated by the second authentication information generating unit to the IC card reading / writing device, and the IC card reading / writing device includes: First authentication information generating means for generating first authentication information using authentication reference information received from the first authentication device, and first authentication information generated by the first authentication information generating means are Send to 1 authentication device First authentication information transmitting means; first transfer means for transferring the second authentication information received from the first authentication device to the IC card; and third authentication information received from the IC card; And second transfer means for transferring the first authentication information and the second authentication information to the second authentication device,The IC cardThe second authentication means for verifying the validity of the second authentication information received from the IC card reading / writing device and the second authentication information is authenticated by the second authentication means. The third authentication information generating means for generating the third authentication information, and the third authentication information for transmitting the third authentication information generated by the third authentication information generating means to the IC card reading / writing device. An information transmission means,The second authentication device includes:A third authentication unit that verifies the validity of the first, second, and third authentication information received from the IC card reading / writing device;
[0022]
  The toll collection system of the toll road of this invention isIC card owned by the user, mounted on the vehicle,Reading information from IC cardAnd in-vehicle devices that perform writing, and toll roadsFirst authentication device provided at the entranceAnd the toll roadIn a toll road toll collection system configured with a second authentication device provided at an exit, the first authentication device includes:Authentication standard information transmitting means for transmitting authentication standard information to the in-vehicle device, first authentication means for verifying the validity of the first authentication information received from the in-vehicle device, and the in-vehicle by the first authentication means. When authenticating that the first authentication information received from the machine is valid, the second authentication information generating means for generating the second authentication information and the above-mentioned generated by the second authentication information generating means Second authentication information transmitting means for transmitting second authentication information to the in-vehicle device, wherein the in-vehicle device uses the authentication reference information received from the first authentication device to obtain the first authentication information. A first authentication information generating means for generating; a first authentication information transmitting means for transmitting the first authentication information generated by the first authentication information generating means to the first authentication device; Above the second authentication information received from the authentication device A first transfer means for transferring the first authentication information and the second authentication information to the second authentication device together with the first transfer means for transferring to the IC card and the third authentication information received from the IC card. 2 transfer means,The IC cardWhen the second authentication means for verifying the validity of the second authentication information received from the in-vehicle device and the second authentication means authenticating that the second authentication information is valid, A third authentication information generating means for generating the authentication information of the first authentication information, and a third authentication information transmitting means for transmitting the third authentication information generated by the third authentication information generating means to the vehicle-mounted device,The second authentication device includes:There is a third authentication means for verifying the validity of the first, second and third authentication information received from the in-vehicle device.
[0023]
  Of this inventionToll road toll collectionthe system,An IC card owned by the user; an in-vehicle device mounted on the vehicle for reading and writing information to the IC card; a first authentication device provided at an entrance of the toll road; and the toll road In a toll road toll collection system comprising a second authentication device provided at an exit, the first authentication device includes an authentication reference information transmitting means for transmitting authentication reference information to the in-vehicle device, and the in-vehicle device. When authenticating the first authentication information received from the vehicle-mounted device by the first authentication means for verifying the validity of the first authentication information received from the first on-vehicle device, The second authentication information generating means for generating the second authentication information, the second authentication information generated by the second authentication information generating means, and the entrance information indicating the entrance are transmitted to the in-vehicle device. Second authentication information A first authentication information generating unit configured to generate first authentication information using the authentication reference information received from the first authentication device; and the first authentication information. First authentication information transmitting means for transmitting the first authentication information generated by the generating means to the first authentication device, and transferring the second authentication information received from the first authentication device to the IC card A second transfer unit that transfers the first authentication information and the second authentication information to the second authentication device together with the first transfer unit that performs the above and the third authentication information and the entrance information received from the IC card. The IC card includes a storage means for storing charging information, a second authentication means for verifying the validity of the second authentication information received from the in-vehicle device, and the second The second authentication information is obtained by the authentication means. When authenticating, the third authentication information generating means for generating third authentication information, and the third authentication information and the entrance information generated by the third authentication information generating means A third authentication information transmitting means for transmitting to the second authentication device, wherein the second authentication device verifies the validity of the first, second and third authentication information received from the in-vehicle device. When the validity of the first, second and third authentication information is authenticated by the means and the third authentication means, the toll collection of the toll road is received based on the entrance information received from the in-vehicle device. Receiving means for performing processing.
[0024]
  The mutual authentication method of the present invention is:An IC card owned by a user of the facility, an IC card reading / writing device for reading and writing information on the IC card, a first authentication device provided at the entrance of the facility, And a second authentication device provided at an exit, wherein the first authentication device transmits authentication reference information to the first IC card reader / writer, and the IC card reader / writer The apparatus generates first authentication information using the authentication reference information received from the first authentication apparatus, transmits the generated first authentication information to the first authentication apparatus, and transmits the first authentication information to the first authentication apparatus. The authentication device performs an authentication process for verifying the validity of the first authentication information received from the IC card reading / writing device, and the first authentication information received from the IC card reading / writing device is valid. If you authenticate Second authentication information is generated, the generated second authentication information is transmitted to the IC card reading / writing device, and the IC card reading / writing device receives the first authentication information received from the first authentication device. 2 authentication information is transferred to the IC card, and the IC card performs an authentication process for verifying the validity of the second authentication information received from the IC card reading / writing device, and the second authentication information. Is authenticated, the third authentication information is generated, the generated third authentication information is transmitted to the IC card reading / writing device, and the IC card reading / writing device Along with the third authentication information received from the card, the first authentication information and the second authentication information are transferred to the second authentication device, and the second authentication device reads and writes the IC card. The first received from the device Performing an authentication process for verifying the validity of the second and third authentication information.
[0026]
  Of this inventionThe IC card reading / writing device includes an IC card owned by a facility user, a first authentication device provided at the entrance of the facility, and a second authentication device provided at the exit of the facility. In the IC card reading / writing device used in the authentication system, first authentication information generating means for generating first authentication information using the authentication reference information received from the first authentication device, and the first authentication The first authentication information transmitting means for transmitting the first authentication information generated by the information generating means to the first authentication device and the first authentication information transmitted by the first authentication information transmitting means are valid. First authentication means for receiving from the first authentication device second authentication information generated by the first authentication device that has been authenticated and received from the first authentication device by the first reception means. The above second recognition First authentication means for transferring information to the IC card, and third authentication information generated by the IC card that authenticates the second authentication information transferred by the first transfer means as valid. The first authentication information and the second authentication information together with the second receiving means received from the IC card and the third authentication information received from the IC card by the second receiving means And a second transfer means for transferring to a second authentication device for authenticating the validity of the first, second and third authentication information.
[0029]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
The toll collection system according to the present invention can be divided into an entrance ticket issue / exit collection system (hereinafter referred to as a closed system) composed of an entrance and an exit roadside system, and an open system composed only of a uniform lane.
[0030]
As will be described in detail later, an in-vehicle device mounted on a vehicle is used with an on-board unit (hereinafter referred to as OBU) 2 as an in-vehicle device having a wireless communication function, an operation unit, and a display unit. And an IC card 1 having an account number (hereinafter referred to as billing information).
[0031]
In addition, data on the length, the number of axes, the weight, the application, and the features (hereinafter referred to as vehicle information) of factors that determine the type of vehicle to be mounted in advance is registered in the OBU 2. The IC card 1 stores billing information.
[0032]
FIG. 1 shows a configuration of an IC card 1 according to a toll collection system of the present invention. That is, the IC card 1 includes a CPU 10 that controls the whole, a ROM 11 that stores a control program, a RAM 12 that stores accounting information, a random number generator 13 that generates random numbers, a security method A or a security method B that will be described later. And a key storage area 14 for storing a key for encryption, and an encryption algorithm executor 15.
[0033]
FIG. 2 shows the configuration of OBU2. That is, the OBU 2 includes a CPU 20 that controls the entire control, a ROM 21 that stores control programs, a RAM 22 that stores vehicle information, a random number generator 23 that generates random numbers, and a security method B that will be described later. Key storage area 14 for storing keys, encryption algorithm executor 15, antenna 26 for communicating with the antennas installed in each lane, radio communication control unit 27 for controlling antenna 26, characters for operating guidance The display unit 28 includes a display and an LED lamp, the operation unit 29 includes a plurality of buttons, and the IC card processing unit 18 to which the IC card 1 is attached and which can be read and written.
[0034]
FIG. 3 shows a configuration of an entrance roadside system used in a closed system as a roadside system (RSE). That is, the entrance road side system includes a vehicle type discriminating device 31, a first antenna 32, an automatic ticket issuing machine 30, a start detection device 33, and a second antenna 34 in the traveling direction of the vehicle.
[0035]
The vehicle type identification device 31 detects the vehicle that has entered and transmits the vehicle entry to the automatic ticket issuing machine 30. Furthermore, the vehicle type of the vehicle that has entered is determined, and the determination result is notified to the automatic ticket issuing machine 30.
[0036]
The first antenna 32 communicates with an in-vehicle device mounted on the entered vehicle according to an instruction from the automatic ticket issuing machine 30.
The start detection device 33 detects the start of the vehicle and notifies the automatic ticket issuing machine 30.
[0037]
The second antenna 34 communicates with in-vehicle devices under the direction of the automatic ticket issuing machine 30 when a vehicle that has been normally communicated with the first antenna 32 enters the start detection device 33. is there.
[0038]
The automatic pass ticket issuing machine 30 controls each device and at the same time issues a pass ticket to a vehicle (hereinafter referred to as a non-ETC vehicle) that is not equipped with an in-vehicle device. A negative list is registered in the automatic ticket issuing machine 30.
[0039]
FIG. 4 shows a configuration of an exit roadside system used in a closed system as a roadside system (RSE). As shown to (a) of FIG. 4, an exit roadside system is comprised from the advancing direction of a vehicle from the vehicle detection apparatus 41, the 1st antenna 42, the apparatus 43 in exit booth 43, the vehicle detection apparatus 44, and the 2nd antenna 45. ing.
[0040]
As shown in FIG. 4B, the exit booth equipment 43 includes a pass ticket confirmation machine 46 for processing a pass ticket brought by a non-ETC car, a card processing machine 47 for processing a prepaid card, and a receipt for a cash payment car. It comprises a receipt issuing machine 48 for issuing a certificate and an exit lane controller 40 for controlling each device. In the exit lane control device 40, a negative list is registered. The pass ticket confirmation machine 46 includes an IC card reader 46a that can process the IC card 1.
[0041]
The vehicle detection device 41 notifies the exit lane control device 40 of the exit booth device 43 of the result of detecting the entry of the vehicle.
The first antenna 42 communicates with an in-vehicle device mounted on the approaching vehicle under the control of the exit lane control device 40.
[0042]
The vehicle detection device 44 notifies the exit lane control device 40 of the result of detecting the entry of the vehicle.
The second antenna 45 communicates with an in-vehicle device mounted on the vehicle under the control of the exit lane control device 40.
[0043]
FIG. 5 shows a configuration of a uniform roadside system used for an open system as a roadside system (RSE). As shown in FIG. 5A, the uniform roadside system includes a vehicle detection device 51, a first antenna 52, booth equipment 53, a vehicle detection device 54, and a second antenna 55 from the traveling direction of the vehicle. Yes.
[0044]
As shown in FIG. 5B, the booth equipment 53 inputs a fee payment type and a vehicle type of an approaching vehicle, and controls a fee processor 50 for controlling each device, a card processor 56 for processing a prepaid card, It comprises a receipt issuing machine 57 that issues a receipt for a cash payment vehicle and an IC card reader 58 that can process the IC card 1. A negative list is registered in the fee processor 50.
[0045]
The vehicle detection device 51 notifies the charge processor 50 of the booth device 53 of the result of detecting the entry of the vehicle.
The first antenna 52 communicates with an in-vehicle device mounted on the approaching vehicle under the control of the charge processor 50.
[0046]
The vehicle detection device 54 notifies the charge processor 50 of the result of detecting the entry of the vehicle.
The second antenna 55 communicates with an in-vehicle device mounted on the vehicle under the control of the charge processor 50.
[0047]
The user travels with the vehicle-mounted device mounted on the vehicle and the IC card 1 inserted into the OBU 2. The IC card 1 inserted into the OBU 2 notifies the card ID number to the OBU 2 by confirming the validity of the OBU 2.
[0048]
Next, an example using a closed system road will be described.
In the entrance roadside system, the vehicle type discriminating device 31 transmits the entry detection to the automatic ticket issuing machine 30 by detecting the entry of the vehicle. The automatic ticket issuing machine 30 controls the first antenna 32 and starts a communication inquiry with respect to an in-vehicle device (OBU 2 into which the IC card 1 is inserted) mounted on the entering vehicle. The in-vehicle device recognizes the inquiry from the legitimate antenna and returns the ID number notified from the IC card 1 in advance and the vehicle information recorded in the OBU 2.
[0049]
The automatic ticket issuing machine 30 checks the ID number of the IC card 1 against the negative list by recognizing that the response from the in-vehicle device is valid, and if it is valid, the road number, toll gate number, and passage are specified. The year / month / date / time / lane number (hereinafter referred to as entrance information A) is transmitted to the in-vehicle device. The OBU 2 confirms that the entrance information A has been normally received, and notifies the entrance road side system of the completion of reception.
[0050]
Upon receiving the completion of reception from the in-vehicle device, the entrance road side system instructs the automatic ticket issuing machine 30 to stop issuing the ticket and certifies that the vehicle is equipped with a normal in-vehicle device (hereinafter referred to as an ETC vehicle).
[0051]
When the ETC vehicle passes through the transmission detection device 33, the automatic pass ticket issuing machine 30 receives a notification of vehicle entry from the transmission detection device 33, controls the second antenna 34, and executes a communication inquiry to the in-vehicle device. The in-vehicle device notifies the ID number notified in advance from the IC card 1 by recognizing the inquiry from a valid antenna.
[0052]
The automatic ticket issuing machine 30 compares the ID number of the IC card 1 received by the first antenna 32 by recognizing that the response from the in-vehicle device is valid. The vehicle type determination result received from is returned to the in-vehicle device using the second antenna 34 as the entrance information B.
[0053]
The in-vehicle device (OBU 2 in which the IC card 1 is inserted) confirms that the data of the entrance information B has been normally received, and notifies the second antenna 34 of the reception completion. At the same time, the in-vehicle device records the normally received entrance information A and entrance information B as entrance information (a combination of entrance information A and entrance information B is taken as entrance information) on the IC card 1.
[0054]
In the exit road side system, the vehicle detection device 41 detects the entry of the vehicle to notify the exit lane control device 40 of the entry of the vehicle. The exit lane control device 40 controls the first antenna 42 and executes an inquiry to the vehicle that has entered. The in-vehicle device transmits the entrance information and the billing information recorded in the OBU 2 to the first antenna 42 by recognizing the legitimacy of the other party in the exit road side system as well as the entrance road side system.
[0055]
In the exit lane control device 40, the toll is calculated based on the entrance information received via the first antenna 42, and at the same time, a negative list check of the ID number is performed to recognize the validity of the ID number, The entrance information and exit information (toll gate number, passage date / time, lane number, toll) are transmitted to OBU 2 as usage history. OBU2 confirms that the usage history has been normally received and notifies the roadside system of the reception completion. At the same time, a usage history is recorded on the IC card 1.
[0056]
Next, the uniform roadside system of the open system will be described.
Similar to the closed system described above, the user travels with the vehicle-mounted device mounted on the vehicle and the IC card 1 inserted into the OBU 2. The IC card 1 confirms the validity of the OBU 2 and notifies the ID number.
[0057]
In the uniform roadside system, the vehicle detection device 51 notifies the toll processor 50 of the vehicle entry by detecting the vehicle entry. The charge processor 50 controls the first antenna 52 and executes an inquiry to the in-vehicle device. By recognizing the legitimacy of the other party in the same manner as the entrance lane described above, the OBU 2 transmits the ID number of the IC card 1 notified in advance and the vehicle information recorded in the OBU 2 to the first antenna 52.
[0058]
In the fee processor 50, the ID number received via the first antenna 52 is checked against the negative list, and when the legitimacy is recognized, the vehicle type determination based on the vehicle information is performed, and the vehicle passes by the determined vehicle type. Calculate the fee. Based on the calculation result, tollgate information (tollgate number / passage year / month / day / minute / lane number / toll) is generated and transmitted to OBU 2 as a usage history.
[0059]
The OBU 2 confirms that the usage history has been normally received and notifies the uniform road side system of the reception completion. At the same time, a usage history is recorded on the IC card 1.
FIG. 6 shows the configuration of the automatic ticket issuing machine 30 according to the present invention. That is, the automatic pass ticket issuing machine 30 is connected to each device to control the entire CPU 301, a ROM 302 that stores a control program, a RAM 303 that stores various information, a random number generator 304 that generates random numbers, which will be described later. A key storage area 305 for storing a key for the security method A, an encryption algorithm execution unit 306, and a pass ticket issuing processing unit 307.
[0060]
FIG. 7 shows the configuration of the exit lane controller 40 according to the present invention. That is, the exit lane control device 40 is connected to each device to control the entire CPU 401, a ROM 402 that stores control programs, a RAM 403 that stores various information, a random number generator 404 that generates random numbers, which will be described later. A key storage area 405 for storing a key for the security method A and an encryption algorithm execution unit 406 are configured.
[0061]
Next, the first embodiment having such a configuration will be described.
First, the user travels with the vehicle-mounted device mounted on the vehicle and the IC card 1 inserted into the OBU 2. The key storage area 14 of the IC card 1 stores a specific number (IC-ID) and three individual keys (Ki, Kj, Kk) at the time of registration issuance. Ki and Kj are generated by causing the roadside system unique key MK1 to act on the IC-ID using a one-way function.
[0062]
Ki = f (IC-ID, MK1) ............ (1)
However, f () is a one-way function.
Kj = g (IC-ID, MK1) (2)
However, g () is a one-way function.
[0063]
Kk is generated in the same manner as Ki and Kj by causing the card issuing authority unique key MK2 to act on the IC-ID using a one-way function.
Kk = h (IC-ID, MK2) (3)
However, h () is a one-way function.
[0064]
By using the one-way function, even if Ki, KJ, and Kk stored in the IC card 1 are illegally read, the system unique keys MK1 and MK2 used to derive them are calculated by back calculation. Since it becomes impossible, the safety of the entire system is maintained.
[0065]
A specific number (OBU-ID) and two individual keys (K0, K0t) are also stored in the key storage area 24 in the OBU2. K0 is generated by causing the roadside system unique key MK1 to act on the OBU-ID using a one-way function, like the individual key of the IC card 1.
[0066]
K0 = F (OBU-ID, MK1) (4)
However, F () is a one-way function.
On the other hand, K0t is information common to all OBUs 2 and is also given to the roadside system, and is mainly used for generating an encryption key for a communication path. Both K0 and K0t are either embedded in the IC chip or protected by known physical means so that they cannot be taken out by a probe or the like.
[0067]
When the IC card 1 is inserted into the OBU 1, or when the OBU 2 is turned on after the IC card 1 is inserted, or when a predetermined switch or predetermined keys of the OBU 2 are inserted after the IC card 1 is inserted, Alternatively, when the OBU 2 receives a predetermined signal from the roadside system, the IC-ID of the IC card 1 is transmitted to the OBU 2 and stored.
[0068]
Thereafter, the IC-ID is held in the OBU 2 by a known backup unit even when the power of the OBU 2 is cut off. As an additional function, the OBU 2 can be provided with a means for deleting the IC-ID information, and a backup time limit function can be provided. For example, if the power-off state continues for one day, the IC-ID information can be deleted. It is also effective to do.
[0069]
Next, the flow of information between the OBU 2 and the roadside system (RSE) when the vehicle reaches the entrance of the roadside system (RSE) will be described with reference to FIG.
First, communication is started between the OBU 2 mounted on the first passing vehicle and the entrance roadside system.
[0070]
The OBU-ID is transmitted from the OBU2 to the automatic ticket issuing machine 30 of the entrance roadside system, and then a pseudo random number (T1) is transmitted from the automatic ticket issuing machine 30 to the OBU2. The pseudo-random number is generated by encrypting a sequential number or a number indicating the time with the roadside system unique key MK1. The sequential number used or the number indicating the time is notified to an IC card issuing station (RCC) as a host.
[0071]
OBU2 generates a session key K0 (T1) from T1 and K0 using a predetermined function. The OBU 2 generates a message authentication code (MAC 1) using K 0 (T 1) for the IC-ID received and held from the IC card 1, the OBU-ID stored in the OBU 2, and the vehicle information (Iv). .
[0072]
MAC1 = MAC (K0 (T1), ICC-ID, OBU-ID, Iv) (5)
However, MAC (k, | I |) is a message authentication function for message I using k as a key.
[0073]
Furthermore, OBU2 generates a session key K0t (T1) for communication from T1 and K0t using a predetermined function. IC-ID, OBU-ID, Iv, and MAC1 are encrypted using K0t (T1) as a key and transmitted to the automatic pass ticket issuing machine 30.
[0074]
The automatic ticket issuing machine 30 calculates K0 from the OBU-ID received from the OBU2 and the roadside system unique key MK1 using the equation 4, and uses the K0t common to all the OBU2 and the predetermined function from the T1 transmitted to the OBU2. To calculate K0t (T1). Since the received information is encrypted using K0t (T1) as a key, the roadside ticket issuing machine 30 of the roadside system can immediately solve this and take out the information.
[0075]
Next, the automatic pass ticket issuing machine 30 verifies the MAC1 attached by the OBU2. For this purpose, a message authentication code is generated using the session key K0t (T1) in the same procedure as that performed by the OBU2, and it is confirmed that this matches the MAC1 received from the OBU2. If they match, it can be confirmed that the message, that is, the IC-ID, OBU-ID, and Iv are all correct information, and the session key used for message authentication is generated on the spot by the automatic ticket issuing machine 30. Since it is created based on the random number T1, it can be confirmed that the OBU 2 approaching the entrance correctly generates the message authentication code. This is a very important point to prevent a so-called replay attack in which a message is wiretapped and used twice with a time lag. As a result, the automatic ticket issuing machine 30 can authenticate the OBU2.
[0076]
When the automatic ticket issuing machine 30 authenticates the OBU2, the vehicle on which the OBU2 is mounted is permitted to pass. However, the automatic ticket issuing machine 30 must transmit the correct entrance information to the OBU 2, and the IC card 1 of the IC card 1 for authenticating that it is the correct roadside system to the IC card 1 performing the settlement. A message authentication code based on the key must be sent.
[0077]
For this reason, when the message received from the OBU 2 can be confirmed to be correct, the roadside ticket issuing machine 30 of the roadside system obtains one of the IC card unique keys Ki from the IC-ID and the roadside system unique key MK1 based on Equation 1. Generate. Furthermore, Ki (T1) is generated from a predetermined function from Ki and random number T1. Then, a message authentication code (MAC2) is generated using Ki (T1) for entrance information (Iin: entrance name, time, vehicle information, etc.) and MAC1.
MAC2 = MAC (Ki (T1), MAC1, Iin) (6)
However, MAC (k, | I |) is a message authentication function for message I using k as a key.
[0078]
This is encrypted and transmitted to the OBU 2 together with the entrance information. As the encryption key at this time, K0t (T1) is used as in reception.
OBU2 receives this and decrypts the encrypted message using K0t (T1) as a key. If it is solved well, it is definitely known that K0t has issued this message, and it can be confirmed that it is the other party that has transmitted T1 earlier, that is, the valid roadside system (passage ticket issuing machine 30). Thereby, OBU2 can authenticate the roadside system (passage ticket automatic issuing machine 30).
[0079]
OBU2 does not authenticate the roadside system using the OBU unique key. However, if the channel encryption using the key K0t and the random number T1 common to all the OBUs 2 is correct, the roadside system authenticates as valid. This means that when an unauthorized roadside system is constructed, unauthorized entrance information may be input to OBU2 relatively easily (if K0t is stolen). However, this system seems to have no problem. This is because even if incorrect entry information is input, the correct MAC2 cannot be generated unless the roadside system unique key MK1 is stolen. Although MAC2 is not confirmed by OBU2, it is confirmed in IC card 1, and the information is confirmed by the exit roadside system. Therefore, such fraud can always be detected at the exit.
[0080]
Next, processing in the IC card 1 and exit processing will be described.
The incoming data (Iin), random number (T1) and message authentication code (MAC2) received from the entrance roadside system (passage ticket issuing machine 30) as a correct roadside system pass through a predetermined interface between the IC card 1 and the OBU2. Sent to the IC card 1. MAC2 is a code created by the roadside system (passage ticket issuing machine 30) using the individual key Ki of the IC card. Therefore, the IC card 1 creates a message authentication code using the individual key Ki and compares it with the MAC 2 in the same procedure as the roadside system. If they match, the entrance information can be confirmed to be information created by a legitimate roadside system that can know the individual key of the IC card 1, and the IC card can authenticate the roadside system.
[0081]
Subsequently, the IC card 1 generates message authentication codes (MAC3 and MAC4) for the MAC2 using the two individual keys Kj and Kk and the random number T1, and transmits them to the OBU2.
[0082]
MAC3 = MAC (Kj (T1), MAC2) (7)
However, MAC (k, | I |) is a message authentication function for message I using k as a key.
[0083]
MAC4 = MAC (Ki (T1), MAC3) (8)
However, MAC (k, | I |) is a message authentication function for message I using k as a key.
[0084]
OBU2 holds this until the exit. Of course, the backup function used to hold the IC-ID and the backup restriction function also work effectively for these pieces of information, and even if the IC card 1 is removed or the power of the OBU 2 is shut off, the information is not lost. Also, it is possible to reach a preset time or erase information by a predetermined operation.
[0085]
At the exit, first, the OBU2 transmits an OBU specific value (OBU-ID) to the exit lane controller 40 of the exit roadside system (RSE), and the exit lane controller 40 transmits a pseudo random number T2 to the OBU2. The OBU2 generates a session key K0t (T2) for encrypted communication using a predetermined function. Subsequently, the OBU 2 sends the IC card unique value (IC-ID), the OBU unique value (OBU-ID), the pseudo random number (T1), and all the message authentication codes (MAC1, MAC2, MAC3, MAC4) used so far to K0t. It is encrypted using (T2) as a key and transmitted to the exit lane controller 40.
[0086]
The exit lane control device 40 decrypts the cipher using K0t (T2) as a key, and then checks three of the four message authentication codes one by one. First, by confirming MAC1, it is confirmed that OBU2 is a valid OBU2 having the OBU individual key K0 and that it is the same OBU2 at the entrance and exit. Subsequently, by confirming MAC2, it is confirmed that the entrance information is not the information that has been tampered with, but the information generated by the automatic ticket issuing machine 30 of the entrance roadside system in the legitimate roadside system. Furthermore, by confirming MAC3, it is confirmed that the IC card 1 whose entrance information is recognized by the roadside system (passage ticket issuing machine 30) has been inserted into the OBU2 during or immediately after the entrance.
[0087]
When everything is correctly authenticated, the OBU 2 obtains the sequential number or the time number that is the basis of the pseudo random number T 1 by decrypting it using the roadside system unique key MK 1 as a key. In the roadside system (RSE), the sequential numbers registered from the automatic ticket issuing machine 30 of the entrance roadside system to the IC card issuing station (RCC) are delivered to the exit lane controller 40 of the exit roadside system with a delay of several days. It is tabulated in the RAM 403.
[0088]
The exit lane controller 40 refers to the table in the RAM 403, and if T1 is on this table, the information transmitted by the OBU 2 to the exit lane controller 40 of the exit roadside system is unnaturally old, that is, reaches from the entrance to the exit. This information is considered to have been illegally copied and reused. In this case, it is assumed that the information cannot be authenticated, and the procedure goes beyond the specified procedure. It will be.
[0089]
When the authentication is completed, the exit lane controller 40 determines the amount of money according to a predetermined program, and transmits this billing information and all information received from the OBU 2 to the IC card issuing authority (RCC).
[0090]
Subsequently, the exit lane control device 40 calculates Ki (T2) from Ki and T2 using a predetermined function, generates a message authentication code (MAC5) in the billing information using this as a key, and sets K0t (T2) in OBU2. Encrypt and send as a key.
[0091]
The OBU 2 can authenticate the received information as a legitimate roadside system (exit lane control device 40) if it can decrypt the received information using K0t (T2) as a key and can correctly decrypt it as well as the entrance. Then, the received information is transmitted to the IC card 1. The IC card 1 verifies the validity of the information from the exit lane control device 40 based on the message authentication code (MAC5) attached to the billing information, and stores the billing information in the IC card 1 as a log if it can be authenticated.
[0092]
The IC card issuing authority (RCC) checks the information received from the exit lane control device 40 of the exit roadside system by verifying all message authentication codes, and makes a charge notification to a predetermined financial institution. Register the sequential number or time number used for pseudo-random number generation. Since these are used once, they should never be used again. Therefore, the sequential numbers registered as used are immediately distributed as a negative list to the exit lane control device 40 of each exit roadside system in the roadside system. Thereby, illegal double use of information can be substantially eliminated.
[0093]
Next, a second embodiment will be described.
The system according to the second embodiment will be described below, in which billing information of the IC card 1 can be transmitted to the OBU 2 in advance before entering the toll gate (entrance roadside system) of the roadside system. At this time, if the communication path between the IC card 1 and the OBU 2 is not protected, there is a very high possibility that a secret key K unique to the IC card will be known to a third party. Therefore, in the present invention, means for protecting the communication path between the IC card 1 and the OBU 2 and securely transferring the key K unique to the IC card to the OBU 2 is most important.
[0094]
Here we present some possible methods:
(1) The IC card is taken into the OBU so that it cannot be taken out during data transmission / reception.
(2) Method using a secret key
(3) Method using public key
The method (1) can be handled by a known technique.
[0095]
Next, the method using the secret key (2) will be described.
FIG. 9 shows a secret key when the IC card is issued at the issuing authority. That is, the IC card 1 stores in advance in the key storage area 14 of the IC card 1 the key Ki derived from the card ID number based on the master key KM and a predetermined secret key encryption algorithm when the card is issued. Furthermore, the IC card 1 stores a key Kans for use in a mutual authentication protocol different from the key Ki in the key storage area 14. The OBU 2 also stores a common master key KM in the key storage area 24 in a form that cannot be read from the outside.
[0096]
The CPU 20 of the OBU 2 starts data transmission / reception with the IC card 1 by detecting the insertion of the IC card 1 by the IC card processing unit 18, but it is necessary to perform mutual authentication for security before data transmission / reception. .
[0097]
A mutual authentication operation between the OBU 2 and the IC card (ICC) 1 will be described with reference to FIG. First, the CPU 20 of the OBU 2 generates a random number R 1 by the random number generator 23 and transmits it to the IC card 1. Further, the CPU 10 of the IC card 1 transmits the ID number stored in the key storage area 14 to the OBU 2.
[0098]
Further, the CPU 10 of the IC card 1 concatenates the ID number and the key Kans stored in the key storage area 14 and the random number R1 and encrypts them with the key Ki using the encryption algorithm executor 15. (R1 + Kans) is transmitted to OBU2.
[0099]
The CPU 20 of the OBU 2 generates a key Ki by the encryption algorithm executor 25 based on the master key KM and a predetermined secret key encryption algorithm from the received ID number, and uses the Ki to receive the ciphertext K ( R1 + Kans) is decoded. The CPU 20 confirms that the same random number as the random number transmitted to the IC card 1 exists at a predetermined position of the decrypted text. If the same random number cannot be confirmed, the CPU 20 of OBU2 determines that the process is NG.
[0100]
After confirming the same random number, the CPU 20 of the OBU 2 takes out the key from the decrypted text on the assumption that the key Kans has been correctly received, and executes the mutual authentication protocol with the roadside system using the key.
[0101]
Next, the method using the public key (3) will be described.
First, in the IC card 1, the key K and the public key PK common to the present system are stored in the key storage area 14 of the IC card 1 when the IC card is issued.
[0102]
FIG. 11 shows the encryption key when the issuing station issues OBU2. That is, the OBU 2 stores the OBU-specific secret key SKs and the public key PKs paired with the secret key in the key storage area 24. The public key PKs is attached with a digital signature DSs with a secret key SK common to this method. The OBU-specific secret key SKs is stored in a form that cannot be read from the outside.
[0103]
Here, a mutual authentication operation between the OBU 2 and the IC card (ICC) 1 will be described with reference to FIG. First, the CPU 20 of the OBU 2 generates a random number by the random number generator 23, and sends the digital signature DSs corresponding to the public key PKs unique to the OBU stored in the key storage area 24 to the IC card 1.
[0104]
The CPU 10 of the IC card 1 first confirms that the attached digital signature is correct with the public key PK common to this method (decryption). If PKs = PKs cannot be confirmed, the process ends abnormally as process NG. When PKs = PKs can be confirmed and the validity of OBU2 is confirmed, the CPU 10 concatenates the key K and the random number R1 and encrypts them using the encryption algorithm executor 25 with the OBU-specific public key PKs. And sends the ciphertext PKs (R1 + K) to OBU2.
[0105]
The CPU 20 of the OBU2 decrypts the ciphertext PKs (R1 + K) with the OBU-specific secret key SKs, and confirms that the same random number R1 as that transmitted by the OBU2 is recorded at a predetermined location. If R1 = R1 cannot be confirmed, the CPU 20 determines that the process is NG.
[0106]
When R1 = R1 can be confirmed and completed, the CPU 20 of OBU2 extracts the key K from the decrypted text as if the key K has been correctly received, and implements a mutual authentication protocol with the roadside system using the key K To do.
[0107]
As described above, according to the embodiment of the present invention, in the first embodiment, in order to make up for the lack of processing capacity of the IC card, a time margin is created between the entrance and exit roadside systems, so that the IC The card can be authenticated. In this case, the present invention is applicable to an entrance ticket issue / outlet receipt system as a closed system.
[0108]
In the second embodiment, the communication path between the IC card and the OBU is protected, the key unique to the IC card is securely transferred to the OBU, and mutual authentication to be performed between the original IC card and the roadside system. The role of the IC card of the protocol is delegated to OBU, enabling high-speed transmission processing between the OBU and the roadside system. In this case, the present invention can be applied to an open system uniform roadside system.
[0109]
【The invention's effect】
As described above in detail, according to the present invention, even if the communication speed of the IC card is slow and the calculation capability is small, a mutual authentication system that can perform mutual authentication wirelessly using an encryption key and collect a fee, and It is possible to provide a mutual authentication method for a toll road toll collection system and a toll collection system.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an IC card 1 according to a fee collection system of the present invention.
FIG. 2 is a block diagram showing a configuration of an OBU.
FIG. 3 is a diagram showing a configuration of an entrance roadside system used in a closed system.
FIG. 4 is a diagram showing a configuration of an exit roadside system used in a closed system.
FIG. 5 is a diagram showing a configuration of a uniform roadside system used in an open system.
FIG. 6 is a diagram showing a configuration of a pass ticket automatic issuing machine.
FIG. 7 is a diagram showing a configuration of an exit lane control device.
FIG. 8 is a diagram for explaining a flow of information among an IC card, an OBU, and a roadside system.
FIG. 9 is a diagram showing a secret key when an IC card is issued at an issuing station.
FIG. 10 is a diagram for explaining a mutual authentication operation between an OBU and an IC card.
FIG. 11 is a diagram showing an encryption key when issuing an OBU in an issuing station.
FIG. 12 is a diagram for explaining a mutual authentication operation between the OBU and the IC card.
FIG. 13 is a diagram for explaining an authentication system using a message authentication code.
FIG. 14 is a diagram for explaining a mutual authentication system using a message authentication code.
[Explanation of symbols]
1 ... IC card
2 ... OBU (On Board Unit)
10, 20, 301, 401 ... CPU
11, 21, 302, 402 ... ROM
12, 22, 303, 403 ... RAM
13, 23, 304, 404 ... random number generator
14, 24, 305, 405 ... key storage area
15, 25, 306, 406... Encryption algorithm execution unit
30 ... Automatic ticket issuing machine
40. Exit lane control device
43 ... Exit booth equipment
RSE ... Roadside system
RCC ... IC card issuing authority

Claims (5)

An IC card owned by a user of the facility, an IC card reading / writing device for reading and writing information on the IC card, a first authentication device provided at the entrance of the facility, In a mutual authentication system having a second authentication device provided at the exit,
The first authentication device includes:
Authentication standard information transmitting means for transmitting authentication standard information to the IC card reader / writer;
First authentication means for verifying the validity of the first authentication information received from the IC card reader / writer;
A second authentication information generating unit configured to generate second authentication information when the first authentication unit authenticates that the first authentication information received from the IC card reading / writing device is valid;
Second authentication information transmitting means for transmitting the second authentication information generated by the second authentication information generating means to the IC card reading / writing device,
The IC card reader / writer is
First authentication information generating means for generating first authentication information using authentication reference information received from the first authentication device;
First authentication information transmitting means for transmitting the first authentication information generated by the first authentication information generating means to the first authentication device;
First transfer means for transferring the second authentication information received from the first authentication device to the IC card;
A second transfer means for transferring the first authentication information and the second authentication information to the second authentication device together with the third authentication information received from the IC card;
The IC card
Second authentication means for verifying the validity of the second authentication information received from the IC card reader / writer;
A third authentication information generating unit that generates third authentication information when the second authentication unit authenticates that the second authentication information is valid;
And third authentication information transmitting means for transmitting the third authentication information generated by the third authentication information generating means to the IC card reading / writing device,
The second authentication device includes:
Having a third authentication means for verifying the validity of the first, second and third authentication information received from the IC card reader / writer;
Mutual authentication system characterized by that. An IC card owned by the user; an in-vehicle device mounted on the vehicle for reading and writing information to the IC card; a first authentication device provided at an entrance of the toll road; and the toll road In the toll collection system for toll roads composed of the second authentication device provided at the exit,
The first authentication device includes:
Authentication standard information transmitting means for transmitting the authentication standard information to the in-vehicle device;
First authentication means for verifying the validity of the first authentication information received from the in-vehicle device;
A second authentication information generating unit that generates second authentication information when the first authentication unit authenticates that the first authentication information received from the in-vehicle device is valid;
Second authentication information transmitting means for transmitting the second authentication information generated by the second authentication information generating means to the in-vehicle device,
The in-vehicle device is
First authentication information generating means for generating first authentication information using authentication reference information received from the first authentication device;
First authentication information transmitting means for transmitting the first authentication information generated by the first authentication information generating means to the first authentication device;
First transfer means for transferring the second authentication information received from the first authentication device to the IC card;
A second transfer means for transferring the first authentication information and the second authentication information to the second authentication device together with the third authentication information received from the IC card;
The IC card
Second authentication means for verifying the validity of the second authentication information received from the in-vehicle device;
A third authentication information generating unit that generates third authentication information when the second authentication unit authenticates that the second authentication information is valid;
And third authentication information transmitting means for transmitting the third authentication information generated by the third authentication information generating means to the vehicle-mounted device,
The second authentication device includes:
Having third authentication means for verifying the validity of the first, second and third authentication information received from the in-vehicle device;
A toll collection system for toll roads. An IC card owned by the user; an in-vehicle device mounted on the vehicle for reading and writing information to the IC card; a first authentication device provided at an entrance of the toll road; and the toll road In the toll collection system for toll roads composed of the second authentication device provided at the exit,
The first authentication device includes:
Authentication standard information transmitting means for transmitting the authentication standard information to the in-vehicle device;
First authentication means for verifying the validity of the first authentication information received from the in-vehicle device;
A second authentication information generating unit that generates second authentication information when the first authentication unit authenticates that the first authentication information received from the in-vehicle device is valid;
Second authentication information transmitting means for transmitting the second authentication information generated by the second authentication information generating means and the entrance information indicating the entrance to the in-vehicle device,
The in-vehicle device is
First authentication information generating means for generating first authentication information using authentication reference information received from the first authentication device;
First authentication information transmitting means for transmitting the first authentication information generated by the first authentication information generating means to the first authentication device;
First transfer means for transferring the second authentication information received from the first authentication device to the IC card;
A second transfer means for transferring the first authentication information and the second authentication information to the second authentication device together with the third authentication information and the entrance information received from the IC card; ,
The IC card
Storage means for storing billing information;
Second authentication means for verifying the validity of the second authentication information received from the in-vehicle device;
A third authentication information generating unit that generates third authentication information when the second authentication unit authenticates that the second authentication information is valid;
A third authentication information transmitting means for transmitting the third authentication information and the entrance information generated by the third authentication information generating means to the vehicle-mounted device,
The second authentication device includes:
A third authentication means for verifying the validity of the first, second and third authentication information received from the in-vehicle device;
When the legitimacy of the first, second and third authentication information is authenticated by the third authenticating means, the toll road toll collection process is performed based on the entrance information received from the in-vehicle device. Receiving means,
A toll collection system for toll roads. An IC card owned by a user of the facility, an IC card reading / writing device for reading and writing information on the IC card, a first authentication device provided at the entrance of the facility, A mutual authentication method for a system having a second authentication device provided at an exit,
The first authentication device transmits authentication standard information to the first IC card reading / writing device,
The IC card reading / writing device generates first authentication information using the authentication reference information received from the first authentication device, and transmits the generated first authentication information to the first authentication device. And
The first authentication information is received from the IC card reading / writing device by the authentication processing in which the first authentication device verifies the validity of the first authentication information received from the IC card reading / writing device. Is authenticated, the second authentication information is generated, and the generated second authentication information is transmitted to the IC card reading / writing device,
The IC card reading / writing device transfers the second authentication information received from the first authentication device to the IC card,
When the IC card performs an authentication process for verifying the validity of the second authentication information received from the IC card reading / writing device and authenticates that the second authentication information is valid, And generating the generated third authentication information to the IC card reading / writing device,
The IC card reading / writing device transfers the first authentication information and the second authentication information to the second authentication device together with the third authentication information received from the IC card,
The second authentication device performs an authentication process for verifying the validity of the first, second and third authentication information received from the IC card reading / writing device;
A mutual authentication method characterized by the above. IC card reading used for a mutual authentication system having an IC card owned by a user of the facility, a first authentication device provided at the entrance of the facility, and a second authentication device provided at the exit of the facility In the writing device,
First authentication information generating means for generating first authentication information using authentication reference information received from the first authentication device;
First authentication information transmitting means for transmitting the first authentication information generated by the first authentication information generating means to the first authentication device;
The first authentication information received from the first authentication device is the first authentication information generated by the first authentication device that authenticates the first authentication information transmitted by the first authentication information transmitting means. Means for receiving
First transfer means for transferring the second authentication information received from the first authentication device by the first receiving means to the IC card;
Second receiving means for receiving, from the IC card, third authentication information generated by the IC card that authenticates the second authentication information transferred by the first transfer means;
The first authentication information and the second authentication information together with the third authentication information received from the IC card by the second receiving means are used to verify the validity of the first, second and third authentication information. Second transfer means for transferring to a second authentication device for authenticating
An IC card reading / writing device comprising:

Images