JP4019619B2 - Information transmission system, wireless communication device, and moving body - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a method for changing information contained in a device (hereinafter abbreviated as a mobile device) mounted on a mobile body such as an automobile.
[0002]
[Prior art]
For example, this type of mobile device is installed in a vehicle in a non-stop automatic toll collection system on a toll road (hereinafter abbreviated as ETC), and between a roadside radio device installed at a toll gate, A vehicle-mounted device that exchanges information for toll collection by wireless communication is known. In this in-vehicle device, in order to exchange information wirelessly, important information is concealed and transmitted so that the information is not stolen or stolen by interception. In order to conceal this information, encryption algorithm information used for encryption and decryption is implemented as fixed information in the vehicle-mounted device. Cryptographic algorithm information has the possibility of being decrypted sometime with the progress of decryption technology. If the encryption algorithm information is decrypted, it is necessary to change the information to a new one.
[0003]
FIG. 4 is an example showing the structure of this type of vehicle-mounted device. In the figure, 4 indicates the entire vehicle-mounted device. 401 is an IC socket into which an IC card is mounted, 402 is an IC card interface, 403 is a host CPU which is a control arithmetic device for controlling the vehicle-mounted device, and 404 is a display / display for a driver or input from a setting button or the like. An input unit, 405, a wireless transmission / reception circuit that performs wireless communication with a roadside device, 406, an antenna for wireless communication, 407, information encryption, decryption of encrypted information, and confirmation of information validity It is an encryption / decryption / authentication circuit that performs authentication. The IC card socket 401 is loaded with the IC card of the credit card 409. The credit card 409 is necessary when passing through the toll booth and is used to collect a fee later based on the fee. The encryption / decryption / authentication circuit 407 includes an encryption fixed information area 408 for storing encryption fixed information such as an encryption algorithm. The encryption fixed information area 408 is manually flash memory exchange or ROM exchange. Can be rewritten. As described above, conventionally, when rewriting the fixed information for encryption, it has been necessary to manually rewrite each on-vehicle device. Since the number of the vehicle-mounted devices is large, if it is necessary to rewrite the fixed information, the amount of work becomes large if the work is performed by the above method. For this purpose, it is necessary to notify the owner of the vehicle-mounted device and bring in a vehicle equipped with the vehicle-mounted device, which is complicated for both the owner and the person in charge of the change procedure.
[0004]
[Problems to be solved by the invention]
The vehicle-mounted device 4 originally has a wireless communication function. If a roadside wireless communication device is arranged on the road side, it can automatically communicate with the vehicle-mounted device to exchange information while the vehicle is running. It is. Therefore, when the information stored in the vehicle-mounted device 4 is changed, the roadside wireless communication device detects that the vehicle-mounted device needs to change the information and can automatically change the information. Work can be eliminated.
[0005]
Between the vehicle-mounted device and the roadside wireless communication device, microwaves with weak power of several tens to several hundreds of milliwatts are used for communication. Although the on-vehicle device side has relatively little directivity, the roadside wireless communication device side uses a relatively directional antenna. Therefore, although the transmission rate is as high as several megabits / second, a so-called narrow-area wireless communication system is adopted in which the communication area is limited to a narrow range.
The fixed information area for encryption in the vehicle-mounted device uses a semiconductor element such as a flash memory or a ROM, and it takes a long time to write information or change information therein. A vehicle equipped with a vehicle-mounted device is running, for example, for a large amount of information such as a cryptographic algorithm, transmitting information for changing information, processing encryption, and a fixed information area in the vehicle-mounted device In order to write new information, the wireless communication section is short, and thus there is a problem that communication necessary for this writing is not completed between one roadside wireless communication device (antenna).
[0006]
The present invention has been made to solve such a problem, and is configured to transmit information while performing encryption processing by taking an equivalently long communication time between the roadside wireless communication device and the vehicle-mounted device. With the goal.
[0007]
[Means for Solving the Problems]
An information transmission system according to a first aspect of the present invention includes a mobile body that includes a cryptographic processing apparatus and moves along a movement path, and a plurality of transmission areas that are mounted along the movement path and have different communication areas. In an information transmission system that wirelessly exchanges information with a wireless communication device, each of the wireless communication devices performs mutual authentication communication with a mobile body that passes through the communication area, and performs mutual authentication communication. First transmission means for transmitting a common key to a mobile body determined to be valid, and transmission target information comprising a plurality of pieces of information for a mobile body that has transmitted the common key by the first transmission means. From the section information taken out based on the position information indicated by the current pointer of the mobile body, the encryption means for encrypting the extracted section information with a common key, the section encrypted by the encryption means And a second transmission means for transmitting a new pointer indicating the position information of the next section information in the transmission target information, together with the information, and the mobile unit includes a first transmission unit in the wireless communication device that is passing through. A third transmitting means for encrypting the stored current pointer with the common key transmitted from the transmitting means and transmitting it to the wireless communication apparatus, and receiving the intercept information and the new pointer transmitted from the wireless communication apparatus And receiving means for decrypting the received information with the common key, storing the decrypted intercept information, and storing the decrypted new pointer as the current pointer.
[0008]
An information transmission system according to a second aspect of the present invention includes a mobile body that is mounted with a cryptographic processing device and moves along a movement path, and a plurality of communication areas that are mounted along the movement path and have different communication areas. In an information transmission system that wirelessly exchanges information with a wireless communication device, each of the wireless communication devices sends out the mobile body in response to a call to the mobile body that passes through the communication area. Based on the mobile ID for identifying the mobile object and the signature corresponding to the mobile ID, the first authentication means for determining the validity of communication and the first authentication means determine that it is appropriate A first transmission means for setting a temporary common key and confirmation information for the mobile body, and transmitting the common key, a signature corresponding to the common key, and confirmation information; and the first authentication means Moves judged to be valid by A second authentication unit that decrypts the confirmation information encrypted and transmitted by the common key and determines the validity of the two-way communication by comparing with the transmitted confirmation information; and For a mobile object determined to be valid by the authentication means, from the transmission target information consisting of a plurality of pieces of section information, section information is extracted based on the position information indicated by the current pointer of the mobile object, and the extracted section Encryption means for encrypting information with a common key, and second transmission means for transmitting a new pointer indicating position information of next intercept information in the transmission target information together with the intercept information encrypted by the encryption means. The mobile unit is configured to transmit a mobile unit ID and a signature corresponding to the mobile unit ID to the wireless communication device in response to a call within the communication area of the wireless communication device that is passing through. Send 3 The third authentication means for judging the validity of the communication based on the signature corresponding to the decrypted common key transmitted from the wireless communication apparatus and the common key; A fourth transmission means for encrypting the confirmation information and the stored current pointer with the common key and transmitting the encrypted information to the wireless communication device, and intercept information transmitted from the wireless communication device; Receiving means for receiving a new pointer, decrypting the received information with the common key, storing the decrypted intercept information, and storing the decrypted new pointer as the current pointer It is.
[0009]
An information transmission system according to a third invention comprises transmission stop means for stopping transmission of an information slice based on the current pointer transmitted from the mobile body and decoded and the information amount of transmission target information in the second invention. It is a thing.
[0010]
An information transmission system according to a fourth invention is the information transmission system according to the third invention, wherein after the transmission is stopped by the transmission stop means, the verification data is exchanged between the mobile body and the wireless communication device to move A verification means for verifying transmission target information received by the body.
[0011]
An information transmission system according to a fifth invention is the information transmission system according to the second invention, further comprising information management means connected to the wireless communication device, wherein a plurality of pieces of transmission target information are provided in the information management means and are selected significantly. It is set.
[0012]
An information transmission system according to a sixth aspect of the present invention is the information transmission system according to the second aspect, wherein the transmission target information includes information that causes a shortage in transmission time in a single wireless communication device such as an encryption processing algorithm or image information. is there.
[0014]
First 7 The mobile unit according to the invention is configured to exchange information wirelessly with a plurality of wireless communication devices mounted with cryptographic processing devices and having different wireless communication areas along the movement path, In a mobile object that moves along a movement path, mutual authentication communication is performed with the wireless communication device by cryptographic processing in the communication area of the wireless communication device, and a common key is obtained from the wireless communication devices determined to be mutually valid. First receiving means for receiving, transmitting means for encrypting and transmitting a stored current pointer with a common key to the wireless communication apparatus that has transmitted the common key, and transmitting the current pointer from the wireless communication apparatus that has transmitted the common key A new point encrypted with the common key that positions the next piece of information with respect to the section information together with the section information in the transmission target information encrypted with the common key corresponding to the position information indicated by Second receiving means for receiving the intercept information, decryption means for decrypting the intercept information and new pointer received by the second receiving means with the common key, and storage means for storing the new pointer as the current pointer. It is a thing.
[0015]
DETAILED DESCRIPTION OF THE INVENTION
Embodiment 1 FIG.
FIG. 1 is a diagram showing that a plurality of antennas connected to a roadside wireless communication apparatus of the present invention are installed on a road and communicate with an on-vehicle device mounted on an automobile in cooperation. 1 is a road, 2 is an automobile, 3 is an antenna installed on the roadside, and 4 is an on-vehicle device. FIG. 2 is a diagram showing the vehicle-mounted device installed in the automobile. In the figure, 4 is a vehicle-mounted device.
[0016]
In the road 1 on which the antenna 3 is installed and a plurality of automobiles 2 travels, wireless communication is performed between the antenna 3 and the vehicle-mounted device 4 mounted on the automobile 2 in the communication area of the narrow-band wireless communication system. 3 transmits a beacon signal to the vehicle-mounted device 4, and the vehicle-mounted device 4 responds with data of the vehicle-mounted device identifier (vehicle-mounted device ID) when receiving the beacon signal. By knowing this vehicle-mounted device ID, the antenna 3 can identify the passing vehicle.
[0017]
FIG. 3 is a diagram showing a connection form from the antenna to the roadside wireless communication apparatus, roadside communication computer, and information management central computer. In the figure, reference numerals 3a, 3b, 3 (n-1), 3n, etc. 3 denote antennas, which are referred to as a first antenna, a second antenna, an (n-1) th antenna, and an nth antenna, respectively. For example, assuming that the maximum speed of the moving body is 80 km / h and the length of the moving body in the communication area is about 3 m, the maximum communication time between the vehicle-mounted device and the antenna is 0.13 seconds. According to “ETC-B99210P OBE detailed standards” (issued by the Japan Highway Public Corporation, etc. in July 1999), the maximum communication time in the direction of travel of the car 2 differs depending on the type of antenna (aerial), and type 1 aerial Is 0.13 second / 80 km / h, type 2 antenna is 0.46 second / 180 km / h, type 3 antenna is 0.16 second / 180 km / h, and type 4 antenna is 0.67 second / 80 km / h. In any case, the communication time is considerably short, but by arranging a plurality of antennas, the communication time can be equivalently long. 5a, 5b, 5 (n-1), 5n, etc. 5 are roadside wireless communication devices, which are a first roadside wireless communication device, a second roadside wireless communication device, a (n-1) th roadside wireless communication device, The first to nth roadside wireless communication devices are sequentially arranged along the movement route of the automobile 2 such as a toll road. 6 is a roadside communication computer to which a roadside wireless communication device is connected. For example, the roadside communication computer 6a is a road in the installation section of the first and second roadside wireless communication devices 5a and 5b arranged in order along the road. The roadside communication computer 6b is installed near the road in the installation section of the (n-1) th and nth roadside wireless communication devices 5 (n-1) and 5n arranged in order along the road. . A hub 7 connects the roadside communication computer 6 and the roadside wireless communication apparatus 5. An information management central computer 8 is installed in, for example, a central management center on a toll road, and is connected to a plurality of roadside communication computers 6 through an online network. Note that data transmission between the roadside communication device 5 and the roadside communication computer 6 can be transmitted in a shorter time than data transmission between the roadside communication computer 6 and the key management central computer 8.
[0018]
FIG. 4 is a diagram showing the configuration of the vehicle-mounted device, and its constituent elements are the same as those of the prior art except for the encryption / decryption / authentication circuit 407 and the encryption fixed information area 408. FIG. 5 is a diagram showing a configuration of a roadside wireless communication apparatus, in which 501 is a wireless transceiver, 502 is a narrow-area wireless communication circuit, 503 is an encryption / decryption / authentication circuit, and 5031 is an encryption / decryption / authentication circuit. The encryption information area in the authentication circuit 503, 504 is a communication circuit with the roadside communication computer, 505 is a check list for storing information for identifying the vehicle-mounted device that does not require fixed information rewriting, and 506 is the communication with the vehicle-mounted device. And a processing unit that executes a communication procedure with the roadside communication computer. In the encryption information area 5031, the rewrite target fixed information 661 held by the roadside communication computer 6 is transmitted and stored via the communication circuit 504 with the roadside communication computer, and this rewrite target fixed information 661 is rewritten and fixed. It consists of information size, fixed information identifier, and rewrite fixed information that is information transmitted from the wireless communication apparatus to the vehicle-mounted device. The check list 505 stores and stores a list of vehicle-mounted device identification information that is not required to be rewritten, that is, a vehicle-mounted device identifier (vehicle-mounted device ID), held by the roadside communication computer 6 via the communication circuit 504 with the roadside communication computer. . A signal received by the wireless transceiver 501 from the vehicle-mounted device 4 via the antenna is transmitted to the narrow-band wireless communication circuit 502, demodulated there, and transmitted to the encryption / decryption / authentication circuit 503. Conversely, the data received from the encryption / decryption / authentication circuit 503 by the narrow area wireless communication circuit 502 is modulated and transmitted to the wireless transceiver 501. The encryption / decryption / authentication circuit 503 performs decryption processing on the encrypted data received from the vehicle-mounted device 4, verifies the signature data through authentication processing, and passes the processing result to the check list 505 and the processing unit 506. Also, the encryption / decryption / authentication circuit 503 performs encryption processing on the transmission data (size of fixed rewrite information, fixed information identifier, and fixed rewrite information) to the vehicle-mounted device 4 held in the encryption information area 5031. Do. The processing unit 506 checks the onboard unit ID received from the onboard unit 4 with the check list 505, and if it matches, it is regarded as an onboard unit that does not require rewriting, stops the subsequent fixed information rewriting process, ends the process, and matches. If not, the fixed information rewriting process is continued. For example, the processing unit 506 refers to the check list 505 to check whether or not the information on the OBE ID transmitted from the OBE is included in the OBE identification information that does not need to be rewritten. If so, the subsequent processing is stopped. In this in-vehicle device ID that does not require rewriting, for example, information on an in-vehicle device ID that has expired, information on an on-vehicle device ID that has failed mutual authentication in the past, information on an in-vehicle device ID that has been illegally used in the past, and the like are registered. .
[0019]
FIG. 6 is a detailed configuration diagram of the roadside communication computer and the key management central computer. In the figure, 6 represents the entire roadside communication computer, 8 represents the entire information management central computer, 601 is a connection circuit with the roadside wireless communication apparatus, 602 is a connection circuit with the information management central computer, and 603 A connection circuit with the roadside communication computer, 604 is an arithmetic control circuit and control program of the roadside communication computer 6, and 605 is an arithmetic control circuit and information management program of the central computer 8 for information management. The central computer 8 for information management and the roadside communication computer 6 have magnetic storage devices 606 and 607 inside, information to be rewritten 661 and 671, vehicle-mounted device information rewrite records 662 and 672, 663 and 673, respectively. The in-vehicle device identification information that does not need to be rewritten is stored.
[0020]
FIG. 7 is a diagram for explaining an outline of how the fixed information of the vehicle-mounted device is rewritten as the automobile moves. In the following description, a roadside system includes an antenna, a roadside wireless communication device, a hub, and a roadside communication computer.
[0021]
When the vehicle reaches the position of the communication area of the first antenna 3a in the section shown in 71, the roadside system indicates that the vehicle-mounted device is legitimately manufactured and whether the vehicle is illegally modified or not. Check the validity of the vessel. When the roadside wireless communication device 5 confirms that the vehicle-mounted device is legitimately manufactured and has not been illegally modified, it is next checked whether the vehicle-mounted device 4 requires rewriting of fixed information.
[0022]
These checks are performed between the vehicle-mounted device and the roadside wireless communication device of the roadside system. When changing the fixed information, the validity of the encryption and decryption when transmitting the information, and the transmission information is checked. The generation of digital signatures and the like requires a large amount of processing time because of a heavy computer processing load. When it is confirmed that the device is a legitimate vehicle-mounted device and corresponds to the fixed information rewriting, the roadside system transmits the first rewriting information to the vehicle-mounted device, transmits the information rewriting pointer 1, and the on-vehicle device receives and holds this information rewriting pointer 1. (Processing 74). The in-vehicle device stores the received rewrite information in the encryption / decryption / authentication circuit.
[0023]
72, when the vehicle reaches the position of the communication area of the second antenna 3b, the roadside system performs qualification processing of the vehicle-mounted device, and the roadside system confirms whether or not the information rewriting pointer 1 is written (processing). 75). If it is possible to confirm the existence of the information rewrite pointer 1 by performing the qualification authentication process, the vehicle-mounted device is valid, and it is subsequently confirmed whether or not the information change is necessary. If it is necessary to change the information, the roadside system transmits the second rewrite information, transmits the information rewrite pointer 2, and the vehicle-mounted device receives this and holds it inside the encryption / decryption / authentication circuit ( Process 76).
In the section indicated by 7n, when the vehicle reaches the position of the communication area of the nth antenna 3n, the roadside system performs qualification processing of the vehicle-mounted device and confirms whether or not the information rewriting pointer (n-1) is written ( Process 77). If the roadside system can confirm the presence of the information rewrite pointer (n-1), it sends the last (nth) rewrite information to the vehicle-mounted device, and after confirming the fixed information after rewriting, The information rewriting pointer n (fixed information rewriting completion status) is transmitted, and the vehicle-mounted device receives this and holds it in the encryption / decryption / authentication circuit (process 78).
[0024]
After transmitting the information rewriting pointer n (fixed information rewriting end status), the roadside system records the identification information of the vehicle-mounted device whose information change is completed as a log.
8, 16, and 17 are diagrams illustrating information exchange and processing performed between the vehicle-mounted device 4 and the roadside system expressed in time series from the top to the bottom, respectively, A communication sequence between the wireless communication device, the second roadside wireless communication device, the nth roadside wireless communication device, and the vehicle-mounted device is described.
In the unlikely event that fixed information that has been used up to that point is eavesdropped or misused, or fixed information that has been used for a certain period of time has expired, it is necessary to change the fixed information.
[0025]
In FIG. 8, when it becomes necessary to change the fixed information of the vehicle-mounted device, the central computer for information management 8 sends the fixed information change command of the vehicle-mounted device, the fixed information to be changed (rewrite fixed information), and the fixed information (change fixed) The information) identifier and the size of the rewrite fixed information are transmitted to a plurality of roadside communication computers 6 (process 801). Specifically, the arithmetic control circuit / information management program 605 of the information management central computer 8 reads the size of the rewrite fixed information, the fixed information identifier to be rewritten, and the rewrite fixed information from the rewrite target information 671, and Via the connection circuit 603 and the connection circuit 602 with the information management central computer 8, the read information together with the fixed information change command (command) of the vehicle-mounted device is transmitted to the arithmetic control circuit of the roadside communication computer 6 and the control program 604 To do. The arithmetic control circuit and the control program 604 of the roadside communication computer 6 receive the command, the size of the rewrite fixed information, the fixed information identifier to be rewritten, and the rewrite fixed information, and hold these in the rewrite target information 661. Furthermore, the roadside communication computer 6 instructs the first roadside apparatus 5a to rewrite the fixed information of the vehicle-mounted device (processing 802). The first roadside wireless communication device 5a stores the size of the rewrite fixed information, the fixed information identifier to be rewritten, and the rewrite fixed information received together with this command in the encryption information area 5031 of the encryption / decryption / authentication circuit 503. (Process 803). As the rewrite fixed information, for example, a large amount of data such as an encryption algorithm and image information is held.
[0026]
The first roadside wireless communication device 5a transmits a beacon signal to the vehicle-mounted device mounted on the vehicle passing under the first antenna 3a in a state where the rewrite fixed information is held in the encryption information area 5031. A call is made (process 804). This beacon signal instructs the vehicle-mounted device to send ID information indicating the identification of the vehicle-mounted device. The on-vehicle device 4 transmits the on-vehicle device ID and the signature of the ID (process 805). The first roadside wireless communication device 5a verifies the signature of the vehicle-mounted device ID using the signature verification key (K1) 5033 in the encryption information area 5031 of the roadside wireless communication device, and transmits this value and the vehicle-mounted device 4 from this value. The correctness (validity) of the vehicle-mounted device 4 is confirmed by comparing with the obtained vehicle-mounted device ID, that is, qualification authentication of the vehicle-mounted device is performed (process 806). Next, the first roadside wireless communication device 5a sets a session key (for example, a temporary key generated by the encryption algorithm MISTY) to encrypt and transmit information in communication with the vehicle-mounted device 4, and this is set. In order to share, a qualification authentication request is made to the roadside wireless communication apparatus by transmitting the session key and the session key with the signature to the vehicle-mounted device 4 (process 807). On the other hand, the vehicle-mounted device 4 authenticates the first roadside wireless communication device 5a using the signature verification key (K2), and makes a response to the qualification authentication request (processing 808). At this time, the vehicle-mounted device 4 transmits 0 corresponding to the first address of the first rewrite fixed information as the information rewrite work area rewrite pointer (current pointer) existing in the information rewrite work area. Next, the first roadside wireless communication device 5a compares the fixed information identifier received from the vehicle-mounted device 4 with the content (version name) of the fixed information identifier existing in the encryption information area 5031. If the fixed information identifier is an older version, the fixed information rewriting process of the vehicle-mounted device 4 is entered, and the fixed information (initial section information) transmitted to the vehicle-mounted device for the first time from the fixed information held in the encryption information area 5031, A fixed information identifier is set, and initial transmission is performed to the vehicle-mounted device 4 (process 809). The vehicle-mounted device 4 returns a response indicating that the fixed information has been received (process 810), and the first roadside wireless communication device 5a corresponds to the head address of the second rewrite fixed information (second section information). The rewrite pointer 1 (new pointer) is transmitted to the vehicle-mounted device 4 (process 811), and the vehicle-mounted device holds this. Next, the first roadside wireless communication device 5a transmits the authenticated vehicle-mounted device ID, the fixed information identifier, and the information rewrite pointer transmitted to the vehicle-mounted device 4 to the roadside communication computer 6 (process 812). The roadside communication computer 6 stores these pieces of information received from the first roadside wireless communication device 5a in the in-vehicle device rewrite record file 662, and transmits the information to the information management central computer 8 (processing 813). The management central computer 8 stores the in-vehicle device rewrite record file 672.
[0027]
9, FIG. 10, FIG. 14 and FIG. 15 show the details of the qualification authentication processing procedure 81 of the vehicle-mounted device 4 performed between the vehicle-mounted device 4 and the first roadside wireless communication device 5a in FIG. It is a figure explaining the first fixed information rewriting performed with respect to the onboard equipment 4 from the roadside radio | wireless communication apparatus 5a.
FIG. 9 is a diagram for explaining the encryption fixed information area possessed by the vehicle-mounted device 4. In FIG. 9, 90 is the encryption fixed information region possessed by the vehicle-mounted device 4, 91 is the vehicle-mounted device ID, and 92 is the vehicle-mounted device ID. Correspondingly, a signature encrypted with a secret key, 93 is a signature verification key (K2) issued by the information management central computer 8, and this signature verification uses the signature 92 from the vehicle-mounted device 4 as a secret key. This is done by decrypting with the corresponding public key and comparing the decrypted information with the function value corresponding to the vehicle-mounted device ID. 94 is the fixed information area number (m) in use (m is an integer in the range of 1 to n), 95 is the entire fixed information area (1), 95a is the fixed information area (1) rewrite size, and 95b is fixed Information area (1) rewrite pointer, 95c is fixed information area (1), 96 is the whole area of fixed information area (m), 96a is fixed information area (m) rewrite size, 96b is fixed information area (m) rewrite pointer 96c is the fixed information area (m), 97 is the entire fixed information area (n), 97a is the fixed information area (n) rewrite size, 97b is the fixed information area (n) rewrite pointer, 97c is the fixed information area ( n), 98 is the entire area of the information rewriting work area, 981 is the information rewriting work area rewriting size, 982 is the information rewriting work area rewriting pointer, and 983 is the information rewriting work area. In this example, the fixed information to be rewritten is an area related to 96 fixed information areas (m), and the information in the fixed information area (m) 96 has become an old version. Therefore, the latest fixed information (rewritten fixed information) is changed to the roadside. The case of receiving from a wireless communication device is shown. The received rewrite fixed information is temporarily held in the information rewrite work area 98, and when all the information received in multiple times (rewrite size) has been received, the fixed information area (m ) Move to the next fixed information area (m + 1) of 96, and then the vehicle-mounted device 4 uses the information. In this case, each fixed information area is configured in a memory in which information can be rewritten without supplying power from the outside like a flash memory, and the rewriting work area is at a high speed like a DRAM (dynamic ram). Although it is preferable to configure in a rewritable memory, the rewriting work area may be configured in the flash memory if there is no problem with the rewriting speed.
[0028]
FIG. 10 is a diagram for explaining the information rewriting work area 98 of the vehicle-mounted device 4 immediately after the first fixed information rewriting is performed on the vehicle-mounted device 4 from the first roadside wireless communication device 5a. Is the entire area of the information rewriting work area of the vehicle-mounted device 4, 981 is the information rewriting work area rewriting size, 982 is the information rewriting work area rewriting pointer, 983 is the information rewriting working area, 9831 is the fixed information identifier, and 9832 is the first rewriting. Fixed information, 9833 is the second rewrite fixed information, 9834 is the mth rewrite fixed information, and 9835 is the m + 1 first rewrite fixed information.
[0029]
FIG. 11 is a diagram for explaining the information rewriting work area of the vehicle-mounted device 4 immediately after the m-th fixed information rewriting is performed on the vehicle-mounted device 4 from the roadside wireless communication apparatus. A pointer 982 indicates the beginning of the next (m + 1) th rewrite fixed information 9835 area.
[0030]
FIG. 14 is a diagram for explaining an encryption information area included in the encryption / decryption / authentication circuit 503 of the roadside wireless communication device (5a, 5b, 5c). In FIG. Is the roadside wireless communication device ID, 5033 is the signature verification key (K1) issued by the information management central computer, 5034 is the signature generation key (S1) issued by the information management central computer, and 5035 is the information on the vehicle-mounted device 4 , 50351 indicates the size of the rewrite fixed information, 50352 indicates a fixed information identifier, and 50353 indicates the rewrite fixed information. The entire rewrite fixed information 5035 is stored by downloading the rewrite target information 671 of the information management computer 8, that is, the contents of the rewrite target information 661 of the roadside communication computer 6.
[0031]
FIG. 15 is a diagram for explaining the details of the qualification authentication processing procedure performed between the vehicle-mounted device 4 and the roadside wireless communication device 5.
[0032]
Hereinafter, the qualification authentication processing procedure between the vehicle-mounted device 4 and the first roadside wireless communication device 5a will be described with reference to FIGS. 9, 10, 11, 14, and 15. FIG. First, the vehicle-mounted device 4 transmits the vehicle-mounted device ID 91 in the encryption fixed information area 90 and the signature 92 for the vehicle-mounted device ID to the first roadside wireless communication device 5a from the vehicle-mounted device 4 (S111). In the first roadside wireless communication device 5a, the signature 92 for the vehicle-mounted device ID is verified with the signature verification key (K1) 5033 in the encryption information area 5031 of the roadside wireless communication device (S112, S113), and signature verification is performed. If authentication fails, the subsequent authentication processing is not performed. In the first roadside wireless communication device 5a, when the signature verification is successful, a session key value that is a common key is set by the random number 1 (L1) (S114), and a signature is generated by the signature generation key (S1) 5034. The session key value and the signature for the session key encrypted with the random number 2 (L2) and the random number 2 (L2) are transmitted to the vehicle-mounted device 4 (S116). Next, the in-vehicle device 4 decrypts the encrypted data received from the first roadside wireless communication device 5a and the random number 2 (L2) with the random number 2 (L2), and decrypts and extracts the encrypted data. Signature verification is performed on the signature data using the signature verification key (K2) 93 in the encryption fixed information area 90 of the in-vehicle device (S117, S118). If signature verification fails, the subsequent authentication processing is performed. Absent. If the in-vehicle device 4 succeeds in the signature verification, the qualification authentication for the first roadside wireless communication device 5a is regarded as OK, the session key is acquired, and the random number 2 (L2) corresponds to the fixed information area number 94 in use. The fixed information identifier (corresponding to the fixed information identifier 9831 of the information rewriting work area 98) and the information rewriting work area rewrite pointer 982 stored in the fixed information area are encrypted with the same session key and sent to the first roadside wireless communication device 5a. Transmit (S119). The first roadside wireless communication device 5a decrypts the encrypted random number 2 (L2) with the session key to check whether it matches the original random number, and if it matches, the session key sharing is considered successful. (S120), the authentication process is terminated. Next, the first roadside wireless communication device 5a compares the fixed information identifier received from the vehicle-mounted device 4 with the fixed information identifier 50352 (S121), and if the fixed information identifier of the vehicle-mounted device 4 is the old version. Then, the fixed information rewriting process of the vehicle-mounted device 4 is entered.
In the above description, the authentication processing procedure between the vehicle-mounted device 4 and the first roadside wireless communication device 5a is shown as an example, but the authentication processing between the vehicle-mounted device and the roadside wireless communication device shown in FIG. The procedure is a processing procedure that is always performed between the vehicle-mounted device 4 and the n-th roadside wireless communication device (n is an integer of 1 or more) before rewriting the fixed information of the vehicle-mounted device 4.
[0033]
Next, the first roadside wireless communication device 5 a transmits the fixed information acquired from the roadside communication computer 6 to the vehicle-mounted device 4 for the first time. Thereafter, based on the information amount of the fixed information transmitted for the first time and the first address of the fixed information transmitted for the first time indicated by the information rewriting work area rewriting pointer 982 transmitted from the vehicle-mounted device 4, the first address of the second rewritten fixed information And the information rewrite pointer 1 corresponding to the calculation result is transmitted. In the vehicle-mounted device 4, the received first fixed information is stored in the area of the first rewriting fixed information 9832 in the information rewriting work area 98, and the received information rewriting pointer 1 is stored in the information rewriting work area rewriting pointer 982. After that, every time the in-vehicle device 4 receives the fixed information and the information rewrite pointer (m-th), the fixed information is stored in the corresponding m-th rewrite fixed information 9834 in the information rewrite work area 98 as shown in FIG. The information rewrite pointer is stored in the information rewrite work area rewrite pointer 982.
[0034]
In FIG. 16, information exchange and processing performed between the vehicle-mounted device 4 and the roadside system in the second section will be described. It is the same as the first section that the rewriting fixed information is held in advance in the encryption information area 5031 of the second roadside wireless communication device 5b by the fixed information rewriting command 1201 of the in-vehicle device, and similarly, all the nth In the roadside wireless communication device (n is an integer equal to or greater than 1), the rewritten fixed information is stored in advance in the encryption information area 5031 of the roadside wireless communication device in response to the onboard fixed information rewrite command from the roadside communication computer.
[0035]
The second roadside wireless communication device 5b transmits a connection request to the vehicle-mounted device 4 through the second antenna 3b for a predetermined time. This time is from a time when the automobile 2 is predicted to arrive at the communication area of the second antenna to a certain time or until a connection response is received (processing 1202). For example, when transmission is performed for a certain time from the estimated arrival time, the distance L between the first roadside wireless communication device 5a and the second roadside wireless communication device 5b is set to the maximum speed Vmax (for example, 120 km) preset for the vehicle-mounted device. / H) is set to a constant time (L / Vmax), or the first roadside wireless communication device 5a is provided with a speed measuring device for detecting the speed with a vehicle detector, radar, etc. The speed V of the vehicle-mounted device 4 passing through the first roadside wireless communication device 5a is obtained, and the arrival time is predicted with a value (L / V) obtained by dividing the distance L by this speed as a fixed time. In the case of a method of receiving a connection response, a beacon signal (ID request) is immediately sent from the second roadside wireless communication device 5b after the communication with the first roadside wireless communication device 5a is completed, When a response is returned from the vehicle-mounted device 4 having the same vehicle-mounted device ID as the vehicle-mounted device ID communicated with the side wireless communication device 5a, the transmission of the beacon signal (ID request) is stopped.
[0036]
Hereinafter, communication processing related to the fixed information update processing between the vehicle-mounted device 4 and the second roadside wireless communication device 5b in Step 1203 will be described.
Step 81 is the same as the processing in the first section of FIG. 8, and is an authentication process between the vehicle-mounted device 4 and the roadside wireless communication device 5 as shown in the detailed processing procedure in FIG. It is executed in all sections up to the section. Here, the fixed information identifier which is the transmission data in the processing 808 from the vehicle-mounted device 4 is the fixed information identifier 96c1 (in the fixed information region (m) 96c conventionally used in the encryption fixed information region 90 of the vehicle-mounted device. This is the content of (shown in FIG. 18). Further, the content of the information rewriting work area rewriting pointer which is transmission data in the processing 808 is the information rewriting pointer 1 written in the first section stored in 982.
In the second roadside wireless communication device 5b, in the communication with the vehicle-mounted device 4 in which the authentication process in step 81 has been normally completed, the process 1204 continues with the second rewrite fixed information 50353 stored in the encryption information area 5031. Is read from the position of the index indicated by the information rewrite pointer 1 (current pointer) to immediately before the information rewrite pointer 2 (new pointer), and transmitted to the vehicle-mounted device 4. The information rewrite pointer 2 calculates the start address of the third rewrite fixed information based on the information amount of the second rewrite fixed information and the start address of the second rewrite fixed information indicated by the information rewrite pointer 1. It is obtained as a pointer corresponding to the calculation result. The on-vehicle device 4 stores the second rewrite fixed information received in the process 1204 in the area 9833 of the information rewrite work area 98 (process 1205) and then transmits a response after the fixed information rewrite (process 1206). The second roadside wireless communication device 5b transmits the information rewriting pointer 2 to the vehicle-mounted device 4 (processing 1207). The in-vehicle device 4 stores the information rewrite pointer 2 received in the process 1207 in 982 of the information rewrite work area 98 (process 1208).
In this way, by performing signature verification also in the second wireless communication section, even if a plurality of roadside wireless communication devices 5 perform communication in time series in order, the confidentiality of communication is protected and is ineligible. It is possible to eliminate communication with a remote partner (for example, an unauthorized user using an unauthorized onboard device ID or a user with an expired onboard device ID). Further, by encrypting the key information transmitted with the session key 94 set in the first roadside wireless communication device 5a, confidentiality can be ensured in communication between the second roadside wireless communication device 5b and the vehicle-mounted device 4. It becomes possible to improve. Furthermore, by using the information rewrite pointer, it is possible to guarantee the continuity of communication between the roadside wireless communication devices 5 and the continuity of transmission data (rewrite fixed information).
[0037]
In FIG. 17, information exchange and processing performed between the vehicle-mounted device 4 and the roadside system in the n-th section will be described. The rewrite fixed information is stored in advance in the encryption information area 5031 of the roadside wireless communication device by the fixed information rewrite command of the vehicle-mounted device from the roadside communication computer is the same as the first and second sections. I will omit it. The processing in which the nth roadside wireless communication apparatus transmits a connection request to the vehicle-mounted device 4 for a certain time by processing 1401 is the same as that in the first and second sections, and is omitted here.
[0038]
Hereinafter, between the vehicle-mounted device 4 and the n-th roadside wireless communication device 5n in step 1402
A communication process related to the fixed information update process will be described.
Step 81 is the same as the processing in the first section of FIG. 8, and is omitted here. Here, the content of the information rewriting work area rewriting pointer 982 which is transmission data in the processing 805 from the vehicle-mounted device 4 is the information rewriting pointer (n−1) written and stored in the first section.
In the n-th roadside wireless communication device 5n, in the communication with the vehicle-mounted device 4 for which the authentication processing in step 81 has been normally completed, in the processing 1403, the rewrite fixed information 50353 stored in the encryption information area 5031 is continued for the nth time. The rewrite fixed information is read from the index indicated by the information rewrite pointer (n-1) to the last information of the rewrite fixed information, and transmitted to the vehicle-mounted device 4. Here, the n-th roadside wireless communication device 5n determines that the current processing target data is the transmission data of the last rewrite fixed information from the position information indicated by the information rewrite pointer (n-1) and the rewrite fixed information size 50351. .
In the vehicle-mounted device 4, as shown in FIG. 12, the n-th (final) rewrite fix information received in the process 1403 is stored in the area of the last (n-th) rewrite fix information 9837 in the information rewrite work area 98. When the response after rewriting the fixed information is transmitted after storing (process 1404) (process 1405), the n-th roadside wireless communication device 5n next sends the information rewrite pointer n (fixed information rewrite end status) to the vehicle-mounted device 4 (Process 1406). The in-vehicle device 4 stores the information rewrite pointer n received in the process 1406 in 982 of the information rewrite work area 98 (process 1407), and then returns a response to the end of the fixed information rewrite (process 1408). This completes the transmission of rewrite fixed information such as an encryption algorithm.
Next, the n-th roadside wireless communication device 5n verifies the fixed information rewriting status as follows. First, the nth roadside wireless communication device 5n transmits confirmation test data after rewriting fixed information to the vehicle-mounted device 4 (process 1409). For example, if the rewrite fixed information is a cryptographic algorithm program, the nth roadside wireless communication device 5n sends the random number 3 (L3) and the random number 4 (L4) to the in-vehicle device 4 as the confirmation test data (verification data). The in-vehicle device 4 encrypts L3 using L4 as an encryption key (generation of encrypted L3) using the current rewrite fixed information, and responds with the encrypted L3 data as a test result (processing 1410). ). The nth roadside wireless communication device 5n decrypts the encrypted L3 data received in the process 1410, compares the value with the original L3, and gives a test result confirmation response (OK). A result confirmation response (NG) is returned to the vehicle-mounted device 4 (processing 1411).
Next, in the vehicle-mounted device 4, if the test result confirmation in the process 1411 is a response (NG), the information rewrite work area rewrite pointer 982 in the information rewrite work area 98 is reset (0 cleared) and the process is terminated. If the test result confirmation in the process 1411 is a response (OK), a fixed information area number is entered in 94 in order to input the contents of the information rewriting work area 98 into the currently used fixed information area. As an example of this, as shown in FIG. 13, the contents of the information rewriting work area 98 are moved to the empty area of the fixed information area (m + 1) 99, and the fixed information area number (m) 94 in use is changed to (m + By setting 1), 99 fixed information will be used in the onboard equipment 4 thereafter. Then, transmission of fixed information from the (n + 1) th roadside wireless communication device thereafter is stopped.
In the n-th roadside wireless communication device 5n, when the test result confirmation in the process 1411 is a response (OK), the fact that the fixed information rewriting to the vehicle-mounted device has been completed is transmitted to the roadside communication computer 6 together with the vehicle-mounted device ID (process 1412). ). The roadside communication computer 6 creates a log of the OBE ID whose fixed information has been rewritten (process 1413), and transmits the log to the central computer 8 for information management (process 1414). By holding this log as management information, the information management central computer 8 can confirm the update status of the fixed information in the vehicle-mounted device 4, for example, a letter or e-mail to a non-updater of the fixed information The management at the center becomes easy.
In this way, by confirming that the rewriting of the fixed information has been completed in the in-vehicle device 4, the rewriting state of the information can be confirmed accurately, and if the rewriting does not work well due to some trouble, The occurrence of non-operation can be confirmed, and trouble can be dealt with.
[0039]
Embodiment 2. FIG.
In the above description, it has been described that one fixed information area is rewritten in one vehicle-mounted device, but a plurality of fixed information areas in use are managed in FIG. 13 (for example, 94 fixed information area numbers in use). By storing a plurality of fixed information, a plurality of fixed information can be rewritten or new fixed information can be stored in communication with the roadside wireless communication apparatus.
[0040]
In the above description, it was explained that one on-board unit communicates with a roadside system. For example, this type of communication system is a narrow-band radio communication system “Toll Road Automatic Toll Collection System Standard ARIB STD-T55 Corporation In the method described in “Radio Industry Association”, the number of multiplexing can be set up to a maximum of 8 by time division multiplexing (TDMA), and a plurality of vehicle-mounted devices can simultaneously communicate with each other in parallel. Therefore, the roadside wireless communication device can easily communicate with several on-board units at the same time by configuring it so that time-division multiplex communication and time-division multiplex processing can be performed in parallel with multiple on-board units at the same time. It is possible to change the information.
[0041]
【The invention's effect】
As described above, according to the present invention, it is possible to automatically rewrite important information stored in a moving body even when the moving body is moving along a moving route. Insertion can significantly reduce time and labor compared to the method of rewriting information.
Further, for example, a plurality of roadside systems installed along the movement route such as roadside devices arranged on toll roads can be utilized, so that it is not necessary to specially install a roadside system for changing information of the moving body.
[Brief description of the drawings]
FIG. 1 is a configuration diagram according to an embodiment of the present invention.
FIG. 2 is a configuration diagram showing an embodiment of the present invention.
FIG. 3 is a configuration diagram showing a connection form of an embodiment of the present invention.
FIG. 4 is a configuration diagram of an in-vehicle device.
FIG. 5 is a configuration diagram of a roadside apparatus according to an embodiment of the present invention.
FIG. 6 is a detailed configuration diagram of a roadside communication computer and an information management central computer according to the embodiment of the present invention.
FIG. 7 is a configuration diagram showing rewriting of fixed information of the vehicle-mounted device that accompanies movement of the vehicle in the embodiment of the present invention.
FIG. 8 is a diagram illustrating information exchange and processing performed between the vehicle-mounted device and the roadside system (first section) in the embodiment of the present invention.
FIG. 9 is a diagram for explaining a fixed information area for encryption possessed by the vehicle-mounted device according to the embodiment of the present invention.
FIG. 10 is an explanatory diagram at the time when the first rewrite fixed information is acquired for the information rewrite work area included in the encryption fixed information area of the vehicle-mounted device according to the embodiment of the present invention;
FIG. 11 is an explanatory diagram at the time when the m-th rewrite fixed information is acquired for the information rewrite work area included in the encryption fixed information area of the vehicle-mounted device according to the embodiment of the present invention.
FIG. 12 is an explanatory diagram at the time when the last rewrite fixed information is acquired for the information rewrite work area included in the encryption fixed information area included in the vehicle-mounted device according to the embodiment of the present invention;
FIG. 13 is an explanatory diagram at the time when the contents of the information rewriting work area included in the fixed information area for encryption possessed by the vehicle-mounted device according to the embodiment of the present invention are transferred to the fixed information area.
FIG. 14 is a diagram illustrating a roadside wireless communication apparatus encryption information area in the embodiment of the present invention.
FIG. 15 is a diagram illustrating details of a qualification authentication processing procedure between the vehicle-mounted device and the first roadside wireless communication device according to the embodiment of the present invention.
FIG. 16 is a diagram illustrating information exchange and processing performed between the vehicle-mounted device and the roadside system (second section) in the embodiment of the present invention.
FIG. 17 is a diagram illustrating information exchange and processing performed between the vehicle-mounted device and the roadside system (nth section) in the embodiment of the present invention.
[Explanation of symbols]
1 road
2 cars
3 Antenna
3a First antenna
3b Second antenna
3n nth antenna
4 Onboard equipment
401 IC socket
402 IC card interface
403 Host CPU
404 Display / input section
405 Wireless transceiver circuit
406 Antenna
407 Encryption / Decryption / Authentication Circuit
408 Encryption key information area
409 IC card (credit card)
5 roadside radio equipment
501 Wireless transceiver
502 Narrow Wireless Communication Circuit
503 Encryption / Decryption / Authentication Circuit
504 Communication circuit with roadside communication computer
505 checklist
506 processing unit
5a First roadside wireless communication device
5b Second roadside wireless communication device
5n nth roadside wireless communication device
6 Roadside communication computer
601 Connection circuit with roadside device
602 Connection circuit with central computer for information management
603 Connection circuit with roadside communication computer
604 Arithmetic control circuit and control program
605 Arithmetic control circuit, information management program
606 magnetic storage device
607 magnetic storage device
661 Fixed information for rewriting
662 On-board device rewrite record
663 On-board device identification information that does not require rewriting
671 Fixed information for rewriting
672 On-board device rewrite record
673 On-board unit identification information that does not require rewriting
7 Hub
71 1st section
72 Second leg
7n nth section
8 Central computer for information management
90 Fixed information area for encryption of OBE
91 OBE ID
92 Signature for OBE ID
93 Signature verification key (K2)
94 Fixed information area number in use
95 Fixed information area (1)
96 Fixed information area (2)
97 Fixed information area (n)
98 Information rewriting work area
5031 Roadside wireless communication device encryption information area
5032 Roadside device ID
5033 Signature verification key (K1)
5034 Signature generation key (S1)
5035 New / fixed information

Claims (7)

Wirelessly between a mobile body that is mounted with a cryptographic processing device and moves along a moving path, and a plurality of wireless communication devices that are mounted along the moving path and have different communication areas. In an information transmission system that exchanges information with each other,
Each of the wireless communication devices performs a communication for mutual authentication by encryption processing with a mobile body that passes through the communication area, and transmits a common key to mobile bodies that are determined to be valid with each other. means,
For the mobile body that has transmitted the common key by the first transmission means, the intercept information is extracted from the transmission target information consisting of a plurality of pieces of intercept information based on the position information indicated by the current pointer of the mobile body and extracted. Encryption means for encrypting the section information with a common key, and second transmission means for transmitting a new pointer indicating the position information of the next section information in the transmission target information together with the section information encrypted by the encryption means. Each comprising
The mobile unit encrypts the stored current pointer with the common key transmitted from the first transmission unit in the wireless communication device that is passing, and transmits the third pointer to the wireless communication device,
The intercept information and new pointer transmitted from the wireless communication device are received, the received information is decrypted with the common key, the decrypted intercept information is stored, and the decrypted new pointer is stored as the current pointer. An information transmission system comprising receiving means for performing Wirelessly between a mobile body that is mounted with a cryptographic processing device and moves along a moving path, and a plurality of wireless communication devices that are mounted along the moving path and have different communication areas. In an information transmission system that exchanges information with each other,
Each of the wireless communication devices is based on a mobile body ID for identifying the mobile body and a signature corresponding to the mobile body ID transmitted from the mobile body in response to a call to the mobile body passing through the communication area. A first authentication means for determining the validity of the communication,
A temporary common key and confirmation information are set for the mobile body determined to be valid by the first authentication means, and the common key, a signature corresponding to the common key, and confirmation information are transmitted. First transmitting means to
The confirmation information encrypted and transmitted by the mobile body determined to be valid by the first authentication means is decrypted with a common key, and the validity of the two-way communication is confirmed by comparison with the transmitted confirmation information. A second authentication means for determining;
And, for the moving body determined to be valid by the second authentication means, the intercept information is obtained from the transmission target information composed of a plurality of pieces of intercept information based on the position information indicated by the current pointer of the moving body. An encryption means for taking out and encrypting the taken piece information with a common key;
Along with the section information encrypted by the encryption means, each has a second transmission means for transmitting a new pointer indicating the position information of the next section information in the transmission target information,
The mobile unit is configured to transmit a mobile unit ID and a signature corresponding to the mobile unit ID to the radio communication device in response to a call in the communication area of the radio communication device that is passing,
A third authentication means for determining the validity of communication based on the signature corresponding to the decrypted common key transmitted from the wireless communication device and the common key;
A fourth transmitting means for encrypting the confirmation information and the stored current pointer with the common key and transmitting the encrypted information to the wireless communication device when it is determined that the third authentication means is valid;
The intercept information and the new pointer transmitted from the wireless communication apparatus are received, the received information is decrypted with the common key, the decrypted intercept information is stored, and the decrypted new pointer is used as the current pointer. An information transmission system comprising receiving means for storing.   3. The information transmission system according to claim 2, further comprising transmission stop means for stopping transmission of the information slice based on the current pointer transmitted from the mobile body and decoded and the information amount of the transmission target information.   After the transmission is stopped by the transmission stop means, verification means is provided for mutually exchanging verification data between the mobile body and the wireless communication device and verifying transmission target information received by the mobile body. The information transmission system according to claim 3, wherein:   3. The information transmission system according to claim 2, further comprising information management means connected to the wireless communication apparatus, wherein a plurality of pieces of transmission target information are provided in the information management means and are selected and set significantly. .   3. The information transmission system according to claim 2, wherein the transmission target information is information that causes a shortage in transmission time in a single wireless communication device such as an encryption processing algorithm or image information. Wirelessly exchanges information with a plurality of wireless communication devices that are installed with cryptographic processing devices and have different wireless communication areas along the movement route, and move along the movement route. In the moving body,
First receiving means for performing mutual authentication communication by encryption processing with the wireless communication device in the communication area of the wireless communication device, and receiving a common key from the wireless communication devices determined to be mutually valid;
A transmitting means for encrypting and transmitting the stored current pointer with the common key to the wireless communication device that has transmitted the common key;
From the wireless communication device that has transmitted the common key, the next piece information is positioned with respect to the piece information together with the piece information in the transmission target information encrypted with the common key corresponding to the position information indicated by the current pointer. Second receiving means for receiving a new pointer encrypted with the common key;
Decryption means for decrypting the intercept information and the new pointer received by the second reception means with the common key;
A wireless communication apparatus comprising storage means for storing the new pointer as a current pointer.

Images