JP5310090B2 - Payment system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a settlement system capable of reducing such a situation that a settlement is impossible by an ETC in-vehicle unit. <P>SOLUTION: This settlement system is provided with an ETC in-vehicle 10 for performing communication for collecting tolls with the outside and a portable unit 10 for inputting a password for setting settlement information stored in the ETC in-vehicle unit 10 to an activated state. The portable unit 20 is provided with: a human/machine interface 21 including a display device; a control part 23 having a clock function; and a non-volatile memory 24a for storing update warning date information showing an update warning date set to a date prior to the expiration date of the settlement information for warning the update of the settlement information. This settlement system is configured to compare the update warning date stored in the non-volatile memory 24a with the current date, and to monitor whether or not the update warning date has come at present, and to, when determining that the update warning date has come, notify a user that the expiration date of the settlement information is approaching by an HMI 21. <P>COPYRIGHT: (C)2010,JPO&amp;INPIT

Description

  The present invention relates to a payment system that performs communication for toll collection between a vehicle-mounted device for payment mounted on a vehicle side and a roadside antenna installed on a roadside.

  2. Description of the Related Art Conventionally, there is a cardless type ETC on-board unit that eliminates the need for an ETC card by storing settlement information necessary for toll collection stored in an IC chip of the ETC card in an internal memory of the ETC on-board unit.

  One example of such a cardless type ETC vehicle-mounted device is disclosed in Patent Document 1. The ETC vehicle-mounted device disclosed in Patent Document 1 is intended to prevent unauthorized use when the ETC vehicle-mounted device is stolen.

  When the immobilizer ECU authenticates the immobilizer key, the ETC on-vehicle device starts mutual authentication between the immobilizer ECU and the control unit of the ETC on-vehicle device. Then, when this mutual authentication is normally completed, the control unit of the ETC on-vehicle device transitions to a standby state in which it is possible to communicate with the roadside antenna for toll collection assuming that the immobilizer ECU has authenticated the immobilizer key. To do.

JP 2006-120072 A

  By the way, in the case of a type in which an ETC card is inserted into an ETC on-board device, a credit card is used as the ETC card. Usually, an expiration date is set for a credit card. Accordingly, when the expiration date of the credit card expires, the credit card can no longer be used, and the payment information stored in the credit card also expires, making it impossible to collect charges with the card. Therefore, if you want to continue using the credit card, you can apply for an update to a credit company or the like to extend the expiration date and continue using the credit card.

  On the other hand, in the case of the ETC on-vehicle device disclosed in Patent Document 1, it is only described that information such as an expiration date is stored by setup (initial information registration work) before using the ETC on-vehicle device. Accordingly, when communication for toll collection with the roadside antenna is started, there is a possibility that the expiration date has passed and the toll collection cannot be performed.

  The present invention has been made in view of the above-described problems, and communication for toll collection with a roadside antenna installed on the roadside using a payment onboard device in which payment information for payment is stored is stored. It is an object of the present invention to provide a payment system that can reduce a situation where payment cannot be made due to expiration of payment information.

In order to achieve the above object, the settlement system according to claim 1 is mounted on a vehicle and communicates with the outside for toll collection, and includes its own management number, settlement information necessary for toll collection, and settlement. An in-vehicle device for settlement having vehicle-side storage means in which a password for making the information in an activated state enabling toll collection is associated and stored;
A payment system comprising: at least one input device that inputs a password for making the payment information stored in the vehicle-side storage means into an activated state for enabling toll collection into the on-vehicle device for payment,
Input equipment
An update warning date information storage means for storing update warning date information indicating an update warning date for warning the update of the payment information, which is set to a date before the expiration date of the payment information;
Date acquisition means for acquiring the current date;
A monitoring unit that compares the update warning date stored in the update warning date information storage unit with the current date acquired by the date acquisition unit and monitors whether it is currently an update warning date;
A notification means for notifying the user that the expiration date of the payment information is near when the monitoring means determines that the update warning date is reached ,
The on-board device for payment acquires update information from a center that has update information for updating the payment information, and has a center-side security means for ensuring the security of the payment information and the update information. It has onboard equipment side security means to ensure information security,
Input equipment
Update determination means for determining whether or not an update instruction signal indicating update of settlement information is input;
If it is determined that an update instruction signal has been input, an update application means for applying to the center for transmission of update information;
It is characterized in Rukoto a transfer means for transferring the update information sent to the payment for the vehicle-mounted device from the center.

  In this way, by notifying the user that the expiration date of the payment information is close, it is possible to reduce the possibility that payment cannot be made due to the expiration date of the payment information. Also, the update warning date stored in the input device (update warning date information storage means) is always monitored regardless of the password input to the on-board device for payment and the use of communication for toll collection. In this case, the user is notified that the expiration date of the payment information is near, so that the user can be notified that the expiration date of the payment information is near before performing communication for fee collection.

In addition, as described above, since the input device only transfers the update information transmitted from the center to the on-board device for payment, there is no need to install a security function for ensuring the security of the update information, and the input device can be registered. It is preferable because it can be used without limiting the input device. In other words, even when a trouble occurs in the input device such as a failure, a battery exhaustion, or a replacement, the update process can be performed with the new input device.

In addition, as shown in claim 2 , the input device has update information for updating the payment information and can be connected to a center having a center-side security means for ensuring the security of the payment information and the update information. And
Update determination means for determining whether or not an update instruction signal indicating update of settlement information is input;
If it is determined that an update instruction signal has been input, an update application means for applying to the center for transmission of update information for updating payment information;
Update information storage means for storing update information transmitted from the center;
A first portable device side security means for ensuring security of update information;
It is determined whether or not a communication connection is established with the onboard device for payment, and a transfer means for transferring the update information stored in the update information storage means to the onboard device for payment when it is determined that the communication connection is established. Good.

  In this way, once the update information is acquired from the center, the update process can be performed when the communication path between the onboard device for payment and the input device can be secured (when communication is established). preferable. In other words, it is not necessary for the user who holds the input device to get into the car, and it can be updated anytime and anywhere in advance as long as the input device and the center are in a communication connection range. At this time, even if the communication connection between the input device and the center is out of the service area, the update process is smoothly performed from the input device to the settlement vehicle-mounted device.

Further, as shown in claim 3 , the center has new setting information for newly setting payment information secured by the center-side security means,
Input equipment
New setting determination means for determining whether or not a new setting instruction signal indicating new setting of payment information is input;
When it is determined that a new setting instruction signal has been input, a new setting application means for applying to the center for transmission of new setting information is provided.
The transfer means may transfer the new setting information transmitted from the center to the onboard device for payment.

  In this way, since the input device only transfers the new setting information transmitted from the center to the on-board device for payment, it is not necessary to install security to secure the new setting information, and the input device can be registered, It is preferable because it can be used without limiting. In other words, even when a trouble occurs in the input device such as a failure, a battery exhaustion, or when a replacement is made, a new setting process can be performed with the new input device.

Further, as shown in claim 4 , the center has new setting information for newly setting the payment information secured by the center side security means.
Input equipment
New setting determination means for determining whether or not a new setting instruction signal indicating new setting of payment information is input;
When it is determined that a new setting instruction signal is input, a new setting application means for applying to the center for transmission of new setting information;
New setting information storage means for storing new setting information transmitted from the center;
A second portable device side security means for ensuring the security of the new setting information,
The transfer means determines whether or not a communication connection is established with the payment on-vehicle device, and when it is determined that the communication connection is established, the new setting information stored in the new setting information storage means is transferred to the payment on-vehicle device. Also good.

  In this way, once new setting information is acquired from the center, a new setting can be made when a communication path between the on-board device for payment and the input device can be secured (when communication connection is established). Therefore, it is preferable.

Further, the update warning date information may set a date input by the user as shown in claim 5 , or may set the date of the first day of the update period as shown in claim 6 , Further, as shown in claim 7 , a date that is a predetermined number of days before the expiration date may be set.

In order to achieve the above object, the payment system according to claim 9 is mounted on a vehicle and communicates with the outside for toll collection, and has its own management number and settlement information necessary for toll collection. A vehicle-mounted payment device having vehicle-side storage means stored in association with a password for activating the payment information to enable payment collection,
A payment system comprising: at least one input device that inputs a password for making the payment information stored in the vehicle-side storage means into an activated state for enabling toll collection into the on-vehicle device for payment,
Input equipment
An update warning date information storage means for storing update warning date information indicating an update warning date for warning the update of the payment information, which is set to a date before the expiration date of the payment information;
Date acquisition means for acquiring the current date;
A monitoring unit that compares the update warning date stored in the update warning date information storage unit with the current date acquired by the date acquisition unit and monitors whether it is currently an update warning date;
A notification means for notifying the user that the expiration date of the payment information is near when the monitoring means determines that the update warning date is reached,
When the input device has a plurality of payment information and the update warning date information storage unit stores a plurality of update warning date information for the plurality of payment information, the notification unit uses the monitoring unit to update the update warning date. If it is determined that the payment information has been updated, the user may be notified that the payment information on the update warning date is close to the expiration date of the payment information.

This is preferable because it is possible to notify the user of which payment information is close to the expiration date among the plurality of payment information. Even in this case, the update warning date information may set the date input by the user as shown in claim 10, or the date of the first day of the update period as shown in claim 11. Alternatively, as shown in claim 12, a date before a predetermined number of days before the expiration date may be set.

It is a block diagram which shows schematic structure of the network containing the payment system in embodiment of this invention. It is a block diagram which shows schematic structure of the ETC onboard equipment in embodiment of this invention. It is a block diagram which shows schematic structure of the portable device in embodiment of this invention. It is a block diagram which shows schematic structure of the onboard equipment non-volatile memory in embodiment of this invention. It is a block diagram which shows schematic structure of the portable device side non-volatile memory in embodiment of this invention. It is a flowchart explaining processing operation | movement of the payment system containing the ETC vehicle equipment and portable device in embodiment of this invention. It is a flowchart explaining the update process operation | movement of the expiration date in embodiment of this invention. It is a flowchart explaining the monitoring process operation | movement of the expiration date in embodiment of this invention. It is a flowchart explaining the setting process operation | movement of the update warning date in embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  The settlement system in the present embodiment is applied to an ETC (Electronic Toll Collection) system that realizes toll collection by wireless communication for the purpose of alleviating traffic jams at toll gates on toll roads. Wireless communication with the roadside antenna and settlement of tolls. This settlement system includes the ETC vehicle-mounted device 10 and the portable device 20 shown in FIGS. ETC (Electronic Toll Collection) is a registered trademark. As shown in FIG. 1, the payment system performs new setting and update of payment information by communicating with a center (credit company) 40 via a communication carrier (communication station). .

  First, the configuration of the ETC in-vehicle device 10 and the portable device 20 will be described. The ETC on-board device 10 (on-board device for payment) is mounted on the vehicle and performs communication for toll collection. The on-board device side stores the payment information necessary for toll collection stored in the IC chip of the ETC card. It is a cardless type that does not require an ETC card by being stored in the nonvolatile memory 18a (hereinafter also referred to as the nonvolatile memory 18a).

  As shown in FIG. 2, the ETC on-vehicle device 10 includes a human-machine interface 11 (hereinafter also referred to as HMI 11), a communication interface 12, an ETC antenna 13, an ETC radio unit 14, an ETC communication control unit 15, an on-vehicle device side control. Unit 16 (hereinafter also referred to as control unit 16), security module 17, nonvolatile memory 18a, vehicle-mounted device side ROM 18b (hereinafter also referred to as ROM 18) and vehicle-mounted device side power supply unit 19 (hereinafter also referred to as power supply unit 19) Has a block. Each of these blocks 11 to 19 is housed in the same housing.

  The HMI 11 includes a display device, an audio output device, and an input device (all not shown). The display device is composed of a liquid crystal display or the like, and displays an activation result, which will be described later, according to a signal from the control unit 16. The audio output device is configured by a speaker that generates audio corresponding to a signal from the control unit 16. The input device includes buttons, switches, and the like, and outputs signals based on user operations on these to the control unit 16.

  The communication interface 12 communicates with the portable device 20 (the communication interface 22 of the portable device 20). For example, a communication unit that performs communication such as Bluetooth (registered trademark), infrared, and USB can be employed.

  The ETC antenna 13 transmits and receives radio waves to and from a roadside antenna (not shown) installed on the roadside.

  The ETC radio unit 14 performs amplification, frequency conversion, demodulation, A / D conversion and the like on the signal received by the ETC antenna 13 and outputs the resulting data to the ETC communication control unit 15. The ETC radio unit 14 performs D / A conversion, modulation, frequency conversion, amplification, etc. on the data input from the ETC communication control unit 15, and outputs the resulting signal to the ETC antenna 13.

  The ETC communication control unit 15 outputs the data input from the ETC radio unit 14 to the control unit 16, and outputs the data input from the control unit 16 to the ETC radio unit 14.

  The control unit 16 includes a CPU and a RAM (not shown). The control unit 16 reads a program from the ROM 18b, and exchanges data with the HMI 11, the communication interface 12, the ETC communication control unit 15, and the security module 17 as necessary. Moreover, the control part 16 activates the payment information memorize | stored in the non-volatile memory 18a demonstrated later. Note that the activation and deactivation processes may be performed by the security module 17.

  In the security module 17, the control unit 16 encrypts and decrypts data communicated with the roadside antenna via the ETC communication control unit 15, the ETC wireless unit 14, and the ETC antenna 13. Note that these HMI11 to ROM18a (excluding the antenna 13) are mounted as at least one or a plurality of IC packages or modules.

  The nonvolatile memory 18a stores various data such as a communication result of ETC communication and a usage history in accordance with a signal from the control unit 16. In addition, the non-volatile memory 18a is set up (initial information registration work) before using the ETC on-board device 10 to perform payment necessary for toll collection such as vehicle information such as an automobile registration number, a car name, and a model, and an ETC card number. Information is stored. For example, the setup data is wirelessly transmitted from the center 40 to the ETC antenna 13 of the ETC on-board device 10 (including vehicle information and payment information necessary for toll collection, expiration date information, and password: new setting information). Is done by.

  Specifically, as shown in FIG. 4, the non-volatile memory 18 a includes a plurality of payment information (here, payment information 1 to 3) and a number for identifying the ETC on-board device 10, and a duplicate number. Management number (in this case, OBE management number A) and a plurality of passwords (hereinafter also referred to as activation passwords) for activating each of the payment information 1 to 3 so that charges can be collected. Here, activation code numbers 1 to 3) and expiration date information (in this case, expiration date information 1 to 3) indicating the expiration date of each settlement information 1 to 3 are stored in association with each other ( Vehicle-side storage means). Note that the above information is not necessarily recorded in the single nonvolatile memory 18a, and may be recorded in separate nonvolatile memories. The activation code number includes arbitrary data that can authenticate (specify) the user, in addition to numbers and codes. The above-mentioned expiration date is equivalent to the expiration date of a credit card used for an ETC card in an ETC on-board device of a type in which a conventional ETC card is inserted. The expiration date information is information relating to the expiration date.

  In this way, having a plurality of payment information in one ETC on-board device 10 is effective when one vehicle is shared and used by a plurality of people, and payment can be made with the payment information of each payer. It becomes.

  For example, it is effective when three employees use one vehicle (for example, a company vehicle). In the nonvolatile memory of the ETC on-vehicle device mounted on the vehicle, the management number A, the settlement information 1, the activation password 1, the expiration date information 1, the settlement information 2, and the activation password 2 are stored as in the example of FIG. And expiration date information 2, settlement information 3, activation code number 3, and expiration date information 3 are stored (registered). On the other hand, three employees who use the vehicle have different portable devices (portable devices A20a to C20c). In the nonvolatile memory of the portable device A 20a, a management number A, settlement information 1, activation password 1, and expiration date information 1 are stored in association with each other. In the nonvolatile memory of the portable device B 20b, the management number A, the settlement information 2, the activation code number 2, and the expiration date information 2 are stored in association with each other. In the nonvolatile memory of the portable device C20c, the management number A, the settlement information 3, the activation code number 3, and the expiration date information 3 are stored in association with each other. In this way, even when one vehicle (ETC on-board device) is shared and used by three people, payment can be made with the payment information 1 to 3 of each payer.

  In addition to this, it is also effective when the payer is the same but has a plurality of payment information, and the payment information is switched according to the use conditions, service points, discounts, etc. for each payment information. It is also effective when the payment information is the same (corporate / company) and multiple people use it.

  Here, the activated state of the payment information is a state in which the payment information stored in the nonvolatile memory 18a can be read and written from the outside. When the payment information is not in the activated state, the payment information stored in the nonvolatile memory 18a cannot be read and written from the outside (inactivated state). The settlement information is normally in an inactive state, and when the activation code number is input to the ETC on-board unit 10 and matches the activation code number stored in the ETC on-board unit 10, the settlement information ( The payment information is valid). As a result, ETC can be used.

  In the present embodiment, an example in which a plurality of payment information, a plurality of activation code numbers, and a plurality of expiration date information are stored in the nonvolatile memory 18a will be described. However, the present invention is limited to this. It is not a thing. You may make it memorize | store one payment information, activation PIN, and expiration date information in one non-volatile memory 18a. That is, when only one nonvolatile memory 18a is provided in one ETC on-vehicle device 10, payment information, activation code number, and expiration date information may be held one by one in the nonvolatile memory 18a.

  In the present embodiment, an example in which an activation password is set for each of a plurality of pieces of payment information will be described. However, the present invention is not limited to this. A common activation password may be set for a plurality of pieces of payment information. For example, the settlement information 1 to 3 may be activated with the activation code number 1.

  The ROM 18b stores a program for operating the ETC in-vehicle device 10 in advance. The power supply unit 19 converts a voltage supplied from a vehicle battery via an accessory switch into a predetermined voltage and supplies the voltage to the blocks 11 to 18a and 18b.

  On the other hand, the portable device 20 (input device) is portable by a user such as a mobile phone, and is provided in the payment system. The portable device 20 is used to input an activation code number for making the payment information stored in the vehicle-mounted device-side nonvolatile memory 18a into an activated state in which fee collection is possible, to the ETC vehicle-mounted device 10. In other words, the portable device 20 is for making the ETC in-vehicle device 10 ready for toll collection.

  In the present embodiment, the portable device 20 is adopted as an input device. However, the present invention is not limited to this. The object of the present invention can be achieved as long as the activation code number can be input to the ETC in-vehicle device 10 (for example, navigation device (communication navigation), DCM, mobile personal computer, etc.).

  As shown in FIG. 3, the portable device 20 includes a human machine interface 21 (hereinafter also referred to as an HMI 21), a communication interface 22, a portable device side control unit 23 (hereinafter also referred to as a control unit 23), a portable device side non-volatile device. Blocks of the portable memory 24a (hereinafter also referred to as the non-volatile memory 24a), the portable device side ROM 24b (hereinafter also referred to as the ROM 24b), the portable device side power supply unit 25 (hereinafter also referred to as the power supply unit 25), and the mobile phone communication unit 26 It has. Each of these blocks 21 to 26 is housed in the same casing. The portable device 20 has a normal mode in which functions of a normal mobile phone (call, Internet, mail, etc.) can be executed, and a mode in which only packet communication is performed (only input data is transferred). It has a modem mode (modem function) that does not intervene in the content.

  The HMI 21 includes a display device, an audio output device, and an input device (all not shown). The display device includes a liquid crystal display or the like, and displays an activation result, which will be described later, according to a signal from the control unit 23. The audio output device is configured by a speaker that generates audio corresponding to a signal from the control unit 16. The input device includes buttons, switches, and the like, and outputs signals based on user operations on these to the control unit 23.

  The communication interface 12 communicates with the ETC vehicle-mounted device 10 (the communication interface 12 of the ETC vehicle-mounted 10). For example, a communication unit that performs communication such as Bluetooth (registered trademark), infrared, and USB can be employed.

  The control unit 23 includes a CPU and a RAM (not shown). The control unit 23 reads a program from the ROM 24b, exchanges data with the HMI 21, the communication interface 22, and the mobile phone communication unit 26 as necessary, and controls execution of the normal mode and the modem mode. Further, the control unit 23 has a clock function (date acquisition means), and determines whether or not an update warning date to be described later has passed. The control unit 23 may acquire date information regarding the current date from the outside (date acquisition means). Note that a program for operating the portable device 20 is stored in the ROM 24b in advance.

  As shown in FIG. 5, the nonvolatile memory 24a includes a plurality of ETC on-board unit management numbers (here, on-board unit management number A, on-board unit management number B) and a plurality of settlement information (here, settlement information). 1 to 3), a plurality of activation code numbers (here, activation code numbers 1 to 3) for each of the payment information 1 to 3, and update warning date information for warning the update of each of the payment information 1 to 3. 1 to 3 are linked (linked means) and stored (update warning date information storage means). The update warning date is for informing the user that the expiration date of the payment information is approaching, and is a date before the expiration date of the payment information (for example, several days before the expiration date or several months) Previous) is set.

  This renewal warning date is a default value determined in the same way for the expiration date of any settlement information (a date before a predetermined number of days, for example, one month before any expiration date), depending on the user's operation The value input from the HMI 21 (the date input by the user and determined by the user individually) or the value indicating the first date of the settlement information update period (the first date of the update period determined by the credit company) (Warning date information setting means). The update warning date information is information relating to this date (information indicating the update warning date). The setting of the update warning date will be described later.

  Note that the renewal period is equivalent to the renewal period of a credit card used for an ETC card in a conventional ETC on-vehicle device in which an ETC card is inserted. Then, the payment information can be extended by updating the expiration date by performing an update process within the update period. Therefore, the update of the settlement information and the update of the expiration date have the same meaning.

  As described above, storing a plurality of settlement information for each management number and activation passwords is effective when one person uses the ETC on-board device in a plurality of vehicles. This is effective when one person uses three vehicles (for example, a company vehicle, his own vehicle, and a family vehicle). A management number A, settlement information 1 and activation password 1 are stored (registered) in the non-volatile memory of the ETC on-vehicle device mounted on the company vehicle. The management number B, the settlement information 1 and the activation code number 1 are stored (registered) in the nonvolatile memory of the ETC on-vehicle device mounted on the own vehicle. The management number C, the settlement information 1 and the activation code number 1 are stored (registered) in the non-volatile memory of the ETC on-vehicle device mounted on the family vehicle. On the other hand, the users of the three vehicles have the portable device 20. In the non-volatile memory of the portable device 20, the management number A, the settlement information 1, and the activation password 1 are stored in association with each other. In addition, the management number B, the settlement information 1 and the activation code number 1, and the management number C, the settlement information 1 and the activation code number 1 are associated and stored. As described above, even when any of the three vehicles is used, the settlement with the settlement information 1 is possible. Of course, the payment information may differ depending on the vehicle.

  In addition, when a vehicle is scrapped or transferred, the settlement information for each management number and the activation password recorded in the ETC on-vehicle device 10 may have a function that can be deleted simultaneously. Further, when the number of items that can be registered is exceeded, a warning may be issued to the portable device 20 so that processing such as overwriting can be performed.

  Furthermore, it is also effective when the payer is the same but has a plurality of payment information, and the payment information is switched according to the use conditions, service points, discounts, etc. for each payment information.

  The mobile phone communication unit 26 performs communication via a mobile phone network. In addition, the mobile phone communication unit 26 functions as a modem between the ETC in-vehicle device 10 and the center 40 (communication carrier 30). The power supply unit 25 is a battery that supplies power to each of the blocks 21 to 24a, 24b, and 26.

  The center 40 is a credit company that issues and manages payment information, expiration date information of the payment information, and update period information, and is connected to the portable device 20 via a personal computer, a server, and the communication carrier 30. It has a possible configuration. Further, the center 40 ensures security by encrypting the payment information and update information described later (center side security means). It should be noted that security is ensured by encrypting the settlement information and update information described later in the ETC on-vehicle device 10 (on-vehicle device side security means). That is, payment information and update information are secured by the security of the center 40 and the mutual authentication and communication data encryption security installed in the ETC in-vehicle device 10. The mutual authentication is a function for confirming whether the security of the center 40 and the ETC in-vehicle device 10 is an authorized partner. In addition, between the ETC onboard device 10 and the portable device 20, between the portable device 20 and the communication carrier 30, encryption of each communication path itself between the communication carrier 30 and the center 40, device authentication, etc. You may mount according to a communication standard. In this case, the data signal of the communication path is doubled with the security defined in the communication standard and the security of the payment information.

  Here, the processing operation of the payment system constituted by the ETC on-board device 10 and the portable device 20 will be described using the flowchart shown in FIG.

  In FIG. 6, steps S <b> 201 to S <b> 212 are processing operations executed by the ETC on-vehicle device 10, and steps S <b> 213 to S <b> 231 are processing operations executed by the portable device 20. A dotted line indicates communication at the communication interface 12 in the ETC in-vehicle device 10 and the communication interface 22 in the portable device 20.

  The flowchart in FIG. 6 starts when, for example, the ETC in-vehicle device 10 has the portable device 20 within a predetermined range (a range in which Bluetooth communication is possible). On the other hand, the portable device 20 starts when power is supplied.

  First, in step S <b> 201, the ETC in-vehicle device 10 is linked to the communication interface 22 of the portable device 20 through the communication interface 12.

  In step S202, the ETC vehicle-mounted device 10 transmits the payment information 1 to 3 together with the vehicle-mounted device management number A stored in the vehicle-mounted device-side nonvolatile memory 18a to the portable device 20 (management number transmission means, payment information transmission means). ). Note that encryption may be performed in data communication between the communication interface 22 of the portable device 20 and the communication interface 12 of the ETC on-vehicle device 10. Moreover, when the payment information and the activation code number are associated with one on-vehicle device management number one by one, only the on-vehicle device management number may be transmitted.

  Here, the payment information handled by the ETC in-vehicle device 10 and the portable device 20 is a number by which the user can check which payment information, and is not all the payment information that is actually processed. For example, the last four digits of a credit card or ETC card number may be used as the payment information.

  On the other hand, in step S213, the portable device 20 performs an expiration date monitoring process. In the expiration date monitoring process in step S213, as shown in the flowchart of FIG. 8, the portable device 20 compares the current date with the update warning date information stored in the nonvolatile memory 24a in step S2131. It is then determined whether the update warning date has passed (monitoring means). If it is determined that the update warning date has passed, the process proceeds to step S2222 in the expiration date update process of FIG. 7, and if it is determined that the update warning date has not passed, the process returns to the process shown in FIG. 6 (proceeds to step S214). That is, the portable device 20 always monitors the payment information update warning date stored in the non-volatile memory 24a regardless of the use of the ETC. Can be notified.

  In step S214, the portable device 20 determines whether or not the link connection with the ETC on-vehicle device 10 has been made. If it is determined that the link connection has been made, the process proceeds to step S215. If it is determined that the link connection has not been made, the process returns to step S213. That is, the portable device 20 always monitors the expiration date of the payment information in step S213.

  In step S215, the portable device 20 determines whether or not the in-vehicle device management number A and the payment information 1 to 3 transmitted from the ETC on-vehicle device 10 have already been registered (stored) in the portable device-side nonvolatile memory 24a. Determine. If it is determined that there is registration, the process proceeds to step S216. If it is determined that there is no registration, the process proceeds to step S224. In the present embodiment, as shown in FIG. 5, since the in-vehicle device management number A and the payment information 1 to 3 are stored in the portable device-side nonvolatile memory 24a, the process proceeds to step S214.

  Here, when the in-vehicle device management number A and the payment information 1 to 3 acquired from the ETC on-vehicle device 10 are not registered (stored) in the portable device-side non-volatile memory 24a (NO determination in step S215), step S224 is performed. Registration is performed in S228.

  In step S224, the portable device 20 registers (stores) the in-vehicle device management number A and the payment information 1 to 3 acquired from the ETC on-vehicle device 10 in the portable device-side nonvolatile memory 24a. Next, in step S225, the portable device 20 displays all the payment information 1 to 3 on the display device of the HMI 21. In step S226, the portable device 20 selects payment information (in this case, payment information 1) based on a signal from the input device of the HMI 21 (selection means).

  In step S227, the portable device 20 determines whether the in-vehicle device management number A transmitted from the ETC on-vehicle device 10 has already been registered (stored) in the portable device-side nonvolatile memory 24a. If it is determined that it has been registered, the process proceeds to step S219. If it is not determined that it has been registered, the process proceeds to step S228.

  In step S228, the portable device 20 inputs the activation code number 1 to the portable device-side nonvolatile memory 24a based on a signal from the input device of the HMI 21 (activation code number 1 input by the user). That is, the OBE management number A, the selected settlement information 1 and the input activation code number 1 are linked and stored (linking means).

  In step S229, the portable device 20 selects whether to activate the payment information automatically or manually based on a signal from the input device of the HMI 21. Then, the process proceeds to step S219. In addition, when setting to activate automatically, it enables a user to select which payment information is used. That is, the control unit 23 displays a menu screen for selecting settlement information to be used on the display device of the HMI 21. Then, payment information is selected based on a signal from the input device of the HMI 21.

  When performing settlement, there are cases where settlement is performed with the same settlement information every time, settlement is performed by changing settlement information, and the like. Therefore, by setting whether the activation is performed automatically or manually as described above, it is possible to adapt to the usage state of the settlement information and improve convenience. For example, by setting to manual, it is possible to allow the user to select which payment information is used each time payment information and activation password are transmitted. It is suitable when performing. On the other hand, since the payment information and the activation code number are automatically transmitted by setting to automatic, it is suitable when the payment is made with the same payment information every time.

  On the other hand, when the in-vehicle device management number A and the payment information 1 to 3 acquired from the ETC on-vehicle device 10 are registered (stored) in the portable device-side non-volatile memory 24a (YES in step S215), in step S216, the mobile device The machine 20 determines whether it is set to automatic. This is to determine whether to activate payment information automatically or manually. That is, it is determined whether to automatically transmit an activation code number for activating payment information or to transmit a password selected by the user. If it is determined to be automatic, the process proceeds to step S218. If it is not determined to be automatic, the process proceeds to step S217.

  In step S217, the portable device 20 displays on the display device of the HMI 21 that it is waiting for an activation instruction such as which payment information is to be activated, and waits for an input from the input device of the HMI 21. That is, if the activation of the settlement information is set to be performed manually, the settlement information 1 and the activation password in step S219, which will be described later, if the activation instruction is not given from the user through the input device of the HMI 21. Number 1 is not sent. On the other hand, if the payment information is set to be activated automatically, the payment information 1 and the activation code number 1 are automatically transmitted.

  In step S218, the portable device 20 selects (in this case, payment information 1) payment information (here, payment information 1) set based on a signal from the input device of the HMI 21 (in the case of manual operation) or set in advance (in the case of automatic operation). means).

  In step S219, the portable device 20 transmits the selected payment information 1 and the activated password number 1 associated with the payment information 1 to the ETC on-vehicle device 10 via the communication interface 22 (input means). In addition, when the payment information and the activation code number are respectively associated with one vehicle-mounted device management number, only the activation code number may be transmitted.

  The ETC in-vehicle device 10 that has transmitted the settlement information 1 to 3 together with the in-vehicle device management number A to the portable device 20 (step S202), whether or not the settlement information and the activation password from the portable device 20 are input in step S203. Determine whether. That is, it is in a state waiting for input of settlement information and an activated password. If the settlement information and the activation password are not input, this determination is repeated. However, when this determination is repeated a predetermined number of times, or when the settlement information and the activation code number are not input within a predetermined time, the process is terminated. On the other hand, if the settlement information and the activation password are input, the process proceeds to step S204. Here, an example in which the settlement information 1 and the activation code number 1 for the settlement information 1 are input will be described.

  In step S204, the ETC vehicle-mounted device 10 collates the activation code number 1 for the input payment information 1 with the activation code number for the payment information 1 stored in advance in the vehicle-mounted device non-volatile memory 18a ( Determination means). In step S205, the ETC on-vehicle device 10 proceeds to step S206 if it is determined that they match, and proceeds to step S207 if it is not determined that they match (determination means).

  In step S206, the ETC vehicle-mounted device 10 activates the payment information 1 stored in the vehicle-mounted device-side nonvolatile memory 18a (activation means). That is, the ETC in-vehicle device 10 is in a state where the payment information 1 can be read and written. As a result, wireless communication is performed with the roadside antenna installed at the toll booth, and the toll collection by the settlement information 1 becomes possible.

  If it is not determined in step S205 that they match, the settlement information 1 stored in the vehicle-mounted device-side nonvolatile memory 18a is deactivated (activation means). In other words, the payment information is activated only when the activation password for the payment information input to the ETC on-vehicle device 10 and the activation password for the payment information stored in the in-vehicle device nonvolatile memory 18a in advance match. To do.

  In step S207, the ETC on-vehicle device 10 transmits information indicating the activation result to the portable device 20 through the communication interface 12, and the expiration date information for the payment information (here, payment information 1) input from the portable device 20. Is read from the nonvolatile memory 18a and transmitted to the portable device 20 through the communication interface 12. Then, the process proceeds to the expiration date update process in step S208.

  The portable device 20 that has received the information indicating the activation result and the expiration date information receives the activation input to the ETC on-vehicle device 10 from the information indicating the activation result transmitted from the ETC on-vehicle device 10 in step S220. It is determined whether or not the personal identification number 1 matches the activation personal identification number for the payment information 1 stored in advance in the vehicle-mounted device-side nonvolatile memory 18a. That is, it is determined whether or not the payment information 1 is activated. If it is determined that they match, the process proceeds to step S221. If it is determined that they do not match, the process proceeds to step S230.

  In step S <b> 230, the portable device 20 determines whether there is a cancellation instruction based on a signal from the input device of the HMI 21. If it is determined to be canceled, the process proceeds to step S231. If it is not determined to be canceled, the process proceeds to step S228.

  In step S231, the portable device 20 determines whether or not other payment information is designated based on a signal from the input device of the HMI 21. If it is determined that other payment information has been designated, the process proceeds to step S225. If it is not determined that other payment information has been designated, the process returns to step S213.

  On the other hand, if it is determined in step S220 that they match, the portable device 20 performs an update warning date setting process in step S221, and then performs an expiration date update process (that is, payment information update process) in step S222. Do.

  First, the update warning date setting processing operation will be described based on the flowchart shown in FIG. In step S2211, the portable device 20 sends the expiration date information of the payment information received from the ETC onboard device 10 (the expiration date information transmitted by the ETC onboard device 10 in step S207 of FIG. 6) to the nonvolatile memory 24a or the control unit 23. It is recorded (stored) in a RAM (not shown) provided.

  In step S2212, the portable device 20 determines whether or not to individually set an update warning date. At this time, the control unit 23 of the portable device 20 displays a screen for selecting whether or not to set individually on the display device of the HMI 21. Then, based on the signal from the input device of the HMI 21, it is determined whether or not the update warning date is individually set. If it is determined that the update warning date is individually set, the process proceeds to step S2218. If it is not determined that the update warning date is individually set, the process proceeds to step S2213.

  In step S2218, the portable device 20 sets a date input by the user from the input device of the HMI 21 as an update warning date (sets the input date as update warning date information. Warning date information setting means), and sets the update warning date. The update warning date information shown is associated with the payment information and recorded (stored) in the nonvolatile memory 24a. That is, the control unit 23 of the portable device 20 displays the date input screen on the display device of the HMI 21. Then, the signal (date signal) input from the input device of the HMI 21 is associated with the payment information and recorded (stored) in the nonvolatile memory 24a.

  In step S2213, the portable device 20 makes a communication connection with the center 40 via the communication carrier 30 in the cellular phone communication unit 26, and inquires the center 40 about an update period for the expiration date (payment information).

  In step S2214, the portable device 20 determines whether or not the update period information related to the update period has been received by the mobile phone communication unit 26. If it is determined that the update has been received, the portable device 20 proceeds to step S2215 and determines that it has been received. If not (when it is determined that reception has failed), the process advances to step S2216.

  In step S2215, the portable device 20 sets the first day of the update period as the update warning date based on the update period information received from the center 40 (sets the date of the first day as the update warning date information. Warning date information setting unit), The update warning date information indicating the update warning date and the payment information are linked and recorded (stored) in the nonvolatile memory 24a.

  In step S <b> 2216, the portable device 20 performs a setting to automatically acquire the center 40 at a later date. That is, when the control unit 23 of the portable device 20 determines that the reception has failed, the mobile phone communication unit 26 automatically connects to the center 40 via the communication carrier 30 and updates the expiration date after several days from that date. The period is set so as to inquire the center 40 (request update period information).

  In step S2217, the portable device 20 records (stores) the update warning date information set based on the default value in the nonvolatile memory 24a in association with the payment information. That is, for example, the control unit 23 of the portable device 20 sets a date one month before (default value) as the update warning date with respect to the expiration date (sets a date a predetermined number of days before the expiration date as update warning date information). Warning date information setting means). The update warning date information indicating the update warning date is associated with the payment information and recorded (stored) in the nonvolatile memory 24a.

  When the update warning date information is recorded in this way, the process returns to the process shown in FIG. 6 and proceeds to the expiration date update process in step S222.

  Next, the expiration date update processing operation will be described based on the flowchart shown in FIG. In the present embodiment, the expiration date update process is executed by communication connection between the ETC in-vehicle device 10 and the center 40 via the portable device 20. However, as will be described later, as a modification, the portable device 20 and the center 40, and the portable device 20 and the ETC in-vehicle device 10 may be connected and executed at different timings.

  First, the process in the portable device 20 will be described. In step S2221, the portable device 20 compares the current date with the update warning date information, and determines whether or not it is an update warning date (update period) (monitoring means). If it is determined that the date is an update warning date, the process proceeds to step S2222. If it is determined that the date is not an update warning date, the expiration date updating process is terminated and the process returns to the process of FIG. Note that as described above, if it is determined in step S2131 in FIG. 8 that the current date has passed the update warning date, the process also proceeds to step S2222.

  In step S2222, the portable device 20 displays on the display device in the HMI 21 that the expiration date of the payment information is near, and notifies the user that the expiration date of the payment information is near (notification means).

  At this time, as in the present embodiment, the portable device 20 displays a plurality of pieces of payment information 1 to 3 and update warning date information 1 to 3 for warning the update of each of the payment information 1 to 3. In step S2222, the user is notified of the payment information (payment information whose expiration date is close) that is the update warning date and that the expiration date of the payment information is close (notification means). In other words, the user is notified of which payment information is close to the expiration date among the plurality of payment information.

  If the portable device 20 stores one piece of payment information and one piece of update warning date information for warning the update of the payment information in the nonvolatile memory 24a, in step S2222, the payment information is validated. You may make it notify a user only that a time limit is near.

  Thus, by notifying the user that the expiration date of the payment information is near, it is possible to suppress the expiration date of the payment information from passing. Further, in the present invention, as shown in FIGS. 7 and 8, when the update warning date of the payment information stored in the non-volatile memory 24a is always monitored regardless of the use of the ETC, Since it is notified to the user that the expiration date of the payment information is near, it is preferable because the user can be notified that the expiration date of the payment information is near before using the ETC.

  In addition, it is preferable to notify the user that the expiration date of the payment information is close to the expiration date of the update warning date, so that the user can be notified of which payment information is about to expire.

  In step S2223, the portable device 20 determines whether to update the payment information (expiration date). At this time, the control unit 23 of the portable device 20 displays a screen for selecting whether or not to update the expiration date on the display device of the HMI 21. In this way, the user is allowed to select whether or not to update the expiration date. Then, it is determined whether to update the expiration date based on a signal (update instruction signal) from the input device of the HMI 21 (update determination means). If an update instruction signal is input and it is determined that the expiration date is to be updated, the process proceeds to step S2224. If it is not determined to update the expiration date, the expiration date updating process is terminated and the process returns to the process of FIG.

  In step S <b> 2224, the portable device 20 communicates with the center 40 via the communication carrier 30 in the mobile phone communication unit 26 and transmits application information to the center 40, thereby updating the expiration date ( Application for update information transmission (update application means).

  Here, the center 40 that has received the application information from the portable device 20 performs an expiration date update process shown in step S300. In step S <b> 301, the center 40 notifies the portable device 20 that the expiration date update processing is started and issues update information (including payment information) for updating the payment information. The portable device 20 that has received this notification notifies the ETC in-vehicle device 10 of the update start.

  In step S2225, when the portable device 20 confirms the connection with the ETC on-vehicle device 10, the portable device 20 activates a modem function that secures a communication path between the information on the center 40 and the information on the ETC on-vehicle device 10. Thereby, the center 40 and the ETC vehicle-mounted device 10 are in a state where information can be directly exchanged. In addition, the portable device 20 transfers the update information transmitted from the center 40 to the ETC on-vehicle device 10 (transfer means).

  In this way, the portable device 20 only transfers information exchanged between the center 40 and the ETC on-vehicle device 10, and therefore it is necessary to install a security function for ensuring the security of payment information and update information. It is preferable that the portable device 20 can be used without registering or limiting the portable device 20. That is, the update process can be performed even when a trouble occurs in the portable device 20 such as a failure, a battery exhaustion, or a replacement.

  In step S2081, the ETC on-vehicle device 10 updates the settlement information based on the update information transmitted from the center 40, and notifies the center 40 that the update has been completed.

  In step S302, when the center 40 determines that the update process is complete, the center 40 notifies the portable device 20 of the completion of the update (transmits a signal indicating the completion of the update to the portable device 20). This notification is executed by a function such as a command frame that is different from the data of the modem function.

  In step S2226, the portable device 20 that has received this notification stops the modem function. In step S2227, the portable device 20 displays the update completion on the display device in the HMI 21, and notifies the user of the update completion. When the expiration date update process is completed, the process returns to the process shown in FIG.

  Similarly, as shown in step S2082, the ETC on-vehicle device 10 notifies the user of the completion of the update by displaying the update of the expiration date on the display device in the HMI 11 when the update of the payment information is completed. To do. When the expiration date update process is completed, the process returns to the process shown in FIG.

  After the expiration date update processing is completed, the ETC on-vehicle device 10 displays the activation result on the display device in the HMI 11, as shown in step S209 of FIG. That is, it displays whether or not the ETC in-vehicle device 10 is in a state where it is possible to collect charges with the payment information 1.

  In step S210, the ETC on-vehicle device 10 determines whether or not the payment information and the activation code number for the payment information have been re-input from the portable device 20, and returns to step S203 if it is determined that the input has been re-input. If it is determined that there is no re-input, the process proceeds to step S211.

  And as shown in step S211, the ETC onboard equipment 10 will deactivate the payment information 1 memorize | stored in the onboard equipment non-volatile memory 18a in step S212, when an accessory is turned off (ACCOFF). As a result, the payment information 1 cannot be read or written, and wireless communication is performed with the roadside antenna installed at the toll booth, making it impossible for the payment information 1 to be collected. If the accessory is not turned off, the ETC on-vehicle device 10 returns to the determination (step S210) of whether or not there is a re-input.

  Further, after the expiration date update process is completed, the portable device 20 displays the activation result on the display device in the HMI 21 as shown in step S223 of FIG. In other words, it is displayed that the ETC on-board device 10 is in a state where the payment information 1 can be collected.

  As described above, at least one input device (portable device 20) including means for associating the onboard device management number of the ETC onboard device 10 with the activation password for activating the settlement information is provided. Therefore, it is possible to reduce the case where payment cannot be made by the ETC in-vehicle device 10. Further, even if only the ETC on-vehicle device 10 is stolen, it is in an inactive state, so the ETC cannot be used, and the effect of preventing theft is tremendous. For example, even when the mobile phone as an input device is forgotten, it is possible to borrow another mobile phone and input the activation password to the ETC on-board unit.

  Further, in the above-described embodiment, when the expiration date is updated, the portable device 20 is set in the modem mode and the ETC on-board unit 10 and the center 40 communicate with each other. Is not limited to this. For example, a communication path between the ETC on-vehicle device 10 and the portable device 20 may not be ensured. Therefore, as a modification, the mobile device 20 is provided with a function for ensuring security by encrypting payment information and update information (first mobile device-side security means).

  The control unit 23 of the portable device 20 displays a screen for selecting whether to update the expiration date on the display device of the HMI 21. In this way, the user is allowed to select whether or not to update the expiration date. Then, it is determined whether to update the expiration date based on a signal (update instruction signal) from the input device of the HMI 21 (update determination means). If the mobile device 20 determines that the expiration date is to be updated by inputting an update instruction signal, the mobile device 20 communicates with the center 40 via the communication carrier 30 in the mobile phone communication unit 26, and sends the application information to the center 40. By transmitting, the center 40 is requested to update the expiration date (transmission of update information) (update application means).

  Next, the portable device 20 obtains update information from the center 40, secures security by encrypting the update information, and temporarily stores (stores) it in a RAM (not shown) or the nonvolatile memory 24a. (Update information storage means). Then, the portable device 20 stores the update information stored at any time (for example, when it is determined that the communication connection with the ETC on-board device 10 is established, for example, when the link connection with the ETC on-vehicle device 10 is performed). Transmit (transfer) to the vehicle-mounted device 10 (transfer means). The update process may be performed in this way. By doing in this way, once update information is acquired from the center 40, it is preferable because an update process can be performed when a communication path between the ETC on-vehicle device 10 and the portable device 20 can be secured.

  Further, when the payment information is newly set, that is, at the time of setup, it is performed by communication between the ETC in-vehicle device 10 and the center 40 via the portable device 20 as described above. The center 40 is secured by encryption or the like (center-side security means), and includes setup data for newly setting payment information (including vehicle information and payment information necessary for toll collection, expiration date information, and password) : New setting information).

  First, when newly setting payment information, the mobile device 20 is connected to the center 40 via the communication carrier 30 in the mobile phone communication unit 26, and application information (credit number) indicating new setting of payment information. Etc.) is transmitted to the center 40, and a new setting of payment information is applied to the center 40 (new setting application means). In other words, the center applies for transmission of setup data.

  At this time, the portable device 20 displays a screen for applying for a new setting of payment information on the display device of the HMI 21 based on a signal from the input device of the HMI 21. Then, the portable device 20 determines whether or not a new setting instruction signal indicating new setting of payment information has been input from the input device of the HMI 21 (new setting determination means). When it is determined that a new setting instruction signal has been input, the portable device 20 applies to the center for transmission of setup data (new setting application means).

  Next, the center 40 that has received the application information indicating the application for new setting from the portable device 20 notifies the portable device 20 that the payment information issuance processing is started when the approval of the portable device 20 is completed. At the same time, issue setup data.

  When the portable device 20 that has received the notification of the start of the issuing process from the center 40 confirms the connection with the ETC on-vehicle device 10, the portable device 20 has a modem function that secures a communication path between the information on the center 40 and the information on the ETC on-vehicle device 10. to start. Thereby, the center 40 and the ETC vehicle-mounted device 10 are in a state where information can be directly exchanged. In addition, the portable device 20 transfers the setup data transmitted from the center 40 to the ETC on-vehicle device 10 (transfer means).

  By doing in this way, since the portable device 20 only transfers the setup data exchanged between the center 40 and the ETC on-vehicle device 10, there is no need to install security to secure payment information and setup data, This is preferable because it can be used without registering the portable device 20 or limiting the portable device 20. That is, the new setting process can be performed even when trouble occurs in the portable device 20 such as failure, battery exhaustion, replacement by purchase, and the like. And the ETC onboard equipment 10 will perform a setup, if the setup data transmitted from the center 40 are received.

  Further, in the above-described embodiment, when the payment information is newly set, the portable device 20 is set to the modem mode and the ETC onboard device 10 and the center 40 communicate with each other. The invention is not limited to this. For example, a communication path between the ETC on-vehicle device 10 and the portable device 20 may not be ensured. Therefore, as a modification, the mobile device 20 is provided with a function of ensuring security by encrypting payment information and setup data (second mobile device-side security means).

  The control unit 23 of the portable device 20 displays a screen for selecting whether or not to set a new expiration date on the display device of the HMI 21. In this way, the user is allowed to select whether or not to update the expiration date. Then, based on whether or not a signal (new setting instruction signal) is input from the input device of the HMI 21, it is determined whether or not to set a new expiration date (new setting determining means). When the mobile device 20 determines that the expiration date is to be newly set by inputting a new setting instruction signal, the mobile device 20 communicates with the center 40 via the communication carrier 30 in the mobile phone communication unit 26, and transmits the application information to the center. By transmitting to 40, the center 40 is requested to apply for a new setting of expiration date (transmission of setup data) (new setting application means).

  Next, the portable device 20 obtains setup data from the center 40 and secures the security by encrypting the setup data, and temporarily stores (stores) the data in a RAM (not shown) or the nonvolatile memory 24a. (New setting information storage means). The portable device 20 stores the setup data stored at any time (for example, when it is determined that the ETC on-board device 10 is connected to the communication, such as when a link connection is made with the ETC on-vehicle device 10). Transmit (transfer) to the vehicle-mounted device 10 (transfer means). The update process may be performed in this way. By doing in this way, once update information is acquired from the center 40, it is preferable because an update process can be performed when a communication path between the ETC on-vehicle device 10 and the portable device 20 can be secured. Setup may be performed in this way. In this way, once the setup data is acquired from the center 40, it is preferable because the setup can be performed when the communication path between the ETC on-vehicle device 10 and the portable device 20 can be secured.

  DESCRIPTION OF SYMBOLS 10 ETC OBE, 11 Human machine interface, 12 Communication interface, 13 ETC antenna, 14 ETC radio part, 15 ETC communication control part, 16 OBE side control part, 17 Security module, 18a OBE non-volatile memory, 18b On-vehicle device side ROM, 19 On-vehicle device side power supply unit, 20 Portable device, 21 Human machine interface, 22 Communication interface, 23 Portable device side control unit, 24a Portable device side non-volatile memory, 24b Portable device side ROM, 25 Mobile device side power supply unit, 26, mobile phone communication unit, 30 carrier, 40 center

Claims (12)

It is installed in the vehicle and communicates with the outside for toll collection, and its own management number, settlement information necessary for toll collection, and a password for activating the settlement information to enable toll collection A vehicle-mounted device for payment having vehicle-side storage means stored in association with
At least one input device for inputting a password for making the payment information stored in the vehicle-side storage means into an activated state in which fee collection is possible;
A payment system comprising:
The input device is
An update warning date information storage means for storing update warning date information indicating an update warning date for warning an update of the payment information, which is set to a date before an expiration date of the payment information;
Date acquisition means for acquiring the current date;
Monitoring means for comparing the update warning date stored in the update warning date information storage means with the current date acquired by the date acquisition means and monitoring whether the current date is the update warning date; ,
A notification means for notifying a user that the expiration date of the payment information is near when it is determined by the monitoring means that an update warning date is reached ,
The on-board device for payment acquires the update information from a center having update information for updating the payment information and having a center-side security means for ensuring security of the payment information and the update information. , Having a vehicle-mounted device side security means for ensuring the security of the payment information and the update information,
The input device is
Update determination means for determining whether or not an update instruction signal indicating update of the settlement information is input;
If it is determined that the update instruction signal has been input, update application means for applying to the center for transmission of the update information;
Transfer means for transferring the update information transmitted from the center to the onboard device for payment;
Settlement system according to claim Rukoto equipped with. The input device has update information for updating the payment information and is capable of communication connection with a center having a center-side security means for ensuring the security of the payment information and the update information,
Update determination means for determining whether or not an update instruction signal indicating update of the settlement information is input;
If it is determined that the update instruction signal has been input, update application means for applying to the center for the transmission of update information for updating the payment information;
Update information storage means for storing the update information transmitted from the center;
First mobile device side security means for ensuring security of the update information;
It is determined whether or not communication connection is established with the settlement on-board device, and transfer means for transferring the update information stored in the update information storage means to the settlement on-vehicle device when it is determined that communication connection is established. The settlement system according to claim 1, further comprising: The center has new setting information for newly setting the payment information secured by the center-side security means,
The input device is
New setting determination means for determining whether or not a new setting instruction signal indicating new setting of the payment information is input;
When it is determined that the new setting instruction signal has been input, it comprises a new setting application means for applying to the center for transmission of the new setting information,
It said transfer means, the settlement system according to claim 1 or claim 2, characterized that you transfer the new setting information transmitted from the center to the vehicle-mounted device for the payment. The center has new setting information for newly setting the payment information secured by the center-side security means,
The input device is
New setting determination means for determining whether or not a new setting instruction signal indicating new setting of the payment information is input;
If it is determined that the new setting instruction signal is input, new setting application means for applying to the center for transmission of the new setting information;
New setting information storage means for storing the new setting information transmitted from the center;
Second mobile device side security means for ensuring security of the new setting information;
With
The transfer means determines whether or not a communication connection is established with the settlement on-board device, and when it is determined that the communication connection is established, the new setting information stored in the new setting information storage means is stored in the settlement on-vehicle device. payment system according to claim 1 or claim 2, characterized in that transfer. Wherein the input device, the settlement system according to any one of claims 1 to 4 and symptoms of Rukoto includes a warning date information setting means for setting a date entered by the user as the update alert date information . The said input device is provided with the warning date information setting means which acquires the update period information which shows the update period of the said payment information, and sets the date of the first day of the said update period as the said update warning date information. The settlement system according to any one of claims 1 to 4 . Wherein the input device, further comprising a warning date information setting means for the payment expiration acquire expiration information shows the information, it sets a date before the predetermined number of days of the expiration date as the update alert date information The settlement system according to any one of claims 1 to 4, wherein the settlement system is characterized. When the input device has a plurality of the settlement information, and the update warning date information storage unit stores a plurality of the update warning date information for the plurality of settlement information, the notification unit is configured to monitor the monitoring information. If it is determined that has the update warning date in means, the payment information that is the update warning date, claim the effective date of the payment information is characterized that you notify the user that the near The settlement system according to any one of claims 1 to 7 . It is installed in the vehicle and communicates with the outside for toll collection, and its own management number, settlement information necessary for toll collection, and a password for activating the settlement information to enable toll collection A vehicle-mounted device for payment having vehicle-side storage means stored in association with
At least one input device for inputting a password for making the payment information stored in the vehicle-side storage means into an activated state in which fee collection is possible;
A payment system comprising:
The input device is
An update warning date information storage means for storing update warning date information indicating an update warning date for warning an update of the payment information, which is set to a date before an expiration date of the payment information;
Date acquisition means for acquiring the current date;
Monitoring means for comparing the update warning date stored in the update warning date information storage means with the current date acquired by the date acquisition means and monitoring whether the current date is the update warning date; ,
A notification means for notifying a user that the expiration date of the payment information is near when it is determined by the monitoring means that an update warning date is reached,
When the input device has a plurality of the settlement information, and the update warning date information storage unit stores a plurality of the update warning date information for the plurality of settlement information, the notification unit is configured to monitor the monitoring information. If it is determined that has the update warning date in means, the payment information that is the update warning date, settlement characterized in that the effective date of the payment information and notifies the user that the near system. The entering force device, the settlement system according to claim 9, symptoms, further comprising a warning date information setting means for setting a date entered by the user as the update alert date information. The said input device is provided with the warning date information setting means which acquires the update period information which shows the update period of the said payment information, and sets the date of the first day of the said update period as the said update warning date information. Item 10. The settlement system according to item 9. Wherein the input device, further comprising a warning date information setting means for the payment expiration acquire expiration information shows the information, it sets a date before the predetermined number of days of the expiration date as the update alert date information The payment system according to claim 9, wherein:

Images