JP6238858B2 - Data processing system, verification apparatus, verification method, and program - Google Patents

Description

  The present invention relates to a technique for verifying position information of a mobile terminal device.

In a conventional position authentication system, identification information is emitted from a roadside machine, and a vehicle that has received the identification information combines its own position information and identification information and sends it to the position information management center.
The position information management center determines the validity of the position information of the moving body by comparing the installation position of the roadside machine and the position information of the vehicle (for example, Patent Document 1).
In the location certification system, certification center device, location certification device, and terminal, a terminal ID and certificate request information transmission request is sent from the certificate device (roadside device) to a movable terminal.
The terminal that has received the transmission request encrypts the certificate request information with the unique key of the terminal, and transmits the terminal ID and the encrypted certificate request information to the certificate device (roadside device).
The certificate device (roadside device) transmits the received time, terminal ID, encryption certificate request information, and roadside device ID to the certification center device.
The certification center device decrypts the encrypted certificate request information with a unique key corresponding to the terminal ID, performs authentication, and if it can be authenticated, records the date, terminal ID, and certification device ID in association with each other (for example, patents) Reference 2).

JP 2009-38586 A JP 2007-164306 A

  A conventional position authentication system obtains identification information, attaches appropriate position information, and sends it to the position information management center, so that it can behave as if there is no actual vehicle at the position information transmission position. There was a problem.

  In the location certification system, certification center device, location certification device, and terminal, if the terminal ID and encryption certificate request information are obtained and sent with an appropriate time, the location is not actually at that time. However, there was a problem of being able to behave as if it were.

  The main object of the present invention is to solve the above-mentioned problems, and to realize a configuration capable of detecting the impersonation of the position and time of a mobile terminal device.

A data processing system according to the present invention includes:
A data processing system having a mobile terminal device, a fixed terminal device, and a verification device,
The mobile terminal device
Receiving a first message including position information, time information, and a first message authentication code generated for the position information and the time information from a positioning satellite;
A second message authentication code is generated for the first message and the identifier of the mobile terminal device, and the first message, the identifier of the mobile terminal device, and the second message authentication code are included. Sending a second message to the fixed terminal device by narrow area communication;
The fixed terminal device
When the second message is received from the mobile terminal device by the narrow area communication,
Receiving from the positioning satellite a third message including position information, time information, and a third message authentication code generated for the position information and the time information;
A fourth message authentication code is generated for the second message, the third message, and the identifier of the fixed terminal device, and the second message, the third message, and the identifier of the fixed terminal device And a fourth message including the fourth message authentication code to the verification device,
The verification device includes:
Receiving the fourth message from the fixed terminal device;
Verify the fourth message;
If the fourth message is valid,
Using the fourth message authentication code in the fourth message, verifying the second message, the third message, and the identifier of the fixed terminal device in the fourth message;
Using the third message authentication code in the third message to verify the location information and the time information in the third message;
Using the second message authentication code in the second message to verify the first message in the second message and the identifier of the mobile terminal device;
Using the first message authentication code in the first message to verify the location information and the time information in the first message;
When verification using each of the fourth message authentication code, the third message authentication code, the second message authentication code, and the first message authentication code is successful, The position derived from the position information and the time derived from the time information in the first message are verified.

In the present invention, whether the position information and time information of the mobile terminal device is the position information and time information received from the positioning satellite is verified using the first message authentication code from the positioning satellite, and the position information of the fixed terminal device In addition, it is verified by using the third message authentication code from the positioning satellite whether the time information is the position information and the time information received from the positioning satellite.
For this reason, it is possible to detect falsification of the position information and time information of the mobile terminal device or the position information and time information of the fixed terminal device, and it is possible to detect impersonation of the position and time of the mobile terminal device.

FIG. 3 is a diagram illustrating an example of a system configuration according to the first embodiment. FIG. 2 shows a configuration example of a mobile terminal apparatus according to Embodiment 1. FIG. 3 shows a configuration example of a fixed terminal apparatus according to Embodiment 1; FIG. 3 shows a configuration example of a verification apparatus according to the first embodiment. FIG. 3 is a diagram illustrating an example of a processing flow according to the first embodiment. FIG. 4 is a diagram illustrating an example of message transition according to the first embodiment. FIG. 9 is a diagram illustrating an example of a processing flow according to the second embodiment. FIG. 3 is a diagram illustrating a hardware configuration example of each device according to the first and second embodiments.

Embodiment 1 FIG.
In the present embodiment, a configuration will be described in which impersonation of the position and time of the mobile terminal device is prevented and the system is provided with the non-repudiation of the calling mobile body.

  FIG. 1 is a diagram illustrating a system configuration example according to the first embodiment.

In FIG. 1, a mobile terminal device 1 is a terminal device that is attached to a vehicle (not shown) and moves.
The mobile terminal device 1 receives radio waves from the positioning satellite 5 and performs narrow-area wireless communication with a nearby fixed terminal device 2.
The fixed terminal device 2 is a fixed terminal device installed in a building or a traffic light (not shown).
The fixed terminal device 2 receives radio waves from the positioning satellite 5 and performs narrow-area communication with a nearby mobile terminal device 1.
The narrow area communication is, for example, Bluetooth (registered trademark), infrared communication, or DSRC (Dedicated Short Range Communications).
Further, the fixed terminal device 2 communicates with the verification device 6 in the position information management center 3 through the public line 4.
The verification device 6 verifies the position information and time information of the mobile terminal device 1 and the fixed terminal device 2.
More specifically, the verification device 6 confirms the consistency of the location information and time information sent from the fixed terminal device 2 via the public line 4 and verifies the location information and time information of the mobile terminal device 1. To do.
The public line 4 is a public line that can perform TCP-IP communication or the like, and is used for communication between the fixed terminal device 2 and the verification device 6.
The positioning satellite 5 is an artificial satellite that distributes position information and time information. Specifically, the positioning satellite 5 is a GPS (Global Positioning System) satellite, a quasi-zenith satellite, or the like.

In the mobile terminal device 1 and the fixed terminal device 2, it is assumed that a common key managed by a key management center (not shown) is stored in each terminal.
Assume that the stored key is an individual key that is different for each terminal.
The verification device 6 stores a common key managed by a key management center (not shown) in a form associated with the terminal ID, or generates a terminal individual key from the terminal ID. Is well known.
In addition, it is assumed that the mobile terminal device 1 and the verification device 6, and the fixed terminal device 2 and the verification device 6 can share the method for generating the message authentication code.

  It is assumed that the positioning satellite 5 and the verification device 6 can share a method for generating a message authentication code via a ground station (not shown).

  Communication between the mobile terminal device 1 and the fixed terminal device 2 is narrow-area communication, and communication is possible when the mobile terminal device 1 exists in the vicinity of the fixed terminal device 2.

  FIG. 2 shows a configuration example of the mobile terminal device 1.

The satellite signal receiving unit 101 receives satellite signals from the positioning satellite 5.
The satellite signal from the positioning satellite 5 includes position information, time information, and a message authentication code (hereinafter referred to as MAC) that is a message digest of the position information and time information.

The positioning unit 102 measures the current position of the mobile terminal device 1 from the position information included in the positioning signal received by the satellite signal receiving unit 101.
A positioning method of the positioning unit 102 may be a normal GPS positioning method.

The message generation unit 103 generates a message to be transmitted to the fixed terminal device 2 from the position information, time information, MAC, and terminal ID (Identification) that is the identifier of the mobile terminal device 1 included in the satellite signal.
Details of the message generated by the message generation unit 103 will be described later.

The narrow area communication unit 104 performs narrow area communication with the fixed terminal device 2.
That is, the narrow area communication unit 104 transmits the message generated by the message generation unit 103 to the fixed terminal device 2 by narrow area communication.

  The control unit 105 controls the operations of the satellite signal receiving unit 101, the positioning unit 102, the message generation unit 103, and the narrow area communication unit 104.

  FIG. 3 shows a configuration example of the fixed terminal device 2.

The satellite signal receiving unit 201 receives a satellite signal from the positioning satellite 5.
The satellite signal from the positioning satellite 5 includes position information, time information, and MAC.

The narrow area communication unit 202 performs narrow area communication with the mobile terminal device 1.
That is, the narrow area communication unit 202 receives a message from the mobile terminal device 1.

The message generation unit 203 receives the message from the mobile terminal device 1 received by the narrow area communication unit 202, the position information, time information, MAC, and the terminal ID that is the identifier of the fixed terminal device 2 from the satellite signal. A message to be transmitted to 6 is generated.
Details of the message generated by the message generation unit 203 will be described later.

The line communication unit 204 communicates with the verification device 6 via the public line 4.
More specifically, the line communication unit 204 transmits the message generated by the message generation unit 203 to the verification device 6.

  The control unit 205 controls the operations of the satellite signal receiving unit 201, the narrow area communication unit 202, the message generation unit 203, and the line communication unit 204.

  FIG. 4 shows a configuration example of the verification device 6.

The line communication unit 601 communicates with the fixed terminal device 2 via the public line 4.
More specifically, the line communication unit 601 receives a message from the fixed terminal device 2.
The line communication unit 601 corresponds to an example of a receiving unit.

The message verification unit 602 verifies the message received by the line communication unit 601.
Details of the message verification method by the message verification unit 602 will be described later.

The location time verification unit 603 determines that the location information and time information of the fixed terminal device 2 are valid and the location information and time information of the mobile terminal device 1 are valid by the verification by the message verification unit 602. In this case, the position derived from the position information of the mobile terminal apparatus 1 and the time derived from the time information of the mobile terminal apparatus 1 are verified.
Details of the position and time verification method by the position time verification unit 603 will be described later.

The black list storage unit 604 stores a black list.
The black list is a list for registering the terminal ID of the mobile terminal device 1 or the fixed terminal device 2 determined to be illegal by the message verification unit 602.

  The distance threshold storage unit 605 stores a threshold used when the position time verification unit 603 verifies the position.

  The control unit 606 controls the operations of the line communication unit 601, message verification unit 602, position time verification unit 603, blacklist storage unit 604, and distance threshold storage unit 605.

  Next, the operation according to the present embodiment will be described using the processing flow of FIG. 5 and the message transition diagram of FIG.

In S101, the positioning satellite 5 prepares position information and time information that the mobile terminal device 1 can measure the current position, and obtains the MAC of the position information and time information by a method shared with the verification device 6.
Then, the position information, time information, and MAC are distributed.
Regardless of the presence of the mobile terminal device 1, the positioning satellite 5 distributes autonomously.
In FIG. 6, the message distributed in S101 is denoted as M1.
Further, the position information included in the message M1 is “position information_O”, the time information is “time information_O”, and these MACs are “MAC_O”.
In FIG. 6, the arrows indicate the relationship between “data in parentheses and MAC”.
That is, “MAC_O” indicates a message authentication code of “location information_O” and “time information_O”.
The meaning of the arrow is the same in other messages.
Note that the message M1 corresponds to an example of a first message, and “MAC_O” corresponds to an example of a first message authentication code.

  In S102, the satellite signal receiving unit 101 of the mobile terminal device 1 receives the message M1 distributed from the positioning satellite 5.

In S103, the message generator 103 of the mobile terminal device 1 uses the method shared by the verification device 6 to obtain the entire MAC of the message M1 distributed from the positioning satellite 5 and its own terminal ID.
Then, the message generation unit 103 generates a message combining the message M1, the terminal ID, and the entire MAC, and the narrow area communication unit 104 transmits this message to the fixed terminal device 2 by narrow area communication.
Transmission is performed independently by the mobile terminal device 1 regardless of the presence of the fixed terminal device 2.
In FIG. 6, the message to be transmitted is denoted as M2.
Further, the terminal ID of the mobile terminal device 1 is “terminal ID_O”, and the entire MAC obtained by the mobile terminal device 1 is “MAC_OO”.
Note that the message M2 corresponds to an example of a second message, and “MAC_OO” corresponds to an example of a second message authentication code.
In the mobile terminal device 1, the positioning unit 102 may measure the current position of the mobile terminal device 1 from “position information_O”.

  In S104, it is performed when the mobile terminal device 1 exists in the vicinity of the fixed terminal device 2, and the narrow area communication unit 202 of the fixed terminal device 2 receives the message M2 transmitted from the mobile terminal device 1.

When the narrow area communication unit 202 receives the message M2 in S104, the satellite signal reception unit 201 receives the position information, time information, and MAC distributed from the positioning satellite 5 (S106).
The position information, time information, and MAC delivered from the positioning satellite 5 are the same as those of S101, but the time information is different from the time information of S101 because the time has passed since the time of S101.
Further, the MAC is the MAC of the position information and the time information as in the case of S101, and is the MAC obtained by the method that the positioning satellite 5 shares with the verification device 6 (S105).
In FIG. 6, the message delivered from the positioning satellite 5 is denoted as M3.
The position information included in the message M3 is “position information_R”, the time information is “time information_R”, and these MACs are “MAC_R”.
Note that the message M3 corresponds to an example of a third message, and “MAC_R” corresponds to an example of a third message authentication code.

In S107, the message generator 203 of the fixed terminal device 2 shares the verification device 6 with the message M2 received from the mobile terminal device 1, the message M3 received from the positioning satellite 5, and the terminal ID of the fixed terminal device 2. Determine the overall MAC of.
The message generation unit 203 generates a message that combines the message M2, the message M3, the terminal ID of the fixed terminal device 2, and the entire MAC, and the line communication unit 204 transmits the message to the verification device 6.
In this communication, the communication timing may be adjusted between the fixed terminal device 2 and the verification device 6.
In FIG. 6, the transmitted message is denoted as M4.
Further, the terminal ID of the fixed terminal device 2 is “terminal ID_R”, and the entire MAC obtained by the fixed terminal device 2 is “MAC_RR”.
Thus, obtaining the entire MAC in the fixed terminal device 2 including the MAC of the mobile terminal device 1 is referred to as obtaining the MAC in a chain.
Note that the message M4 corresponds to an example of a fourth message, and “MAC_RR” corresponds to an example of a fourth message authentication code.

In S108, the line communication unit 601 of the verification device 6 receives the message M4 from the fixed terminal device 2, and the message verification unit 602 verifies the message M4.
First, the message verification unit 602 verifies “MAC_RR” which is the MAC of the fixed terminal device 2.
The verification is performed using a key associated with “terminal ID_R” stored in the location information management center 3.
If the key itself is stored in the location information management center 3, the key is used. If the method for generating the key from the terminal ID is known, the key obtained from the terminal ID is used.
The message verification unit 602 generates a MAC of elements other than “MAC_RR” of the message M4 using this key, and verifies whether the generated MAC matches “MAC_RR”.
If they match, the verification is successful, and it is determined that the message M4 is certainly transmitted from the fixed terminal device 2 and has not been tampered with.
If the verification fails, the message M4 is processed as inappropriate, and the fixed terminal device 2 may be an unauthorized device and is recorded in the black list.
In FIG. 6, the verification performed here is denoted as “MAC_RR verification” as P1.

Next, the message verification unit 602 verifies the MAC “MAC_OO” of the mobile terminal device 1 in the message M4.
The verification is performed using a key associated with “terminal ID_O” stored in the location information management center 3.
If the key itself is stored, the key is used. If the method for generating the key from the terminal ID is known, the key obtained from the terminal ID is used.
The message verification unit 602 generates a MAC of elements other than “MAC_OO” of the message M2 using this key, and verifies whether the generated MAC matches “MAC_OO”.
If they match, the verification is successful, and it is determined that the message M2 is certainly transmitted from the mobile terminal device 1 and has not been tampered with.
If the verification fails, the message M2 is processed as inappropriate, and the mobile terminal device 1 may be an unauthorized device, and is recorded in the black list.
In FIG. 6, the verification to be performed is denoted as “MAC_OO verification” in P1.

Next, “MAC_O” received from the positioning satellite 5 by the mobile terminal device 1 and “MAC_R” received from the positioning satellite 5 by the fixed terminal device 2 are verified.
The verification of “MAC_O” is performed by generating a MAC of elements other than “MAC_O” of the message M1 using a key shared by the verification device 6 with the positioning satellite 5, and whether the generated MAC matches “MAC_O”. To verify.
The verification of “MAC_R” is performed by generating a MAC of elements other than “MAC_R” of the message M3 using the key shared by the verification device 6 with the positioning satellite 5, and the generated MAC matches “MAC_R”. Verify whether or not.
If the verification is successful, it is determined that neither the position information nor the time information has been falsified.
If the verification fails, the message M4 is processed as inappropriate.
In FIG. 6, verifications to be performed are denoted as “MAC_R verification” and “MAC_O verification” in P1.

In S109, the position time verification unit 603 detects the position of the mobile terminal apparatus 1 from “position information_O”, detects the position of the fixed terminal apparatus 2 from “position information_R”, and the mobile terminal apparatus 1 and the fixed terminal apparatus 2 is verified.
Since the communication between the mobile terminal device 1 and the fixed terminal device 2 is narrow-area communication, the difference between the positions of the mobile terminal device 1 and the fixed terminal device 2 should be within the narrow-area communication.
The distance threshold storage unit 605 stores a distance value capable of narrow-area communication as a threshold, and the position time verification unit 603 determines the distance between the position of the mobile terminal device 1 and the position of the fixed terminal device 2. It is determined whether or not it is within the threshold value of the distance threshold value storage unit 605.
If it is within the threshold value, the message verification unit 602 determines that the position of the mobile terminal device 1 is valid.
In addition, since the mobile terminal device 1 receives the position information, time information, and MAC from the positioning satellite 5 earlier than the fixed terminal device 2, it confirms that the time is in this relationship.
That is, the position time verification unit 603 determines whether or not the time derived from “time information_O” and the time derived from “time information_R” have this relationship.
In FIG. 6, “time difference verification” and “position difference verification” are written as P1 as verifications to be performed.

As described above, when both the mobile terminal device 1 and the fixed terminal device 2 receive the position authentication, the position information, the time information, and these MACs are obtained from the positioning satellite 5, so the time, the position, Changes for each authentication.
This makes it possible to withstand a repeat attack that uses a message once used again.

Further, since the message from the positioning satellite 5 has the MAC, the verification of the integrity of the position information and time information can be performed by the verification device 6 that shares the MAC generation method.
As a result, it is possible to detect the presence or absence of message tampering between the positioning satellite 5 and the mobile terminal device 1 or the fixed terminal device 2.

  Also, the mobile terminal device 1 knows only the mobile terminal device 1 and the verification device 6 managed by the key management center for the message M1 received from the positioning satellite 5 and the terminal ID of the mobile terminal device 1 combined. Since the MAC generation known by the mobile terminal device 1 and the verification device 6 is performed using the obtained key, the verification device 6 can verify whether or not the M1 has been tampered with, and the mobile terminal device 1 cannot be denied. A characteristic that the device 1 cannot deny that the message M2 has been generated.

  In addition, the fixed terminal device 2 manages the fixed message managed by the key management center for the message M2 received from the mobile terminal device 1, the message M3 received from the positioning satellite 5, and the terminal ID of the fixed terminal device 2. Since the MAC generation known by the fixed terminal device 2 and the verification device 6 is performed using a key that only the terminal device 2 and the verification device 6 know, the verification device 6 can verify whether the message M4 has been tampered with, The fixed terminal device 2 can be provided with non-repudiation (characteristic that the fixed terminal device 2 cannot deny that the message M4 has been generated).

Further, since the verification device 6 verifies the time information difference and the position information difference between the mobile terminal device 1 and the fixed terminal device 2, the mobile terminal device 1 and the fixed terminal device 2 exist in the narrow area communication. Can be confirmed.
Thereby, the misrepresentation of the time information and position information of the mobile terminal device 1 can be prevented.

  Further, since the verification is only the MAC verification, it is possible to suppress the calculation load, thereby obtaining the effect of reducing the cost of the terminal.

  In this embodiment, communication between the fixed terminal device 2 and the verification device 6 is performed using the public line 4, but a dedicated line or a wireless line may be used.

In the present embodiment, the fixed terminal device 2 is used as a reliable terminal by fixing the fixed terminal device 2 so that the position does not change. However, if there is no fear of falsification or fraud, the position is moved. It may be replaced with a fixed terminal device 2 that can.
This can be realized by preventing the terminal itself from being altered by a tamper-resistant design and preventing the terminal from being duplicated.

Embodiment 2. FIG.
In the first embodiment described above, the position authentication process is started from the mobile terminal device 1. Next, an embodiment in which the position authentication process is started from the fixed terminal device 2 will be described.

Since the system configuration is the same as that in FIG.
Further, the internal configuration examples of the mobile terminal device 1, the fixed terminal device 2, and the verification device 6 are also the same as those shown in FIGS.

  The operation of the second embodiment will be described using the processing flow of FIG.

  In S201, the fixed terminal device 2 periodically polls the mobile terminal device 1.

  In S202, the mobile terminal device 1 receives the polling signal from the fixed terminal device 2, the mobile terminal device 1 is activated, and the signal from the positioning satellite 5 can be received.

Since S102 and S102 are the same as those in the first embodiment, description thereof is omitted.
In S203, the mobile terminal apparatus 1 generates a message M2 by the same procedure as in S103, transmits the message M2 to the fixed terminal apparatus 2 by narrow area communication, and then deactivates it.
Since the operations after S104 are the same as those in the first embodiment, description thereof is omitted.

  As described above, in the second embodiment, the fixed terminal device 2 polls the mobile terminal device 1, so that the mobile terminal device 1 only needs to be activated when polled, and the power consumption of the mobile terminal device 1 Has the effect of reducing the size.

  According to Embodiments 1 and 2, the mobile terminal device 1 can be installed in any mobile body such as a person, a car, a train, and a ship, and can provide information and services according to the position of the destination. .

  In addition, since the position information can be sent safely, the position of the moving body can be traced.

In the first and second embodiments described above,
The system that authenticates the position of the mobile terminal device by confirming that the mobile terminal device exists in the vicinity of the fixed terminal device has been described.

In the first and second embodiments described above,
Obtain location information and time information from positioning satellites,
The system that authenticates the position of the mobile terminal device by confirming that the mobile terminal device exists in the vicinity of the fixed terminal device has been described.

In the first and second embodiments described above,
Obtain location information and time information from positioning satellites,
It has been explained that the position information received from the positioning satellite, the time information, and the message authentication code of its own terminal ID were obtained using different keys for each terminal, and the non-repudiation of the terminal that generated the code was given.

In the first and second embodiments described above,
The mobile terminal device obtains position information and time information from the positioning satellite,
Capture a message with a message authentication code from the mobile terminal device within the communication range of the fixed terminal device,
The fixed terminal device obtains position information and time information from the positioning satellite,
A message with a message authentication code from the mobile terminal device and the location information of the fixed terminal device, time information, a message with a message authentication code of the terminal ID of the fixed terminal device,
Verification device
Message authentication code from mobile terminal device, message authentication code from fixed terminal device, message authentication code from positioning satellite to mobile terminal device, message authentication code from positioning satellite to fixed terminal device, mobile terminal device and fixed terminal device It has been described that the time difference and the position difference between the mobile terminal device and the fixed terminal device are verified.

In the second embodiment described above,
The fixed terminal device polls the mobile terminal device,
The mobile terminal is activated,
The mobile terminal device obtains position information and time information from the positioning satellite,
The mobile terminal device is deactivated after sending a message with a message authentication code,
Capture a message with a message authentication code from the mobile terminal device within the communication range of the fixed terminal device,
The fixed terminal device obtains position information and time information from the positioning satellite,
A message with a message authentication code from the mobile terminal, the location information of the fixed terminal device, and a message with a message authentication code of time information sent to the verification device
Verification device
Message authentication code from mobile terminal device, message authentication code from fixed terminal device, message authentication code from positioning satellite to mobile terminal device, message authentication code from positioning satellite to fixed terminal device, mobile terminal device and fixed terminal device It has been described that the time difference and the position difference between the mobile terminal device and the fixed terminal device are verified.

Although the embodiments of the present invention have been described above, these two embodiments may be combined and implemented.
Alternatively, one of these two embodiments may be partially implemented.
Alternatively, these two embodiments may be partially combined.
In addition, this invention is not limited to these embodiment, A various change is possible as needed.

Finally, a hardware configuration example of the mobile terminal device 1, the fixed terminal device 2, and the verification device 6 (hereinafter referred to as the mobile terminal device 1) described in the first and second embodiments will be described with reference to FIG.
The mobile terminal device 1 and the like are computers, and each element of the mobile terminal device 1 and the like can be realized by a program.
As a hardware configuration of the mobile terminal device 1 or the like, an arithmetic device 901, an external storage device 902, a main storage device 903, a communication device 904, and an input / output device 905 are connected to the bus.

The arithmetic device 901 is a CPU (Central Processing Unit) that executes a program.
The external storage device 902 is, for example, a ROM (Read Only Memory), a flash memory, or a hard disk device.
The main storage device 903 is a RAM (Random Access Memory).
The communication device 904 corresponds to the physical layer of the satellite signal reception unit 101, the narrow area communication unit 104, the satellite signal reception unit 201, the narrow area communication unit 202, and the line communication unit 601.
The input / output device 905 is, for example, a mouse, a keyboard, a display device, or the like.

The program is normally stored in the external storage device 902, and is loaded into the main storage device 903 and sequentially read into the arithmetic device 901 and executed.
The program is a program that realizes a function described as “˜unit” (excluding “˜storage unit”, the same applies hereinafter) shown in FIGS.
Further, an operating system (OS) is also stored in the external storage device 902. At least a part of the OS is loaded into the main storage device 903, and the arithmetic device 901 executes the OS, as shown in FIGS. Executes a program that realizes the function of "~ part".
In the description of the first and second embodiments, “determination of”, “determination of”, “verification of”, “extraction of”, “derivation of”, “setting of”, “ Information, data, signal values, and variable values indicating the results of the processes described as “registration”, “selection of”, “generation of”, “input of”, “reception of”, etc. are stored in the main memory. The file is stored in 903 as a file.
Further, the encryption key / decryption key and the random number value may be stored in the main storage device 903 as a file.

  The configuration in FIG. 8 is merely an example of the hardware configuration of the mobile terminal device 1 and the like, and the hardware configuration of the mobile terminal device 1 and the like is not limited to the configuration shown in FIG. There may be.

  Further, the verification method according to the present invention can be realized by the procedure shown in the first and second embodiments.

  DESCRIPTION OF SYMBOLS 1 Mobile terminal device, 2 Fixed terminal device, 3 Location information management center, 4 Public line, 5 Positioning satellite, 6 Verification device, 101 Satellite signal receiving part, 102 Positioning part, 103 Message generation part, 104 Narrow communication part, 105 Control unit, 201 Satellite signal reception unit, 202 Narrow communication unit, 203 Message generation unit, 204 Line communication unit, 205 Control unit, 601 Line communication unit, 602 Message verification unit, 603 Location time verification unit, 604 Blacklist storage unit 605 Distance threshold value storage unit 606 Control unit.

Claims (11)

A data processing system having a mobile terminal device, a fixed terminal device, and a verification device,
The mobile terminal device
Receiving a first message including position information, time information, and a first message authentication code generated for the position information and the time information from a positioning satellite;
A second message authentication code is generated for the first message and the identifier of the mobile terminal device, and the first message, the identifier of the mobile terminal device, and the second message authentication code are included. Sending a second message to the fixed terminal device by narrow area communication;
The fixed terminal device
When the second message is received from the mobile terminal device by the narrow area communication,
Receiving from the positioning satellite a third message including position information, time information, and a third message authentication code generated for the position information and the time information;
A fourth message authentication code is generated for the second message, the third message, and the identifier of the fixed terminal device, and the second message, the third message, and the identifier of the fixed terminal device And a fourth message including the fourth message authentication code to the verification device,
The verification device includes:
Receiving the fourth message from the fixed terminal device;
Verify the fourth message;
If the fourth message is valid,
Using the fourth message authentication code in the fourth message, verifying the second message, the third message, and the identifier of the fixed terminal device in the fourth message;
Using the third message authentication code in the third message to verify the location information and the time information in the third message;
Using the second message authentication code in the second message to verify the first message in the second message and the identifier of the mobile terminal device;
Using the first message authentication code in the first message to verify the location information and the time information in the first message;
When verification using each of the fourth message authentication code, the third message authentication code, the second message authentication code, and the first message authentication code is successful, A data processing system for verifying a position derived from the position information and a time derived from the time information in the first message. The verification device includes:
It is derived from the relationship between the position derived from the position information in the first message and the position derived from the position information in the third message, and the time information in the first message. Based on the relationship between the time and the time derived from the time information in the third message, the position derived from the position information in the first message and the time information in the first message The data processing system according to claim 1, wherein the time derived from the time is verified. The verification device includes:
The distance between the position derived from the position information in the first message and the position derived from the position information in the third message is a distance capable of the narrow area communication, When the time derived from the time information in one message is a time earlier than the time derived from the time information in the third message, the position information in the first message The data processing system according to claim 2, wherein the derived position and the time derived from the time information in the first message are determined to be appropriate. The mobile terminal device
2. The data processing system according to claim 1, wherein, in the inactive state, the polling signal from the fixed terminal device is received and activated, and the first message is received from the positioning satellite. The method for generating and verifying the first message authentication code is shared only between the positioning satellite and the verification device,
The method for generating and verifying the second message authentication code is shared only between the mobile terminal device and the verification device,
The method for generating and verifying the third message authentication code is shared only between the positioning satellite and the verification device,
The data processing system according to claim 1, wherein the fourth message authentication code generation and verification method is shared only between the fixed terminal device and the verification device. From a fixed terminal device that performs narrow area communication with a mobile terminal device, a second message including a first message including position information and time information from a positioning satellite, a third message, and the fixed terminal device A receiving unit that receives the fourth message including the identifier of the message and the fourth message authentication code;
A message verification unit that performs message verification;
A position time verification unit that verifies a position derived from the position information in the first message and a time derived from the time information in the first message;
The message verification unit includes:
Verify the fourth message;
If the fourth message is valid,
Using the fourth message authentication code in the fourth message, verifying the second message, the third message, and the identifier of the fixed terminal device in the fourth message;
Position information, time information, and third message authentication code received from the positioning satellite when the fixed terminal device receives the second message from the mobile terminal device by the narrow area communication from the third message. And extract
Using the third message authentication code to verify the location information and the time information;
Extracting the first message, the identifier of the mobile terminal device and a second message authentication code from the second message;
Using the second message authentication code to verify the first message and the identifier of the mobile terminal device;
From the first message, the mobile terminal device extracts position information, time information and a first message authentication code received from the positioning satellite;
Using the first message authentication code to verify the location information and the time information;
The position time verification unit
When verification by the message verification unit is successful,
A verification apparatus that verifies a position derived from the position information in the first message and a time derived from the time information in the first message. The position time verification unit
It is derived from the relationship between the position derived from the position information in the first message and the position derived from the position information in the third message, and the time information in the first message. Based on the relationship between the time and the time derived from the time information in the third message, the position derived from the position information in the first message and the time information in the first message The verification device according to claim 6, wherein the time derived from the time is verified. The position time verification unit
The distance between the position derived from the position information in the first message and the position derived from the position information in the third message is a distance capable of the narrow area communication, When the time derived from the time information in one message is a time earlier than the time derived from the time information in the third message, the position information in the first message The verification apparatus according to claim 7, wherein the derived position and the time derived from the time information in the first message are determined to be appropriate. The verification device includes:
Sharing the first message authentication code generation and verification method only with the positioning satellite;
Sharing the method of generating and verifying the second message authentication code only with the mobile terminal device;
Sharing the third message authentication code generation and verification method only with the positioning satellite;
The verification apparatus according to claim 6, wherein the fourth message authentication code generation and verification method is shared only with the fixed terminal apparatus. A second message including a first message including position information and time information from a positioning satellite from a fixed terminal device in which a computer performs narrow-area communication with a mobile terminal device; a third message; A receiving step of receiving a fourth message including an identifier of the fixed terminal device and a fourth message authentication code;
A message verification step in which the computer verifies the message;
A position time verification step in which the computer verifies a position derived from the position information in the first message and a time derived from the time information in the first message;
In the message verification step,
The computer is
Verify the fourth message;
If the fourth message is valid,
Using the fourth message authentication code in the fourth message, verifying the second message, the third message, and the identifier of the fixed terminal device in the fourth message;
Position information, time information, and third message authentication code received from the positioning satellite when the fixed terminal device receives the second message from the mobile terminal device by the narrow area communication from the third message. And extract
Using the third message authentication code to verify the location information and the time information;
Extracting the first message, the identifier of the mobile terminal device and a second message authentication code from the second message;
Using the second message authentication code to verify the first message and the identifier of the mobile terminal device;
From the first message, the mobile terminal device extracts position information, time information and a first message authentication code received from the positioning satellite;
Using the first message authentication code to verify the location information and the time information;
In the position time verification step,
The computer is
When verification by the message verification step is successful,
A verification method comprising: verifying a position derived from the position information in the first message and a time derived from the time information in the first message. From a fixed terminal device that performs narrow area communication with a mobile terminal device, a second message including a first message including position information and time information from a positioning satellite, a third message, and the fixed terminal device A receiving step of receiving a fourth message including the identifier and a fourth message authentication code;
A message verification step for verifying the message;
A program for causing a computer to execute a position time verification step for verifying a position derived from the position information in the first message and a time derived from the time information in the first message,
In the message verification step,
In the computer,
Let the fourth message be verified;
If the fourth message is valid,
Using the fourth message authentication code in the fourth message to verify the second message, the third message, and the identifier of the fixed terminal device in the fourth message;
Position information, time information, and third message authentication code received from the positioning satellite when the fixed terminal device receives the second message from the mobile terminal device by the narrow area communication from the third message. And extract
Using the third message authentication code, the position information and the time information are verified,
Extracting the first message, the identifier of the mobile terminal device and the second message authentication code from the second message;
Using the second message authentication code to verify the first message and the identifier of the mobile terminal device;
From the first message, the mobile terminal device extracts position information, time information, and a first message authentication code received from the positioning satellite;
Using the first message authentication code, the position information and the time information are verified,
In the position time verification step,
In the computer,
When verification by the message verification step is successful,
A program for verifying a position derived from the position information in the first message and a time derived from the time information in the first message.

Images