TWI525332B - A location information authentication system, a positioning terminal, and a location information acquisition device - Google Patents

Description

Location information authentication system, positioning terminal, and location information acquisition device

The present disclosure relates to a location information authentication system for authenticating navigation information received from a navigation satellite for calculating location information, a positioning terminal provided by the authentication system, and a location information acquisition device.

It has been widely known to receive satellite radio waves from a navigation satellite provided by a navigation satellite system such as the Global Positioning System (GPS), and to use the navigation method information contained in the satellite radio waves to calculate the current position measurement terminal.

However, a pseudo-satellite wave generating device that generates a pseudo satellite wave and broadcasts it exists. With such a pseudo-satellite wave generating device, such a problem exists in the case where a malicious person can cause the positioning terminal to calculate an error position.

Therefore, as disclosed in Patent Document 1, in order to determine the reliability of the navigation information received from the navigation satellite in order to calculate the position information, the position information authentication system capable of authenticating the navigation information is proposed.

With the location information authentication system, the positioning terminal can determine whether the navigation law message received by the positioning terminal itself is already authenticated. The maritime law message certified by the heart. If it can be judged that the navigation law message received by the positioning terminal itself is an air navigation message authenticated by the certification center, it can be determined that the navigation law message is transmitted by the navigation satellite.

According to the technique of Patent Document 1, the positioning terminal that receives the navigation information can calculate the current position with reliability.

The inventors of the present invention found the following problems.

The purpose of the position information calculated by the positioning terminal is to transmit the position information indicating the current position calculated by the positioning terminal to the surrounding use, in addition to the user who owns the positioning terminal, in order to know the current position. For example, it is considered to send the location information to the class management device that manages the toll parking area or the toll road, and automatically uses the class. In this application, even if the positioning terminal calculates the current position with reliability, the positioning terminal transmits the position information indicating the position different from the calculated current position to the position information acquiring device that receives the position information and performs the gold processing. The correct course amount cannot be made.

As described above, in the system in which the position information acquisition device acquires the position calculated by the positioning terminal and performs the processing such as the scholarship, it is not sufficient to accurately calculate the position of the positioning terminal. The positioning terminal is to indicate that the positioning terminal itself is a terminal that does not tamper with the location information, and the location information obtaining device that obtains the location information must be able to determine that the positioning terminal is a trusted terminal that does not tamper with the location information.

[Previous Technical Literature] [Patent Literature]

[Patent Document 1] Japanese Laid-Open Patent Publication No. 2013-130395

The present invention has been developed based on this situation. The purpose of the present invention is to provide a location information authentication system that allows a location information acquisition system to obtain location information from a location terminal. The positioning terminal and the position information acquiring device.

The location information authentication system described in one aspect of the disclosure has a positioning terminal that receives a navigational law message, and if the received navigational information is an identifiable navigational information, it will be calculated using the navigational information. The location information of the current location is wirelessly sent to the outside; and the certification center device sends a communication satellite that sends the authentication data to the center used by the positioning terminal at the time of authentication, and sends the center to create the authentication data; The device receives the location information of the wireless transmission of the positioning terminal.

The certification center device includes: a central satellite receiving unit that receives satellite radio waves containing navigational information from a navigation satellite provided by the navigation satellite system; and a central side authentication data creation unit that creates an encryption key based on the encryption key. And the navigation method information contained in the satellite radio waves received by the satellite receiving unit of the center side is used as the center to create the authentication data; and the authentication data transmission department is created as the center of the central authentication data creation department. The certification data is sent to the communication satellite.

The positioning terminal system includes: a terminal side satellite receiving unit that creates authentication data from the communication satellite receiving center and receives satellite radio waves from the navigation satellite; and a key receiving unit that receives the encryption key from the authentication center device or can create The key of the encryption key is the key related data; and the terminal side authentication data creation unit is based on the key related information received by the key receiving unit and the satellite receiving from the terminal side. The maritime information extracted by the satellite radio waves received by the Ministry is used to create the authentication data for the terminal; and the authentication judgment unit compares the authentication data generated by the center with the authentication data of the terminal, and if it is consistent, it determines that the terminal side satellite reception The maritime information contained in the satellite radio waves received by the Ministry is the authentication success; and the certified composing department is based on the key related information received by the key receiving department from the certification center device, and is formed to indicate the terminal side satellite reception. The navigation method information contained in the satellite radio waves received by the Ministry of Information is the certified information that has been successfully authenticated; and the terminal-side communication department is based on the navigation Message calculated location information, along with authenticated information has been made to the certification creation unit, send it along.

The location information acquisition device includes a terminal data acquisition unit that acquires location information and authenticated data transmitted by the terminal side transmission unit from the communication unit, and a key acquisition unit that transmits the communication center from the authentication center device. Obtaining the key related information; and comparing the data creation department, based on the key related information obtained by the key acquisition department, to obtain the authenticated comparative data required for comparison with the authenticated data; and the terminal judgment unit Create certified and comparative data obtained by the terminal data acquisition department The certified comparison data made by the Ministry is compared. If they are consistent, the positioning terminal is determined to be a regular positioning terminal.

According to the disclosure, the positioning terminal performs authentication of the navigation information contained in the satellite radio waves received from the navigation satellite. For the purpose of the authentication, the key collection unit uses the encryption key used by the certification center device to create the authentication data at the center or the key that can be used as the encryption key to create the data, that is, the key related information, and the authentication. The central device receives it. Then, if the authentication is successful, the key related information received from the certification center device is used to create the authenticated authenticated data, and the location information is transmitted together with the authenticated data.

In this way, the positioning terminal generates the authenticated data using the data obtained from the certification center device, that is, the key related information, and transmits it together with the location information. By this, it can be proved that the positioning terminal itself is a regular positioning terminal that can communicate with the certification center device and is trusted by the certification center device.

Further, the key related information required for creating the authenticated data is obtained from the certification center device in order to authenticate the navigation information contained in the satellite radio waves received by the positioning terminal itself. Therefore, the materials required to create the certified materials need not be separately obtained from the certification center device, so that the processing of the authenticated materials can be simplified.

Further, the location information acquisition device that receives the location information together with the authenticated data also acquires the key related information from the authentication center device. Then, based on the obtained key related information, it is necessary to make a comparison with the authenticated data. Compare the information. The terminal judging unit judges whether or not the positioning terminal that transmitted the position information is a regular positioning terminal by comparing the authenticated comparison data with the authenticated data acquired by the terminal data acquisition unit.

According to another aspect of the disclosure, the positioning terminal receives the navigation information, and if the received navigation information is an identifiable navigation information, the position information of the current position calculated by using the navigation information is indicated. External wireless transmission. The positioning terminal includes: a terminal-side satellite receiving unit that creates a certification center device, transmits the authentication data to the center of the communication satellite for use in authentication in the positioning terminal, receives the authentication data from the communication satellite, and receives the navigation method from the communication satellite. The satellite navigation system of the satellite system receives the satellite radio wave containing the navigation information; and the key receiving department receives the encryption key required to create the authentication data for the center or can make the encryption key from the certification center device. The key creation data is the key related information; and the terminal side authentication data creation unit is based on the key related information received by the key receiving unit and received from the terminal side satellite receiving unit. The satellite navigation signal extracted by the satellite radio wave is used as the terminal to create the authentication data; and the certification judgment department compares the authentication data generated by the center with the authentication data of the terminal, and if it is consistent, it is determined that the terminal side satellite receiving unit receives the authentication data. The navigation method contained in the satellite radio wave is the successful authentication; and the certified composing department is based on the certification of the key receiving department. The key related information received by the heart device is configured to indicate that the navigation information contained in the satellite radio wave received by the satellite receiving unit of the terminal side is the authenticated data successfully authenticated; and the terminal side communication unit is based on The location information calculated by the navigation law message, together with the certified information made by the certified production department, is sent together. Send it.

The location information obtaining device according to another aspect of the present disclosure is configured to: receive an air navigation message, and if the received navigation law message is an identifiable navigation law message, indicate the current location calculated using the navigation law message. The location information and the received navigation information are authenticated data that has been successfully authenticated, and the location terminal that wirelessly transmits the information to the external location receives the location information and the authenticated data. The location information acquisition device includes a terminal data acquisition unit that acquires location information and authenticated data transmitted from the location terminal from the communication unit, and a key acquisition unit that is obtained from the authentication center device through the communication unit. The key used by the positioning terminal to create the authentication data by the center of the authentication terminal and the encryption key used by the certification center device or the key that can be used as the encryption key is the key related information; and the comparison data is created. The department obtains the authenticated comparison data required for comparison with the authenticated data based on the key related information obtained by the key acquisition unit; and the terminal determination unit obtains the authenticated obtained by the terminal data acquisition unit The data is compared with the certified comparative data made by the comparison data making department. If it is consistent, it is judged that the positioning terminal is a regular positioning terminal.

According to the location information authentication system, the location terminal, and the location information acquisition device disclosed in the present disclosure, the location terminal supports the location information authentication system, and the location information acquisition device that obtains the location information from the location terminal can determine.

1‧‧‧Location Information Certification System

2‧‧‧GPS satellite

3‧‧‧QZS satellite

100‧‧‧Certification Center Installation

110‧‧‧Monitor station installation

120‧‧‧Certification Center Processing Unit

122‧‧‧Control Department

124‧‧‧Information Memory Department

126‧‧‧Communication Department

130‧‧‧Master station device

200‧‧‧In-vehicle machine

210‧‧‧Communication Department

211‧‧‧Receipt Department

212‧‧‧Delivery Department

220‧‧‧Control Department

230‧‧‧ Satellite Receiving Department

300, 300A‧‧‧ roadside machine

310‧‧‧Communication Department

320, 320A‧‧‧Control Department

330‧‧‧Satellite Receiving Department

1221‧‧‧RAND Information Generation Department

1222‧‧‧SEED Value Generation Department

1223‧‧‧H Matrix Calculation Department

1224‧‧‧Fighting Computing Department

1225‧‧‧ Signal Processing Department

1226‧‧‧H matrix selection department

The above and other objects, features and advantages of the present invention will become more apparent from the detailed description of the appended claims. FIG. 1 is a block diagram of a position information authentication system according to the first embodiment; FIG. 2 is a block diagram showing a detailed diagram of the configuration of the authentication center processing device of FIG. [Fig. 3] Fig. 3 is a block diagram showing a detailed diagram of the configuration of the in-vehicle device of Fig. 1; [Fig. 4] Fig. 4 is a diagram showing the relationship between the navigation information contained in the satellite radio wave and the RAND message; 5] FIG. 5 is a flowchart of processing executed by the control unit of the in-vehicle device; [FIG. 6] FIG. 6 is a flowchart showing a detailed illustration of the navigation message authentication processing of step S4 of FIG. 5; [FIG. 7] FIG. [Fig. 8] Fig. 8 is a configuration diagram of a roadside machine in the second embodiment; [Fig. 9] Fig. 9 is a front view of a roadside machine provided by a control unit Flowchart of the processing Fig. 10 is a flowchart showing a process executed when the control unit provided in the roadside unit receives position information or the like from the in-vehicle device.

(Embodiment 1)

Embodiments of the present disclosure will be described below based on the drawings. As shown in FIG. 1, the location information authentication system 1 of the first embodiment includes a certification center device 100, an in-vehicle device 200 corresponding to the positioning terminal of the present disclosure, and a roadside device 300 corresponding to the position information acquiring device of the present disclosure.

(Summary structure of location information authentication system 1)

The certification center device 100 includes a monitoring station device 110, a certification center processing device 120, and a master station device 130. In addition, in the following, the device and the processing device are omitted, and the monitoring station device 110 is simply referred to as the monitoring station 110. The authentication center processing device 120 is simply referred to as the authentication center 120, and the main control station device 130 is simply referred to as the master station 130.

The monitoring station 110 corresponds to the center-side satellite receiving unit of the present disclosure, and receives GPS radio waves transmitted by the GPS satellites 2 of the GPS which is one of the navigation satellite systems. The GPS satellite 2 is equivalent to the maritime satellite of the present disclosure, and the GPS electric wave is equivalent to the satellite radio of the present disclosure. As is known, GPS radio waves contain navigational information. The monitoring station 110 demodulates the received GPS radio waves to extract the navigation information and sends it to the certification center 120. When the GPS radio waves are received from the plurality of GPS satellites 2, the navigation information is extracted from the respective GPS waves and sent to the certification center 120.

Certification Authority 120, which is a navigational message and is an encryption key The H matrix is made into the same information as the authentication data of the center of the disclosure. The signal containing the co-located data is then sent to the master station 130. Further, communication is also performed between the in-vehicle device 200 or the roadside device 300. The details of the certification center 120 will be described using FIG. 2.

The master station 130 corresponds to the authentication data transmitting unit of the present disclosure, and transmits the parity data received from the authentication center 120 to the quasi-zenith satellite (hereinafter referred to as QZS satellite) 3.

The QZS satellite 3 series is equivalent to the communication satellite disclosed in the present disclosure, and broadcasts the nautical-fax message containing the same-bit data to the ground.

The in-vehicle device 200 is an in-vehicle device certified by the navigation method, and whether the navigation information received from the GPS satellite 2 can be authenticated is authenticated by using the same-bit data contained in the navigation information received from the QZS satellite 3. . At the time of this authentication, communication is performed with the certification center 120. Moreover, the current position is calculated using the navigation information received from the GPS satellite 2, and the position information indicating the calculated current position is wirelessly transmitted to the outside together with the hash value described later. The hash value indicates that the authentication of the navigation message is a success, which is equivalent to the certified information disclosed in this disclosure. The in-vehicle device 200 will be described with reference to FIGS. 3, 5, and 6.

The roadside unit 300 is managed by a service provider who provides a predetermined service using the location information transmitted by the in-vehicle device 200. As the above-mentioned service system, for example, when the vehicle in which the in-vehicle device 200 is mounted is parked in the toll parking area, or when the vehicle is traveling on the toll road, the user of the vehicle is paid for the service.

The roadside machine 300 includes a communication unit 310 and a control unit. 320. The communication unit 310 performs wireless communication by the communication unit 126 (see FIG. 2) included in the authentication center 120 or the communication unit 210 (see FIG. 3) included in the in-vehicle device 200.

The control unit 320 is a computer including a CPU, a ROM, a RAM, and the like, and controls the communication unit 310 by executing a program stored in the ROM while the CPU uses the temporary memory function of the RAM. Moreover, the hash value transmitted from the in-vehicle device 200 is obtained by the communication unit 310, and based on the hash value, it is determined whether or not the in-vehicle device 200 is a regular in-vehicle device. At the time of this judgment, communication is performed with the authentication center 120.

(Detailed structure of certification center 120)

As shown in FIG. 2, the authentication center 120 includes a control unit 122, a data storage unit 124, and a communication unit 126.

The control unit 122 is a computer including a CPU, a ROM, a RAM, and the like, and controls the data storage unit 124 and the communication unit 126. Further, when the CPU executes the program stored in the ROM while using the temporary memory function of the RAM, the RAND message generation unit 1221, the SEED value generation unit 1222, the H matrix calculation unit 1223, the parity calculation unit 1224, and the signal processing unit are provided. The function of 1225. Further, the functions of the respective units 1221 to 1225 can be the same as those disclosed in Patent Document 1. Further, the control unit 122 further includes an H matrix selection unit 1226. The control unit 122 corresponds to the center side authentication data creation unit of the present disclosure.

The RAND message generating unit 1221 means to refer to the authentication navigation data (RAND: Reference Authentication Navigation) Data) is created based on the voyage information obtained from the monitoring station 110.

Figure 4 shows the relationship between the RAND message and the navigation message. As is known, the navigation method is divided into sub-frames 1~5, and sub-frames 4 and 5 have 1~25 pages respectively. Then, each sub-frame is divided into code words 1~10.

The RAND message is that the TOW (time of week, which is equivalent to the time information of the disclosure) contained in the code word 2 of the sub-frame 1 and the TOC, AF0, and AF1 included in the code words 8 to 10 are Arranged in order. Then, an anti-spoofing flag AS Flag and a satellite number PRN (Pseudo Random Noise) ID are added. Further, in FIG. 4, the numerical values shown in parentheses after the respective materials constituting the RAND message mean the number of bits of each data.

The TOW system changes every 6 seconds, so the RAND message containing the TOW and PRNID can be said to indicate when the GPS satellite is sent from. Further, since the TOW is changed every 6 seconds and the PRNID is included, the RAND message is generated every 6 seconds according to each GPS satellite 2 received by the monitoring station 110.

The SEED value generating unit 1222 generates a unique SEED value as an input PC clock. For example, a SE number is generated by generating a random number as an input PC clock. Further, the SEED value in the present embodiment is set to 36 bits.

The H matrix calculation unit 1223 calculates the H matrix corresponding to the SEED value one-to-one by using the SEED value generated by the SEED value generation unit 1222. The H matrix is equivalent to the cryptographic key disclosed herein. Again, if The SEED value is determined to be an H matrix, so the SEED value is equivalent to the key creation data of the present disclosure. As the H matrix, a well-known hash function may be used. For example, a parity check matrix required for performing LDPC (Low Density Parity Check) encoding may be used. Even a generator matrix determined from the parity check matrix can be used.

The H matrix corresponds to an example of the encryption key of the present disclosure, and the H matrix or SEED value is an example of the key related information of the present disclosure.

The parity calculation unit 1224 calculates the parity data based on the RAND message created by the RAND message generation unit 1221 and the H matrix calculated by the H matrix calculation unit 1223. That is, the H-matrix is multiplied by the RAND message to calculate the parity data.

The signal processing unit 1225 inserts the parity data calculated by the parity calculating unit 1224 and the RAND message used in the calculation into the navigation information to be transmitted by the QZS satellite 3. The inserted voyage message is then sent to the master station 130.

Then, the signal processing unit 1225 cooperates with the insertion of the signal, and uses the RAND message, the H matrix used in the calculation of the parity data and the parity data calculated by the parity calculating unit 1224, and the SEED used in the calculation of the H matrix. The value is stored in the data storage unit 124.

The signal processing unit 1225, when the RAND message generating unit 1221 generates the RAND message, inserts the RAND message and the parity data into the navigation message to be transmitted by the QZS satellite 3. Therefore, the SEED value generating unit 1222, the H matrix calculating unit 1223, and the parity calculating unit 1224 also generate the RAND message every time the RAND message generating unit 1221 generates the RAND message. Perform processing.

The H matrix selection unit 1226 selects the PRNID, the TOW, and the public key transmitted from the in-vehicle device 200, and receives the H matrix from the data storage unit 124 when it is received by the communication unit 126. The H matrix of the received PRNID and TOW. Then, the selected H matrix is encrypted by the public key, and the encrypted H matrix is sent to the in-vehicle device 200 that has transmitted the PRNID or the like to perform the transmission.

When the PRNID, the TOW, and the public key transmitted from the roadside device 300 are received by the communication unit 126, the H matrix and the parity data stored in the data storage unit 124 are selected to correspond to the received data. PRNID, H matrix of TOW and parity data. Then, the selected H matrix and the parity data are encrypted by the public key, and the encrypted H matrix and the parity data are sent to the roadside machine 300 that has transmitted the PRNID or the like to perform the transmission.

The communication unit 126 communicates with the communication unit 210 included in the in-vehicle device 200 and the communication unit 310 included in the roadside device 300.

The master station 130 transmits the voyage message generated by the signal processing unit 1225 to the QZS satellite 3.

The QZS satellite 3 broadcasts the voyage message received from the master station 130 toward the ground.

(Composition of the in-vehicle device 200)

The maritime information broadcast by the QZS satellite 3 is received by the satellite receiving unit 230 of the in-vehicle device 200. The in-vehicle device 200 is in addition to the satellite receiving department. In addition to 230, the communication unit 210 and the control unit 220 are further provided.

The communication unit 210 includes a receiving unit 211 and a transmitting unit 212. The receiving unit 211 corresponds to the key receiving unit of the present disclosure, and the transmitting unit 212 corresponds to the terminal side transmitting unit of the present disclosure. The communication unit 210 has a narrow-area communication function and a wide-area communication function. The narrow-area communication function is, for example, a communication distance of several hundred meters. The wide-area communication function is a communication distance of, for example, several kilometers. By communicating with the base station of the public communication network, it can communicate with other communication devices in the communication circle of the public communication network. The communication unit 310 of the roadside unit 300 communicates with the narrow area communication function, and communicates with the communication unit 126 of the certification center 120 by the wide area communication function.

The satellite receiving unit 230 corresponds to the terminal side satellite receiving unit of the present disclosure, and receives radio waves transmitted by the GPS satellite 2 and the QZS satellite 3 in a predetermined cycle.

The control unit 220 is a computer including a CPU, a ROM, a RAM, and the like, and controls the communication unit 210 and the satellite receiving unit 230. Further, the CPU executes the processing shown in FIG. 5 while executing the program stored in the ROM while using the temporary memory function of the RAM.

The process shown in FIG. 5 is executed every time the satellite receiving unit 230 receives GPS waves from four or more GPS satellites 2. The reason for setting it to four or more is that it is necessary to receive GPS radio waves from four or more GPS satellites 2 in order to calculate the current position.

In step S2, the current position is calculated based on the GPS radio wave. In step S4, the navigation message authentication process is executed. The details of this process are shown in Figure 6.

In step S42, the navigation law message received by the QZS satellite 3 is acquired from the receiving unit 211.

In step S44, the PRNID, TOW, and the parity data corresponding to the navigation information used in the calculation of the current position are extracted from the navigation information acquired in step S42. In addition, the PRNID and TOW can also be extracted from the navigation information used in the calculation of the current position.

In step S46, the PRNID and TOW extracted in step S44 are transmitted from the transmitting unit 212 to the authentication center 120 together with the public key. As described above, the authentication center 120 encrypts the public key by the H matrix determined by the PRNID and the TOW and transmits it to the in-vehicle device 200.

In step S48, the encrypted H matrix transmitted from the authentication center 120 is obtained from the receiving unit 211. In step S50, the encrypted H matrix obtained in step S48 is decrypted with the secret key.

In step S52, a RAND message is created from the GPS radio wave including the same PRNID as the PRNID transmitted in step S46 in the navigation message.

In step S54, the RAND message created in step S52 and the H matrix decrypted in step S50 are compared to create a parity data. The comparative parity data made here is equivalent to the terminal creation authentication data of the present disclosure, and the S54 is equivalent to the terminal side authentication data creation unit of the present disclosure.

Next, steps S56 to S60 corresponding to the authentication determination unit of the present disclosure are executed. In step S56, it is judged whether or not the comparison parity data created in step S54 and the parity data extracted in step S44 are identical.

The H matrix decrypted in step S50 is the same as the H matrix used by the authentication center 120 in the creation of the parity data. Then, the parity calculating unit 1224 of the authentication center 120 calculates the parity data based on the H matrix and the RAND message.

Therefore, if the comparison of the parity data made in step S54 is consistent with the parity data extracted in step S44, it can be considered that the RAND message created in step S52 is the same as the RAND message made by the authentication center 120. Then, if the comparison parity data created in step S54 matches the parity data extracted in step S44, the process proceeds to step S58, and the authentication is deemed to be established. On the other hand, if the two parity data do not match, the process proceeds to step S60, and it is considered that the authentication is not established.

Returning to the description of FIG. After the execution of step S4, steps S6 to S10 corresponding to the authenticated creation unit of the present disclosure are executed. In step S6, it is determined whether the processing result of the navigational message authentication processing is that the authentication is established.

If the determination is No, that is, the authentication is not established, the processing of FIG. 4 is ended. On the other hand, if the determination in step S6 is Yes, the process proceeds to step S8.

In step S8, it is judged whether or not the transmission of the position information is necessary. The case where the transmission of the location information is necessary is, for example, the case where the request signal of the location information is received from the communication unit 310 of the roadside unit 300. Also, the location information can be sent in a certain transmission period. If step S8 If the determination is No, the processing of FIG. 4 is ended. On the other hand, if the determination in step S8 is also Yes, the process proceeds to step S10.

In step S10, the data created by the authentication center 120, that is, the H matrix, and the parity data are used as input keys to make a hash value from the hash function. This hash value is equivalent to the certified material disclosed herein.

In step S12, the position information indicating the current position calculated in step S1, the hash value created in step S8, and the PRNID and TOW extracted in step S44 are transmitted from the transmitting unit 212 to the communication unit of the roadside unit 300. 310.

(Processing of roadside machine 300)

The control unit 320 of the roadside unit 300 periodically transmits a request signal for requesting the transmission of the position information to the periphery of the roadside machine 300. When the request signal is received by the in-vehicle device 200, as described above, the in-vehicle device 200 transmits the position information, the hash value, and the like.

When the communication unit 310 of the roadside unit 300 receives the position information, the hash value, and the like from the in-vehicle device 200, the control unit 320 of the roadside unit 300 executes the processing shown in FIG.

In step S70, the location information, the hash value, the PRNID, and the TOW received by the communication unit 310 are acquired from the communication unit 310. This step S70 corresponds to the terminal data acquisition unit of the present disclosure.

In step S72, the PRNID and TOW acquired in step S70 are transmitted from the communication unit 310 to the authentication center 120 together with the public key. In addition, the public key is memorized by the roadside machine 300 alone. The public key is a key different from the public key transmitted to the authentication center 120 by the in-vehicle device 200.

As described above, the authentication center 120 encrypts the H matrix and the parity data by the PRNID and the TOW, and transmits it to the roadside device 300. These H-matrices and parity data are the input keys needed to make the hash values.

In step S74, the encrypted H matrix and the parity data transmitted from the authentication center 120 are obtained from the communication unit 310. This step S74 corresponds to the key acquisition unit of the present disclosure.

In step S76, the encrypted H matrix and the parity data acquired in step S74 are decrypted by the secret key.

In step S78, the H matrix and the parity data decrypted in step S76 are regarded as input keys, and a hash value which is preliminarily stored as used by the regular in-vehicle device 200 is created as a comparative hash value. The comparative hash value corresponds to the authenticated comparison data of the present disclosure, and step S78 corresponds to the comparison data creation unit of the present disclosure.

Next, steps S80 to S84 corresponding to the terminal determination unit of the present disclosure are executed. In step S80, it is judged whether or not the comparative hash value created in step S78 coincides with the hash value obtained in step S70.

If the two hash values are the same, it can be considered that the hash value transmitted by the in-vehicle device 200 is also the H matrix formed by the authentication center 120 as an input key. Then, when the two hash values are the same, the process proceeds to step S82, and it is considered that the in-vehicle device 200 that transmits the position information, the hash value, and the like is a regular in-vehicle device. On the other hand, if the two hash values are inconsistent, then Proceeding to step S84, it is considered that the in-vehicle device 200 that transmits the position information, the hash value, or the like is an improper in-vehicle device.

As described above, according to the first embodiment described above, the in-vehicle device 200 performs authentication of the navigation information contained in the satellite radio waves received from the GPS satellites 2 (S4). For this authentication, the H matrix used by the authentication center 120 in the creation of the parity data is obtained from the authentication center 120 (S48). Then, if the authentication is successful, the H matrix obtained from the authentication center 120 is used, and a hash value is created to indicate that the authentication has been performed (S10), and the location information is transmitted together with the hash value (S12).

In this manner, the in-vehicle device 200 creates a hash value indicating the authenticated data, and uses the H matrix obtained from the authentication center 120, and transmits it together with the location information. Thereby, it can be proved that the in-vehicle device 200 itself is a regular in-vehicle device that can be communicated with the certification center 120 and trusted by the certification center 120.

Further, the H matrix required for the hash value is obtained from the authentication center 120 in order to authenticate the navigation information contained in the satellite radio waves received by the in-vehicle device 200 itself. Therefore, the material required to create the hash value does not need to be additionally obtained from the authentication center 120, so that the process of making the hash value can be simplified.

Further, instead of transmitting the H matrix itself, a hash value generated from the H matrix using a hash function is transmitted. The hash function is an irreversible one-way function, so it can be suppressed that the H matrix is known by a third party.

The roadside machine 300 itself receives the hash value together with the location information, and the roadside machine 300 itself also obtains the H matrix from the authentication center 120. Also, the parity data is obtained (S74). Based on these H matrix, the homologous data, and the hash function previously stored as a normal in-vehicle device 200, a comparative hash value is created (S78). By comparing the comparison hash value with the hash value obtained from the in-vehicle device 200, it can be determined whether or not the in-vehicle device 200 that transmits the position information is a regular in-vehicle device.

(Embodiment 2)

Next, the second embodiment will be described. In the following description of the second embodiment, the elements of the same reference numerals as the ones used in the prior art are the same as those of the same symbols in the previous embodiments unless otherwise specified. Further, in the case where only one of the components is described, the other portions of the configuration are applicable to the embodiments described above.

In the second embodiment, the roadside unit 300A includes a satellite receiving unit 330 as shown in FIG. The satellite receiving unit 330 corresponds to the acquiring device side satellite receiving unit of the present disclosure. Further, in the second embodiment, the processing of the control unit 320A is partially different from the control unit 320 of the first embodiment. The processing of the control unit 320A will be described with reference to Figs. 9 and 10 . The control unit 320A executes the processing shown in FIG. 9 with a predetermined GPS radio wave acquisition cycle, and the processing shown in FIG. 10 is also executed at a constant cycle.

FIG. 9 is an advance process performed before the position information and the like are acquired from the in-vehicle device 200. This will be explained starting from Fig. 9. In step S90, the navigation information contained in the GPS radio waves received by the satellite receiving unit 330 is acquired from the satellite receiving unit 330. Satellite receiving unit 330 is a complex When the GPS satellite 2 receives the GPS radio wave, it acquires the navigation information of all the GPS radio waves received by the satellite receiving unit 330.

In step S92 corresponding to the radio wave information extracting unit of the present disclosure, the PRNID and the TOW are extracted from all the navigation information acquired in step S90.

In step S94 corresponding to the radio wave information transmission processing unit of the present disclosure, the PRNID and TOW extracted in step S92 are transmitted from the communication unit 310 to the authentication center 120 together with the public key. The authentication center 120 encrypts the H matrix and the parity data determined by the PRNID and the TOW, and transmits the data to the roadside device 300.

In step S96, the encrypted H matrix and the parity data transmitted from the authentication center 120 are obtained from the communication unit 310.

In step S98, the encrypted H matrix and the parity data acquired in step S96 are decrypted by the secret key. This step S96 corresponds to the key acquisition unit of the present disclosure.

In step S100, the H matrix and the parity data decrypted in step S98 are regarded as input keys, and a hash value is prepared from the hash function that is used in advance by the regular in-vehicle device 200. This comparative hash value is created for all GPS radio waves received by the satellite receiving unit 330.

In step S102, a comparison hash table is created. The comparative hash value table is a H matrix used to indicate the comparison of the hash value created in step S100 and the comparison of the hash value, in order to obtain the parity A table of the correspondence between the PRNID and the TOW transmitted to the certificate center 120 by the data.

Next, Fig. 10 will be explained. In step S110, it is determined whether or not the information of the position information and the like transmitted by the in-vehicle device 200 to execute step S12 of Fig. 5 is received by the communication unit 310. If the determination is No, the processing of FIG. 10 is ended. On the other hand, if the determination in step S110 is Yes, the process proceeds to step S112.

In step S112, the communication unit 310 acquires the position information, the hash value, the PRNID, and the TOW received from the in-vehicle device 200.

Next, steps S114 to S120 corresponding to the terminal determination unit of the present disclosure are executed. In step S114, in the comparative hash value table created in the pre-processing of FIG. 9, if the PRNID and TOW acquired in step S112 exist, the comparison hash value corresponding to the PRNID and TOW is determined to be this time. The comparative hash value used in the comparison. Further, in the pre-processing of FIG. 9, a comparison hash value of all the GPS waves received by the satellite receiving unit 230 is created. Therefore, there is a high possibility that the comparison hash value table contains the hash values corresponding to the PRNID and TOW obtained in step S112. However, with the position and size of the radio wave shield around the roadside unit 300, sometimes the satellite radio waves received by the satellite receiving unit 230 of the in-vehicle device 200 cannot be received by the satellite receiving unit 330 of the roadside unit 300. . In this case, the hash values corresponding to the PRNID and TOW obtained in step S112 are not included in the comparative hash value table. The hash values corresponding to the PRNID and TOW obtained in step S112 are not compared. In the case where the hash value table is included, the processing of steps S72 to S78 of Fig. 7 is performed to make a comparative hash value.

In step S116, it is determined whether or not the hash value obtained in step S112 and the comparative hash value determined in step S114 match.

When the two hash values are the same, the process proceeds to step S118, and it is considered that the in-vehicle device 200 that transmits the position information, the hash value, and the like is a regular in-vehicle device. On the other hand, if the two hash values do not match, the process proceeds to step S120, and it is considered that the in-vehicle device 200 that transmits the position information, the hash value, or the like is an improper in-vehicle device.

According to the second embodiment described above, since the roadside unit 300 includes the satellite receiving unit 230, it can be the same as the in-vehicle device 200 that is present around the roadside unit 300 and has the possibility of transmitting a hash value to the roadside device 300. Satellite waves can be received from GPS satellites 2.

In the first embodiment, the PRNID and the TOW are received from the in-vehicle device 200, and the PRNID and TOW are transmitted to the authentication center 120 to acquire the H matrix and the parity data. However, in the second embodiment, satellite radio waves can be received from the GPS satellite 2 in the same manner as the in-vehicle device 200. Therefore, the PRNID and the TOW can be extracted from the navigation information received by the satellite receiving unit 330 without waiting for receiving the PRNID and TOW from the in-vehicle device 200. Then, the extracted PRNID and TOW are transmitted to the authentication center 120 to acquire the H matrix and the parity data, and a comparative hash value table is created (FIG. 9).

Thereby, after receiving the position information or the like from the in-vehicle device 200 (S110: Yes), it is determined by referring to the comparison hash table prepared in advance. The comparative hash value corresponding to the PRNID and TOW received from the in-vehicle device 200 is sufficient (S112, S114). In other words, since the possibility of performing the processes of steps S72 to S78 of FIG. 7 in the first embodiment after receiving the PRNID and the TOW from the in-vehicle device 200 is high, it is possible to quickly determine whether or not it is a regular in-vehicle device.

In particular, when the roadside device 300 recognizes the in-vehicle device 200 as a regular in-vehicle device and performs processing based on the result of the determination, and the in-vehicle device 200 is traveling, it is necessary to quickly determine whether or not it is necessary for the regular in-vehicle device. Higher. The processing based on the confirmation result is, for example, a fact that the system is a regular in-vehicle device, and is transmitted to the in-vehicle device 200, or the gate provided in the traveling path of the vehicle is opened or closed based on the fact that the vehicle is recognized as a regular in-vehicle device. deal with. The second embodiment is particularly useful when it is necessary to quickly determine whether or not it is a regular in-vehicle device.

The embodiments of the present disclosure have been described above, but the present disclosure is not limited to the above-described embodiments, and the following modifications are also included in the technical scope of the present disclosure, and even if it is not described below, It can be implemented with various changes.

(Modification 1 and Modification 2)

For example, in the above-described embodiment, the H matrix and the parity data are used as input keys of the hash function to create a hash value and a comparative hash value (certified creation unit: S10, comparison data creation unit: S100). However, the present invention is not limited thereto, and the input key of the hash function may be simply set to the H matrix to create a hash value and a comparative hash value (Modification 1). Also, it can replace As the H matrix of the encryption key, the key is used as the data, that is, the SEED value is used as the input key of the hash function to make the hash value and compare the hash value (Modification 2).

(Modification 3)

Also, an H matrix can be created from the SEED value. Therefore, the authenticated creation unit and the comparison data creation unit do not directly use the SEED value as the input key, but do not directly use the SEED value as the input key, but create the H matrix from the SEED value. The matrix is used as an input key to make a hash value.

(Modification 4)

In addition, the certified preparation unit and the comparison data creation unit may not use the hash value as the authenticated data or the authenticated comparison data, but may use the H matrix or SEED value used when the hash value is created. Certification data, certified comparative data.

(Modification 5)

In the second embodiment, the comparative hash value of all the GPS radio waves received by the satellite receiving unit 330 is created, but a comparative hash value of a part of the GPS radio waves received by the satellite receiving unit 330 may be created. For example, it may be limited to create a comparative hash value from GPS radio waves received by a predetermined number of GPS satellites 2 that are well received.

(Modification 6)

In the above-described embodiment, the roadside apparatuses 300 and 300A have been described as the position information acquisition means, but the invention is not limited thereto. The position information acquisition device is a mobile device that can be mounted on a banned vehicle that bans improper use of a toll parking lot or a toll road.

(Modification 7)

In the above-described embodiment, the in-vehicle device 200 has been described as the positioning terminal, but the invention is not limited thereto. The positioning terminal may be a portable terminal that is carried by a person or a terminal that is mounted on a mobile body other than the vehicle.

The processing of the flowchart or the flowchart described in the present application is composed of a plurality of steps (or a section), and each step is expressed as, for example, S2. The steps can then be divided into a plurality of sub-steps, and on the other hand, the complex steps can be integrated into one step.

In the present embodiment, the respective units in the control unit 122 are simply classified into the functions of the control unit 122, and it is not meant that the inside of the control unit 122 is physically divided into the parts. Part of it. Therefore, each "part" can also be implemented as a part of a computer program in a software manner, or can be implemented in a hardware manner by an IC chip or a large-scale integrated circuit.

The embodiments, configurations, and aspects of the present disclosure have been exemplified above, but the embodiments, configurations, and aspects of the present disclosure are not limited to the above-described respective embodiments, configurations, and aspects. For example, for different realities The embodiments, configurations, and aspects in which the disclosed aspects, configurations, and aspects are appropriately combined with the disclosed technical components are also included in the scope of the embodiments, configurations, and aspects of the present disclosure.

Claims (6)

A location information authentication system is provided with: a positioning terminal (200), which receives a navigational information, and if the received navigational information is an identifiable navigational information, it will indicate the location information of the current location calculated by using the previous navigation method message. And transmitting the wireless communication to the outside; and the authentication center device (100) transmits the communication satellite (3) that creates the authentication data to the center used for the authentication of the previous measurement terminal (200), and transmits the pre-recording center to create the authentication data; And the location information obtaining device (300, 300A) receives the location information wirelessly transmitted by the pre-recording terminal (200); wherein the location information authentication system (1) is that the pre-authentication authentication center device (100) has: The central satellite receiving unit (110) receives the satellite radio wave containing the navigation law message from the navigation satellite (2) of the navigation satellite system; and the central side authentication data creation unit (122), which is used as an encryption key, based on the pre-record The cryptographic key contained in the satellite radio wave received by the encryption key and the pre-recorded center satellite receiving unit (110) is used as a pre-recording center to create authentication data; and the authentication data is sent The Ministry of Information (130) creates authentication data for the center made by the pre-recording center side authentication data creation unit (122), and transmits it to the pre-recording communication satellite (3); the pre-recording terminal (200) has: The terminal side satellite receiving unit (230) obtains the authentication data from the pre-recording communication satellite (3), and receives the pre-recorded satellite radio wave from the preceding navigation satellite (2); and the key receiving unit (211) The pre-certification center device (100), which receives the pre-recorded encryption key or the key-making data that can be used as the pre-recorded encryption key, is the key-related data; and the terminal-side authentication data creation unit (S54) is based on the pre-recorded gold The key connection information received by the key receiving unit (211) and the navigation information extracted from the satellite wave received by the satellite side receiving unit (230) from the front end are used to create the authentication data for the terminal; and the authentication judgment The department (S56~S60) compares the authentication data of the pre-recording center with the authentication data of the pre-recording terminal, and if it is consistent, it determines that the satellite radio wave received by the satellite-side radio receiving unit (230) received by the pre-recording terminal is included in the navigation method. The message is the authentication success; and the authenticated creation unit (S6~S10) is based on the pre-recorded key related information received from the pre-registration center device (100) by the pre-recorded key receiving unit (211), and is created to indicate the pre-recorded terminal. Side satellite The navigational information contained in the satellite radio waves received by the Ministry of Information (230) is the authenticated data that has been successfully authenticated; and the terminal-side communication department (212) is the pre-recorded location information calculated based on the pre-occasion method information, together with The pre-recorded location information acquisition device (300, 300A) includes the terminal data acquisition unit (S70, S112), and sends the pre-recorded terminal side to the pre-recorded information acquisition unit (S6 to S10). The pre-recorded position information and the pre-recorded authentication data transmitted by the information unit (212) are obtained from the communication unit, and the key acquisition unit (S74, S96) obtains the pre-record from the pre-registration center device (100) through the pre-recording communication unit. The key related information; and the comparison data creation unit (S78, S100, S102) are based on the key related information obtained by the pre-recording key acquisition unit (S74, S96), and are used for comparison with the pre-recorded certified data. The authenticated comparison data is required; and the terminal determination unit (S80 to S84, S114 to S120) is the preparation unit (S78, S100, and the pre-recorded comparison data acquired by the pre-recorded terminal data acquisition unit (S70, S112). S102) comparing the authenticated comparison data made, if it is consistent, determining that the pre-position measurement terminal (200) is a regular positioning terminal. The location information authentication system according to claim 1, wherein the pre-recorded authentication creation unit (S6 to S10) uses the pre-key key related information received by the pre-recorded key reception unit (211) by the hash function. And made a pre-recorded certified information. The location information authentication system according to claim 2, wherein the pre-recorded authentication creation unit (S6 to S10) uses the pre-recorded terminal to create the authentication material and the pre-recorded key received by the pre-recorded key receiving unit (211). The related information is created by the pre-recorded hash function. The location information authentication system as recited in any one of claims 1 to 3, wherein The pre-recorded position information acquisition device (300A) includes: an acquisition-side satellite reception unit (330) that receives a pre-recorded satellite radio wave from the front navigation satellite (2); and a radio wave information extraction unit (S92) from the pre-record acquisition device side The satellite radio wave received by the satellite receiving unit extracts the satellite number and the time information; and the radio wave information transmitting processing unit (S94) periodically causes the satellite number and time information extracted by the pre-recorded radio wave information extracting unit to be periodically The pre-recording communication department sends to the pre-registration certification center; the pre-key acquisition unit (S96) is a pre-recorded key relationship transmitted from the certification center based on the fact that the pre-recorded communication department has transmitted the pre-recorded satellite number and time information to the pre-registration center. The information is obtained from the former Ministry of Communications; the pre-comparison data preparation department (S100, S102), in addition to the pre-recorded certified comparative data, will also bear the pre-recorded comparison data, the correspondence with the pre-recorded satellite number and the time information, in the reception The pre-recorded terminal judgment unit (S114~S120) is based on the pre-recorded terminal data acquisition unit (S70, S112). When the authenticated comparison data corresponding to the correspondence between the satellite number and the time information obtained in the previous record is present, the pre-recorded authentication comparison data and the authenticated data obtained by the pre-recorded terminal data acquisition unit (S70, S112) are Compare. A positioning terminal receives a navigational law message, and if the received navigational information is an identifiable navigational information, it indicates that the navigation is used before use. The position information of the current position calculated by the legal message is wirelessly transmitted to the outside. The positioning terminal (200) includes a terminal side satellite receiving unit (230), which is formed by the authentication center device (100). In order to make the authentication data used by the pre-recording terminal (200) and send it to the center of the communication satellite (3) for authentication data, it is received from the communication satellite (3), and the navigation satellite from the navigation satellite system (2) Receiving satellite radio waves containing navigational information; and the key receiving department (211) is a pre-recorded authentication center device (100) that will be used as a pre-recording center to create an encryption key for authentication data or can be used as a pre-recorded encryption key. The key key creation data, that is, the key related information, is received; and the terminal side authentication data creation unit (S54) is based on the key related information received by the preamble key receiving unit (211), The navigation method extracted from the satellite radio waves received by the satellite receiving unit (230) in the front end is used to create the authentication data for the terminal; and the authentication judging unit (S56 to S60) establishes the precaution center as the authentication data and the predecessor. end The authentication data is compared, and if it is consistent, it is determined that the navigation information contained in the satellite radio wave received by the satellite side receiving unit (230) is successful in authentication; and the certified preparation unit (S6 to S10), The pre-recorded key related information received from the pre-registration center device (100) by the pre-recorded key receiving unit (211) is included in the satellite radio wave received by the pre-recorded terminal side satellite receiving unit (230). The Air Navigation Information is certified for successful certification; and The terminal side transmitting unit (212) transmits the pre-recorded position information calculated based on the previous voyage method message together with the authenticated data created by the pre-recorded authentication preparation unit (S6 to S10). A location information obtaining device is configured to: receive a navigation law message, and if the received navigation law message is an identifiable navigation law message, it will indicate the location information of the current location calculated by using the previous navigation law message and indicate the received navigation law message. It is a certified data that has been successfully authenticated, and a positioning terminal (200) that wirelessly transmits to the outside receives the pre-recorded location information and the pre-recorded authenticated data; wherein the location information obtaining device (300, 300A) has: a terminal data obtaining unit (S70, S112), the pre-recorded position information and the pre-recorded authenticated data transmitted by the pre-recording terminal (200) are obtained from the communication unit; and the key acquisition unit (S74, S96) transmits the pre-recorded communication unit. The authentication center device (100) obtains an encryption key used by the pre-registration center device (100) to create an authentication data for the center used by the pre-positioning terminal (200) at the time of authentication, or can be used as a pre-recorded encryption key. The key creation data is the key related information; and the comparison data creation department (S78, S100, S102) is based on the pre-key acquisition unit (S74, S9). 6) The key information obtained is used to create the certified comparison data required for comparison with the previously verified data; and the terminal judgment unit (S80~S84, S114~S120) is the predecessor terminal data acquisition unit. (S70, S112) obtained certified information and pre-record The comparison data created by the comparison data creation unit (S78, S100, S102) is compared, and if they are identical, the pre-position measurement terminal (200) is determined to be a regular positioning terminal.