JP3639769B2 - Information issuing system and information issuing method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention installs payer attribute information necessary for payment in a payer-side communication terminal device for paying a fee such as a toll on a toll road by communicating with a payee-side terminal device. The present invention relates to an information issuing system and an information issuing method.
[0002]
[Prior art]
  In recent years, the introduction of a so-called toll road automatic toll collection system (hereinafter referred to as “ETC system” (ETC: Electronic Toll Collection)) as a toll system for toll roads has been promoted. The ETC system is a system that receives information necessary for payment of a toll from a vehicle by using two-way wireless communication when the vehicle passes through a toll collection gate on a toll road. According to this ETC system, unlike the current toll collection system, there is no need to temporarily stop the vehicle for the purpose of toll collection. For this reason, it has been attracting attention because it can solve the problem of toll road congestion on the toll road and there is no need to construct complicated toll road entrance / exit roads.
[0003]
In this ETC system, it is necessary to install payer-side attribute information necessary for toll collection, that is, information for identifying a payer and vehicle information, in the in-vehicle device.
[0004]
That is, FIG. 5 is an image diagram for explaining a toll collection form of the toll road toll collection system. When the vehicle 32 equipped with the in-vehicle device 31 passes through the toll gate 33, bidirectional wireless communication is performed between the road-side device 35 installed in front of the passing gate 34 and the in-vehicle device 31 and stored in the in-vehicle device 31. Based on the vehicle information and user information stored in the IC card 36, the usage fee is settled.
[0005]
Here, in the toll system on a toll road in Japan, the toll differs greatly depending on the type of vehicle (small vehicle, large vehicle, etc.). For this reason, the in-vehicle device 31 stores information (billing basic information) regarding the type of the vehicle 32 to which the in-vehicle device 31 is attached, and determines the type of the vehicle in front of the passing gate 34. A sensor 37 is provided. When the vehicle type determined by the sensor 37 and the information transmitted from the vehicle-mounted device 31 do not match, the passage gate 34 is not opened and the vehicle 32 cannot pass.
[0006]
Here, the on-board unit 31 may be mounted by a vehicle manufacturer at the time of manufacture of the vehicle, but in many cases, the on-board unit 31 is wholesaled to a sales dealer, a parts sales company or the like and is considered to be mounted there. It is done. In general, there are a plurality of manufacturers (manufacturers) of the in-vehicle device 31, and it is assumed that installation of vehicle information and the like in the in-vehicle device 31 is performed in different environments such as an automobile dealer and a parts dealer.
[0007]
In addition, considering that Japan's high-speed tolls are relatively high, it cannot be denied that there is a possibility that the installation of vehicle information or the like, that is, the setup of the in-vehicle device will be performed illegally. For this reason, the setup of this in-vehicle device needs to be devised so as to be executed under unified and reliable security management.
[0008]
[Problems to be solved by the invention]
As described above, when installing attribute information (vehicle information, etc.) on the payer side in the in-vehicle device, if there are a wide variety of persons involved in these operations, illegal generation or alteration of the attribute information, Security problems such as unauthorized installation occur.
[0009]
The present invention has been made in view of such circumstances. For example, the payer attribute information is set up for a payer-side communication terminal device that is placed in a highly public organization and manufactured by a specific manufacturer. It is an object of the present invention to provide an information issuing system that can be performed in a high state.
[0010]
[Means for Solving the Problems]
  In order to solve the above object, according to a first main aspect of the present invention, there is provided an information issuing system for setting up payer attribute information in a payer side communication terminal device manufactured by a specific manufacturer. There,
  A setup encryption key generation unit that generates a setup encryption key based on the first unique information;
  A setup encryption key storage unit that stores the setup encryption key in association with second unique information;
  A setup encryption key issuing unit that issues the setup encryption key to the manufacturer in a state associated with the second unique information in order to install the generated setup encryption key in the payer-side communication terminal device. And payer attribute information for setting up the payer side communication terminal device together with the second unique information from a set up person who sets up the payer side communication terminal device in which the setup encryption key is recorded. Based on the second unique information received by the payer attribute information receiving unit and the payer attribute information receiving unit, the setup encryption key is extracted from the setup encryption key storage unit, and the received payer attribute information is In order to make the payer side communication terminal set up, the setup encryption key and the payment Information issuing system; and a payer attribute information issuing unit that issues the attribute information in the setup user is provided.
[0011]
According to such a configuration, issuance of payer attribute information or the like is performed on a storage medium such as a setup IC card, and setup is performed between the setup storage medium and the payer side communication terminal device. Payer attribute information can be transferred to the terminal device by performing the authentication using the encryption key. In this case, since the setup encryption key is generated based on unique information (first unique information) that is different from each other, setup with high security can be performed. Moreover, the information issuance apparatus is installed in a highly reliable, for example, public organization, so that unified management of setup can be performed. Note that the payer and the setup person may be different persons or the same person. Further, the payer attribute information issued for the setup may be payer attribute information generated based on the payer attribute information received from the setup person.
[0012]
Here, according to one embodiment, the setup encryption key is issued to the manufacturer side and installed on the payer side communication terminal device, and the setup person issued to the set up person. Key. In this case, it is preferable that each of the communication terminal side key and the setup person key is issued after being encrypted with the secret key of the information issuing system.
[0013]
  According to one embodiment, the first unique information is an ID unique to a payer side communication terminal device generated on the manufacturer side. In this case, the system further receives and stores the ID. An ID storage unit.
[0014]
According to one embodiment, the second unique information includes the first unique information and may be the same as the first unique information. In this case, it is preferable for the simplification of the system configuration that both the first and second unique information are the manufacture ID of the payer side communication terminal device.
[0015]
  According to one embodiment,The setup encryption key issuing unit is configured to encrypt the second unique information with a system side encryption key and issue the setup encryption key to the manufacturer in a state associated with the second unique information,This system isfurtherIt is preferable that a decryption unit for decrypting the encrypted second unique information received by the payer attribute information receiving unit with a system-side secret key is provided.
[0016]
  According to one embodiment, the information issuing system further includes an encryption key for payment communication between the payer side communication terminal device and the payee side communication terminal device based on the first unique information. The payer attribute information issuing unit generates the payment communication encryption key together with the setup encryption key and the payer attribute information. It is issued to let you set up. According to such a configuration, it becomes possible to install the communication encryption key in the payer-side communication terminal device with high security at the time of setup.
[0017]
  According to one embodiment, the information issuing system further includes a charging basic information issuing unit that issues charging basic information for the payee to charge the payer. The unit includes a charge category determination unit that determines a charge category to which the payer belongs based on the attribute information of the payer received by the payer attribute information receiving unit. According to such a configuration, the payer can be charged based on the charge classification determined by the information issuing system, so that the charge process can be performed smoothly. Further, when this system is placed in a highly reliable public institution, the reliability for determining the charging category is guaranteed.
[0018]
  According to one embodiment, the payer side communication terminal device is an in-vehicle device for an automatic toll collection system mounted on a vehicle traveling on a toll road, and the payer attribute information is charged for the vehicle. It includes vehicle type discrimination information for charging a road toll. In this case, a wireless communication encryption key generation unit that generates a wireless communication encryption key between the in-vehicle device and the roadside device installed on the roadside of the toll road is further provided based on the first unique information. The payer attribute information issuing unit preferably issues the wireless communication encryption key together with the setup encryption key and payer attribute information to set up the vehicle-mounted device)
[0019]
According to such a configuration, it is possible to set up an in-vehicle device mounted on a vehicle in an ETC system under a highly reliable security management environment.
[0020]
  According to the second aspect of the present invention,Depending on the server device installed in the management centerAn information issuing method for setting up payer attribute information on a payer side communication terminal device manufactured by a specific manufacturer,An encryption key generation unit for setting up the server deviceA setup encryption key generation step for generating a setup encryption key based on the first unique information;The setup encryption key generation unitA setup encryption key storage step of storing the setup encryption key in a setup encryption key storage unit in association with second unique information;An encryption key issuing unit for setting up the server device,A setup encryption key issuing step for issuing the setup encryption key to the manufacturer in a state associated with the second unique information in order to install the generated setup encryption key in the payer side communication terminal device. When,The server device isPayment that receives payer attribute information for setting up the payer side communication terminal device together with the second unique information from a set up person who sets up the payer side communication terminal device in which the setup encryption key is recorded Person attribute information receiving process,The server device isBased on the second unique information received in the payer attribute information receiving step, the setup encryption key is extracted from the setup encryption key storage unit, and the received payer attribute information is set up in the payer side communication terminal device. In order to achieve this, there is provided an information issuing method characterized by including a payer attribute information issuing step for issuing the setup encryption key and payer attribute information to the set up person.
[0021]
According to such a configuration, the setup encryption key is generated based on unique information (first unique information) that is different from each other, so that setup with high security can be performed. Moreover, the information issuance apparatus is installed in a highly reliable, for example, public organization, so that unified management of setup can be performed. Note that the payer and the setup person may be different persons or the same person. Further, this information issuing method may issue information indirectly to the setup person.
[0022]
  Further, according to the third main aspect of the present invention, the information issuing system can be connected to the information issuing system of the first aspect and is used for issuing information to the payer side communication terminal device.Information issuing terminal deviceAlternatively, the information issuing terminal device can be used in the information issuing method according to the second aspect, and the payer attribute information and the setup encryption key issued from the information issuing system are read by the payer side communication terminal device. There is provided an information issuing terminal device comprising information recording means for recording on a possible storage medium.
[0023]
According to such a configuration, since the information issuing terminal device can be installed in the setup person and information can be issued to a storage medium (IC card or the like) provided in advance, information issuance to the payer is efficient on the spot. Can be done.
[0024]
  The information issuing terminal device is preferably configured to be able to connect to the information issuing system online. In this case, the device further includes payer attribute information for setting up the payer side communication terminal device. It is desirable to have a payer attribute information transmitting means for transmitting to the information issuing system together with the second unique information. The information issuing terminal device preferably further includes a second unique information receiving means for receiving the second unique information from the payer side communication terminal device via the storage medium.
[0025]
In addition, the storage medium permits reading and writing of information only to a specific information issuing terminal device, and this information issuing terminal device permits writing of information only to a specific storage medium. More desirable.
[0026]
  According to a fourth main aspect of the present invention, there is provided an information issuance system for setting up payer attribute information in a payer side communication terminal device manufactured by a specific manufacturer, wherein the setup encryption key is set up. A setup encryption key generation unit that generates and stores the setup encryption key in the setup encryption key storage unit, and installs the generated setup encryption key in the payer side communication terminal device in order to install the setup encryption key. A payer attribute for setting up the payer side communication terminal device from a set up encryption key issuing unit issued to the payer side communication terminal device in which the setup encryption key is recorded The payer attribute information receiving unit that receives the information and the setup encryption key are extracted from the setup encryption key storage unit. A payer attribute information issuing unit that issues the setup encryption key and the payer attribute information to the setup person in order to cause the payer side communication terminal device to set up the received payer attribute information. A featured information publishing system is provided.
[0027]
According to such a configuration, issuance of payer attribute information or the like is performed on a storage medium such as a setup IC card, and setup is performed between the setup storage medium and the payer side communication terminal device. Payer attribute information can be transferred to the terminal device by performing the authentication using the encryption key. In addition, the information issuance system is installed in a highly reliable, for example, public organization, so that unified management of setup can be performed. Note that the payer and the setup person may be different persons or the same person. Further, this information issuing method may issue information indirectly to the setup person.
[0028]
  Furthermore, according to the fifth principal aspect of the present invention,Depending on the server device installed in the management centerAn information issuing method for setting up payer attribute information on a payer side communication terminal device manufactured by a specific manufacturer,An encryption key generation unit for setting up the server deviceGenerating a setup encryption key and storing it in the setup encryption key storage unit; andAn encryption key issuing unit for setting up the server device,A setup encryption key issuing step for issuing the setup encryption key to the manufacturer in order to install the generated setup encryption key in the payer side communication terminal device;The server device isPayer attribute information receiving step for receiving payer attribute information for setting up the payer side communication terminal device from a set up person who sets up the payer side communication terminal device in which the setup encryption key is recorded;The server device isThe setup encryption key is extracted from the setup encryption key storage unit, and the setup payer attribute information and the payer attribute information are set in order to cause the payer side communication terminal device to set up the received payer attribute information. And a payer attribute information issuing step for issuing the information.
[0029]
The other features and remarkable effects of the present invention can be understood more clearly by referring to the description of the following embodiments of the present invention and the attached drawings.
[0030]
DETAILED DESCRIPTION OF THE INVENTION
(First embodiment)
Hereinafter, a case where the information issuing system of the present invention is applied to a toll road automatic toll collection system (ETC system) will be described as an example.
[0031]
FIG. 1 is an explanatory diagram showing a setup procedure of an in-vehicle device using this information issuing system, and FIG. 2 is a schematic configuration diagram of this system.
[0032]
As shown in FIG. 1, the information issuing system 1 is installed in a management center 2 as a public organization or a general administrative organization. The system 1 is configured to be connectable online or offline with an in-vehicle device manufacturer 4 that manufactures the in-vehicle device 3 and a toll road user 5 (or a setup person). In this embodiment, information issuance from the system 1 to the user 5 is performed offline via the setup IC card 6.
[0033]
  As shown in FIG. 2, the system 1 receives the vehicle-mounted device manufacturing ID (and the setup key issuance request) unique to the vehicle-mounted device from the vehicle-mounted device manufacturer 4 and stores it in the vehicle-mounted device manufacturing ID storage unit 10. An ID receiving unit 11, a setup key generating unit 13 that generates a setup encryption key (onboard unit key and IC card key) based on the in-vehicle device manufacturing ID and stores it in the setup key storage unit 12; Of these, the in-vehicle equipment key4The setup key issuing unit 14 for issuing the IC card key to the setup IC card 6, the individual vehicle information receiving unit 15 for receiving individual vehicle information (vehicle verification information) from the user, and the individual vehicle information as the vehicle type A vehicle type discriminating unit 18 for discriminating a vehicle type code (billing basic information) of a user's vehicle by applying to the discrimination model 16 and storing it in the vehicle type code storage unit 17; A communication key generator 20 for passing through a gate for generating a communication key for passing through a gate for generating a communication key (and other keys) between the roadside unit 3 and the roadside device and storing it in a communication key storage unit 19 for passing through a gate; A vehicle type code / gate communication key issuing unit 21 that issues (stores) the vehicle type code and the communication key to the setup IC card 6 simultaneously with the setup IC card key;
[0034]
These constituent elements 11 to 21 are actually stored as components constituting a computer program in a server device installed in the management center 2 and called by the CPU to be executed by the RAM or the like. Is configured to run. Further, each information is issued in a form suitable for the storage medium on the receiving side via an output device such as a card reader / writer.
[0035]
Hereinafter, the operation of the system 1 will be described with reference to FIG. In addition, S1-S13 of this figure is a code | symbol which shows a processing order.
[0036]
First, when manufacturing the vehicle-mounted device 3, the vehicle-mounted device manufacturer 4 requests the information issuing system 1 of the management center 2 to generate a setup encryption key together with the manufacturing ID of the vehicle-mounted device 3 (step S1). ). The in-vehicle device manufacturing ID is a number (first unique information) unique to the in-vehicle device 3, and is formed by combining a manufacturer ID and a manufacturing number, for example.
[0037]
The information issuing system 1 receives the in-vehicle device manufacturing ID by the in-vehicle device manufacturing ID receiving unit 11 and registers it in the in-vehicle device manufacturing ID storage unit 10. Then, the setup encryption key generation unit 13 applies the in-vehicle device manufacturing ID to a predetermined encryption key generation algorithm, thereby generating an in-vehicle device key and an IC card key as the setup encryption key (step S2). . The in-vehicle device key and the IC card key are stored in the setup key storage unit 12 in association with the in-vehicle device manufacturing ID. Among these, the setup on-vehicle device key is transmitted to the on-vehicle device manufacturer 4 by the setup encryption key issuing unit 14 (step S3).
[0038]
The in-vehicle device manufacturer 4 stores this set-up in-vehicle device key in a security function (for example, a security chip) installed in the in-vehicle device 3, and then sells the in-vehicle device 3 to the user 5 (step S4). Since this in-vehicle device 3 is before being mounted on a vehicle, charging basic information (attribute information) such as vehicle information and user information is not installed at all.
[0039]
The user 5 fixes the purchased in-vehicle device 3 to the vehicle that has been inspected, and transmits individual vehicle information of the vehicle to the information issuing system 1 of the management center 2 together with the in-vehicle device manufacturing ID (step S5). . In the information issuing system 1, the individual vehicle information receiving unit 15 receives the individual vehicle information. And the vehicle type discrimination | determination part 18 discriminate | determines the charge vehicle type code | cord | chord of a user's vehicle by applying this individual vehicle information to the vehicle type discrimination | determination model 16 (step S6). Specifically, the information described in the vehicle verification is received from the user 5 as individual vehicle information, and this individual vehicle information is applied to a predetermined vehicle type discrimination algorithm to process the vehicle. Allocate to one of the types of billing vehicle codes.
[0040]
On the other hand, the information issuing system 1 generates an encryption key used at the time of wireless communication between the in-vehicle device 3 and the roadside device by the gate-passing communication key generation unit 20 based on the in-vehicle device manufacturing ID ( Step S8). This communication key is stored in the communication key storage unit 19.
[0041]
Next, the information issuing system 1 issues the vehicle type code and communication key from the vehicle type code / gate communication key issuing unit 21 to the setup IC card 6 (steps S7 and S9). The setup key issuing unit 14 takes out the IC card key from the setup encryption key storage unit 12 and issues it to the setup IC card 6 (step S10). Issuance of various information to the setup IC card 6 is performed by a card reader / writer as an output device as described above.
[0042]
Next, the setup IC card 6 is delivered to the user 5 (or setup person) by mail, for example (step S11).
[0043]
The user 5 inserts the setup IC card 6 into the card reader of the in-vehicle device 3 so that the setup encryption key (in-vehicle device key, IC card key) is inserted between the setup IC card 6 and the in-vehicle device 3. ) Is used to transfer the vehicle type code and other information (attribute information) in the IC card 6. This completes the setup of the in-vehicle device 3 (step S12).
[0044]
  During the above process, the in-vehicle device key and the IC card key are supplied after being signed and encrypted with the system secret key of the information issuing system 1. The in-vehicle device 3 and the setup IC card 6 perform mutual authentication by using the system public key (or secret key) and a random number, and confirm that they are devices authenticated by the management center 2. It is configured to transfer information. The signature / encryption for this purpose is executed by the encryption / decryption processing unit 23 shown in FIG.
[0045]
  The information supplied to the in-vehicle device manufacturer 4 is configured to be supplied in an encrypted state with the public key of the in-vehicle device manufacturer 4, for example. This encryption is also preferably executed by the encryption / decryption processing unit 23.
[0046]
According to such a configuration, since the setup encryption key is generated based on unique information (vehicle equipment manufacturing ID) that is different from each other, setup with high security can be performed. Further, this information issuance system is installed in a highly reliable, for example, public organization, so that there is an effect that unified setup security can be managed.
[0047]
Also, in this ETC system, the toll road fee varies greatly depending on the vehicle type, so this vehicle type determination is very important. According to the above configuration, the vehicle type determination is unified in the information issuing system. Because it can be done, its reliability is high. In general, vehicle type determination for billing is not easily performed even based on vehicle verification, and variations in determination criteria are not allowed. For this reason, such a problem can be solved by performing the information issuing system in a unified manner.
[0048]
In addition, this invention is not limited to the said one Embodiment, A various deformation | transformation is possible in the range which does not change the summary of invention.
[0049]
For example, the information issuing system according to the above embodiment is applied to an ETC system, but is not limited to this. For example, the payer side communication terminal device may be an electronic wallet, for example. Further, the payer's attribute information may be any information related to the payment unique to the payer.
[0050]
In the above embodiment, the setup IC card 6 is mailed to the user 5 (setup person). However, the card reader / writer installed in the user 5 (setup person) allows the user to The payer's attribute information (vehicle type code) or the like may be stored in a setup IC card prepared on the 5 (setup person) side. Further, the attribute information may be transferred by performing authentication between the in-vehicle device 3 and the information issuing system 1 directly by online connection.
[0051]
Furthermore, the setup IC card may also serve as a credit card for toll road toll payment (for other purposes). In this case, for example, the vehicle model code, the gate communication key and the setup IC card key are issued to a credit card company, and the credit company stores the information together with the payment information of the user. To do. In this case, the information to be issued to the credit card company is preferably issued after being encrypted with a public key of the credit card company, for example, for ensuring security.
[0052]
In the above embodiment, the IC card key for setup is generated based on the manufacturing ID of the in-vehicle device, and the IC card key is searched based on the in-vehicle device manufacturing ID notified from the setup person. It is intended to be issued, but is not limited to this. For example, the setup person may know only the unique symbol (second unique information) different from the manufacturing ID and search for the IC card key based on the unique symbol different from the manufacturing ID. . According to such a configuration, it becomes possible to prevent the setup person from knowing the source data (manufacturing ID) of the setup encryption key.
[0053]
  As another method, it is effective in ensuring security if the manufacturing ID itself is encrypted with a system encryption key on the information issuing system side and is received and decrypted.
[0054]
  Moreover, in the said one Embodiment, although vehicle equipment manufacture ID was utilized as 1st unique information, it is not limited to this. For example, it may be a unique chip ID assigned by the manufacturer of the security chip module in which the in-vehicle device key is installed. In this case, as shown in FIG.A applicationModule (SAM)38Manufacturer (security manufacturer)39The manufacturer 4 of the in-vehicle device 3 may purchase the SAM 38 and attach it to the in-vehicle device 3. According to such a configuration, there is an advantage that an in-vehicle device manufacturer (communication device manufacturer) who does not have the ability to manufacture a security function can also enter this system market.
[0055]
In the embodiment, the generation of the setup key (step S2) and the generation of the gate communication key (step S8) are performed in different processes, but they may be generated in the same manner in step S2. good. In this case, the key generation procedure can be simplified.
[0056]
On the other hand, in the one embodiment, in step S5, the user 5 (setup person) fixes the purchased in-vehicle device 3 to the own vehicle-inspected vehicle, and also stores the individual vehicle information of the vehicle together with the in-vehicle device manufacturing ID. Although the information is transmitted to the information issuing system 1 of the management center 2, a dedicated setup terminal device 25 may be used as shown in FIG.
[0057]
The setup terminal device 25 is preferably installed in a predetermined setup contractor designated and designated by the management center 2 such as an automobile dealer or an automobile parts dealer. In this case, for security reasons, the setup terminal device is registered and managed in the management center. A predetermined number of the IC cards 6 are distributed and installed in advance to the set-up contractor.
[0058]
The setup terminal device and the IC card 6 perform mutual authentication by using the public key (or secret key) and random number of the system, and confirm that the devices are authenticated by the management center 2. It is configured to transfer information. In addition to this, the IC card 6 is configured to be readable / writable only by the setup terminal device issued to the setup contractor so that only the setup contractor who received the distribution can set up. Is desirable.
[0059]
The set-up contractor inserts the IC card 6 into the in-vehicle device to perform authentication with the in-vehicle device (step S5 '), and stores the SAM-ID in the IC card. Next, by inserting the IC card into the setup terminal device, the ID is read (step S5 ") and transmitted to the information issuing system together with the individual information (step S5").
[0060]
In order to perform this transmission, the setup terminal device 25 is connected to a communication means such as a modem or a TA so that it can be connected online with the information issuing system.
[0061]
The information issuing system 1 receives the vehicle type code, the gate communication key, and the IC card key for setup from the system 1 online (steps S7, S9, S10). Then, the information is issued to the IC card 6 by writing the information on the IC card storing the SAM-ID (step S11).
[0062]
According to such a configuration, it is not necessary to mail the IC card from the management center 2 to the user, and information can be issued online. In this case, the SAM-ID (first and second unique information) is not visually read by the user or the setup contractor and sent to the information issuing system. Normally, considering the number of on-vehicle devices to be manufactured, this ID is an alphanumeric character having an order of nearly 20 digits, and it is considered that mistakes are likely to occur when it is visually read. As a result, such a mistake does not occur. Further, since the SAM-ID can be transmitted to the system 1 side without being known to the user or the setup person, the security effect is also high.
[0063]
Furthermore, according to such a configuration, there is an effect that the setup can be performed using the same IC card even when the user replaces the private car and the vehicle-mounted device 6. That is, also in this case, the ID is read by applying the IC card 6 to a new in-vehicle device, and this is applied to the information issuing terminal device 25, so that the new in-vehicle device 6 can be applied in the same procedure as described above. Thus, payer attribute information including new individual vehicle information can be installed. In this way, the same IC card can be used to set up any number of times. In this case, the information used for payment to the credit card company does not need to be rewritten, so there is no need to reissue the card.
[0064]
Moreover, in the said one Embodiment, although the payment attribute information of one user was set up in the said in-vehicle device 6, it is not limited to this, It is set up as a plurality of payment attribute information. Also good. According to such a configuration, for example, it can be used not only for toll collection on a toll road using an in-vehicle device but also for fee settlement at a parking lot or a gas station. In this case, there may be a plurality of management centers 2 that issue payment attribute information. By using the authentication function of this in-vehicle device 6 for additional purposes, for example, in combination with an ID card of an individual who has been permitted to enter, for entrance / exit management of facilities that require entry permission such as military and airports. Is available.
[0065]
【The invention's effect】
As described above, according to the present invention, a setup with high security can be performed. Moreover, the information issuance apparatus is installed in a highly reliable, for example, public organization, so that unified management of setup can be performed.
[Brief description of the drawings]
FIG. 1 is a diagram for explaining a processing procedure by an information issuing system according to an embodiment of the present invention;
FIG. 2 is a schematic configuration diagram of an information issuing system.
FIG. 3 is a diagram similarly showing a modification.
FIG. 4 is a diagram similarly showing a modification.
FIG. 5 is an image of charge collection of the ETC system.
[Explanation of symbols]
  1 ... Information issuing system
  2 ... Management Center
  3… In-vehicle device
  4 ... In-vehicle device manufacturer
  5 ... Users
  6 ... IC card
  10 ... In-vehicle device manufacturing ID storage
  11 ... In-vehicle device manufacturing ID receiver
  12 ... Setup encryption key storage
  13 ... Encryption key generator for setup
  14 ... Encryption key issuing unit for setup
  15 ... Individual car information receiver
  16 ... Model discrimination model
  17 ... Model code storage
  18 ... Vehicle type discriminator
  19: Communication key storage when passing through the gate
  20: Key generation unit for communication when passing through the gate
  21 ... Vehicle code / Gate communication key issuing unit
  25. Information issuing terminal device
  23 ... Cryptography /RecoveryNo. processing section
  31 ... In-vehicle machine
  32 ... Vehicle
  33 ... toll gate
  34 ... Passing gate
  35 ... Roadside machine
  36 ... IC card
  37 ... Sensor
38 ... Secure Application Module (SAM)
39 ... SAM manufacturer (security manufacturer)

Claims (41)

An information issuing system for setting up attribute information of a payer on a payer side communication terminal device manufactured by a specific manufacturer,
A setup encryption key generation unit that generates a setup encryption key based on the first unique information;
A setup encryption key storage unit that stores the setup encryption key in association with second unique information;
A setup encryption key issuing unit that issues the setup encryption key to the manufacturer in a state associated with the second unique information in order to install the generated setup encryption key in the payer-side communication terminal device. When,
Payment that receives payer attribute information for setting up the payer side communication terminal device together with the second unique information from a set up person who sets up the payer side communication terminal device in which the setup encryption key is recorded Person attribute information receiving section,
Based on the second unique information received by the payer attribute information receiving unit, the setup encryption key is extracted from the setup encryption key storage unit, and the received payer attribute information is set up in the payer side communication terminal device. And a payer attribute information issuing unit for issuing the setup encryption key and the payer attribute information to the setup person. The information issuing system according to claim 1,
The setup encryption key is composed of a communication terminal side key issued to the manufacturer side and installed in the payer side communication terminal device, and a setup person key issued to the setup person. Information issuing system. In the information issuing system according to claim 2,
The information issuing system, wherein the communication terminal side key and the setup key are each encrypted and issued with a secret key of the information issuing system. The information issuing system according to claim 1,
The first unique information is an ID unique to a payer side communication terminal device generated on the manufacturer side,
The system further comprises an ID storage unit for receiving and storing the ID. The information issuing system according to claim 1,
The information issuing system characterized in that the second unique information includes the first unique information. In the information issuing system of Claim 5,
The information issuing system characterized in that the second unique information is the same as the first unique information. In the information issuing system of Claim 5,
The setup encryption key issuing unit is configured to encrypt the second unique information with a system side encryption key and issue the setup encryption key to the manufacturer in a state associated with the second unique information,
The system further includes a decryption unit that decrypts the encrypted second unique information received by the payer attribute information reception unit with a system-side secret key. The information issuing system according to claim 1,
further,
Based on the first unique information, a payment communication encryption key generating unit that generates an encryption key for payment communication between the payer side communication terminal device and the payee side communication terminal device,
The payer attribute information issuing unit issues the payment communication encryption key together with the setup encryption key and payer attribute information in order to cause the payer side communication terminal device to set up. Information issuing system. The information issuing system according to claim 1,
Furthermore, it has a billing basic information issuing unit for issuing billing basic information for the payee to charge the payer,
The billing basic information issuing unit includes a billing category discriminating unit that discriminates a billing category to which the payer belongs based on the attribute information of the payer received by the payer attribute information receiving unit. system. The information issuing system according to claim 1,
The payer side communication terminal device is an in-vehicle device for an automatic toll collection system mounted on a vehicle passing through a toll road,
The payer attribute information includes individual vehicle information for charging a toll road toll for the vehicle. The information issuing system according to claim 10,
further,
Based on the first unique information, a wireless communication encryption key generating unit that generates a wireless communication encryption key between the in-vehicle device and the roadside device installed on the roadside of the toll road,
The payer attribute information issuing unit issues the wireless communication encryption key together with the setup encryption key and payer attribute information for causing the in-vehicle device to set up the information issuing system. . An information issuing terminal device that is connectable to the information issuing system according to claim 1 and that issues information to the payer side communication terminal device,
An information issuing terminal device comprising information recording means for recording the payer attribute information and the setup encryption key issued from the information issuing system in a storage medium readable by the payer side communication terminal device. The information issuing terminal device according to claim 12,
The information issuing terminal device is configured to be connected to the information issuing system online. An information issuing terminal device according to claim 13,
further,
An information issuing terminal device comprising payer attribute information transmitting means for transmitting payer attribute information for setting up the payer side communication terminal device to the information issuing system together with the second unique information. The information issuing terminal device according to claim 14,
further,
An information issuing terminal device comprising: second unique information receiving means for receiving the second unique information from the payer side communication terminal device via the storage medium. The information issuing terminal device according to claim 12,
The information issuing terminal apparatus, wherein the storage medium permits reading and writing of information only to a specific information issuing terminal apparatus. The information issuing terminal device according to claim 12,
This information issuing terminal device permits writing of information only to a specific storage medium. An information issuing method for setting up attribute information of a payer on a payer-side communication terminal device manufactured by a specific manufacturer by a server device installed in a management center ,
A setup encryption key generation step of generating a setup encryption key based on the first unique information, a setup encryption key generation unit of the server device ;
A setup encryption key storage step in which the setup encryption key generation unit stores the setup encryption key in the setup encryption key storage unit in association with second unique information;
In a state where the setup encryption key issuing unit of the server device associates the setup encryption key with the second unique information in order to cause the payer side communication terminal device to install the generated setup encryption key. An encryption key issuing step for setup to be issued to the manufacturer;
The server device sets payer attribute information for setting up the payer side communication terminal device from the set up person who sets up the payer side communication terminal device in which the setup encryption key is recorded. Payer attribute information receiving process to receive with unique information,
The server device extracts the setup encryption key from the setup encryption key storage unit based on the second unique information received in the payer attribute information receiving step, and the received payer attribute information is sent to the payer side. An information issuing method comprising: a payer attribute information issuing step for issuing the setup encryption key and payer attribute information to the set up person in order to cause the communication terminal device to set up. The information issuing method according to claim 18,
The setup encryption key generating step is a setup encryption key comprising a communication terminal side key issued to the manufacturer side and installed in a payer side communication terminal device, and a setupr key issued to the setupr. An information issuance method characterized by generating a message. The information issuing method according to claim 19,
Furthermore, the information issuing method encryption unit of the server apparatus, and having an encryption processing step of the key for the communication terminal key and set up's, respectively issued encrypts a predetermined private key. 19. The information issuing method according to claim 18,
The setup encryption key generation step generates the setup encryption key based on an ID unique to the payer side communication terminal device generated on the manufacturer side as the first unique information. How to issue information. The information issuing method according to claim 18,
The setup encryption key storing step stores the setup encryption key in the setup encryption key storage unit in association with the second unique information including the first unique information. . The information issuing method according to claim 22,
The setup encryption key storage step stores the setup encryption key in the setup encryption key storage unit in association with second unique information that is the same as the first unique information. Issuing method. The information issuing method according to claim 22,
In the setup encryption key issuing step, the encryption processing unit of the server device encrypts the second unique information with a system-side encryption key and associates the setup encryption key with the second unique information in the manufacturing process. Encryption process to be issued to the user,
The method further includes a decryption step in which the decryption processing unit of the server device decrypts the encrypted second unique information received in the payer attribute information reception step with a system-side secret key. Characteristic information issuing method. The information issuing method according to claim 18,
further,
Payment for generating an encryption key for payment communication between the payer side communication terminal device and the payee side communication terminal device, based on the first unique information, the communication encryption key generation unit of the server device A communication encryption key generation step;
In the payer attribute information issuance step, the server device issues the payment communication encryption key together with the setup encryption key and the payer attribute information to the setup person in order to cause the payer side communication terminal device to set up. An information issuance method characterized by that. The information issuing method according to claim 18,
Furthermore, the server device has a charging basic information issuing step for issuing charging basic information for the payee to charge the payer,
In this charging basic information issuing step, the charging basic information determination unit of the server device determines the charging classification to which the payer belongs based on the attribute information of the payer received in the payer attribute information receiving step. Information issuance method characterized by being. The information issuing method according to claim 18,
The payer side communication terminal device is an in-vehicle device for an automatic toll collection system mounted on a vehicle passing through a toll road,
The payer attribute information includes individual vehicle information for charging a toll road toll for the vehicle. The information issuing method according to claim 27,
further,
The key generation unit for communication at the time of passing through the gate of the server device generates an encryption key for wireless communication between the in-vehicle device and the roadside device installed on the roadside of the toll road based on the first unique information. A wireless communication encryption key generation step,
In the payer attribute information issuing step, the server device issues the wireless communication encryption key together with the setup encryption key and payer attribute information for causing the in-vehicle device to set up. Information issuance method. An information issuing system for setting up attribute information of a payer on a payer side communication terminal device manufactured by a specific manufacturer,
A setup encryption key generator for generating a setup encryption key and storing it in the setup encryption key storage;
A setup encryption key issuing unit for issuing the setup encryption key to the manufacturer in order to install the generated setup encryption key in the payer side communication terminal device;
A payer attribute information receiving unit for receiving payer attribute information for setting up the payer side communication terminal device from a set up person who sets up the payer side communication terminal device in which the setup encryption key is recorded;
The setup encryption key is extracted from the setup encryption key storage unit, and the setup payer attribute information and the payer attribute information are set in order to cause the payer side communication terminal device to set up the received payer attribute information. An information issuing system comprising: a payer attribute information issuing unit that issues information to a customer. The information issuing system according to claim 29,
Furthermore, it has a billing basic information issuing unit for issuing billing basic information for the payee to charge the payer,
The billing basic information issuing unit includes a billing category discriminating unit that discriminates a billing category to which the payer belongs based on the attribute information of the payer received by the payer attribute information receiving unit. system. The information issuing system according to claim 29,
The payer side communication terminal device is an in-vehicle device for an automatic toll collection system mounted on a vehicle passing through a toll road,
The payer attribute information includes individual vehicle information for charging a toll road toll for the vehicle. The information issuing system according to claim 31,
further,
A wireless communication encryption key generating unit for generating a wireless communication encryption key between the in-vehicle device and the roadside device installed on the roadside of the toll road;
The payer attribute information issuing unit issues the wireless communication encryption key together with the setup encryption key and payer attribute information for causing the in-vehicle device to set up the information issuing system. . An information issuing terminal device that is connectable to the information issuing system according to claim 29 and that issues information to the payer side communication terminal device,
An information issuing terminal device comprising information recording means for recording the payer attribute information and the setup encryption key issued from the information issuing system in a storage medium readable by the payer side communication terminal device. The information issuing terminal device according to claim 33,
The information issuing terminal device is configured to be connected to the information issuing system online. An information issuing terminal device according to claim 34, wherein
further,
An information issuing terminal device comprising payer attribute information transmitting means for transmitting payer attribute information for setting up to the payer side communication terminal device to the information issuing system. The information issuing terminal device according to claim 33,
The information issuing terminal apparatus, wherein the storage medium permits reading and writing of information only to a specific information issuing terminal apparatus. The information issuing terminal device according to claim 33,
This information issuing terminal device permits writing of information only to a specific storage medium. An information issuing method for setting up attribute information of a payer on a payer-side communication terminal device manufactured by a specific manufacturer by a server device installed in a management center ,
A set-up encryption key generating step of generating a setup encryption key and storing the setup encryption key in the setup encryption key storage unit of the server device ;
A setup encryption key issuance unit for issuing the setup encryption key to the manufacturer so that the setup encryption key issuing unit of the server device installs the generated setup encryption key in the payer side communication terminal device Process,
Said server device, the setup who performs the setup of the encryption key is recorded for up the payment side communication terminal device, the payer attributes receive payer attribute information for setting up the payer side communication terminal device Information receiving process;
The server device extracts the setup encryption key from the setup encryption key storage unit, and causes the payer side communication terminal device to set up the received payer attribute information. And a payer attribute information issuing step for issuing information to a setup person. The information issuing method according to claim 38,
Furthermore, the server device has a charging basic information issuing step for issuing charging basic information for the payee to charge the payer,
In the charging basic information issuing step, the charging basic information determining unit of the server device determines a charging category to which the payer belongs based on the attribute information of the payer received in the payer attribute information receiving step. An information issuing method characterized by comprising a discrimination step. The information issuing method according to claim 38,
The payer side communication terminal device is an in-vehicle device for an automatic toll collection system mounted on a vehicle passing through a toll road,
The payer attribute information includes individual vehicle information for charging a toll road toll for the vehicle. The information issuing method according to claim 40,
further,
The communication key generation unit at the time of passing the gate of the server device includes a wireless communication encryption key generation step for generating a wireless communication encryption key between the in-vehicle device and the roadside device installed on the roadside of the toll road. ,
In the payer attribute information issuing step, the server device issues the wireless communication encryption key together with the setup encryption key and payer attribute information for causing the in-vehicle device to set up. Information issuance method.

Images