JP5012082B2 - In-vehicle device and program - Google Patents

Description

  The present invention relates to a vehicle-mounted device that collects charges and the like via wireless.

  An ETC system in which an IC card is inserted into an in-vehicle device and a fee is settled based on card information stored in the IC card is widely spread. In this ETC system, an IC card is inserted into an ETC in-vehicle device mounted on a vehicle, the ETC in-vehicle device and a roadside device provided at a toll gate perform wireless communication, and the card information stored in the IC card is stored in the card information. Based on the toll fee, etc. For this reason, a vehicle equipped with an ETC in-vehicle device can pass through the toll road entrance toll gate and the exit toll gate in a non-stop manner.

  When using the ETC system, the user must pass through the toll gate with the IC card inserted into the ETC in-vehicle device. However, some IC cards used for using the ETC system are integrated with a credit card, and the user removes the IC card from the ETC in-vehicle device and uses the IC card outside the vehicle for shopping. There is a case. For this reason, when the user uses the ETC system, the user forgets to insert the IC card into the ETC in-vehicle device, cannot settle the toll, and the vehicle is stuck at the toll gate. is doing.

  Further, in the ETC in-vehicle device, information is exchanged between the ETC in-vehicle device and the IC card by electrically connecting the contact contact terminal of the ETC in-vehicle device and the contact contact surface of the IC card. If this contact is removed due to vehicle vibration or the like, the exchange of information is interrupted. Further, if foreign matter such as dust or dirt adheres between the contacts, the ETC in-vehicle device cannot normally read information from the IC card. Such a situation occurs when the vehicle passes through the toll gate, the ETC in-vehicle device fails to read the card information and cannot settle the toll, etc., and the vehicle gets stuck at the toll gate Such a situation has occurred.

  Therefore, the applicant of the present application first sets up a system that allows payment of charges even if the IC card is not inserted in the in-vehicle device by copying the card information stored in the IC card to the in-vehicle device. Applied (see Prior Art Document 1). By using this system, the above-mentioned problems do not occur.

  An automatic fee payment system such as an ETC system is expected to be used for various purposes such as payment of a fee at a fast food restaurant and payment of a fee at a parking lot.

  In order to cope with the future expansion of usage, the fee payment system according to Prior Art Document 1 is further developed, the card information of a plurality of IC cards is stored in the in-vehicle device, and the card information for fee settlement is selected. It is expected that the functions that can be made will be required. This is because when a single vehicle is used by multiple users, or when a single in-vehicle device is used to settle charges for different uses, a single in-vehicle device is used to settle multiple charges. This is because a case where a plurality of billing destinations exist is expected.

  The case where a plurality of users use one in-vehicle device is, for example, a case where a company owns one vehicle. In such a case, when an employee uses a toll road, It is expected that a charge will be charged to the department to which the employee belongs. In addition, the case of paying charges for different uses using a single in-vehicle device is, for example, the case of going to a drive with a friend. It is expected that one friend will pay, and another friend will pay for shopping at a fast food restaurant.

[Prior Art Document 1]
Japanese Patent Application No. 2006-313377

  However, if the in-vehicle device that stores the card information used for the payment settlement is damaged by a theft and goes into another person's hand, the other person impersonates the card information using the stolen in-vehicle device. , There is a possibility to settle the fee. Furthermore, in the future, it is expected that places where charges can be settled using the in-vehicle device will increase, and card information of a plurality of IC cards will be stored in the in-vehicle device. In such a case, the number of cases where the card information stored in the in-vehicle device is misused increases, and the damage to the holder of the card information is considered to increase.

  Here, a means for erasing the card information stored in the in-vehicle device according to an instruction from the user is provided, and the user himself / herself receives the card information when the payment is completed or the vehicle is parked for a long time. By erasing, damage can be prevented. However, since the user may forget to erase the card information, some other measure should be taken.

  In view of the above problems, in the present invention, when the in-vehicle device storing the card information of the IC card is stolen, the in-vehicle device that can prevent the card information stored in the in-vehicle device from being misused. The purpose is to provide.

  The invention according to claim 1, which has been made to solve the above problem, is an in-vehicle vehicle that is always supplied with electric power from an external power supply mounted on a vehicle, performs wireless communication with a roadside device, and performs data processing related to payment. In the apparatus, interface means for reading payment-related information, which is information used for payment, from an external storage medium connected to the in-vehicle apparatus, and storage means capable of holding stored information even when power is not supplied A power supply control means for detecting that the supply of power from the external power source to the in-vehicle device has been stopped, and supplying the power to the in-vehicle device for at least a predetermined time when detecting that the supply of power has stopped, and an interface Control means for controlling the means, the storage means, and the power supply control means. The control means stores the payment-related information read from the external storage medium via the interface means in the storage means, validates the payment-related information, and performs data processing related to the payment of the fee based on the valid payment-related information. When the supply of power from the external power supply to the in-vehicle device is stopped via the power supply control means, the payment related information stored in the storage means is invalidated by the power supplied from the power supply control means. Perform invalid processing.

  An in-vehicle device that is constantly supplied with power from an external power source mounted on the vehicle is connected to the external power source via a power supply line that supplies power even when the engine of the vehicle is stopped. It is a vehicle-mounted device in which a voltage is input to a terminal that supplies the electric power.

  When such a vehicle-mounted device that is always connected to the external power supply is stolen, the vehicle-mounted device is forcibly separated from the vehicle, so that the supply of power is stopped and the voltage at the terminal that supplies the power from the external power supply drops. Therefore, it is possible to detect that the in-vehicle device has been stolen by detecting the voltage drop at this terminal. The power supply control means monitors the voltage at this terminal and starts supplying power to the in-vehicle device when a voltage drop is detected. When the control unit detects the stop of the power supply from the external power source to the in-vehicle device via the power source control unit, the control unit invalidates the payment related information stored in the storage unit by the power supplied from the power source control unit. Perform invalid processing.

  By doing so, since it becomes impossible to make payment based on the payment related information stored in the in-vehicle device when the theft occurs, the abuse of the payment-related information stored in the stolen in-vehicle device is prevented. Can do.

Moreover, even if it is the following vehicle-mounted apparatus, the effect similar to the invention described in Claim 1 can be acquired. The in-vehicle device is used for payment in an in-vehicle device that is always supplied with power from an external power supply mounted on the vehicle via a backup power terminal and performs wireless communication with the roadside device and performs data processing related to payment of charges. Interface means for reading settlement-related information that is stored information from an external storage medium connected to the in-vehicle device, storage means capable of holding stored information even when power is not supplied, interface means and storage means And control means for controlling. The control means stores the payment related information read from the external storage medium via the interface means in the storage means, and validates the payment related information, and data related to the payment of the fee based on the valid payment related information. After the supply of power via the backup power terminal is stopped after the process is performed, when the supply of power to the in-vehicle device is started again, the invalidation process for invalidating the payment related information stored in the storage unit is performed. .

While this in- vehicle device is mounted on the vehicle, power is always supplied from the external power source mounted on the vehicle via the backup power terminal, and when the in-vehicle device is stolen, Supply stops. Therefore, when the supply of power is started again after stopping the supply of power through the backup power terminal, the in-vehicle device can be regarded as stolen. If the charge is not settled based on the payment related information stored in the storage means when the operation is started by the start of power supply, the stolen in-vehicle device as in the in-vehicle device according to claim 1 It is possible to prevent misuse of the payment related information stored in the device.

In this vehicle-mounted device, the power supply control means that is an essential component of the vehicle-mounted device according to claim 1 is unnecessary. Therefore, it is possible to prevent misuse of settlement-related information stored in the stolen in-vehicle device using fewer parts than the in-vehicle device described in claim 1.

  However, even if the payment-related information stored in the in-vehicle device is invalidated, the payment-related information, which is valuable personal information, remains stored in the stolen in-vehicle device. Can be issued and misused.

Therefore, in the in-vehicle device according to the second aspect , in the invalidation process, the control unit deletes the payment related information stored in the storage unit instead of invalidating the payment related information. By doing so, it is possible to prevent the vehicle-mounted device from being stolen and the payment-related information stored in the vehicle-mounted device being read out and misused.

  However, in the above-described in-vehicle device, even when the battery mounted on the vehicle is replaced or when the battery of the vehicle deteriorates and cannot supply power, it is stored in the in-vehicle device. Existing payment related information is invalidated or deleted. In such a case, in order to settle the fee using the in-vehicle device, the payment-related information must be stored in the in-vehicle device again. However, since misuse of payment related information may cause serious damage, even an IC card owner may not be able to easily store payment related information of the IC card in the in-vehicle device. is there.

Specifically, it can be assumed that the payment-related information cannot be stored in the in-vehicle device unless a dedicated device is used.
In addition, in order to prevent the payment related information from being copied to a plurality of in-vehicle devices, an IC card having a function of prohibiting the reading of the payment related information when the payment related information is copied to the in-vehicle device is It has been filed by the applicant (Japanese Patent Application No. 2006-352739). It is assumed that such payment related information of the IC card is stored in the in-vehicle device according to the present application, and the payment related information is invalidated by battery replacement or the like. Since the payment related information of the IC card has already been copied to the in-vehicle device according to the present application, it is impossible to read the payment related information from the IC card. Therefore, it becomes impossible to make a payment with another apparatus using the payment related information of the IC card.

Assuming such a situation, in the in-vehicle device according to claim 3 , the interface unit further has a function of detecting that the external storage medium is connected to the in-vehicle device, and the control unit includes the storage unit. When invalid payment related information is stored, when it is detected that the external storage medium is connected to the in-vehicle device via the interface unit, the detected external storage medium is a source of the invalid payment related information read out. If the external storage medium connected to the in-vehicle device is a source of reading invalid payment-related information, the payment-related information stored in the storage means as invalid payment-related information is determined. Make the information valid.

  When determining whether or not the connected external storage medium is a readout source of payment related information stored in the in-vehicle device, for example, a card number included in the payment related information stored in the IC card And the card number included in the payment related information stored in the storage means.

  As a result, if the payment related information stored in the in-vehicle device becomes invalid due to battery replacement or the like, the payment related information can be easily validated by the owner of the IC card from which the payment related information is read out. Therefore, the convenience of the in-vehicle device can be improved.

Further, as described in claim 4 , a program for causing the vehicle-mounted device to function as the control unit of the vehicle-mounted device according to any one of claims 1 to 3 is executed by a computer built in the vehicle-mounted device. It may be.

According to the fourth aspect of the present invention, for example, a program is recorded on a computer-readable recording medium such as a magneto-optical disk, a CD-ROM, a hard disk, a ROM, and a RAM, and the program is recorded as necessary. It can be made to function as a vehicle-mounted device by being loaded into a computer and starting up. Further, since the program can be distributed using a network, the function of the in-vehicle device can be easily improved.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. The embodiments of the present invention are not limited to the following embodiments, and various forms can be adopted as long as they belong to the technical scope of the present invention.

[First embodiment]
[Description of configuration]
FIG. 1 is a block diagram showing a configuration of a fee payment system 1 of the first embodiment. The fee payment system 1 includes an in-vehicle device 10 mounted on a vehicle, an IC card 30 used by being connected to the in-vehicle device 10, an external power supply 40 for supplying power to the in-vehicle device 10, an entrance toll gate on a toll road, And a roadside device 50 provided at an exit toll gate or the like. In FIG. 1, the in-vehicle device 10, the IC card 30, the external power source 40, and the roadside device 50 are shown one by one, but actually there are a plurality of devices.

  Next, details of the in-vehicle device 10 will be described with reference to the block diagram of FIG. The in-vehicle device 10 includes a wireless antenna 11, a DSRC unit 12, a SAM 13, a standby power supply 14, a power supply control unit 15, a battery terminal 15 a, an ACC terminal 15 b, an interface unit 16, an HMI 17, and a storage unit 18. And a control unit 19.

The wireless antenna 11 is an antenna for DSRC (Dedicated Short Range Communication).
The DSRC unit 12 is a part that transmits and receives information by DSRC via the wireless antenna 11.

The SAM 13 performs encryption / decryption of communication information with the roadside device 50 and encryption / decryption of in-vehicle device information (management number, type registration number, vehicle number, etc.).
The standby power supply 14 supplies necessary power to each part of the in-vehicle device 10 when the supply of power from the external power source 40 to the in-vehicle device 10 is stopped.

  The power supply control unit 15 transforms the voltage input from the battery terminal 15 a and the ACC terminal 15 b and inputs a necessary voltage to each part of the in-vehicle device 10. When the ACC switch 41 is ON, power from the external power supply 40 is supplied via the battery terminal 15a and the ACC terminal 15b. When the ACC switch 41 is OFF, power from the external power supply 40 is supplied. Moreover, the power supply control part 15 switches the power supply of the vehicle-mounted apparatus 10 from the external power supply 40 to the standby power supply 14 using a well-known method, when supply of the electric power from the battery terminal 15a and the ACC terminal 15b stops. And the power supply control part 15 transforms the voltage input from the auxiliary | assistant power supply 14, inputs a required voltage with respect to each site | part of the vehicle-mounted apparatus 10, and also has stopped supply of the electric power from the external power supply 40. The control unit 19 is notified.

  The interface unit 16 is an interface for communicating with the IC card 30, reads information stored in the IC card 30, and stores information in the IC card 30. In the first embodiment, the interface unit 16 is configured as a non-contact type interface, but may be configured as a contact type interface.

  The HMI 17 is a part that provides an interface (Human Machine Interface) for communication between a person and a device. Specifically, it includes operation buttons, LEDs, LCDs, speakers, and the like.

The storage unit 18 is composed of a device (for example, EEPROM) that does not require a storage holding operation, and can store various types of information.
The control unit 19 is configured around a known microcomputer including a CPU, a ROM, a RAM, an I / O, a bus line connecting these, and the like. The control unit 19 controls the DSRC unit 12, the SAM 13, the power supply control unit 15, the interface unit 16, the HMI 17, and the storage unit 18 according to a program stored in the ROM.

[Description of operation]
Next, the operation of the in-vehicle device 10 will be described.
(1) Settlement-related information invalidation process First, a process when power supply from the external power supply 40 to the in-vehicle device 10 is stopped will be described with reference to a flowchart (payment-related information invalidation process) shown in FIG.

  In S <b> 105, the power supply control unit 15 switches the power source of the in-vehicle device 10 from the external power source 40 to the standby power source 14, transforms the voltage input from the standby power source 14, and inputs a necessary voltage to each part of the in-vehicle device 10. To do. Then, the supply of power from the external power supply 40 to the in-vehicle device 10 is stopped, the control unit 19 is notified that power is being supplied from the standby power supply 14, and the process proceeds to S110.

  In S <b> 110, the control unit 19 determines whether payment related information is stored in the storage unit 18. If payment related information is stored (S110: Yes), the process proceeds to S115. If payment related information is not stored (S110: No), the process proceeds to S120.

  In S115, the control unit 19 invalidates the payment related information stored in the storage unit 18. Specifically, the control unit 19 sets a value indicating that the payment-related information is invalid in the flag indicating the state of each payment-related information stored in the storage unit 18, and the process proceeds to S120.

In S120, the power supply control unit 15 stops the supply of power from the standby power supply 14 to the in-vehicle device 10, and ends the payment related information invalidation process.
(2) IC Card Connection Processing Next, processing when the IC card 30 is connected to the in-vehicle device 10 will be described using the flowchart (IC card connection processing) shown in FIG.

In S205, the control unit 19 performs a mutual authentication process using a known method with the IC card 30 connected via the interface unit 16, and the process proceeds to S210.
In S210, the control unit 19 determines whether or not mutual authentication is successful. If mutual authentication is successful, the process proceeds to S220. If mutual authentication fails, the process proceeds to S215.

In S215, the control unit 19 notifies the user that the mutual authentication has failed through the HMI 17, and ends the IC card connection process.
Payment-related information, which is information used for payment of charges, includes information such as a card number, a holder, and a use date of a charge payment service. The card number is a unique number for each payment related information, and can be used as information for specifying the payment related information. Therefore, in S220, the control unit 19 reads out the card number, which is information for specifying the payment related information of the connected IC card 30, via the interface unit 16, and shifts the processing to S225.

  In S225, the control unit 19 compares the card number read from the IC card 30 in S220 with the card number included in the settlement related information stored in the storage unit 18, and the settlement that the connected IC card 30 has. It is determined whether or not related information is already stored in the storage unit 18. As a result of the determination, if payment related information is already stored (S225: Yes), the process proceeds to S230, and if payment related information is not stored (S225: No), the process proceeds to S245.

  In S230, the control unit 19 determines whether or not the payment related information read from the connected IC card 30 and stored in the storage unit 18 is invalid. If invalid (S230: Yes), the process proceeds to S235, and if valid (S230: No), the IC card connection process is terminated.

  In S235, the control unit 19 validates the payment related information that is read from the connected IC card 30 and stored in the storage unit 18 and is invalid. Specifically, a value indicating that the payment related information is valid is set in a flag indicating the state of the payment related information. Then, the process proceeds to S240.

  In S240, the control unit 19 notifies the user by the HMI 17 that the payment related information from the connected IC card 30 as a reading source has been validated, and ends the IC card connection process.

  In the processing of S245 performed when the payment related information of the IC card 30 connected to the in-vehicle device 10 is not stored in the storage unit 18, the control unit 19 performs the payment of the IC card 30 via the interface unit 16. The related information is read out, and the process proceeds to S250.

  In S250, the control unit 19 determines whether or not the payment related information read in S245 has been successfully read. If the payment related information has been successfully read (S250: Yes), the process proceeds to S255. If the payment related information has failed to be read (S250: No), the process proceeds to S270.

In S255, the control unit 19 stores the payment related information read from the IC card 30 in the storage unit 18, and the process proceeds to S260.
In S260, the control unit 19 validates the payment related information stored in the storage unit 18. Specifically, a value indicating that the payment related information is valid is set in a flag indicating the state of the payment related information. Then, the process proceeds to S265.

In S265, the control unit 19 notifies the user by the HMI 17 that the payment related information of the IC card 30 is stored in the storage unit 18, and ends the IC card connection process.
In S270, the control unit 19 notifies the user by the HMI 17 that the reading of the payment related information included in the IC card 30 has failed, and ends the IC card connection process.

(3) Payment-related information transmission processing Next, the vehicle travels near the toll gate, communication between the in-vehicle device 10 mounted on the vehicle and the roadside device 50 is started, and the in-vehicle device 10 transmits the payment-related information. Processing for receiving a command to be requested and transmitting payment related information to the roadside device 50 will be described with reference to a flowchart of FIG. 5 (payment related information transmission processing). Note that, in order to facilitate understanding, description of general parts that are widely known in the DSRC communication procedure is omitted.

  In S <b> 305, the control unit 19 determines whether or not the payment related information used for the payment of the charge among the payment related information stored in the storage unit 18 is valid. Specifically, the flag indicating the state of the settlement related information is referred to, and it is determined whether or not the settlement related information has a value indicating that it is valid. When the payment related information used for the fee payment is valid (S305: Yes), the process proceeds to S310, and when the payment related information used for the fee payment is invalid (S305: No), the process proceeds to S320. To migrate.

In S310, the control unit 19 reads the payment related information selected by the user from the storage unit 18, and the process proceeds to S315.
In S315, the control unit 19 transmits the payment related information read out in S310 to the roadside device 50 by wireless communication via the DSRC unit 12, and ends the payment related information transmission process.

  In S320, which is performed when the payment related information used for the fee payment is invalid, the control unit 19 indicates that there is no payment related information that can be used for the fee payment to the roadside device 50. Via wireless communication, and the payment related information transmission process is terminated.

[effect]
According to the in-vehicle device 10 of the first embodiment, when the IC card 30 is connected, the payment related information of the IC card 30 is stored in the storage unit 18 (S255), and the payment related information is validated (S255). S260). Further, when the supply of power from the external power supply 40 to the in-vehicle device 10 is stopped, the standby power supply 14 supplies power to each part of the in-vehicle device 10, and the control unit 19 stores the power by the power supplied from the standby power supply 14. The settlement related information stored in the unit 18 is invalidated (S115). Thereafter, the in-vehicle device 10 determines whether or not the payment related information to be used for the data processing is valid when performing the data processing for payment (S305), and only when the payment related information is valid (S305: Yes), the settlement related information is transmitted to the roadside device 50 (S315).

  As a result, when the in-vehicle device 10 is stolen, it becomes impossible to make a payment based on the settlement-related information stored in the storage unit 18, and thus the settlement stored in the stolen in-vehicle device. Abuse of related information can be prevented.

[Second Embodiment]
[Description of configuration]
FIG. 6 is a block diagram showing the configuration of the fee payment system 5 of the second embodiment. The fee payment system 5 includes an in-vehicle device 20 mounted on a vehicle, an IC card 30 used by being connected to the in-vehicle device 20, an external power source 40 for supplying electric power to the in-vehicle device 20, an entrance toll gate on a toll road, And a roadside device 50 provided at an exit toll gate or the like. In FIG. 6, the in-vehicle device 20, the IC card 30, the external power supply 40, and the roadside device 50 are shown one by one, but there are actually a plurality of devices.

  Next, details of the in-vehicle device 20 will be described using the block diagram of FIG. The in-vehicle device 20 includes a wireless antenna 21, a DSRC unit 22, a SAM 23, a power supply unit 24, an interface unit 25, an HMI 26, a storage unit 27, and a control unit 28.

The wireless antenna 21 is an antenna for DSRC (Dedicated Short Range Communication).
The DSRC unit 22 is a part that transmits and receives information by DSRC via the wireless antenna 21.

The SAM 23 performs encryption / decryption of communication information with the roadside device 50 and encryption / decryption of in-vehicle device information (management number, type registration number, vehicle number, etc.).
The power supply unit 24 transforms the voltage input from the battery terminal 24 a and the ACC terminal 24 b and inputs a necessary voltage to each part of the in-vehicle device 20. When the ACC switch 41 is ON, power from the external power source 40 is supplied via the battery terminal 24a and the ACC terminal 24b. When the ACC switch 41 is OFF, power from the external power supply 40 is supplied. The power supply unit 24 inputs necessary voltages to each part of the in-vehicle device 20 even when power is supplied from the battery terminal 24a, even when power is supplied from the ACC terminal 24b. Do not do.

  The interface unit 25 is an interface for communicating with the IC card 30, reads information stored in the IC card 30 and stores information in the IC card 30. In the present embodiment, the interface unit 25 is configured as a non-contact type interface, but may be configured as a contact type interface.

  The HMI 26 is a part that provides an interface (Human Machine Interface) for communication between a person and a device. Specifically, it includes operation buttons, LEDs, LCDs, speakers, and the like.

The storage unit 27 is composed of a device (for example, an EEPROM) that does not require a memory holding operation, and can store various types of information.
The control unit 28 is configured around a known microcomputer including a CPU, a ROM, a RAM, an I / O, a bus line connecting these, and the like. Further, the control unit 28 comprehensively controls the DSRC unit 22, the SAM 23, the power supply unit 24, the interface unit 25, the HMI 26, and the storage unit 27 in accordance with a program stored in the ROM.

[Description of operation]
(1) Power Supply Start Process First, the process (power supply start process) shown in FIG. 8 is used for the process when the external power supply 40 is connected to the battery terminal 24a of the in-vehicle device 20 and the power supply is started. I will explain.

  In S <b> 405, the control unit 28 determines whether payment related information is stored in the storage unit 27. As a result of the determination, if payment related information is stored (S405: Yes), the process proceeds to S410, and if payment related information is not stored (S405: No), the power supply start process is terminated.

  In S410, the control unit 28 invalidates the settlement related information stored in the storage unit 27. Specifically, the control unit 19 sets a value indicating that the payment-related information is invalid in a flag indicating the state of each payment-related information stored in the storage unit 18, and ends the power supply start process. .

(2) IC card connection process The IC card connection process is the same as the IC card connection process of the first embodiment described above. That is, in the IC card connection process of the second embodiment, the in-vehicle device 10 in the IC card connection process of the first embodiment is the in-vehicle device 20, the interface unit 16 is the interface unit 25, the HMI 17 is the HMI 26, and the storage unit 18 is In the storage unit 27, the control unit 19 is replaced with the control unit 28. Therefore, the description is omitted.

(3) Payment-related information transmission process The IC card connection process is the same as the IC card connection process of the first embodiment described above. That is, in the IC card connection process of the second embodiment, the in-vehicle device 10 in the IC card connection process of the first embodiment is the in-vehicle device 20, the DSRC unit 12 is the DSRC unit 22, the storage unit 18 is the storage unit 27, The control unit 19 is replaced with the control unit 28. Therefore, the description is omitted.

[effect]
According to the vehicle-mounted device 20 of the second embodiment, when the supply of power from the battery terminal 24a to the vehicle-mounted device 20 is started after the supply of power from the battery terminal is stopped, the control unit 28 stores the data in the storage unit 27. The settlement-related information that has been made is invalidated (S410). The in-vehicle device 20 performs the same processing as the in-vehicle device 10 of the first embodiment in the processing when the IC card 30 is connected and the processing in transmitting the payment related information to the roadside device 50.

  As a result, when the in-vehicle device 20 is stolen, the payment cannot be made based on the payment-related information stored in the storage unit 27. Therefore, the payment stored in the stolen in-vehicle device. Abuse of related information can be prevented.

  Next, the difference between the structure of the in-vehicle device 20 of the second embodiment and the structure of the in-vehicle device 10 of the first embodiment will be examined. The in-vehicle device 20 does not have a portion corresponding to the standby power supply 14 included in the in-vehicle device 10. In addition, the power supply unit 24 included in the in-vehicle device 20 transforms the voltage input from the external power source 40 and inputs the voltage to each part of the in-vehicle device 20. However, the power control unit 15 included in the in-vehicle device 10 transforms the voltage input from the external power source 40 in the same manner as the power supply unit 24 and inputs the voltage to each part of the in-vehicle device 10. When the supply of power is stopped, a process of switching the power source of the in-vehicle device 10 from the external power source 40 to the standby power source 14 is performed.

  That is, since the in-vehicle device 20 of the second embodiment has fewer functions than the in-vehicle device 10 of the first embodiment, it can be manufactured with fewer parts. Therefore, the in-vehicle device 20 can be manufactured at a lower cost than the in-vehicle device 10, and the same effect as the in-vehicle device 10 can be obtained.

[Other Embodiments]
(1) It is expected that there is no IC card at hand, for example, when the supply of power suddenly stops due to the deterioration of the battery and the payment cannot be made. Assuming such a situation, when payment-related information that is invalid is stored in the in-vehicle device, the payment-related information that is invalid by inputting a predetermined password may be validated again. This makes it possible to re-enable invalid payment-related information even when there is no IC card at hand, and payment can be made using the payment-related information stored in the in-vehicle device. As a result, the convenience of the in-vehicle device is improved.

  Here, instead of inputting a predetermined password, biometric authentication such as fingerprint verification may be performed. By doing so, it is possible to prevent the password from leaking and misuse of the payment related information stored in the stolen in-vehicle device, so that the safety of the in-vehicle device is improved.

  (2) When the supply of power to the in-vehicle device is stopped within a predetermined time after inputting the predetermined password, the invalidation process is not performed. By doing so, in the case where the power supply of the in-vehicle device is stopped due to user actions, such as vehicle battery replacement, it is possible to prevent the payment related information stored in the in-vehicle device from becoming invalid. This makes it possible to improve the convenience of the in-vehicle device.

[Correspondence with Claims]
The correspondence between the terms used in the description of the first embodiment and the terms used in the description of the claims is shown.

  The IC card 30 corresponds to an external storage medium, the external power supply 40 corresponds to an external power supply, the interface unit 16 corresponds to an interface unit, and the storage unit 18 corresponds to a storage unit. Further, the standby power supply 14, the power supply control unit 15, the battery terminal 15a, and the ACC terminal 15b correspond to a power supply control unit, and the control unit 19 corresponds to a control unit.

The terminology used in the description of the second embodiment and the terminology used in the description of the claims will be shown.
The IC card 30 corresponds to an external storage medium, the external power supply 40 corresponds to an external power supply, the battery terminal 24a corresponds to a backup power terminal, the interface unit 25 corresponds to an interface unit, and the storage unit 27 corresponds to a storage unit. The control unit 28 corresponds to control means.

It is a block diagram which shows the structure of the fee payment system of 1st embodiment. It is a block diagram which shows schematic structure of the vehicle-mounted apparatus of 1st embodiment. It is a flowchart for demonstrating the process at the time of invalidating payment related information (1st embodiment). It is a flowchart for demonstrating the process when an IC card is connected. It is a flowchart for demonstrating the process at the time of transmitting payment related information to a roadside apparatus. It is a block diagram which shows the structure of the fee payment system of 2nd embodiment. It is a block diagram which shows schematic structure of the vehicle-mounted apparatus of 2nd embodiment. It is a flowchart for demonstrating the process at the time of invalidating payment related information (2nd embodiment).

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Charge payment system, 5 ... Charge payment system, 10 ... In-vehicle apparatus, 11 ... Wireless antenna, 12 ... DSRC part, 13 ... SAM, 14 ... Standby power supply, 15 ... Power supply control part, 15a ... Battery terminal, 15b ... ACC Terminals, 16 ... interface unit, 17 ... HMI, 18 ... storage unit, 19 ... control unit, 20 ... in-vehicle device, 21 ... wireless antenna, 22 ... DSRC unit, 23 ... SAM, 24 ... power supply unit, 24a ... battery terminal 24 ... ACC terminal, 25 ... interface unit, 26 ... HMI, 27 ... storage unit, 28 ... control unit, 30 ... IC card, 40 ... external power supply, 41 ... ACC switch, 50 ... roadside device.

Claims (4)

In an in-vehicle device that is always supplied with power from an external power source mounted on the vehicle, performs wireless communication with the roadside device, and performs data processing related to payment settlement,
Interface means for reading payment-related information, which is information used for payment, from an external storage medium connected to the in-vehicle device;
Storage means capable of holding stored information even when power is not supplied;
Power supply control means for detecting that the supply of power from the external power source to the in-vehicle device is stopped, and for supplying power to the in-vehicle device for at least a predetermined time when the supply of power is detected to be stopped; ,
Control means for controlling the interface means, the storage means and the power supply control means;
With
The control means includes
While storing the payment related information read from the external storage medium via the interface means in the storage means, the payment related information is validated,
Perform data processing related to payment of charges based on the valid payment related information,
When it is detected that the supply of power from the external power source to the in-vehicle device is stopped via the power control means, the settlement related information stored in the storage means by the power supplied from the power control means Performing invalidation processing to invalidate information,
In-vehicle device characterized by The in-vehicle device according to claim 1,
In the invalidation process, the control means causes the payment related information stored in the storage means to be deleted instead of invalidating the payment related information.
In-vehicle device characterized by The in-vehicle device according to claim 1,
The interface means further has a function of detecting that an external storage medium is connected to the in-vehicle device,
The control means includes
When the storage means stores the invalid payment related information, the detected external storage medium is invalid when it is detected that the external storage medium is connected to the in-vehicle device via the interface means. It is determined whether or not the payment related information is read from,
As a result of the determination, when the external storage medium connected to the in-vehicle device is a reading source of the invalid payment related information, the payment related information stored in the storage unit as the invalid payment related information is valid. And
In-vehicle device characterized by The program for functioning a computer as the said control means of the vehicle-mounted apparatus in any one of Claims 1-3 .

Images