JP7269982B2 - Vehicle, server, system, method and program - Google Patents

Description

TECHNICAL FIELD The present invention relates to a vehicle having a communication function, and a server, system, method, and program for processing vehicle information.

Conventionally, there has been known a configuration in which an in-vehicle device (communication device) mounted on a vehicle and a server communicate (hereinafter referred to as "Uu communication" or "network communication") via a base station of a mobile communication network (cellular network). ing. For example, the in-vehicle device of each vehicle, via the base station of the mobile communication network (cellular network) of LTE and 5G, MEC (Multi -Access Edge Computing), and the configuration of a communication system such as V2N (Vehicle-to-Network) that uploads to a server that performs in-vehicle sensor information of other vehicles from the server is disclosed (non-patent document 1).

Between short-range devices (D2D: Device-to-Device) such as V2V (Vehicle-to-Vehicle), V2I (Vehicle-to-Infrastructure), V2P (Vehicle-to-Pedestrian), and V2X (Vehicle-to-Everything) A communication scheme for direct wireless communication is known. For example, in the LTE (Long Term Evolution) and next-generation (NR) specifications of the 3rd Generation Partnership Project (3GPP), short-range devices such as V2V, V2I, V2P, and V2X can be used without going through a mobile communication network (core network). Standard specifications for a Sidelink communication method (hereinafter referred to as the “PC5 communication method”) for direct wireless communication using an interface called PC5 between devices (D2D) have been formulated (see Non-Patent Documents 2 to 6).

5GAA(Automotive Association)_T-170219-White Paper, "Toward fully connected vehicles: Edge computing for advanced automotive communications", [online], December 2017, 5GAA, [searched April 7, 2020], Internet<URL :http://5gaa.org/wp-content/uploads/2017/12/5GAA_T-170219-whitepaper-EdgeComputing_5GAA.pdf> 3GPP TS 23.285 V16.0.0 (2019-03), 3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; Architecture enhancements for V2X services (Release 16) 3GPP TS 23.303 V15.1.0 (2018-06), 3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; Proximity-based services (ProSe); Stage 2 (Release 15) 3GPP TS 24.386 V15.2.0 (2018-12), 3rd Generation Partnership Project; Technical Specification Group Core Network and Terminals; User Equipment (UE) to V2X control function; protocol aspects; Stage 3 (Release 15) 3GPP TR 38.885 V16.0.0 (2019-03)，3rd Generation Partnership Project; Technical Specification Group Radio Access Network; NR; Study on NR Vehicle-to-Everything (V2X) (Release 16) 3GPP TR 23.287 V1.0.0 (2019-05)，3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; Architecture enhancements for 5G System (5GS) to support Vehicle-to-Everything (V2X) services (Release 16)

In recent years, in order to provide traffic information such as traffic volume of vehicles moving on the road, to realize use cases such as vehicle driving support, automatic driving, etc. Introduction of both inter-vehicle communication (hereinafter referred to as "vehicle-to-vehicle communication" in this specification even if the mobile object is not a vehicle) is being introduced into vehicles. In addition, vehicle-to-vehicle communication may greatly affect the safe running of vehicles, so a high security level is required. Therefore, when a power source such as an engine of a vehicle that performs inter-vehicle communication is started (hereinafter referred to as "power on" in this specification), a predetermined issuer (certificate authority) sends an electronic A technology is being studied in which a vehicle-to-vehicle communication cannot be started unless a vehicle is equipped with a certificate that is issued with the electronic certificate.

However, the electronic certificate issued to the vehicle has the following problem because the validity period is set from the viewpoint of maintaining a high security level.

On the road, there are areas within the cell area where Uu communication can be performed with sufficient quality, areas outside the cell area where Uu communication cannot be performed, and areas within the cell but where the quality of Uu communication is low and sufficient Uu communication cannot be performed (hereinafter " called "low communication quality area" or "dead area"). In this specification, the out-of-cell area and the dead area, in which the communication quality is relatively inferior to the in-cell area, are collectively referred to as "Uu non-communication area". In the Uu communication unavailable area, if the vehicle that was communicating between vehicles is temporarily stopped and the power source such as the engine is turned off (hereinafter referred to as "power off" in this specification), within the power off period , the validity period of the electronic certificate issued so far may expire. In such a case, even if the power is turned on again to restart the vehicle from a temporary stop state, a new electronic certificate cannot be issued via Uu communication within the Uu communication prohibited area. vehicle-to-vehicle communication based on

In addition, if the travel route of the vehicle that is performing inter-vehicle communication includes the above-mentioned Uu communication unavailable area, and when the validity period of the electronic certificate expires while traveling in the Uu communication unavailable area There is In this case, vehicle-to-vehicle communication can continue as long as the power of the vehicle is not turned off even within the Uu communication prohibited area, but the vehicle-to-vehicle communication is based on an electronic certificate whose validity period has expired. Therefore, it is not appropriate from the viewpoint of keeping the security level high.

A vehicle according to one aspect of the present invention is a vehicle capable of traveling on roads. This vehicle has a first communication unit that performs a first communication with a server through network communication via a base station for mobile communication, and a direct wireless communication method that is performed between the vehicle and the mobile object to communicate with other surrounding devices. a second communication unit that performs a second communication with the moving body of the vehicle; a storage unit that stores an electronic certificate of the own vehicle used for the second communication; and an information receiving unit for receiving information of a first area whose quality is relatively inferior from the server; and a certificate acquisition unit for storing in the area. After the vehicle starts traveling, when the vehicle approaches the first area, before the vehicle enters the first area, the certificate acquisition unit acquires a new electronic certificate with a new validity period. A certificate is acquired from the server and stored in the non-volatile storage area of the storage unit.

A vehicle according to another aspect of the present invention is a vehicle capable of traveling on roads. This vehicle has a first communication unit that performs a first communication with a server through network communication via a base station for mobile communication, and a direct wireless communication system communication between the vehicle and the mobile unit that enables communication with other people in the vicinity. a second communication unit that performs a second communication with the moving body of the vehicle; a storage unit that stores an electronic certificate of the own vehicle used for the second communication; an information receiving unit for receiving from the server information about a first area whose quality is relatively inferior; and a book acquisition unit. After the vehicle starts traveling, when the vehicle approaches the first area, before the vehicle enters the first area, the certificate acquisition unit obtains an updated electronic certificate with an extended validity period. certificate from the server, and rewrites the electronic certificate stored in the storage unit with the updated electronic certificate. Here, the certificate acquisition unit acquires the updated electronic certificate when the vehicle is predicted to be located in the first area at the expiration timing of the validity period of the electronic certificate. good too.

In the vehicle, the first area includes an area outside the service area of the cell of the base station, and an area within the service area of the cell of the base station in which the quality of the first communication is higher than that of other areas within the service area of the cell of the base station. and low communication quality areas.

In the vehicle, travel avoiding the first area based on a position information acquisition unit that acquires position information of the own vehicle, and the position information of the own vehicle and the information of the first area received from the server. and a route generation unit that generates route information.

In the vehicle, a vehicle capable of running by a driving support system using the second communication (for example, a cooperative adaptive cruise control (CACC), etc.) is driving around the own vehicle. In the case of support (hereinafter, in the case of CACC, in this specification, as one vehicle out of a plurality of vehicles, the speed change information etc. A travel control unit may be provided that controls the travel of the own vehicle so that it travels with the assistance of the vehicle capable of providing support.

In the vehicle, the validity period of the electronic certificate issued to the vehicle may be changed based on the presence or absence of the first area in the travel route of the vehicle. For example, if the travel route of the vehicle does not include the first area, the validity period of the electronic certificate issued to the vehicle may be shorter than the validity period set at the time of issuance.

The vehicle may be a vehicle in which the frontmost and leftmost seat of the vehicle is not the driver's seat.

The vehicle may be an electric vehicle.

A server according to still another aspect of the present invention includes a communication unit that performs first communication with a vehicle capable of traveling on a road by network communication via a mobile communication base station; a storage unit for storing information of a first area in which communication quality is relatively inferior; an information receiving unit for receiving vehicle information including position information and speed information of the vehicle from the vehicle; an information transmission unit that identifies information of the first area on the planned travel route of the vehicle based on the received vehicle information and transmits the information to the vehicle; and a certificate processing unit that issues an electronic certificate used for the second communication by and transmits it to the vehicle. The certificate processing unit, in response to a request from the vehicle after the vehicle starts traveling, creates a new electronic certificate with a new valid period or an extended valid period used for the second communication by the vehicle. An updated electronic certificate is issued and sent to the vehicle.

In the server, the first area is an area outside the service area of the cell of the base station, and an area within the service area of the cell of the base station, wherein the quality of the first communication is higher than that of other areas within the service area of the cell of the base station. and low communication quality areas.

In the server, the vehicle information received from the vehicle includes communication quality information regarding the communication quality of wireless communication between the vehicle and the base station, and the location information and the communication quality information received from the vehicle An area information processing unit may be provided that creates information on the first area based on the information.

The server may include an area information processing unit that creates information on the first area based on an advance QoS notification (In-advance QoS Notification) sent to the vehicle.

A system according to still another aspect of the present invention includes any of the vehicles described above and any of the servers described above.

A method according to yet another aspect of the invention is a method of controlling a vehicle traveling on a road. This method includes first communication with a server through network communication via a mobile communication base station, and second communication with other vehicles in the vicinity through direct wireless communication between the vehicle and the mobile body. 2, storing the electronic certificate of the own vehicle used for the second communication, and the first area where the quality of the first communication is relatively inferior in the planned travel route of the own vehicle. receiving information from the server; obtaining the electronic certificate from the server and storing it in a volatile storage area before the vehicle starts running; Acquiring a new electronic certificate with a new validity period set from the server and storing it in a non-volatile storage area when the vehicle approaches the first area and before the vehicle enters the first area. and including.

A method according to yet another aspect of the invention is a method of controlling a road capable vehicle. This method includes first communication with a server through network communication via a mobile communication base station, and communication with other mobile units in the vicinity through direct wireless communication between the vehicle and the mobile unit. performing a second communication; storing an electronic certificate of the own vehicle to be used for the second communication; from the server; obtaining and storing the electronic certificate from the server before the vehicle starts running; and after the vehicle starts running, the vehicle is in the first area. When the vehicle approaches the first area, the updated electronic certificate with an extended validity period is obtained from the server, and the stored electronic certificate is transferred to the updated electronic certificate before the vehicle enters the first area. and rewriting to an electronic certificate of

A method according to still another aspect of the present invention comprises: performing a first communication with a vehicle capable of traveling on a road by network communication via a mobile communication base station; an information receiving unit that receives vehicle information including location information and speed information of the vehicle from the vehicle; and a vehicle received from the vehicle. Identifying information of the first area on the planned travel route of the vehicle based on the information and transmitting the information to the vehicle; and performing second communication by the vehicle in response to a request from the vehicle before starting travel. and sending it to the vehicle, and in response to a request from the vehicle after the vehicle starts running, a new validity period used for the second communication by the vehicle is newly set. or issuing an updated electronic certificate with an extended validity period and sending it to the vehicle.

A program according to still another aspect of the present invention is a program executed by a computer or processor provided in a vehicle capable of traveling on roads. This program includes a program code for performing first communication with a server by network communication via a base station for mobile communication, and a direct wireless communication system communication between the vehicle and the mobile body to perform the communication with other peripheral devices. A program code for performing a second communication with a vehicle, a program code for storing an electronic certificate of the own vehicle used for the second communication, and the quality of the first communication on the planned travel route of the own vehicle. A program code for receiving from the server the information of the first area with a relatively inferior first area; and a new electronic certificate with a new validity period set before the vehicle enters the first area when the vehicle approaches the first area after the vehicle starts running. from the server and stored in non-volatile storage.

A program according to still another aspect of the present invention is a program executed by a computer or processor provided in a vehicle capable of traveling on roads. This program includes a program code for performing first communication with a server by network communication via a base station for mobile communication, and a direct wireless communication system communication between the vehicle and the mobile body to perform the communication with other peripheral devices. A program code for performing a second communication with a vehicle, a program code for storing an electronic certificate of the own vehicle used for the second communication, and the quality of the first communication on the planned travel route of the own vehicle. a program code for receiving from the server the information of the first area with a relatively inferior first area; a program code for acquiring and storing the electronic certificate from the server before the vehicle starts running; After the own vehicle starts traveling, when the own vehicle approaches the first area, before the own vehicle enters the first area, an updated electronic certificate with an extended validity period is acquired from the server. and program code for rewriting the stored electronic certificate to the updated electronic certificate.

A program according to still another aspect of the present invention is a program executed by a computer or processor provided in a server that processes information about vehicles that can travel on roads. This program comprises a program code for performing a first communication with a vehicle traveling on a road by network communication via a base station for mobile communication, and the quality of the first communication is relative to the planned traveling route of the vehicle. a program code for storing information of a first area, which is inferior in terms of performance; a program code for receiving vehicle information including location information and speed information of the vehicle from the vehicle; and vehicle information received from the vehicle. a program code for specifying information of the first area on the planned travel route of the vehicle and transmitting the information to the vehicle; a program code for issuing a new electronic certificate with a new validity period or an updated electronic certificate with an extended validity period for the vehicle and transmitting the electronic certificate to the vehicle.

Said vehicle may be a vehicle that moves on the ground, under the ground, in the air, on water or in water.

According to the present invention, even when a vehicle moves from an area where network communication quality is sufficient to an area where network communication quality is relatively poor, a high security level can be maintained and an electronic certificate can be used. Vehicle-to-vehicle communication based on this can be continued. Therefore, it is possible to achieve both the safety or convenience of maintaining vehicle-to-vehicle communication and the completeness of security of performing communication based on the latest possible electronic certificate.

Explanatory drawing which shows an example of the whole structure of the system which concerns on embodiment. FIG. 2 is a flowchart showing an example of vehicle processing and control from power-on to start of running in the system of FIG. 1 ; FIG. FIG. 3 is a flow chart showing an example of the processing of a vehicle that has selected a route to enter an area where Uu communication is not possible in step S106 of FIG. 2 and has started traveling to the destination; FIG. 2 is a flowchart showing an example of vehicle processing until arrival at a destination when switching to automatic driving using CACC instead of automatic driving or manual driving by Uu communication and PC5 communication in the system of FIG. 1 . FIG. 11 is an explanatory diagram showing an example of a use case of performing route resetting to avoid a Uu communication unavailable area; FIG. 10 is an explanatory diagram showing an example of a use case involving rewriting of the validity period of an electronic certificate when there is no Uu communication unavailable area on the planned travel route; FIG. 11 is an explanatory diagram showing an example of a use case of newly acquiring an electronic certificate before entering a pre-detected Uu communication prohibited area; FIG. 11 is an explanatory diagram showing an example of a use case of extending the validity period of an electronic certificate when a Uu communication prohibited area is detected in advance; FIG. 11 is an explanatory diagram showing an example of a use case of switching from automatic operation with base station cooperation to automatic operation with CACC when a Uu communication unavailable area is detected in advance. FIG. 10 is an explanatory diagram showing an example of a use case of acquiring in advance semi-static or dynamic information in a previously detected Uu communication unavailable area; FIG. 2 is a block diagram showing an example of main functions of the vehicle according to the embodiment; FIG. FIG. 2 is a block diagram showing an example of main functions of the server according to the embodiment;

Embodiments of the present invention will be described below with reference to the drawings.
A system having a connected car and a server (MEC device) according to the embodiment described in this document (hereinafter also referred to as "inter-vehicle communication security information management system") is an area outside the cell area, a blind area, etc. on the planned driving route of the vehicle. By detecting in advance whether or not there is an Uu communication unavailable area (network communication unavailable area), and by issuing a new electronic certificate for PC5 communication or extending the validity period, the Uu communication unavailable area will be detected on the scheduled vehicle travel route. Even if it is included, it is a system that can maintain a high security level and continue PC5 communication based on the electronic certificate. In particular, this system can also be used for sustainable cooperative driving use cases that require vehicle-to-vehicle communication with a high level of security.

The above electronic certificate is, for example, a predetermined organization in advance as an authorized subject (entity) that a vehicle that performs PC5 communication (or a terminal device (UE) that is capable of Uu communication mounted on the vehicle) uses the PC5 communication, It is for proving that it is registered with an organization, company, etc. If the vehicle does not have this electronic certificate, it is determined that the vehicle (or terminal device) is trying to illegally use PC5 communication, and PC5 communication with another vehicle or mobile object is not possible. Can not.

FIG. 1 is an explanatory diagram showing an example of the overall configuration of the system according to this embodiment. In the system of the present embodiment, a plurality of vehicles 31 and 32 traveling rightward on each lane of a road 90 serving as a moving route each use Uu communication, which is network communication via the base station 16 of the mobile communication system. It is a connected car compatible with multiple communications, having a function of PC5 communication, which is inter-vehicle communication for direct wireless communication between vehicles using an interface called PC5.

In addition, in the following description, the vehicle 30 is used when describing items common to the vehicles 31 and 32 .

In the example of FIG. 1, two vehicles 31 and 32 compatible with multiple communications (Uu communication and PC5 communication) are running, but the number of vehicles compatible with multiple communications is three or more. There may be.

The vehicle 30 is, for example, an automobile, a truck, a bus, a motorcycle, or the like that moves on a road 90 that is a movement route on the ground. The vehicle to which the present invention can be applied may be a vehicle 30 on the ground, or a moving body such as an aircraft that can fly and move along a movement route in the sky at a predetermined altitude. In addition, the moving body is an underground moving body that moves along an underground movement path, a water moving body such as a ship that can move along a movement path on water (e.g., sea), or an underwater movement path (e.g., in the sea). It may be an underwater mobile such as a diving robot.

The vehicle 30 may be an electric vehicle, a fuel cell vehicle, or a hybrid vehicle having both an internal combustion engine and an electric motor. Further, when the vehicle 30 has a plurality of seats for crew members or passengers, the vehicle 30 may be a vehicle in which the frontmost and leftmost seat is not the driver's seat. That is, the vehicle may be a vehicle in which only the rightmost seat in the front row is the driver's seat, or may be an automatically operated vehicle that does not have a driver's seat.

In FIG. 1, the system of this embodiment includes a server 10 as an information processing device. The server 10 receives from a plurality of vehicles 30 compatible with Uu communication running in a cell of the mobile communication system on the road 90 a predetermined cycle Tu (for example, 50, 60, 70, 80, . . . 970, . 980, 990, 1000 [msec] (values between any two values exemplified here) are uploaded for each vehicle (for example, vehicle position and speed information) is received do.

The vehicle information includes, for example, vehicle identification information (moving body identification information) and in-vehicle sensor information. The vehicle-mounted sensor information includes vehicle-mounted sensor information such as current position information of the vehicle 30 obtained by receiving radio waves from GNSS satellites with a GNSS receiver and speed information of the vehicle 30 obtained with a speed sensor. The vehicle information may include control information for remote control such as automatic driving of the vehicle 30 .

The server 10 of the present embodiment is provided, for example, in the base station 16 of the mobile communication network 15, and is an MEC capable of processing various data transmitted and received with the communication device of the vehicle 30 via the base station 16. (Multi-access Edge Computing) device. The server 10, which is an MEC device, may be provided at a node between the base station 16 and the core network of the mobile communication network 15 or outside the core network.

The server 10 may have the function of a remote control device that transmits control information to the vehicle 30 and remotely controls the automatic driving of the vehicle 30 and the like. The server 10 may also have a function of a map server that manages map information including road information such as the position, shape, width, lanes, and signal installation positions of the road 90 .

A base station 16 forms one or more cells (sectors, also called sector cells). The cells may be two-dimensionally formed on the ground or the sea, or three-dimensionally formed from the sky toward the ground or the sea. A cell may be a macrocell, a small cell, a femtocell, a picocell, a large cell, and so on. A plurality of cells may constitute a cellular structure distributed so as to be adjacent to each other two-dimensionally or three-dimensionally, or may constitute a hierarchical cell structure in which a part or all of them overlap hierarchically. . The base station 16 is a macrocell base station, a small cell base station, a femtocell base station, a picocell base station, a large cell base station, a fixed base station fixedly installed on the ground or the like, or a mobile station that can move on the ground, on the sea, in the sky, or the like. type base station or the like. The base station 16 may be a wireless communication device called eNodeB (evolved Node B: eNB), gNodeB (gNB), en-NodeB (en-gNB), access point, or the like. Communication between the vehicle 30 and the base station 16 may be performed via a roadside communication relay device RSU (Road Side Unit) provided around the road 90 .

The communication device of the vehicle 30 includes a user equipment (hereinafter referred to as "UE") that constitutes a network communication unit that can be used as a subscriber of the mobile communication service. The UE may be a wireless communication device also called a user terminal, terminal, terminal device, mobile station, mobile station, or the like. Each UE of the vehicle 30 may be a device that is carried by the user in each vehicle, or a device that is installed in the vehicle 30 (for example, a device that is incorporated as part of the navigation device). may

In addition, the communication device of the vehicle 30 has a function of performing PC5 communication, which is direct wireless communication (inter-vehicle communication), with another vehicle in the vicinity. Radio waves such as microwaves and millimeter waves are used for PC5 communication. The frequency of PC5 communication may be, for example, several hundred MHz lower than 1 GHz or a high frequency band of 1 GHz or higher. In addition, the frequency of PC5 communication is 700 MHz band (715 MHz to 725 MHz), 5.8 GHz band (5770 MHz to 5850 MHz) and LTE-V2X Sidelin used in ITS (Intelligent Transport Systems) and CACC (Cooperative Adaptive Cruise Control) k (PC -5), 5.9 GHz band (5850 MHz to 5925 MHz), NR-V2X Sidelink (PC-5), etc. may be used. Also, multiple antennas with predetermined beam widths may be provided for PC5 communications. For example, the vehicle 30 has a directional antenna for performing PC5 communication with the vehicle ahead, a directional antenna for performing PC5 communication with the vehicle behind, and a directional antenna for performing PC5 communication with the vehicle on the right side. and a directional antenna for PC5 communication with the vehicle on the left side. PC5 communication may be performed via a roadside communication relay unit RSU provided around the road 90 .

In the system of FIG. 1, both Uu communication and PC5 communication are provided to the vehicle in order to provide traffic information such as traffic volume of the vehicle 30 moving on the road 90, and to realize use cases such as vehicle driving support and automatic driving. Implementation is underway. In addition, in order to increase the security level of PC5 communication, an electronic certificate is issued to the vehicle 30 that performs PC5 communication, and the electronic certificate is provided with a valid period, and the valid period is set as short as possible. It is desirable that the latest electronic certificates are issued frequently. Therefore, for example, it is being considered to match the timing of issuing a new electronic certificate to the vehicle 30 from the server 10, which also functions as a certificate authority, to the vehicle 30 via Uu communication when the power of the vehicle 30 is turned on. However, since the expiration time of the effective period has not been studied, there are the following problems.

For example, there is a case where the validity period of the preset electronic certificate just reaches the period when the vehicle 30 is powered off. Specifically, while the vehicle 30 is traveling in an area where Uu communication is not possible (such as an area outside the service area of a Uu communication cell or a dead area within the service area of a cell but the quality of Uu communication is low and Uu communication cannot be performed), In some cases, the vehicle is temporarily stopped and the power supply of the vehicle is turned off due to sudden business of a passenger or the like. In this case, if the preset validity period expires during the power off period of the vehicle 30 while the vehicle is temporarily stopped, when the vehicle 30 is turned on from the temporary stop state to resume running, a new power supply is sent via Uu communication. Since it is not possible to issue a valid electronic certificate, PC5 communication based on the electronic certificate cannot be resumed.
Further, in order to keep the security level of the electronic certificate high, there are cases where the system is designed so that the timing of invalidation is intentionally matched with the timing of turning off the power of the vehicle 30 . In this case as well, when the vehicle 30 that has been powered off once is powered on again, the PC 5 communication cannot be resumed in the Uu communication disabled area.

Further, if the travel route of the vehicle 30 includes the Uu communication unavailable area, the expiration timing of the validity period of the electronic certificate may come while traveling in the Uu communication unavailable area. In this case, as long as the vehicle 30 is not turned off, vehicle-to-vehicle communication can be maintained based on the expired electronic certificate, but maintaining communication based on the expired electronic certificate is not preferable from the viewpoint of security. .

Therefore, in this embodiment, as described below, the presence or absence of a Uu communication unavailable area on the planned travel route of the vehicle 30 is detected in advance, and a new electronic certificate used for PC5 communication is issued or the valid period is extended. Thus, even when the planned travel route of the vehicle 30 includes an area where Uu communication is not possible, the continuation of the PC5 communication based on the electronic certificate and the maintenance of a high security level can be compatible.

2 to 4 are flow charts showing an example of processing and control executed in the vehicle 30 assuming multiple use cases in the system of FIG. 5 to 10 are explanatory diagrams showing examples of vehicle motion on roads in a plurality of use cases, respectively. The numbers in parentheses in the reference numerals 31(1), 31(2), and 31(3) of the vehicles in FIGS. 5 to 10 indicate the order of change over time.

FIG. 2 is a flowchart showing an example of vehicle processing and control from power-on of the vehicle to start of running in the system of FIG. In FIG. 2, when the power of the vehicle 31 is turned on (S101), the vehicle 31 connects to the base station 16 to enable Uu communication with the server 10 via the base station 16. wireless connection setup (RRC Connection Setup) (S102).

Next, the vehicle 31 requests the server 10 to acquire an electronic certificate to be used for PC5 communication, and receives the electronic certificate issued by the server 10 (S103). The electronic certificate received before the start of driving is stored in a volatile storage area of the storage unit in the vehicle 31 in order to increase the security level of PC5 communication, and is erased and invalidated when the power is turned off.

After that or in parallel with S103, when the destination is set in the navigation system of the vehicle 31 (S104), the vehicle 31 performs Uu communication with the server 10 via the base station 16, and determines the current position set by the navigation system. A search is made for an area where Uu communication is not possible (area outside the cell coverage area, dead area) on the planned travel route from to the destination (S105). For example, the vehicle 31 requests the server 10 to search for a Uu communication unavailable area, and the server 10 searches for the Uu communication unavailable area on the planned travel route of the vehicle 31 in response to the request from the vehicle 31, and searches for the Uu communication unavailable area. If there is a Uu communication disabled area, the location is transmitted to the vehicle 31.例文帳に追加

Here, among the Uu communication unavailable areas, the position and size of the low communication quality area (dead area) where the quality of Uu communication is degraded due to UE congestion, communication packet stagnation, etc. may change from moment to moment. The same area may or may not be a dead area depending on the passage time of the vehicle 31 . Therefore, the server 10 searches for the Uu communication unavailable area (cell out-of-range area, dead area) and determines whether or not the area is a Uu communication unavailable area, taking into account the passing time of the vehicle 31. .

When the Uu communication unavailable area is detected in advance, the vehicle 31 avoids the approach route passing through the Uu communication unavailable area and the Uu communication unavailable area according to the operation instruction of the passenger or by the autonomous control of the vehicle 31. Either of the avoidance routes is selected (S106).

When the avoidance route is selected in step S106, the vehicle 31 travels around the Uu communication unavailable area based on the route avoiding the Uu communication unavailable area set by the navigation system and the server 10, and arrives at the destination. (S107). For example, as shown in FIG. 5, when the vehicle 31(1) is in the cell C of the base station 16, the destination is set in the navigation system. The server 10 adds the information determined as the Uu communication unavailable area to the route searched by the navigation system, and transmits the route to the vehicle 31(1). When the vehicle 31(1) is notified that the Uu communication unavailable area X exists on the planned travel route, the vehicle 31(1) requests the navigation system and the server 10 to reset the route to the destination avoiding X. Vehicles 31 ( 2 ) and 31 ( 3 ) can travel automatically or manually using both Uu communication and PC5 communication according to the avoidance route indicated by the navigation system and server 10 .

On the other hand, when the Uu communication disabled area entry route is selected in step S106 of FIG. Both Uu communication and PC5 communication are used until reaching the area (S108).

In step S103 of FIG. 2, the server 10 may change the validity period of the electronic certificate issued to the vehicle 31 before the vehicle 31 starts traveling, based on the presence or absence of the Uu communication unavailable area on the traveling route of the vehicle 31. . The longer the validity period of the electronic certificate, the higher the security risk of PC5 communication, and the shorter the validity period of the electronic certificate, the more reliable the security of PC5 communication. Therefore, when setting the travel route when the vehicle 31 is moving, if there is no Uu communication disabled area on the travel route, the expiration date of the electronic certificate is reset to be short, the renewal is performed in a short cycle, and the PC5 communication is performed. The security level may be improved. For example, as shown in FIG. 6, the vehicle 31(1) receives an electronic certificate issued by the server 10 when the power is turned on, and sets a route to the destination of the vehicle 31(1). When it is confirmed that there is no Uu communication unavailable area on the planned driving route by prior QoS notification (IQN: In-advance QoS Notification) from the 1 hour) may be rewritten. In this case, as shown by vehicles 31(2) and 31(3) in FIG. to get

FIG. 3 is a flow chart showing an example of the processing of the vehicle that has selected the route to enter the Uu communication unavailable area in step S106 of FIG. 2 and has started traveling to the destination. In FIG. 3, the vehicle 31 measures the distance between its current position and the Uu communication disabled area received from the server 10 in S105 of FIG. When it is determined that the Uu communication unavailable area is approaching on the planned travel route (S109), it requests the server 10 for an electronic certificate (hereinafter also referred to as "preliminary certificate") for continuing PC5 communication in the area. , a prior certificate is received from the server 10 before entering the area (S110). In step S109, the vehicle 31 may further predict whether or not the vehicle is located within the Uu communication unavailable area at the expiration timing of the validity period of the existing electronic certificate. Then, when it is predicted that the own vehicle will be located in the Uu communication unavailable area at the expiration timing of the validity period of the existing electronic certificate, the advance certificate is requested from the server 10, and the advance certificate is sent from the server 10 before entering the area. receive a letter. Note that the prediction is made in consideration of, for example, the current location of the vehicle, the speed at which the vehicle can travel, traffic conditions on the road on which it travels, construction information, weather, and the like. Further, the server 10 may perform the prediction and notify the vehicle 31 before the vehicle 31 enters the Uu communication unavailable area.

In the case where the received advance certificate is a new electronic certificate with a new validity period set, unlike the handling of the electronic certificate obtained before the start of driving, the advance certificate is the power source of the vehicle 31. It is stored in a non-volatile storage area (non-volatile memory) of the storage unit in the vehicle 31 so that it will not be erased and invalidated even when it is turned off (S110).

After that, when the vehicle 31 enters the Uu communication unavailable area, the service using the Uu communication cannot be used, but the service using the PC5 communication can be used (S111). However, when the power of the vehicle 31 is turned off within the Uu communication unavailable area, the electronic certificate acquired before the start of travel and stored in the volatile storage area is erased and becomes invalid. After that, even when the power is turned on, Uu communication cannot be used, so a new electronic certificate cannot be obtained from the server 10 at that time (S112). However, since the prior certificate is obtained from the server 10 and stored in the nonvolatile storage area (nonvolatile memory) before entering the Uu communication prohibited area, the PC5 communication is performed by applying the prior certificate. (S113, S114). For example, as shown in FIG. 7, when the server 10 notifies the vehicle 31(1) of the Uu communication impossibility area X existing on the planned travel route, the advance certificate is issued before entering the Uu communication impossibility area X. It is acquired from the server 10 and stored in a nonvolatile storage area (nonvolatile memory). After that, even if the power of the vehicle 31(2) is turned off once within the Uu communication prohibited area X, when the power is turned on again, the vehicle 31(3) will be stored in the non-volatile memory in the Uu communication prohibited area X. By applying the pre-certificate stored in the area, PC5 communication can be implemented (continued) with other vehicles 32 in the vicinity.

Also, if the validity period of the electronic certificate acquired and stored in the volatile storage area before starting running expires while driving in the Uu communication prohibited area (S112' in FIG. 3), the Uu communication prohibited area PC5 communication can be implemented (continued) at a high security level by applying the pre-certificate obtained from the server 10 and stored in the non-volatile storage area (non-volatile memory) before entering the S113, S114).

After that, when the vehicle 31 leaves the Uu communication unavailable area and returns to the cell range of the base station, it resumes the Uu communication via the base station. At this time, the vehicle may immediately request the server 10 to issue a new electronic certificate via Uu communication. Then, based on the planned travel route set by the navigation system in steps S104 and S105 of FIG. 2, the destination can be reached by automatic driving or manual driving (S115) using both Uu communication and PC5 communication. (S116).

In the present embodiment, the advance certificate may be an updated electronic certificate in which the validity period of the electronic certificate obtained before the vehicle starts is extended. Issuance of this advance certificate (an electronic certificate with an extended validity period) is performed by the server 10 sending the vehicle 31(1) via Uu communication to the volatile memory of the storage unit in the vehicle 31(1). This is done by instructing to rewrite the electronic certificate stored in the area. In this case, as shown in FIG. 8, a vehicle 31(2) traveling in the Uu communication prohibited area X applies a prior certificate with an extended validity period to communicate with other vehicles 32 in the vicinity. , PC5 communication can be implemented (continued).

FIG. 4 shows an example of vehicle processing until arrival at the destination when switching to automatic driving using CACC instead of automatic driving or manual driving by Uu communication and PC5 communication in the system of FIG. It is a flow chart. Steps S117 to 120, 122, and 126 are all performed before entering the Uu communication disabled area. In FIG. 4, when the vehicle 31 determines that the Uu communication unavailable area is approaching in step S109 of FIG. 3, the automatic driving application software by CACC using PC5 communication is downloaded from the server 10 and activated (S117). In addition, the automatic driving application software by CACC is downloaded in advance to the vehicle 31 before traveling, and when it is determined that the Uu communication unavailable area is approaching in the vehicle 31, the server 10 is requested to update the latest version of the software, and the latest program may be configured to download. Next, the vehicle 31 accesses the server 10 by Uu communication, and searches for a vehicle capable of supporting the automatic driving by CACC using the PC5 communication (S118). Then, if there is a support vehicle traveling on the same route as the own vehicle up to the Uu communication disabled area and the area where the cell area of the base station 16 can be returned to ("YES" in S119), the support vehicle (forward vehicle) 32 , approaches to a position where PC5 communication is sufficiently possible, switches from automatic driving by Uu communication to automatic driving by CACC using PC5 communication with vehicle 32 (S120), and enters Uu communication disabled area X (S121). . In the Uu communication unavailable area X, as shown in FIG. 9, the vehicle 31 (3) mutually cooperates with the support vehicle (forward vehicle) 32 for speed, steering, etc. by PC5 communication, and follows the support vehicle (forward vehicle) 32. We will implement automatic operation of CACC as follows.

In step S119 above, if there is no support vehicle that travels the same route as the own vehicle to the return area to the cell area of the base station 16 ("None" in S119), the vehicle 31 is manually operated or CACC is activated. It enters into the Uu communication unavailable area X by automatic operation without using (S122).

After that, when the vehicle 31 leaves the Uu communication unavailable area and returns to the cell area of the base station (S123), the Uu communication via the base station is resumed. At this time, the vehicle may immediately request the server 10 to issue a new electronic certificate via Uu communication. Then, based on the planned travel route set by the navigation system in steps S104 and S105 of FIG. 2, automatic driving or manual driving using both Uu communication and PC5 communication is performed (S124), and the destination is reached. (S125).

In FIG. 4, when the vehicle 31 determines that the Uu communication unavailable area is approaching in step S109 of FIG. As shown in FIG. 10, the map information including the information of the disabled vehicle 33) may be downloaded in advance (S126). In this case, in the Uu communication blackout area X, the vehicle 31 (3) uses the downloaded map information including semi-static or dynamic information to move to the Uu communication blackout area X by manual driving or automatic driving without using CACC. (S122). By obtaining map information including semi-static or dynamic information before entering the Uu communication unavailable area, it is possible to improve the safety of manual driving or automatic driving in the Uu communication unavailable area.

FIG. 11 is a block diagram showing an example of main functions of the vehicle 31 having Uu communication and PC5 communication functions according to this embodiment. 11, the vehicle 31 includes a first communication unit 310 for performing Uu communication with the server 10, a second communication unit 320 for performing PC5 communication with other vehicles in the vicinity, and a certificate A car navigation system 370 includes a book storage unit 330 , a wireless measurement unit 340 , a GNSS receiver 350 as a position information acquisition unit, an application (APP) execution unit 360 .

The certificate storage unit 330 has a volatile storage area for storing an electronic certificate acquired before starting running, and a non-volatile storage area (non-volatile memory).

Radio measurement section 340 measures information (for example, RSRP, RSRQ, SINR, etc.) regarding the communication quality of radio communication in first communication section 310 and second communication section 320 . The measurement results are uploaded to the server 1.

The GNSS receiver 350 receives radio waves from GNSS satellites and outputs position information of the vehicle 31 to the APP execution unit 360 and the car navigation system 370 . Further, the position information of the vehicle 31 is uploaded to the server 10 together with the speed information of the vehicle 31 and the like.

The APP execution unit 360 reads and executes application software 361 for PC5 communication downloaded in advance from the server 10 or the like and application software 362 for automatic driving such as CACC. Application software 361 for PC5 communication is communication application software for when Uu communication cannot be used. In addition, the APP execution unit 360 executes the CACC automatic driving application software 362, so that when a vehicle capable of driving support by CACC using PC5 communication is traveling around the own vehicle, the vehicle It also functions as a travel control unit that controls the own vehicle so that it travels by CACC with the support of .

The car navigation system 370 is based on map data downloaded in advance from the server 10 or the like, position information of the current position output from the GNSS receiver 350, and information such as speed and acceleration detected by other sensors. Route search, route guidance, etc. are performed. Moreover, in order to inform the passengers of the vehicle of such information, images and sounds may be output. The car navigation system 370 also functions as a route generator that generates information on a driving route that avoids the Uu communication unavailable area based on the position information of the own vehicle and the Uu communication unavailable area information received from the server 10. .

FIG. 12 is a block diagram showing an example of main functions of the server 10 according to this embodiment. 12, the server 10 includes a communication unit 110 for performing Uu communication with the vehicle 31, a vehicle information database (DB) 120, a vehicle communication history database (DB) 130, an area information database (DB ) 140 , a PC5 certificate processing unit 150 , and an application (APP) storage unit 160 .

A vehicle information database (DB) 120 stores and manages vehicle information uploaded from each vehicle in the target area. Vehicle information includes, for example, vehicle identification information (ID), location information, destination, capability of the vehicle as a connected car, time stamp, radio measurement information (e.g., RSRP, RSRQ, SINR, etc. communication quality information).

A vehicle communication history database (DB) 130 stores and manages the past communication history with each vehicle uploaded from each vehicle in the target area. The communication history includes, for example, timestamps, radio measurement information (eg, communication quality information such as RSRP, RSRQ, SINR, etc.).

The area information database (DB) 140 saves and manages the information of the aforementioned Uu communication disabled area (cell out-of-range area, dead area). The Uu communication unavailable area (cell out-of-range area, dead area) can be created or updated based on the communication history database (DB) 130 of the vehicle, for example. In addition, the area information database (DB) 140 creates and corrects information on the above-mentioned Uu communication unavailable area (outside cell area, dead area) based on the position information received from the vehicle 31 and the communication quality information. It also functions as an area information processing section. In addition, the area information database (DB) 140 creates and corrects information on the above-mentioned Uu communication unavailable area (outside cell area, dead area) based on the prior QoS notification (IQN) notified to the vehicle 31. good too.

The PC5 certificate processing unit 150 performs processing such as issuing and updating the above-mentioned electronic certificate before the vehicle 31 starts running and the above-mentioned advance certificate.

An application (APP) storage unit 160 stores application software such as PC5 communication application software 161 and CACC automatic driving application software 162 that can be downloaded to each vehicle via Uu communication. Application software 161 for PC5 communication is communication application software for when Uu communication cannot be used.

The server 10 configured as described above holds past communication history (time stamp, electric field intensity, quality information) with each vehicle 31 . From this past accumulated data, the server 10 grasps areas outside the cell coverage area and temporary low communication quality areas (dead areas) due to congestion and the like. In addition, a temporary low communication quality area (dead area) due to congestion or the like changes from moment to moment. Also, even if the area is in the same area, it may or may not become a dead area depending on the passage time. In addition, the server 10 grasps how many seconds after the vehicle 31 will enter the Uu communication disabled area (cell out-of-range area, dead area), based on the running speed of the vehicle 31 . In addition, the server 10 determines how far in advance the DL needs to be started until the vehicle 31 reaches the Uu communication disabled area (cell out-of-range area, dead area) for downloading (DL) of data necessary for the vehicle 31. I understand. In addition, since the server 10 has information on the destination of each vehicle, it also grasps the route from the entrance to the exit of the above-mentioned advance response section for each vehicle. Furthermore, the server 10 has information on the capability of each vehicle as a connected car (for example, CACC automatic driving capability, etc.). The server 10 may have a function of notifying each vehicle 31 of the IQN.

As described above, according to the present embodiment, even when the planned travel route of the vehicle 31 includes an area where Uu communication is not possible (an area outside the cell service area, a dead area), the PC5 communication based on the electronic certificate can be continued and the PC5 communication can be performed. A high level of security can be maintained.

Also, the processing steps and components of mobile communication systems, servers, base stations and communication devices (terminals, terminal devices, user equipment (UE), mobile stations, mobile stations) described herein may be implemented by various means. can be implemented. For example, these processes and components may be implemented in hardware, firmware, software, or any combination thereof.

For hardware implementation, means such as processing units used to implement the above steps and components in an entity (e.g., various wireless communication devices, Node Bs, terminals, hard disk drives, or optical disk drives) are: One or more of Application Specific Integrated Circuits (ICs), Digital Signal Processors (DSPs), Digital Signal Processors (DSPDs), Programmable Logic Devices (PLDs), Field Programmable Gate Arrays (FPGAs) ), processor, controller, microcontroller, microprocessor, electronic device, other electronic unit designed to perform the functions described herein, computer, or any combination thereof. good.

Also, for firmware and/or software implementations, means such as processing units used to implement the above components may be programs (e.g., procedures, functions, modules, instructions) that perform the functions described herein. , etc.). In general, any computer/processor readable medium tangibly embodying firmware and/or software code means, such as a processing unit, used to implement the above steps and components described herein. may be used to implement For example, firmware and/or software code may be stored in memory and executed by a computer or processor, such as in a controller. The memory may be implemented within the computer or processor, or external to the processor. The firmware and/or software code may also be, for example, random access memory (RAM), read only memory (ROM), non-volatile random access memory (NVRAM), programmable read only memory (PROM), electrically erasable PROM (EEPROM). ), flash memory, floppy disk, compact disk (CD), digital versatile disk (DVD), magnetic or optical data storage devices, etc. good. The code may be executed by one or more computers or processors and may cause the computers or processors to perform certain aspects of the functionality described herein.

Also, the medium may be a non-temporary recording medium. Also, the code of the program is not limited to a specific format as long as it can be read and executed by a computer, processor, or other device or machine. For example, the program code may be source code, object code, or binary code, or may be a mixture of two or more of these codes.

Moreover, the description of the embodiments disclosed herein is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to this disclosure will be readily apparent to those skilled in the art, and the general principles defined herein are applicable to other variations without departing from the spirit or scope of this disclosure. This disclosure, therefore, is not to be limited to the examples and designs described herein, but is to be accorded the broadest scope consistent with the principles and novel features disclosed herein.

10 : Server 15 : Mobile communication network 16 : Base station 30 : Vehicle 31 : Vehicle 32 : Vehicle 33 : Broken vehicle 90 : Road 110 : Communication unit 150 : PC5 certificate processing unit 160 : Storage unit 310 : First communication unit 320 : Second communication unit 330 : Certificate storage unit 340 : Wireless measurement unit 350 : GNSS receiver 360 : APP execution unit 370 : Car navigation system

Claims (15)

A vehicle capable of traveling on a road,
a first communication unit that performs first communication with a server by network communication via a mobile communication base station;
a second communication unit that performs a second communication with other nearby moving bodies by means of direct wireless communication between the vehicle and the moving body;
a storage unit that stores an electronic certificate of the own vehicle used for the second communication;
an information receiving unit configured to receive, from the server, information about a first area in which the quality of the first communication is relatively inferior in the scheduled travel route of the own vehicle;
a certificate acquisition unit that acquires the electronic certificate from the server and stores it in a volatile storage area of the storage unit before the vehicle starts running;
After the vehicle starts traveling, when the vehicle approaches the first area, before the vehicle enters the first area, the certificate acquisition unit acquires a new electronic certificate with a new validity period. A vehicle that acquires a certificate from the server and stores it in a non-volatile storage area of the storage unit. A vehicle capable of traveling on a road,
a first communication unit that performs first communication with a server by network communication via a mobile communication base station;
a second communication unit that performs a second communication with other surrounding mobile bodies through direct wireless communication between the vehicle and the mobile body;
a storage unit that stores an electronic certificate of the own vehicle used for the second communication;
an information receiving unit configured to receive, from the server, information about a first area in which the quality of the first communication is relatively inferior in the scheduled travel route of the own vehicle;
a certificate acquisition unit that acquires the electronic certificate from the server and stores it in the storage unit before the vehicle starts running;
After the vehicle starts traveling, when the vehicle approaches the first area, before the vehicle enters the first area, the certificate acquisition unit obtains an updated electronic certificate with an extended validity period. certificate from the server, and rewrites the electronic certificate stored in the storage unit with the updated electronic certificate. In the vehicle of claim 2,
The vehicle, wherein the certificate acquisition unit acquires the updated electronic certificate when the vehicle is predicted to be located in the first area at the expiration timing of the validity period of the electronic certificate. In the vehicle according to any one of claims 1 to 3,
The first area includes an area outside the service area of the cell of the base station, and a low communication quality area within the service area of the cell of the base station in which the quality of the first communication is lower than other areas within the service area of the cell of the base station. area and, including, vehicle. In the vehicle according to any one of claims 1 to 4,
a location information acquisition unit that acquires location information of the own vehicle;
A vehicle, comprising: a route generation unit that generates information on a travel route that avoids the first area based on the position information of the own vehicle and the information on the first area received from the server. In the vehicle according to any one of claims 1 to 5,
When a vehicle capable of driving assistance by the driving assistance system using the second communication is traveling around the own vehicle, the own vehicle is driven with the assistance of the vehicle capable of the assistance. A vehicle comprising a travel control unit that controls the In the vehicle according to any one of claims 1 to 6,
A vehicle that shortens the valid period of an electronic certificate issued to the own vehicle from the valid period set at the time of issuance when the first area is not present on the travel route of the own vehicle . A system consisting of one or more computers ,
a communication unit that performs first communication with a vehicle capable of traveling on a road by network communication via a mobile communication base station;
a storage unit that stores information of a first area in which the quality of the first communication is relatively inferior in the planned travel route of the vehicle;
an information receiving unit that receives vehicle information including position information and speed information of the vehicle from the vehicle;
Based on the vehicle information received from the vehicle, the vehicle is located within the first area on the planned travel route of the vehicle at the expiration timing of the validity period of the existing electronic certificate used for the second communication by the vehicle. an information transmission unit that predicts whether or not and notifies the vehicle before the vehicle enters the first area ;
a certificate processing unit that issues an electronic certificate used for second communication by the vehicle in response to a request from the vehicle before the vehicle starts running, and transmits the electronic certificate to the vehicle;
The certificate processing unit, in response to a request from the vehicle after it has determined that the first area is approaching on the scheduled travel route and has started traveling, before the vehicle enters the first area, A system for issuing a new electronic certificate with a new validity period or an updated electronic certificate with an extended validity period for use in the second communication, and transmitting the electronic certificate to the vehicle. 9. The system of claim 8 , wherein
The first area includes an area outside the service area of the cell of the base station, and a low communication area within the service area of the cell of the base station in which the quality of the first communication is lower than other areas within the service area of the cell of the base station. system , including the quality area and; The system of claim 8 or 9 ,
The vehicle information received from the vehicle includes communication quality information regarding communication quality of wireless communication between the vehicle and the base station,
A system comprising an area information processing unit that creates information on the first area based on the position information and the communication quality information received from the vehicle. The system of claim 8 or 9 ,
A system comprising an area information processing unit that creates information on the first area based on an advance QoS notification (In-advance QoS Notification) that is sent to the vehicle. A program executed in a computer or processor provided in a vehicle capable of traveling on a road ,
a program code for first communication with a server by network communication via a mobile communication base station;
a program code for second communication with other nearby mobile bodies by means of direct wireless communication between the vehicle and the mobile body;
a program code for storing the electronic certificate of the own vehicle used for the second communication;
a program code for receiving from the server information about a first area in which the quality of the first communication is relatively inferior in the scheduled travel route of the own vehicle;
a program code for acquiring the electronic certificate from the server and storing it in a volatile storage area before the vehicle starts running;
After the own vehicle starts traveling, when the own vehicle approaches the first area, before the own vehicle enters the first area, a new electronic certificate with a new validity period is acquired from the server. program code for storing in a non-volatile storage area;
A program that contains . A program executed in a computer or processor provided in a vehicle capable of traveling on a road,
a program code for first communication with a server by network communication via a mobile communication base station;
a program code for second communication with other nearby mobile bodies by direct wireless communication between the vehicle and the mobile body;
a program code for storing the electronic certificate of the own vehicle used for the second communication;
a program code for receiving from the server information about a first area in which the quality of the first communication is relatively inferior in the scheduled travel route of the own vehicle;
a program code for acquiring and storing the electronic certificate from the server before the vehicle starts running;
After the own vehicle starts traveling, when the own vehicle approaches the first area, before the own vehicle enters the first area, an updated electronic certificate with an extended validity period is obtained from the server. , a program code for rewriting the stored electronic certificate to the updated electronic certificate;
A program that contains . A program executed in a computer or processor provided in a server that processes information about vehicles that can travel on roads,
a program code for performing first communication with a vehicle traveling on a road by network communication via a mobile communication base station;
a program code for storing information of a first area in which the quality of the first communication is relatively inferior in the planned travel route of the vehicle;
program code for receiving vehicle information, including position and speed information of the vehicle, from the vehicle;
Based on the vehicle information received from the vehicle, the vehicle is located within the first area on the planned travel route of the vehicle at the expiration timing of the validity period of the existing electronic certificate used for the second communication by the vehicle. program code for predicting whether or not and notifying the vehicle before the vehicle enters the first area ;
In response to a request from the vehicle determined to be approaching the first area on the planned travel route , before the vehicle enters the first area, the vehicle is used for second communication by the vehicle. A program code for issuing a new electronic certificate with a new period or an updated electronic certificate with an extended validity period and sending it to the vehicle;
A program that contains . In the program of claim 12, 13 or 14,
A program including a program code for rewriting and resetting the validity period of the electronic certificate for the vehicle to a shorter period when the vehicle travel route does not include the first area.

Images