JP2000259876A - Card system for vehicle - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a card system for a vehicle capable of coping with various applications recorded in at least one IC card by a single card reader while normally securing securities. SOLUTION: In this card system for the vehicle, when the IC card 30 is inserted to the card reader 20 and an initial command is outputted to the IC card, the IC card 30 receives the initial command from the card reader 20 and returns one of respective application IDs for respectively authenticating the IC card 30 corresponding to the respective applications for ETC and for a credit card to the card reader 20. At the time, the respective securities are confirmed by using the application ID, and after authenticating the IC card 30 by the security confirmation, a processing thereafter is performed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a vehicular card system applied to an advanced transportation system.

[0002]

2. Description of the Related Art In recent years, in this type of card system, a semiconductor chip is embedded in a card-shaped plate to form an IC card, and data in the IC card is read out from an external device to use the IC card. A system for identifying persons has been proposed.

The current system using an IC card is
Since one application is assumed, an authentication method dedicated to the application is used for IC card authentication. For example, such an authentication method is employed in credit cards and telephone cards.

[0004]

By the way, in an IC card used for a vehicle, for example, payment by a credit card, payment by a toll road card, and payment at a shop such as a gas station or a burger shop, respectively, When different IC cards are used, different authentication levels are required because of different security levels.

Therefore, in order to read an IC card corresponding to each application, a plurality of separate card readers corresponding to different security levels are required. However, when a plurality of card readers are employed in this way, the user cannot know which IC card should be inserted into which card reader, requires a space for installing a plurality of card readers in a vehicle, and requires a plurality of card readers. This is very inconvenient for the user, for example, because the operation of the card reader lowers the security.

As a countermeasure against this, standardization of external specifications relating to the shape of an IC card and a method of supplying power to the IC card has been carried out. That is, an I / O interface provided with a read / write interface by such standardization
If the C card is adopted in the vehicle, the card reader of the vehicle
The type of the IC card can be distinguished from the shape of the IC card and the power supply method.

However, in practice, in order to secure security depending on the use of each IC card, each card reader has:
Security confirmation means corresponding to each application are separately adopted. Therefore, the card reader cannot perform read / write processing on the IC card for any purpose. In particular, a toll road card card reader is provided with a security access module for a toll road card, and a communication port to an IC card is formed in the security access module. For this reason, in order to use the card reader for purposes other than payment with a toll road card, it is necessary to disclose the specifications of the security access module so that it can be used for other purposes.

However, the contents of security (authentication method)
The public use of the toll road card reduces security, so that the toll road card reader cannot be used for any other purpose (other than an organization that manages toll road card payments). Therefore, there arises a problem that a new card reader that can process an IC card having a use (application) other than payment by a toll road card is required.

When the roadside device sets one application (application), if a card reader corresponding to a plurality of applications responds, the roadside device also needs to process a card reader having an application other than the set application. This causes a problem that the processing load of the on-road unit increases. In order to cope with the above problems, the present invention enables a single card reader to cope with various applications recorded on at least one IC card while ensuring security normally. It is an object to provide a vehicle card system.

[0010]

In order to solve the above problems, according to the first aspect of the present invention, a road machine (10) is provided.
A card reader (20) mounted on a vehicle so as to communicate with the IC card and at least a first and second use IC card (30), wherein the card reader inserts the IC card And outputs an initial command to the IC card.
1) and a first step for the IC card to receive the initial command and to authenticate the IC card according to the first or second use.
Alternatively, when the second use collation data is returned to the card reader, the security confirmation unit (23, 23) confirms the first or second security using the use collation data.
24, 60, 61, 70, 71), and a vehicle card system is provided in which after the IC card is authenticated by the security confirmation of the security confirmation means, the subsequent processing is performed.

[0011] Thereby, the IC card is at least the first.
Also, even for the second use, the card reader confirms the security based on the collation data from the IC card based on the initial command. Processing corresponding to this can be performed. According to the second aspect of the present invention,
A card system mounted on a vehicle so as to communicate with a road machine and provided with a card reader and at least each IC card for each of first and second applications, wherein the card reader comprises first and second card readers. Security confirming means (23, 2) for confirming first and second security for authenticating each corresponding IC card according to each of the applications
4, 60, 61, 70, 71), initial command output means (50, 51) into which any one of the IC cards is inserted and outputs an initial command to the IC card, and the IC card receiving the initial command. When the application verification data for authenticating the IC card according to the application is returned to the card reader, the security verification unit (23,
24, 60, 61, 70, 71), and a vehicle card system is provided in which after the IC card is authenticated by the security confirmation of the security confirmation means, the subsequent processing is performed.

As described above, unlike the first aspect of the invention, the same operation and effect as those of the first aspect of the invention are achieved even when at least each of the IC cards for the first and second uses is provided. it can. According to a third aspect of the present invention, in the first or second aspect of the invention, when the roadside machine starts communication with the card reader, it transmits the application verification data to the card reader, When the reader has application data that can be specified based on the application verification data from the roadside device, the reader includes a response unit (220) that responds to start communication with the roadside device.

Thus, the communication between the roadside device and the card reader can be properly performed based on the confirmation of the normal security by the card reader. In addition, the code | symbol in the parenthesis of each said means shows the correspondence with the concrete means described in embodiment mentioned later.

[0014]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows an example of a vehicular card system according to the present invention. The card system is mounted at an appropriate position on the vehicle, and the card system is used for a card reader 20 that communicates with the roadside device 10.
And an IC card 30.

The roadside machine 10 is disposed, for example, on the road of an expressway for communication with the card reader 20, and the roadside machine 10 is operated by its CPU in accordance with the flowcharts shown in FIGS. , Execute the on-road program. During this execution, the roadside device 10 performs arithmetic processing required for communication with the card reader 20. Here, a communication frame used when the roadside device 10 performs communication with the card reader 20 will be described with reference to FIG. As shown in FIG. 7, the communication frame includes a frame control message slot (hereinafter, referred to as FCMS), a message data slot (hereinafter, referred to as MDS), a wireless communication number slot (hereinafter, WCN).
S) and an application slot (hereinafter AC)
TS).

This configuration is a frame configuration used for transmitting an application ID from the roadside device 10 to the card reader 20. That is, FIG. 7 shows what kind of application the roadside device 10 transmits to the card reader 20 using the frame control message channel for transmitting application ID (hereinafter referred to as FCMC) included in FCMS. Also, card reader 2
FCMS also specifies which MDS is used to return a response to 0.

The FCMC is, as shown in FIG.
PR (preamble), UW (unique word), ...
.., CRC (CRC calculation results other than PR and UW1). An application ID that can be provided by the roadside device 10 is provided in an SC (service application information field), and ID data of the card reader 20 is provided in an IDN (ring address subfield) of the SC (i).

When transmitting a plurality of applications to the same card reader, the roadside device 10 sets an application ID in the SC, and sets the same card reader in the IDN of the SC (i). This means that the roadside device 10 performs the application process by dividing the time zone. If it takes time to switch the application of the card reader, the roadside device 10 uses the MDS used for communication.
, The order of application allocation is determined by the SC so that the time for application switching can be secured (see FIG. 7). FIG. 7 shows an example of this assignment.

As shown in FIG. 1, the card reader 20 has an IC card interface 21 (hereinafter, I / F).
21), and this interface 21
Reads and writes data stored in the IC card 30 as the IC card 30 is inserted into the card reader 20. Further, the card reader 20 includes a switching circuit 22, and the switching circuit 22 outputs processing data of the I / F 21 to the CPU 23. Further, the switching circuit 22
The output data of the CPU 23 and the output data of the security access modules 24 and 25 (hereinafter referred to as SAMs 24 and 25) are input to the IC card 30 through the I / F 21. The processing of the switching circuit 22 is C
Under the command of the PU 23, the switching circuit 22 directly connects the I / F 21 to the communication line L,
5 is achieved by switching the selection process.

The CPU 23 executes the IC card program in accordance with the flowchart shown in FIG. 4, and during this execution, performs communication processing with the IC card 30 and display processing on the display 29. The CPU 23 executes the card reader program in accordance with the flowcharts shown in FIGS. 5 and 6, and during this execution, reads and writes the data stored in the memory 26,
5, an input / output process of data with the switching circuit 22, an output process to the interface 27 (hereinafter, referred to as an I / F 27), and a transmission / reception process with the communication circuit 28.

The I / F 27 performs data input / output between the CPU 23 and an external circuit. The communication circuit 28 includes the antenna 2
Data is transmitted to the roadside device 10 through the antenna 9, and transmission data from the roadside device 10 is received through the antenna 29 and output to the CPU 23. The operation of the present embodiment thus configured will be described with reference to FIG. 8 in addition to the flowcharts of FIGS.

The road unit 10 is assumed to execute a road unit program by its CPU in accordance with the flowcharts shown in FIGS. Also, card reader 2
0, the CPU 23 sends the I
With the insertion of the C card 30 as described later, the execution of the IC card program is started according to the flowchart shown in FIG. When the vehicle reaches the vicinity of the on-road unit 10, the CPU 23 of the card reader 20 starts execution of the card reader program according to the flowcharts of FIGS. .

In this state, the driver of the vehicle inserts the IC card 30 into the card reader 20 as shown in FIG. Then, the CPU 23
Via the I / F 21 and the switching circuit 22, the execution of the IC card program is started in accordance with the flowchart of FIG. 4, and in step 50, YES is determined based on the insertion of the IC card 30, and in step 51, the communication line is determined. L, the IC card 30 via the switching circuit 22 and the I / F 21
Send the initial command to.

Accordingly, when the IC card 30 responds to the initial command, the CPU 23 determines YES in step 60, and confirms a corresponding application of the IC card 30 in step 61. Specifically, the CPU 23 receives the ID (application number) of the corresponding application from the IC card 30 via the I / F 21 and the switching circuit 22. If the determination in step 60 is NO, a card error display process is performed in step 62 indicating that the IC card is different, and a message to that effect is displayed on the display 29.

Next, at step 70, the CPU 23
Retrieves from the corresponding application list whether the application from the IC card 30 can be supported. Note that an initialization processing program for this search is stored in the memory 26 in advance. If there is a corresponding application, the determination in step 70 is YES. Accordingly, the CPU 23 proceeds to step 7
1, the SAM corresponding to each corresponding application
24 and 25 are selected to instruct security processing. For this reason, the SAMs 24 and 25 perform authentication of the IC card 30 (exchange of encrypted data, function check, prevention of fraud).
I do. If the determination in step 70 is NO, in step 72, the CPU 23 performs a card error display process indicating that the corresponding application cannot be handled, and displays this on the display 29.

If the security process in step 71 is not completed, the CPU 23 determines NO in step 80, and performs a process of displaying the destruction of the IC card 30 in step 82. It is displayed on the display 29. If the determination in step 80 is YES, the CPU 23 proceeds to step 81 where the IC card 30
Are stored in the memories of the SAMs 24 and 25, and a standby mode process is performed in step 83.

Thereafter, the roadside machine 10 transmits the communication frame to the FCM in step 100 of the flowchart of FIG.
C, the card reader 20 receives the signal from the antenna 2
9, the communication frame of the road device 10 is received. As described above, when the processing in step 110 is completed, the received communication frame is input to the CPU 23 through the communication circuit 28 in step 200 in FIG. Then
In step 210, the CPU 23 checks the application in the communication frame.

Thereafter, at step 220, the CPU
23 checks whether the corresponding application is in the memory 26. Here, when there is no corresponding application, the determination in step 220 is NO, and the CPU 23 performs a process of not transmitting a response signal in step 221 so that the card reader 20 does not communicate with the roadside device 10. For this reason, the card reader 20 does not transmit a response signal to the road device 10.

If there is a corresponding application, the determination in step 220 is YES, and the CPU 23
Selects the corresponding application from the data stored in the memory 26 in step 222. And the CPU 23
Transmits the corresponding application (see FIG. 9) using the ACTS in the communication circuit 28 and the antenna 2 in step 223.
Return to the road machine 10 through 9.

In accordance with this, the on-road unit 10 executes step 11
At 0, it is determined whether there is a response to ACTC. At this stage, since the corresponding application has been transmitted from the card reader 20, the roadside device 10 determines in step 111 that the ID of the card reader 20 (hereinafter, card reader I
D), and received card reader ID
In step 112, communication timing is assigned to the timing (MDSC position) and application to be responded to each time.

Accordingly, the roadside device 10 transmits the next communication frame through the FCMC at step 120 at the allocated timing. When the card reader 20 receives the next communication frame from the roadside device 10 via the antenna 29, the CPU 23 inputs this received communication frame through the communication circuit 28 in step 230. Then, in step 231, the CPU 23 reads from the FCMC of the next communication frame as to when to communicate with the on-road device 10, and prepares for communication. That is, the CPU 23 converts the SAM corresponding to the application in the next communication frame into the SAM 24,
25, and necessary communication data is set to prepare for communication.

After the transmission of the next communication frame in step 120, the roadside device 10 executes step 121.
, An application and a SAM of a road device corresponding to the application are set for each MDS, and security data is prepared. Thereafter, in step 130, the roadside device 10 transmits the next communication frame in the MDSC.

In response to this, when the card reader 20 receives the next communication frame via the antenna 29,
This communication frame is transmitted to the CPU 23 through the communication circuit 28.
Is input to Then, the CPU 23 proceeds to step 240
In, it is determined whether or not a communication frame from the road device 10 via the MDSC is received. At this stage, since the communication frame has already been received, step 2 is executed.
The determination at 40 is YES. Then, the CPU 23
Transmits the data prepared in the MDSC as a response signal to the roadside device 10 through the communication circuit 28 and the antenna 29.

In step 140, the roadside device 10 determines whether there is a response to the reception of the communication frame from the card reader 20. At this stage, since the response signal from the card reader 20 has been transmitted, the determination in step 140 is YES. If the determination in step 140 is NO, the roadside device 10 retransmits the communication frame in step 130 to the card reader 20 using MDSC in step 141, and then performs steps 120 to 1
Step 40 is repeated. Here, in the card reader 20, the processing based on the retransmission is performed by the CPU 23 as the determination in step 240.

As described above, when the process of step 241 is completed in the card reader 20, the CPU 23 performs security processing on the data received from the road device 10 in step 242, and prepares for transmission to the next road device. Do
In the next step 243, a security check is performed. Here, if the security is normal, the CPU 2
3 is YES in step 250, and proceeds to subsequent processing.

On the other hand, if the result of the determination in step 250 is YES in the roadside machine 10 as described above, the roadside machine 10 performs security processing of the received data in step 142, and performs a security check in step 143. . If the security is normal, the roadside device 10 determines YES in step 150 and proceeds to the subsequent processing. If the determination in step 150 is NO, this result is stored in step 151
And the process of step 120 is performed again.

As described above, in the card reader 20, the CPU 23 determines YES in step 250, and the roadside machine 10 determines YES in step 150, so that the security of both the card reader 20 and the roadside machine 10 is determined. Are determined to be normal, the on-road
0 and the card reader 20 perform the following communication processing.

That is, the processing of steps 160 to 163 by the roadside machine 10 and the CPU of the card reader 20
23, steps 260 to 263 are repeated, and data transmission and reception between the roadside device 10 and the card reader 20 are repeated. Here, the roadside machine 10 performs step 1
In step 60, the communication frame is transmitted by FCMC, and MDS is set in step 261.
Prepare data in 2.

On the other hand, the card reader 20 proceeds to step 16
When the communication frame transmitted at 0 is received by the antenna 29, the received communication frame is input to the CPU 23 at step 260. Then, the CPU 23 sets MDS in step 261 and prepares data in step 162. When the above processing is performed, the transmission / reception processing in both steps 163 and 263 provides
Transmission and reception between the roadside device 10 and the card reader 20 are performed.

In such a state, the on-road unit 10
In step 171, when the communication completion notification is transmitted, the CP
U23 receives the communication completion notification through the antenna 29 and the communication circuit 28 in step 270,
Outputs communication completion response. Along with this, card reader 2
0 transmits the communication completion response to the road device 10 through the communication circuit 28 and the antenna 29.

As a result, the on-road unit 10 executes step 17
At 1, the communication completion is determined by receiving the communication completion response, and transmitted to the card reader 20 to that effect. For this reason, the card reader 20 sends the communication completion confirmation from the roadside device 10 to the CPU 23 in step 271 by the CPU 23.
Performs communication termination processing. As described above, even if the IC card 30 has both applications, the card reader 20 performs the subsequent processing after confirming the normal security of the application.

This means that even if the card reader 20 is single, the subsequent processing can be safely performed while the security of each application of the IC card 30 is normally secured. The communication between the roadside device 10 and the card reader 20 is performed after the card reader 20 confirms the normal security of the application.
Therefore, the IC card 30 has both applications,
Even when the card reader 20 is single, communication between the roadside device 10 and the card reader 20 can be performed normally.

In practicing the present invention, the IC card 30 does not have a plurality of applications. For example, even if a plurality of IC cards each having a different application are used instead of the IC card 30, The same operation and effect as the embodiment can be achieved. Further, in the embodiment of the present invention, the applications of the IC card 30 and the number thereof are not limited to those described in the above-described embodiment and may be appropriately changed and implemented.

[Brief description of the drawings]

FIG. 1 is a schematic overall configuration diagram showing an embodiment of the present invention.

FIG. 2 is a front part of a flowchart showing a process of the roadside machine 10 of FIG. 1;

FIG. 3 is a second half of a flowchart showing processing of the roadside machine 10 of FIG. 1;

FIG. 4 is a flowchart showing a card program executed by a CPU of the card reader of FIG. 1;

FIG. 5 is a first part of a flowchart showing a card reader program executed by the CPU of the card reader of FIG. 1;

FIG. 6 is a latter part of a flowchart showing a card reader program executed by the CPU of the card reader of FIG. 1;

[FIG. 7] The roadside machine sends an application ID to the card reader.
FIG. 3 is a diagram showing a configuration of a communication frame used to transmit a communication, a configuration of an FCMC in the communication frame, and an example of application allocation.

FIG. 8 is a diagram showing an outline of communication between a roadside device and a card reader.

FIG. 9 is a diagram showing a case where the card reader reads AC
It is a figure showing the data returned to TS.

[Explanation of symbols]

10 ... road machine, 30 ... IC card, 23 ... CPU, 2
4, 25 ... SAM.

Claims (3)

[Claims] 1. A card system which is mounted on a vehicle so as to communicate with a road machine (10) and includes a card reader (20) and at least first and second use IC cards (30). An initial command output unit (50, 51) for inserting the IC card and outputting an initial command to the IC card;
When the IC card receives the initial command and returns first or second use verification data for performing authentication of the IC card according to the first or second use to the card reader. And security checking means (23, 24, 60, 61, 70, 71) for checking the first or second security using the use collation data. A vehicular card system for performing subsequent processing after IC card authentication. 2. A card reader mounted on a vehicle so as to communicate with a road machine, and at least a first and a second card reader.
A card system including each IC card for each use of the first and second applications, wherein the card reader performs first and second authentication of the corresponding IC card according to each of the first and second uses. Security confirmation means (23, 2
4, 60, 61, 70, 71) and an initial command output means (5) into which any of the IC cards is inserted to output an initial command to the IC card.
0, 51), when the IC card receives the initial command and returns application collation data for authenticating the IC card according to the application to the card reader, the application collation data is used. Security checking means (23, 24, 60, 61, 70, 7)
The vehicle card system according to 1), wherein after the IC card is authenticated by the security confirmation of the security confirmation means, subsequent processing is performed. 3. When the roadside device starts communication with the card reader, the roadside device transmits application verification data to the card reader, and the card reader can specify the application verification data based on the application verification data from the roadside device. Response means (220) for responding to the start of communication with the on-road device when it has application data
The vehicle card system according to claim 1 or 2, further comprising: