JP4720143B2 - Cardless ETC in-vehicle device and in-vehicle system - Google Patents

Description

  The present invention relates to a cardless ETC vehicle-mounted device and a vehicle-mounted system that are mounted on a vehicle side and communicate with a roadside antenna installed on a roadside for toll collection.

2. Description of the Related Art Conventionally, an ETC ( ETC is a registered trademark ) system has been put to practical use as a toll collection device that realizes toll collection by wireless communication for the purpose of reducing traffic congestion at toll gates on toll roads.

  This ETC system performs wireless communication between a roadside antenna installed at a toll booth and an ETC on-board unit mounted on a vehicle, and identifies a vehicle based on wireless communication information and collects a toll fee. It has become. For this reason, the passing vehicle does not need to be temporarily stopped at the toll gate, and can pass through the toll gate without cash.

  Such an ETC vehicle-mounted device is normally provided with an ETC card insertion slot, and is configured such that an ETC card equipped with an IC chip storing information necessary for toll collection is inserted into the ETC card insertion slot. .

In addition, as an in-vehicle device that performs processing for toll collection using an ETC card, for example, an on-board device that has an immobilizer (anti-theft) function and that can control engine start using an ETC card has been proposed. (For example, refer to Patent Document 1).
JP 2000-211142 A

  However, in the configuration in which processing for toll collection is performed using the ETC card as described above, when the user leaves the vehicle, it is necessary to remove the ETC card from the ETC on-board device and carry it around to prevent theft.

  Therefore, a cardless type ETC on-board unit that eliminates the need for an ETC card by storing information necessary for toll collection stored in the IC chip of the ETC card in the internal memory of the ETC on-board unit is conceivable. Since such a cardless ETC on-board device does not need to be provided with an ETC card insertion slot, for example, even if it is used in an environment exposed to wind and rain such as a two-wheeled vehicle, dust and moisture will be generated from the ETC card insertion slot. There is no worry that it will break into the OBE and cause a failure.

  However, since such a cardless ETC on-board device needs to store information necessary for toll collection in the internal memory of the ETC on-board device, prevention of unauthorized use assuming a case where the cardless ETC on-board device is stolen. Countermeasures are important.

  The present invention has been made in view of the above points, and an object thereof is to prevent unauthorized use when a cardless ETC in-vehicle device is stolen.

In order to achieve the above object, according to the first aspect of the present invention, a roadside antenna mounted on the vehicle side and installed on the roadside based on information required for toll collection stored in the storage means and for toll collection. A cardless ETC vehicle-mounted device that performs communication, authenticates the immobilizer key based on identification information transmitted from the immobilizer key, and communicates with an immobilizer control device attached to the vehicle, via the communication unit When it is notified from the immobilizer control device that the immobilizer key has been authenticated , and the mutual authentication for mutually authenticating that the cardless ETC in-vehicle device and the immobilizer control device are not unauthorized is successfully completed Communication with roadside antennas installed on the roadside based on the information necessary for toll collection is possible Is characterized by comprising control means for transition to a standby state, the.

In this way, the control means is notified that the immobilizer key has been authenticated from the immobilizer control device via the communication means , and mutual authentication is performed to mutually authenticate that the cardless ETC on-board unit and the immobilizer control device are not unauthorized. When it is completed normally, it transitions to a standby state in which communication for toll collection is possible with the roadside antenna installed on the roadside based on information necessary for toll collection stored in the storage means. Even if the less ETC on-vehicle device is stolen, the immobilizer control device is not notified that the immobilizer control device has authenticated the immobilizer key from the immobilizer control device simply by being attached to another vehicle. do not do. As a result, the control means does not perform processing for toll collection, and can prevent unauthorized use when the cardless ETC in-vehicle device is stolen.

  Further, as in the second aspect of the invention, since the control means authenticates whether the immobilizer control device is a regular immobilizer control device via the communication means, for example, an external device is connected to the communication means. Then, even if trying to notify that the immobilizer key has been authenticated by an unauthorized operation from this external device, the control means does not authenticate the external device as a legitimate immobilizer control device, so the external device has authenticated the immobilizer key to the control means. It is difficult to notify.

  According to a third aspect of the present invention, the control means generates a random number, transmits the random number to the immobilizer control device via the communication means, and performs predetermined processing on the random number using the first key for authentication. And receiving information that has been subjected to predetermined processing using the second key that is paired with the first key by the immobilizer control device via the communication means, and using the second key for the random number. The immobilizer control device authenticates whether or not the immobilizer control device is a regular immobilizer control device based on the information on the predetermined processing and the information on the random number subjected to the predetermined processing using the first key. Yes.

  In this way, the control means generates a random number and authenticates whether the immobilizer control device is a regular immobilizer control device, so accidentally authenticating an external device as a regular immobilizer control device Even if it exists, the external device is not repeatedly authenticated as a regular immobilizer control device.

  Further, as in the invention described in claim 4, since the control means outputs a signal for notifying the operation state via the communication means to the immobilizer control device, an interface for newly notifying the operation state is provided. Without providing, it is possible to display the operation state of the cardless ETC on-board device in a place other than the cardless ETC on-board device, for example, a meter assembly.

The invention according to claim 5 is characterized in that the communication means performs wireless communication with the immobilizer control device.
In the invention according to claim 6, the immobilizer control device determines whether or not the first identification information stored in the immobilizer control device matches the second identification information transmitted from the immobilizer key. It is characterized by authenticating the immobilizer key by determining.
In the invention according to claim 7, the immobilizer control device generates a random number, and the control means receives the random number generated by the immobilizer control device via the communication means, and the communication means Information obtained by performing predetermined processing on the random number received via the first key using the first key is transmitted to the immobilizer control device via the communication means.
In the invention according to claim 8 , the immobilizer control device that is attached to the vehicle and authenticates the immobilizer key based on the identification information transmitted from the immobilizer key, and the information necessary for toll collection stored in the storage means A vehicle-less system including a roadside antenna installed on the roadside and a cardless ETC vehicle-mounted device that performs communication for toll collection, and the immobilizer control device authenticates the immobilizer key, Mutual authentication to mutually authenticate that the cardless ETC in-vehicle device and the immobilizer control device are not unauthorized with the device, and the cardless ETC on-vehicle device has successfully completed mutual authentication with the immobilizer control device In this case, it is characterized by a transition to a standby state in which communication for toll collection with the roadside antenna is possible. .

In this way, when the immobilizer control device authenticates the immobilizer key, the immobilizer control device starts mutual authentication to mutually authenticate that the cardless ETC on-board device and the immobilizer control device are not illegal with the cardless ETC on-vehicle device , When the mutual authentication with the immobilizer control device is successfully completed, the less ETC OBE shifts to a standby state in which communication for roadside antenna and toll collection is possible, so the cardless ETC OBE has been stolen It is possible to prevent unauthorized use.

  FIG. 1 shows an overall block configuration of a cardless ETC vehicle-mounted device according to an embodiment of the present invention. The cardless ETC vehicle-mounted device 1 is connected by a cable 4 so that it can communicate with an immobilizer 2 as an anti-theft device. When the cardless ETC in-vehicle device 1 is notified from the immobilizer 2 that the immobilizer key has been authenticated, the cardless ETC on-vehicle device 1 transitions to a standby state in which communication for the toll collection with the roadside antenna (ETC communication) is possible. If the immobilizer 2 is not notified that the immobilizer key has been authenticated, the standby state is not changed.

  The cardless ETC vehicle-mounted device 1 includes a human machine interface 11, an immobilizer ECU interface (in the figure, indicated as an immobilizer ECU I / F) 12, an ETC antenna 13, an ETC wireless unit 14, an ETC communication control unit 15, and a control unit 16. The security module 17, the nonvolatile memory 18, and the power supply unit 19 are provided. Each of these blocks 11 to 19 is housed in the same housing.

  The human machine interface 11 includes a display device, a sound output device, and an input device (all not shown). The display device includes an LED indicating normal operation and an LED indicating abnormal operation, and these LEDs are turned on or off according to a signal from the control unit 16. The audio output device is configured by a speaker that generates audio corresponding to a signal from the control unit 16. The input device includes buttons, switches, and the like, and outputs signals based on user operations on these to the control unit 16.

  The immobilizer ECU interface 12 is connected to the immobilizer ECU 23 of the immobilizer 2 by the cable 4 and performs bidirectional communication with the immobilizer ECU 23.

  The ETC antenna 13 transmits and receives radio waves to and from a roadside antenna (not shown) installed on the roadside.

  The ETC radio unit 14 performs amplification, frequency conversion, demodulation, A / D conversion and the like on the signal received by the ETC antenna 13 and outputs the resulting data to the ETC communication control unit 15. The ETC radio unit 14 performs D / A conversion, modulation, frequency conversion, amplification, etc. on the data input from the ETC communication control unit 15, and outputs the resulting signal to the ETC antenna 13.

  The ETC communication control unit 15 outputs the data input from the ETC radio unit 13 to the control unit 16, and outputs the data input from the control unit 16 to the ETC radio unit 14 at a timing according to the DSRC standard. To do.

  The control unit 16 includes a CPU and a RAM (not shown). The CPU reads a program from the nonvolatile memory 18 and exchanges data with the human machine interface 11, the immobilizer ECU interface 12, the ETC communication control unit 15, and the security module 17 as necessary.

  In the security module 17, the control unit 16 encrypts and decrypts data communicated with the roadside antenna via the ETC communication control unit 15, the ETC wireless unit 14, and the ETC antenna 13.

  The nonvolatile memory 18 stores a program for operating the cardless ETC on-vehicle device in advance. Various data such as a communication result of ETC communication is stored in accordance with control from the control unit 16.

  In addition, the non-volatile memory 18 collects charges corresponding to vehicle information such as an automobile registration number, a car name, and a model, an ETC card number, an expiration date, and the like by setup (initial information registration work) before using the ETC on-vehicle device Information necessary for the storage is stored. This setup is performed by wirelessly transmitting setup data (including vehicle information and information necessary for toll collection) from an external device for setup to the ETC antenna 12 of the cardless ETC on-vehicle device 1.

  The power supply unit 19 converts a voltage supplied from the vehicle battery via the accessory switch into a predetermined voltage and supplies the voltage to the blocks 11 to 18.

  In each block described above, the operation of the human machine interface 11, the ETC antenna 13, the ETC radio unit 14, the ETC communication control unit 15, the security module 17 and the power supply unit 19 is provided with an ETC card insertion slot. This is the same as a conventional ETC vehicle-mounted device that inserts an ETC card into the insertion slot.

  The immobilizer 2 includes an immobilizer key 21, a key cylinder 22, and an immobilizer ECU 23.

  The immobilizer key 21 includes a transponder (not shown) in the grip portion. When a radio signal requesting transmission of an ID code is transmitted from the key cylinder 22 to the transponder, an ID code (identification information) uniquely assigned in advance from the transponder is wirelessly transmitted.

  The key cylinder 22 includes a cylinder into which the immobilizer key 21 is inserted, a detection unit that detects the position of the immobilizer key 21 in the cylinder and outputs a signal corresponding to a position such as OFF, accessory, or ON to the immobilizer ECU 23, and the immobilizer ECU 23 In response to the signal from the transmitter / receiver, the transmitter / receiver transmits a radio signal requesting transmission of the ID code to the immobilizer key 21 and receives the ID code transmitted from the immobilizer key 21 and outputs it to the immobilizer ECU 23 (both not shown) ).

  The immobilizer ECU 23 is configured by a normal computer including a CPU (not shown), a memory 23a, and the like. The memory 23a stores a program for operating the immobilizer, an ID code of the regular immobilizer key 21, and the like.

  The CPU of the immobilizer ECU 23 performs various arithmetic processes based on the program read from the memory 23a, and authenticates the immobilizer key 21 using the ID code of the regular immobilizer key 21 stored in the memory 23a.

  Specifically, when a signal indicating that the immobilizer key 21 is in the accessory or ON position is input from the key cylinder 22, a radio signal requesting transmission of the ID code is transmitted from the key cylinder 22 to the immobilizer key 21. In response to this transmission request, the key cylinder 22 is made to receive the ID code transmitted from the immobilizer key 21.

  Then, it is determined whether or not the ID code received by the key cylinder 22 matches the ID code of the regular immobilizer key 21 stored in the memory 23a. If the two match, the immobilizer key 21 is a regular key. A signal indicating that the immobilizer key 21 has been authenticated is output.

  When a signal indicating that the immobilizer key 21 is in the accessory or ON position is output from the key cylinder 22, an accessory switch (not shown) is turned on. When the accessory switch is turned on, the cardless ETC vehicle-mounted device 1 is turned on.

  When a signal indicating that the immobilizer key 21 is on is output from the key cylinder 22 and a signal indicating that the immobilizer key 21 is authenticated is output from the immobilizer ECU 23, an engine ECU (not shown) Start control is performed.

  The indicator 3 displays the operation state (standby state, abnormal state, low battery state) of the cardless ETC on-vehicle device 1 in response to a signal input from the immobilizer ECU 23, and is provided in the meter assembly (ASSY). ing.

  Moreover, in this embodiment, the key for mutual authentication is each memorize | stored in the non-volatile memory 18 of the cardless ETC onboard equipment 1 and the memory 23a of immobilizer ECU23. These keys for mutual authentication are stored as authentication information when the cardless ETC in-vehicle device 1 and the immobilizer 2 are attached to the vehicle. In the present embodiment, these mutual authentication keys are the same target key.

  Next, mutual authentication between the immobilizer ECU 23 of the immobilizer 2 and the control unit 16 of the cardless ETC vehicle-mounted device 1 will be described with reference to FIG. Note that mutual authentication refers to mutually authenticating that the ETC vehicle-mounted device 1 and the immobilizer ECU 23 are legitimate, that is, a non-invalid ETC vehicle-mounted device and immobilizer ECU.

  As described above, when a signal indicating that the immobilizer key 21 is located in the accessory or on state is output from the key cylinder 22, the accessory switch is turned on and the cardless ETC on-vehicle device 1 is turned on. When the immobilizer ECU 23 normally authenticates the immobilizer key 21, the following mutual authentication is started between the immobilizer ECU 23 and the control unit 16 of the cardless ETC vehicle-mounted device 1.

  First, the immobilizer ECU 23 generates a random number 1 (S100), and transmits the generated random number 1 to the control unit 16 (S102). Further, the generated random number 1 is encrypted using the key for mutual authentication stored in the memory 23a of the immobilizer ECU 23 to obtain the encryption AP1 '(S104).

  When the control unit 16 receives the random number 1 via the immobilizer ECU interface 12, the control unit 16 encrypts the received random number 1 using a key stored in the nonvolatile memory 18 (S200), and converts the encrypted encryption AP1 into the immobilizer ECU 23. (S202).

  Next, the immobilizer ECU 23 compares the encryption AP1 received from the control unit 16 with the encryption AP1 ′ encrypted by itself (S106), and if they match, transmits a signal indicating that they match to the control unit 16 (S108).

  Next, when receiving a signal indicating that the two match through the immobilizer ECU interface 12, the control unit 16 generates a random number 2 (S204), and transmits the generated random number 2 to the immobilizer ECU 23 (S206). Further, the generated random number 2 is encrypted using the key for mutual authentication stored in the nonvolatile memory 18 to obtain the encrypted AP 2 '(S208).

  Next, when receiving the random number 2, the immobilizer ECU 23 encrypts the received random number 2 by using the key for mutual authentication stored in the memory 23a of the immobilizer ECU 23 (S110), and the encrypted encryption AP2 is controlled by the control unit. 16 (S112).

  The control unit 16 compares the encrypted AP2 ′ encrypted by itself and the encrypted AP2 encrypted by the immobilizer ECU 23 (S210), and if both match, transmits a signal indicating that both match to the control unit 16. (S212).

  As described above, the control unit 16 receives a signal indicating that the encryption AP1 and the encryption AP1 ′ match from the immobilizer ECU 23 (S108), and when the encryption AP2 ′ and the encryption AP2 match (S210), the immobilizer It determines with the authentication of ECU23 having been normally completed. As a result of successful completion of the authentication, the immobilizer ECU 23 is notified that the immobilizer key 21 has been authenticated, and transitions to a standby state in which communication for toll collection (ETC communication) can be performed with the roadside antenna. (S214). Then, when the vehicle passes through an ETC gate or the like such as a toll gate, communication for toll collection is performed with a roadside antenna installed in the ETC gate.

  Note that when the authentication of the immobilizer ECU 23 is normally completed in S214, the control unit 16 can immediately communicate with the immobilizer ECU 23 via the immobilizer ECU interface 12.

  On the other hand, the immobilizer ECU 23 receives a signal indicating that the encryption AP1 and the encryption AP1 ′ received from the control unit 16 match (S106) and that the encryption AP2 ′ and the encryption AP2 match from the control unit 16 (S212). ), It is determined that the authentication is normally completed, and a signal for causing the indicator 3 to display the standby state as a lamp is output to the immobilizer ECU 23. In addition, when the operation of the cardless ETC vehicle-mounted device 1 becomes an abnormal state, the control unit 16 outputs a signal for causing the indicator 3 to display the abnormal state with a lamp to the immobilizer ECU 23. The immobilizer ECU 23 causes the indicator 3 to display a standby state and an abnormal state with a lamp in accordance with a signal input from the control unit 16.

  As described above, when the immobilizer ECU 23 authenticates the immobilizer key 21, authentication is started between the immobilizer ECU 23 and the control unit 16 of the cardless ETC in-vehicle device 1, and the control unit 16 has successfully completed this authentication. As a result, the immobilizer ECU 23 is notified that the immobilizer key 21 has been authenticated, and transitions to a standby state in which communication for toll collection with the roadside antenna is possible.

  Therefore, for example, even if the cardless ETC in-vehicle device 1 is stolen, the controller 16 is not informed that the immobilizer ECU 23 has authenticated the immobilizer key 21 simply by being attached to another vehicle. Does not transition to a state. As a result, the control unit 16 does not perform processing for toll collection, and can prevent unauthorized use even when the cardless ETC in-vehicle device is stolen.

  Further, since the control unit 16 authenticates whether the immobilizer ECU 23 is a regular immobilizer ECU via the immobilizer ECU interface 12, for example, an external device is connected to the immobilizer ECU interface 12, and control is performed from the external device. Even if the controller 16 does not authenticate the external device as a legitimate immobilizer ECU even if it tries to notify the unit 16 that the immobilizer key has been authenticated by an unauthorized operation, the external device has authenticated the immobilizer key to the controller 16 by an unauthorized operation. It is difficult to notify.

  Further, as described above, by performing mutual authentication between the control unit 16 and the immobilizer ECU 23, not only can the security of communication between the control unit 16 and the immobilizer ECU 23 be improved, but also the illegality of the indicator 3 It is also possible to prevent control.

  Further, the control unit 16 generates a random number, transmits the random number to the immobilizer ECU 23 via the immobilizer ECU interface 12, and encrypts the random number by using a key for authentication to obtain the encryption AP2 ′, thereby immobilizing the ECU interface. When the encryption AP2 encrypted by the immobilizer ECU 23 using a key for authentication is received via 12 and the encryption AP2 ′ matches the encryption AP2, the immobilizer ECU 23 authenticates that it is a legitimate immobilizer ECU. .

  In this way, the control unit 16 generates a random number and authenticates that the immobilizer ECU 23 is a legitimate immobilizer ECU. Therefore, the control unit 16 tries to notify the control unit 16 that the immobilizer key has been authenticated by an unauthorized operation. In this case, the controller 16 accidentally authenticates the external device as a regular immobilizer ECU, but does not repeatedly authenticate the external device as a regular immobilizer ECU.

  Further, since the control unit 16 outputs a signal for notifying the operation state to the immobilizer ECU 23 via the immobilizer ECU interface 12, the cardless ETC in-vehicle device can be provided without newly providing an interface for notifying the operation state. It is possible to display the operation state of the cardless ETC in-vehicle device in a place other than the above, for example, a meter assembly. In this case, since the user can confirm the operation state of the cardless ETC on-vehicle device 1 with the indicator 3 provided on the meter assembly, for example, the cardless ETC on-vehicle device in a place that cannot be visually recognized by the user such as in a console box. 1 can be installed, and the selection range of the installation location of the cardless ETC vehicle-mounted device 1 can be expanded.

  In the above embodiment, the non-volatile memory 18 corresponds to storage means for storing information necessary for toll collection, the immobilizer ECU interface 12 corresponds to communication means for communicating with the immobilizer control device, and the immobilizer ECU 23 receives the immobilizer key. It corresponds to an immobilizer control device for authentication, and the control unit 16 corresponds to control means for performing communication for toll collection with the roadside antenna.

  In addition, this invention is not limited to the said embodiment, Based on the meaning of this invention, it can implement with a various form.

  For example, in the above-described embodiment, when the immobilizer ECU 23 authenticates the immobilizer key 21, mutual authentication is started between the immobilizer ECU 23 and the control unit 16 of the cardless ETC onboard device 1, and the control unit 16 performs the mutual authentication. As an example in which the immobilizer ECU 23 has been notified that the immobilizer key 21 has been authenticated as a result of normal completion, an example of transition to a standby state in which communication for toll collection with the roadside antenna is possible has been shown. After the authentication is normally completed, a signal instructing the transition to the standby state may be transmitted from the immobilizer ECU 23 to the control unit 16.

  In the above-described embodiment, the example in which the key for mutual authentication stored in the nonvolatile memory 18 and the key for mutual authentication stored in the memory 23a of the immobilizer ECU 23 form a target key is shown. And an asymmetric key using a public key paired with the secret key.

  In this case, for example, the secret key may be stored in the memory 23 a of the immobilizer ECU 23, and the public key that is paired with the secret key may be stored in the nonvolatile memory 18. Then, the control unit 16 generates a random number, transmits the random number to the immobilizer ECU 23 via the immobilizer ECU interface 12, and the random number is encrypted by the immobilizer ECU 23 using the secret key via the immobilizer ECU interface 12. The information is received, the received encrypted information is decrypted using the public key stored in the nonvolatile memory 18, and the immobilizer ECU 23 is authorized based on whether or not the generated random number matches the decrypted information. What is necessary is just to authenticate whether it is an immobilizer ECU.

  Moreover, although the immobilizer in the said embodiment showed the example using the type which inserts the immobilizer key 21 in a cylinder as the key cylinder 22, for example, without providing a cylinder, the immobilizer key 21 of the place from the distant place was shown. A so-called key-free type that transmits an ID code may be used.

  Moreover, although the example which performs communication between immobilizer ECU23 of the immobilizer 2 and the immobilizer ECU interface 12 of the cardless ETC onboard equipment 1 was shown in the said embodiment, you may perform wirelessly.

  Moreover, although the power supply part 18 in the said embodiment showed the example which converts the voltage supplied from the battery of a vehicle into a predetermined voltage, and supplies it to each block 11-18, for example, cardless ETC onboard equipment 1 A battery may be provided inside and a voltage may be supplied to each of the blocks 11 to 18 using this battery. In this case, a voltage detection circuit for detecting a low voltage abnormality may be provided when the battery voltage becomes lower than the reference value, and a signal detected by the voltage detection circuit may be transmitted to the immobilizer ECU 23. The immobilizer ECU 23 can cause the indicator 3 provided in the meter assembly to display the low battery state in a lamp in response to this signal.

  Moreover, although the example which provided the ETC antenna 13 in the housing | casing of the cardless ETC onboard equipment 1 was shown in the said embodiment, as a structure which provided the ETC antenna 13 separately from the main body of the cardless ETC onboard equipment 1 Good.

  Moreover, in the said embodiment, when the cardless ETC onboard equipment 1 communicates with the immobilizer 2 and is notified that the immobilizer key was authenticated from the immobilizer 2, the example which transfers to the standby state in which communication with a roadside antenna is possible. Although shown, you may comprise as a vehicle-mounted system provided with the cardless ETC vehicle-mounted device 1 and the immobilizer 2.

It is a figure which shows the whole block structure of the cardless ETC onboard equipment which concerns on one Embodiment of this invention. It is a sequence diagram about mutual authentication between the control unit of the cardless ETC on-vehicle device and the immobilizer ECU of the immobilizer.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... ETC onboard equipment, 2 ... Immobilizer, 3 ... Indicator, 4 ... Cable,
11 ... Human machine interface,
12 ... Immobilizer ECU interface, 13 ... ETC antenna,
14 ... ETC radio unit, 15 ... ETC communication control unit, 16 ... control unit,
17 ... Security module, 18 ... Non-volatile memory, 19 ... Power supply unit,
21 ... Key cylinder, 22 ... Immobilizer ECU, 23 ... Immobilizer key.

Claims (8)

A cardless ETC in-vehicle device that is mounted on a vehicle side and performs communication for toll collection with a roadside antenna installed on the roadside based on information necessary for toll collection stored in a storage means,
Communication means for authenticating the immobilizer key based on identification information transmitted from the immobilizer key and communicating with an immobilizer control device attached to the vehicle;
It is notified that the immobilizer key has been authenticated from the immobilizer control device via the communication means, and mutual authentication for mutually authenticating that the cardless ETC in-vehicle device and the immobilizer control device are not unauthorized is normally completed. And a control means for making a transition to a standby state in which communication for toll collection is possible and a roadside antenna installed on the roadside based on the information necessary for toll collection stored in the storage means. A cardless ETC in-vehicle device.   The cardless ETC on-board device according to claim 1, wherein the control unit authenticates whether the immobilizer control device is a regular immobilizer control device via the communication unit.   The control unit generates a random number, transmits the random number to the immobilizer control device via the communication unit, and performs a predetermined process on the random number using a first key for authentication, and the communication unit The immobilizer control device receives information obtained by performing predetermined processing on the random number using the second key paired with the first key, and using the second key for the random number. Authenticating whether the immobilizer control device is a regular immobilizer control device based on information that has been subjected to predetermined processing and information that has been subjected to predetermined processing using the first key for the random number The cardless ETC vehicle-mounted device according to claim 1 or 2.   The cardless ETC vehicle-mounted device according to any one of claims 1 to 3, wherein the control means outputs a signal for notifying an operation state via the communication means to the immobilizer control device. .   The cardless ETC in-vehicle device according to any one of claims 1 to 4, wherein the communication unit performs wireless communication with the immobilizer control device.   The immobilizer control device determines whether the first identification information stored in the immobilizer control device matches the second identification information transmitted from the immobilizer key, thereby determining the immobilizer key. The cardless ETC in-vehicle device according to any one of claims 1 to 4, wherein authentication is performed. The immobilizer control device generates a random number,
The control means receives the random number generated by the immobilizer control device via the communication means, and information obtained by performing a predetermined process on the random number received via the communication means using the first key The cardless ETC vehicle-mounted device according to any one of claims 1 to 6, wherein the device is transmitted to the immobilizer control device via the communication unit. An immobilizer control device that is attached to a vehicle and authenticates the immobilizer key based on identification information transmitted from the immobilizer key, and a roadside antenna that is installed on the roadside based on information required for toll collection stored in the storage means An in-vehicle system comprising a cardless ETC in-vehicle device that performs communication for toll collection,
When the immobilizer control device authenticates the immobilizer key, the cardless ETC on-vehicle device and the immobilizer control device start mutual authentication to mutually authenticate that the cardless ETC on-vehicle device and the immobilizer control device are not illegal.
The cardless ETC vehicle-mounted device transits to a standby state in which communication for toll collection with the roadside antenna is possible when the mutual authentication with the immobilizer control device is normally completed. system.

Images