JP2018160821A - Utilization-of-service authentication system and utilization-of-service authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To make it difficult to illegally use a service even when eavesdropping / reuse is carried out. According to the embodiment, a service composed of an authentication server, a service providing device, and an in-vehicle communication device, and certifying the availability of the service for each vehicle equipped with the in-vehicle communication device at the start of service provision. A usage authentication system is provided. The in-vehicle communication device requests the authentication server the information necessary for authentication and the service connection information by using the mobile communication means based on the specific position passage information indicating the vehicle position or time or the passage of the specific position. It controls the acquisition timing and sends the acquired service connection information and the information required for authentication to the service providing device. The service providing device controls the communication connection with the in-vehicle communication device that is the service providing partner by using the received service connection information, and transmits the information required for authentication received from the in-vehicle communication device to the authentication server. Then, the expiration date of the information required for authentication will be obtained and the availability of the target service will be determined. [Selection diagram] Fig. 1

Description

  Embodiments described herein relate generally to a service use authentication system and a service use authentication method.

  Considering a system that provides services for vehicles, for example, there are parking lot services, electric vehicle (EV) charging services, and the like.

  If you consider a garage with a door at home, if you have common information such as a PIN number between the garage side and the portable device that sends the release signal, There is something to make it work. Some use biometric authentication.

  When considering an EV charging device, as a means for preventing unauthorized use, there is a system that obtains information on a portable device held by a user in advance and determines that the user is properly used by confirming the presence of the authorized user. Moreover, although it differs from the door opening / closing of a garage, there exists what controls an indoor household appliance apparatus based on the positional information on a vehicle.

  Even if measures such as encryption of communication are implemented, unauthorized use is facilitated by inexpensive devices due to technological advancement and price reduction, and a more advanced fraud prevention mechanism is required.

Japanese Patent No. 2699908 Japanese Patent No. 3537111 Japanese Patent No. 3989159 Japanese Patent No. 3518498 Japanese Patent No. 4480382 Japanese Patent No. 5268549

“This Hacker ’s Tiny Device Unlocks Cars And Opens Garages (2015/08/06 WIRED)”, March 13, 2017 search, Internet <URL: https://www.wired.com/2015/08/hackerstinydeviceunlockscarsopensgarages/>

  Consider a rental car service or a vehicle sharing service that is provided to an arbitrary user and is composed of a combination of a plurality of vehicles and a plurality of facilities.

  As described above, in the conventional technique, specific information is shared in advance between the mobile device on the vehicle side and the mechanism for providing the service, and whether or not the service can be provided is determined based on the agreement.

  This is useful for facilities belonging to individuals such as homes, but it is composed of multiple service provision environments, such as parking lots for facilities, etc. Is unsuitable, especially when the information sharing operation described above is performed every time the use is started, which takes a lot of time and burden on the user. In addition, in the case of sharing information that is fixed or easily available, such as access point names necessary for communication, and communication key information, unauthorized use is facilitated due to leakage of the shared information itself.

  In addition, when assuming a vehicle sharing service composed of EV vehicles and an EV vehicle sharing service consisting of EV charger networks that provide preferential charging installed at a plurality of locations, sharing is not possible for fixed information sharing. Unauthorized use is facilitated by leakage of information itself.

  In addition, confirmation of the presence of a user using a mobile device is ineffective in preventing unauthorized use such as theft of the mobile device and charging by a user other than the target vehicle. Execution of charging to a non-target vehicle is a major problem when it is desired to set the cost required for charging, such as the EV charger usage fee, the amount of charge power, etc., as a vehicle sharing service at a reasonable price.

  Further, directly controlling the implementation of service provision, rather than determining whether or not to provide service based on vehicle position information, has no effect on preventing unauthorized use when a service such as that described above is assumed.

  For this reason, it is desired not only to protect communication by encryption, but also to realize a mechanism that makes unauthorized use of services difficult even when wiretapping / reuse is performed.

  The problem to be solved by the invention is to provide a service use authentication system and a service use authentication method capable of making unauthorized use of services difficult even when wiretapping / reuse is performed.

  The service use authentication system according to the embodiment includes an authentication server, a service providing device that can communicate with the authentication server, and an in-vehicle communication device that includes mobile communication means. In the service use authentication system that authenticates whether or not the service can be used on a vehicle-by-vehicle basis, the in-vehicle communication device is connected to the authentication server based on the vehicle location or time or specific location passage information indicating passage of the specific location. In contrast, the information required for authentication and the service connection information are requested and acquired using the mobile communication means, and the acquired service connection information and the information required for authentication are stored, and the stored service is stored. Means for transmitting connection information and information necessary for authentication to the service providing device, the service providing device from the authentication server; The service connection information received is stored, the communication connection with the in-vehicle communication device that is the service providing partner is controlled using the service connection information, and the authentication server receives the information necessary for authentication received from the in-vehicle communication device. By transmitting to the server, the means for obtaining the expiration date of the information necessary for authentication and determining whether to provide the target service, the authentication server, in response to a request from the in-vehicle communication device, Service connection information is created, the service connection information is transmitted to the in-vehicle communication device and also to the service providing device, information necessary for authentication is created, and the information necessary for the authentication is transmitted to the in-vehicle communication device. And the validity of the information necessary for authentication received from the service providing device, and the verification result and information indicating the expiration date are sent to the service offer. It is obtained and means for transmitting to the device.

The block diagram which shows the structure of the service use authentication system which concerns on embodiment. The flowchart which shows operation | movement of the service use authentication system whole. The figure which shows the structure of each function of the server 1 for authentication, the service provision apparatus 2, and the vehicle-mounted communication apparatus 3. FIG. 6 is a flowchart showing operations of an authentication information generation processing unit 11, a service information transmission processing unit 12, and an authentication information transmission processing unit 13 of the authentication server 1. The figure which shows the data structure of service information. The figure which shows the data structure of service connection information. The figure which shows the data structure of the information for authentication. The figure which shows the data structure of the information for authentication for preservation | save. The flowchart which shows operation | movement of the information transmission process part 33 for authentication of the vehicle-mounted communication apparatus 3. FIG. 6 is a flowchart showing the operation of the authentication information reception processing unit 23 of the service providing device 2; The flowchart which shows the first half of operation | movement of the service availability judgment processing part 14 of the server 1 for authentication. 7 is a flowchart showing the second half of the operation of the service availability determination processing unit 14 of the authentication server 1. FIG. 3 is a diagram illustrating a service form according to the first embodiment.

Hereinafter, embodiments will be described with reference to the drawings.
(Outline of the embodiment)
In this embodiment, the vehicle itself, not the mobile device, serves as a provider of information for determining whether or not the service can be provided, thereby preventing the theft of the mobile device and unauthorized use of the user other than the target vehicle. Avoid situations where service is lost due to loss.

  The information necessary for determining whether or not to provide a service is, for example, disposable, so that unauthorized use is difficult even if communication contents are leaked.

  In addition, by providing information to determine whether service provision is possible or not based on the location information of the facility / location where the service is provided and the vehicle to the vehicle according to the service enjoyment, it is possible to provide services that exist in unspecified locations. While responding flexibly, set an expiration date for information used to determine whether to provide service, and shorten the expiration date in conjunction with information distribution based on the above location information, for example, in cooperation with opening and closing gates to enter parking lots, etc. By doing so, the impact at the time of information leakage is limited.

  In addition, by making it possible to distribute information for determining whether or not to provide a service in advance via mobile communication, the information can be used even in a basement where mobile communication cannot be used.

(System configuration)
FIG. 1 is a block diagram illustrating a configuration of a service use authentication system according to the embodiment.

  The service use authentication system according to this embodiment is a system that authenticates service availability in units of vehicles equipped with in-vehicle communication devices at the start of service provision, and includes an authentication server 1, a service providing device 2, and in-vehicle communication. The device 3 is configured. The service providing device 2 is installed in the service providing facility 20. The in-vehicle communication device 3 is installed in a moving body such as an automobile.

  For example, mobile communication is applied to the communication between the in-vehicle communication device 3 and the authentication server 1. For example, near field communication is applied to the communication between the in-vehicle communication device 3 and the service providing device 2. For communication between the authentication server 1 and the service providing device 2, for example, wired communication such as the Internet or wireless communication is applied.

  The authentication server 1 creates service connection information in response to a request from the in-vehicle communication device 3, transmits the service connection information to the in-vehicle communication device 3 and also transmits it to the service providing device 2, and is further required for authentication. To verify and verify the validity of the information required for authentication received from the service providing device 2 and the function to transmit the information required for authentication to the in-vehicle communication device 3 And a function of transmitting information indicating a time limit to the service providing device 2.

  The service providing device 2 stores the service connection information received from the authentication server 1, uses the service connection information to control communication connection with the in-vehicle communication device 3 that is a service providing partner, and the in-vehicle communication device 3. By transmitting the information required for authentication received from the authentication server 1 to the authentication server 1, it has a function of acquiring the expiration date of the information required for authentication and determining whether or not to provide the target service.

  The in-vehicle communication device 3 uses the mobile communication means to transmit information necessary for authentication and service connection information to the authentication server 1 based on the own vehicle position or time or specific position passage information indicating passage of the specific position. Controls the timing to request and acquire, stores the acquired service connection information and information necessary for authentication, and transmits the stored service connection information and information necessary for authentication to the service providing device 2 using wireless communication means It has a function to do.

  The specific position passage information indicates whether or not the predicted time required for entering or moving into the predetermined distance range from the service providing device 2 has changed below a threshold or whether or not the specific position on the map has been passed. Information to be included.

  Further, the in-vehicle communication device 3 has a function of storing the service connection information received from the authentication server 1 and the information necessary for the acquired authentication, and connection control and service for communication with the service providing device 2 using the stored information. It is good also as a thing provided with the function which authenticates use availability.

  The in-vehicle communication device 3 has a function of transmitting the vehicle position or time or specific position passage information when requesting service connection information from the authentication server 1. It is good also as a thing provided with the function which produces service connection information based on a position or time, or specific position passage information, and transmits to the vehicle-mounted communication apparatus 3. FIG.

  Further, in the communication connection between the service providing device 2 and the in-vehicle communication device 3, it may be provided with a function of using the service identifier included in the service connection information as a communication encryption key.

  Further, in communication connection between the service providing device 2 and the in-vehicle communication device 3, a function of using a service identifier included in the service connection information as a wireless LAN access point name of the service providing device 2 may be provided.

  In addition, in the communication connection between the service providing device 2 and the in-vehicle communication device 3, the service providing device includes the service identifier included in the service connection information in the transmission content of the short-range wireless communication transmitted by the in-vehicle communication device 3. 2 may have a function of enabling identification of a connected communication partner.

  Further, a service identifier included in the service connection information created in the authentication server 1 is created based on a random number for each request from the in-vehicle communication device 3, and the connection between the in-vehicle communication device 3 and the service providing device 2 is made. It is good also as a thing provided with the function which prevents the unauthorized access with respect to the connection of communication with the service provision apparatus 2 and the vehicle-mounted communication apparatus 3 by using for control.

  In addition, information necessary for authentication created in the authentication server 1 is created based on a random number for each request from the in-vehicle communication device 3 and transmitted to the in-vehicle communication device 3. When verifying the validity of the information required for authentication received from, it is necessary to duplicate verification by disabling part of the information required for stored authentication and making it impossible to verify twice or more. It may be provided with a function to prevent unauthorized use of sensitive information.

  In addition, information necessary for authentication created in the authentication server 1 is created based on a random number for each request from the in-vehicle communication device 3 and transmitted to the in-vehicle communication device 3. When verifying the validity of the information required for authentication received from, the expiration date is determined from a part of the information required for stored authentication, and if the expiration date is exceeded, the verification is disabled. It is also possible to provide a function for preventing unauthorized use of information necessary for the copied authentication.

  Further, the service connection information includes information related to functions used for communication between the service providing device 2 and the in-vehicle communication device 3, and the in-vehicle communication device 3 communicates with the service providing device 2 using the communication function indicated in the service connection information. It is also possible to have a function of automatically selecting and using the optimum communication function for communication with the service providing device 2 by performing the above.

  In addition, in transmitting the validity verification result of information necessary for authentication from the authentication server 1 to the service providing device 2, information necessary for authentication from the in-vehicle communication device 3 to the service providing device 2 including a random number in the transmission content It is good also as what has the function which prevents the unauthorized use of the service by the interception of the communication from the server 1 for authentication to the service provision apparatus 2, or duplication.

(Operation of the entire system)
Next, an example of the operation of the entire service use authentication system will be described with reference to FIG.

  The in-vehicle communication device 3 monitors whether the vehicle passes a specific position or the like. If the vehicle passes the specific position (S11), the authentication information for the in-vehicle communication device 3 is sent to the authentication server. 1 is requested (S12).

  The authentication server 1 generates service connection information and authentication information in response to a request from the in-vehicle communication device 3, and transmits the service connection information to the in-vehicle communication device 3 in parallel with the service providing information. (S13).

  When the vehicle arrives at the service providing location after receiving the authentication information from the authentication server 1 (S14), the in-vehicle communication device 3 establishes communication with the service providing device 2 using the information included in the service information. Then, the authentication information is transmitted to the service providing device 2 (S16).

  The service providing device 2 uses the authentication information received from the in-vehicle communication device 3 to inquire of the authentication server 1 whether the service can be provided (S17).

  When the determination result indicating whether or not to provide the service is received from the authentication server 1 (NO in S18), the service providing device 2 does not provide the service (S19).

  On the other hand, when the determination result indicating that the service can be provided is received from the authentication server 1 (YES in S18), the service providing device 2 requests the in-vehicle communication device 3 to verify the validity of the determination result (S20).

  When the verification result that the determination result is not valid is received from the in-vehicle communication device 3 (NO in S21), the service providing device 2 does not provide the service (S19).

  On the other hand, when the verification result that the determination result is valid is received from the in-vehicle communication device 3 (YES in S21), the service providing device 2 provides the service (S22).

(Configuration and operation of each function)
FIG. 3 is a diagram illustrating a configuration of each function of the authentication server 1, the service providing device 2, and the in-vehicle communication device 3 that configure the service use authentication system.

  In the expressions in the text described below, the part with “Enc (A, B)” indicates a function for encrypting the contents of B with the key A, and the part with “Dec (A, B)” is the key. A function for decoding the contents of B by A is shown, and the description “A | B” means concatenation of A and B as a byte string. The encryption method is not limited as long as it is shared so that communication between the following devices is not hindered.

  The authentication information acquisition processing unit 31 of the in-vehicle communication device 3 shown in FIG. 3 receives position information from a GPS (Global Positioning System) antenna that is simultaneously mounted in the vehicle in which the in-vehicle communication device 3 is mounted, and provides a service. When the distance to the installation location of the device 2 is calculated, and when it is detected that the distance is less than a predetermined value, the vehicle has passed a specific position etc. and has approached the target location The authentication server 1 is requested for authentication information. At this time, the authentication information acquisition processing unit 31 transmits the service type identifier and the vehicle position information to the authentication server 1 via mobile communication or wireless communication, and receives the authentication information and the service connection information. The service type identifier is an identifier indicating the type of service to be used. Subsequently, the authentication information acquisition processing unit 31 outputs the received authentication information and service connection information to the communication establishment processing unit 32.

  In addition, as information for determining conditions for starting communication from the in-vehicle communication device 3 to the authentication server 1, for example, information indicating the position of the service providing device 2 is occasionally transferred from the authentication server 1 to the in-vehicle communication device 3. It is notified via mobile communication and recorded in the in-vehicle communication device 3.

  Further, it is assumed that the authentication server 1 has already performed the device authentication of the target vehicle by the mobile communication ID or the like provided in the vehicle prior to the communication here.

  The transmission timing of the vehicle position information performed based on information from the GPS in the authentication information acquisition processing unit 31 passes through a specific position or until the installation location of the service providing device 2 from the navigation system or the like instead of the GPS. This may be implemented by setting a threshold for the expected time.

  Here, a processing flow of the authentication information generation processing unit 11, the service information transmission processing unit 12, and the authentication information transmission processing unit 13 of the authentication server 1 is shown in FIG.

  The authentication information generation processing unit 11 of the authentication server 1 uses the service type identifier and the vehicle position information received from the in-vehicle communication device 3 and has the corresponding service type identifier from the service information database and is located closest to the service information database. Service information to be acquired is acquired (S31). The data structure of service information is shown in FIG. 5A. The service type identifier is an identifier indicating the type of service, and there may be a plurality of service providing devices 2 having different service identifiers for one service type identifier.

  Next, the authentication information generation processing unit 11 of the authentication server 1 generates a service connection identifier and a service connection key used by the in-vehicle communication device 3 and the service providing device 2 for establishing communication based on random numbers. (S32). Similarly, an authentication result confirmation key, a communication content confirmation key, authentication secret information, and an authentication ticket 1 are generated based on random numbers (S33).

  The calculation method of each variable is shown below.

Service connection identifier = random number ()
Service connection key = random number ()
R0 = random number ()
Authentication result confirmation key = random number ()
Communication content confirmation key = random number ()
Authentication ticket 1 = random number ()
Authentication ticket 2 = Enc (authentication ticket 1, R0)
Secret information for authentication = Enc (R0, communication content confirmation key | expiration date)
The authentication information generation processing unit 11 of the authentication server 1 generates service connection information shown in FIG. 5B from the service information obtained from the service information database, the service connection identifier, and the service connection key. Further, the authentication information shown in FIG. 5C is generated from the authentication ticket 1 and the authentication result confirmation key. Further, the authentication server 1 generates the authentication information for storage shown in FIG. 5D in which the expiration date of the authentication information is set as information used in the service availability determination processing unit 14 and records it in the authentication server 1. .

  Subsequently, the service information transmission processing unit 12 of the authentication server 1 transmits the generated service connection information to the service providing device 2 (S34). Whether the service providing device 2 is a legitimate device is determined between the authentication server 1 and the service providing device 2 using a dedicated closed network, an SSL / TLS certificate, or the in-vehicle communication device 3 Similar to the above, the mobile communication network is used. Accordingly, the service information reception processing unit 21 of the service providing device 2 outputs the received service connection information to the service information recording unit 2M, and records the service connection information in the service information recording unit 2M.

  Subsequently, the authentication information transmission processing unit 13 of the authentication server 1 transmits the authentication information and the service connection information to the in-vehicle communication device 3 via the mobile communication network (S35).

  The secret key and the authentication information are recorded on the authentication information database on the authentication server as storage authentication information (S36).

  When the communication establishment processing unit 32 of the in-vehicle communication device 3 in FIG. 3 receives the authentication information and the service connection information from the authentication information acquisition processing unit 31, the communication establishment service unit 32 communicates with the service providing device 2 using the service connection information connection means. Communication with the establishment processing unit 22 is started. At this time, the communication establishment processing unit 32 transmits the service connection identifier included in the service connection information using short-range wireless communication, for example, using Advertising Channel in the case of Bluetooth (registered trademark). Here, the service providing device 2 may determine the start of the procedure for establishing communication using the service connection identifier, the service providing device 2 serves as an access point in the wireless LAN, and the in-vehicle communication device 3 serves as the access point of the service connection identifier. The procedure for establishing communication with the user may be started. The communication is not limited to wireless communication such as Bluetooth and wireless LAN, but may be performed via wired communication or communication means that will appear in the future, such as connection with a charger provided in an EV vehicle.

  By using a service connection identifier that is generated based on a random number and discarded after use, it is possible to prevent communication establishment by easy unauthorized use. When a plurality of communication means can be used, it is possible to make wiretapping difficult by the authentication server 1 specifying the use means using the service connection information every time the service is used. Alternatively, the service connection identifier may be divided into two, and the first half may be used as, for example, a wireless LAN access point name and the second half as a password used for wireless LAN communication, thereby improving communication confidentiality.

  Subsequently, the authentication information transmission processing unit 33 of the in-vehicle communication device 3 encrypts the service connection information authentication ticket 1 with the service connection key as shown in the processing flow of FIG. 1 is generated (S41), and the generated encryption authentication ticket 1 is transmitted to the service providing device 2 together with the service identifier (S42). Thereby, the authentication information reception processing unit 23 of the service providing device 2 receives the service identifier and the encrypted authentication ticket 1.

  The calculation method of the encryption authentication ticket 1 which is a variable will be described below.

Encrypted authentication ticket 1 = Enc (service connection key, authentication ticket 1)
Here, the processing flow of the authentication information reception processing unit 23 of the service providing device 2 is shown in FIG.

  The authentication information reception processing unit 23 searches the service connection information recorded in the service information recording unit 2M using the received service identifier, and acquires service connection information having a matching service identifier (S51).

  Here, when the search for the service connection information fails (NO in S52), the authentication information reception processing unit 23 notifies the in-vehicle communication device 3 that there is no corresponding service (S53), and performs the subsequent processing. Not performed.

  On the other hand, if the search for the service connection information is successful (YES in S52), the authentication information reception processing unit 23 uses the encrypted authentication ticket 1 received from the in-vehicle communication device 3 as the service connection information service of the search result. By decrypting using the connection key, the authentication ticket 1 is calculated (S54), and the calculated authentication ticket 1 is output to the service availability determination request processing unit 24 (S55).

  3 sends the service connection identifier and the encrypted authentication ticket 1 to the authentication server 1, and the encrypted availability result from the authentication server 1 is sent to the service providing device 2 in FIG. Is output to the authentication result confirmation processing unit 25. Accordingly, the service availability determination processing unit 14 of the authentication server 1 inputs the service connection identifier and the encrypted authentication ticket 1 received from the service availability determination request processing unit 24 of the service providing device 2.

  The processing flow of the service availability determination processing unit 14 is shown in FIGS. 8A and 8B.

  The service availability determination processing unit 14 searches the stored authentication information using the input service connection identifier (S61), and uses the service connection key of the obtained storage authentication information. The encrypted authentication ticket 1 is decrypted to calculate the authentication ticket 1 (S62).

  Subsequently, the service availability determination processing unit 14 decrypts the authentication ticket 2 of the storage authentication information using the authentication ticket 1 as a key, and calculates a communication content confirmation key A and an expiration date (S63).

  First, the service availability determination processing unit 14 compares the communication content confirmation key A with the communication content confirmation key included in the storage authentication information (S64).

  If they do not match (NO in S65), the service availability determination processing unit 14 concatenates the authentication result confirmation key of the storage authentication information and the code indicating the determination result of the use and authenticates the ticket. Encryption is performed using 1 as a key to generate a determination result (S66).

  On the other hand, if they match (YES in S65), the service availability determination processing unit 14 compares the expiration date with the current time to check whether the expiration date is within the expiration date (S68).

  Here, if the expiration date has not expired (NO in S68), the service availability determination processing unit 14 determines the authentication result confirmation key of the storage authentication information and the determination of the use as in the case of NO in S65. A code indicating the result is concatenated and encrypted using the authentication ticket 1 as a key to generate a determination result (S66).

  On the other hand, when it is confirmed that the communication content confirmation keys match and are within the validity period (YES in S68), the service availability determination processing unit 14 determines the authentication result confirmation key of the storage authentication information and the authentication result confirmation key. Then, a code indicating the determination result of the use is concatenated and encrypted using the authentication ticket 1 as a key to generate the determination result (S69).

  Subsequently, the service availability determination processing unit 14 transmits the generated availability determination result to the service providing device 2 and discards the used service connection information (S70).

  An example of how to calculate each variable is shown below.

Authentication ticket 1 = Dec (SCODE, encryption authentication ticket 1)
R0 = Dec (authentication ticket 1, authentication ticket 2)
Communication content confirmation key A | Expiry date = Dec (R0, X2)
Judgment result = Enc (authentication ticket 1, code indicating the judgment result | authentication result confirmation key)
The authentication result confirmation processing unit 25 of the service providing device 2 in FIG. 3 decrypts the encrypted authentication ticket 1 using the service connection key of the service connection information, and calculates the authentication ticket 1. Subsequently, with the calculated authentication ticket 1 as a key, the determination result is decrypted, and a code indicating the determination result and an authentication result confirmation key are calculated.

  If the code indicating the determination result is good, the authentication result confirmation processing unit 25 transmits the authentication result confirmation key to the authentication result confirmation processing unit 34 of the in-vehicle communication device 3 as a confirmation result.

  The authentication result confirmation processing unit 34 of the in-vehicle communication device 3 compares the authentication result confirmation key included in the availability result confirmation received from the service providing device 2 with the authentication result confirmation key of the service connection information, and obtains the result. It is concatenated with a random number, encrypted with a service connection key, and transmitted to the authentication result confirmation processing unit 25 of the service providing device 2 as a validity verification result. Also, the service connection information and authentication information held are discarded.

  An example of a method for calculating the validity verification result, which is a variable, is shown below.

Validity verification result = Enc (Service connection key, (Authentication result confirmation key == Received authentication result confirmation key) | Random number ())
On the other hand, when the authentication result confirmation processing unit 25 receives the validity verification result from the authentication result confirmation processing unit 34, the authentication result confirmation processing unit 25 decrypts the received validity verification result with the service connection key, and the validity verification result is good. The service provision start processing unit 26 is instructed to start providing the service. Also, the stored service connection information is discarded.

(Effect of embodiment)
Below, the effect of this embodiment is shown.

  As described above, in the system according to the present embodiment, communication between the authentication server 1 for information on service use determination and the in-vehicle communication device 3 and communication between the authentication server 1 and the service providing device 2 are performed. Therefore, it is difficult to conduct wiretapping / falsification / spoofing at the timing of communication because the operations are carried out at geographically / temporal locations. Information transmitted from the authentication server 1 to each device and used for service availability is temporarily issued. Further, the information is generated based on the random number, is disposable, and an expiration date is set. For this reason, even if it is eavesdropped in some form, it can be made difficult to reuse.

  Furthermore, in the system of this embodiment, as will be described in detail below, individual communication between the authentication server 1 and the in-vehicle communication device 3 and individual communication between the authentication server 1 and the service providing device 2 are performed. It is possible to make it difficult for an unauthorized vehicle due to eavesdropping / falsification to use the service.

  For example, since the communication between the in-vehicle communication device 3 and the authentication server 1 is secured by device authentication provided in the mobile communication provided in the vehicle, except for cases where each device of a regular vehicle is stolen. Eavesdropping / tampering itself is difficult.

  Further, when the communication between the authentication server 1 and the service providing device 2 is wiretapped, the authentication information cannot be obtained from the service connection information and authentication information necessary for using the service on the vehicle side. Therefore, the service use by the irregular vehicle is impossible.

  Further, even if the communication of the service connection information between the authentication server 1 and the service providing device 2 is altered and replaced with the service connection information held by the unauthorized vehicle, it is handled on the authentication server 1. The service connection identifier used for searching the storage authentication information is disposable information generated based on a random number, and the storage authentication information is discarded after use. It is.

  In addition, when the communication for sending / receiving the determination result between the authentication server 1 and the service providing device 2 has been falsified for the purpose of unauthorized use of the service by the unauthorized vehicle, it is generated based on a random number as the determination result. In the authentication result confirmation processing unit 34 including the authentication result confirmation key, the unauthorized use is made difficult by collating it with the authentication result confirmation key held by the in-vehicle communication device 3.

  In addition, when the communication for transmitting and receiving the authentication information between the in-vehicle communication device 3 and the service providing device 2 is wiretapped, the encrypted authentication ticket 1 used for determining whether or not the service can be used is generated based on a random number. It is difficult to use a service for an unauthorized vehicle because the information is disposable and the authentication information is discarded after use.

  In addition, when the transmission / reception of the result of the availability determination between the in-vehicle communication device 3 and the service providing device 2 is eavesdropped, the authentication result confirmation key included in the availability determination result is a disposable generated based on a random number. And the authentication information is discarded after use, it is difficult to use the service for unauthorized vehicles.

  Further, for the purpose of unauthorized use of a service by an unauthorized vehicle, falsification of transmission / reception communication of the encrypted authentication ticket 1 between the in-vehicle communication device 3 and the service providing device 2 is the encryption in the subsequent authentication server 1. The decryption of the authentication authentication ticket 1 is hindered, and it is determined as “No” by the availability determination, so that unauthorized use can be prevented. Further, changing the service identifier makes it impossible to use the service providing device 2 itself, so that unauthorized use is not realized.

  In addition, for the purpose of unauthorized use of services by unauthorized vehicles, tampering with the communication of the validity verification result between the in-vehicle communication device 3 and the service providing device 2 is generated based on the validity verification result based on a random number. Since it is encrypted with a temporary service connection key shared between the regular in-vehicle communication device 3 and the service providing device 2, decryption in the service providing device 2 is hindered, and the service providing device 2 Since it cannot be used, unauthorized use is not realized.

  Next, each example will be described.

(First embodiment)
In the first embodiment, a service form of a system including an EV vehicle and an EV charger shared by a plurality of users is considered.
In the configuration shown in FIG. 9, a resident of an apartment X can share an EV car <1> and an EV car <2>, and can use an EV charger A, an EV charger B, and an EV charger C. It is assumed that the resident shares the EV car <3> and the EV car <4>, and can use the EV charger B, the EV charger C, and the EV charger D.

  The number of EV chargers installed at the stage when EV vehicles have started to spread is not sufficient, and there are fewer restrictions on installation compared to conventional gas stations. Conceivable. For this reason, providing a combination of an EV charger and an EV vehicle that can be preferentially used by each user as in the configuration of FIG. 9 is a great advantage for each user.

  The determination as to whether or not the portable device can be used as in the prior art is a charging operation by a user who owns the portable device, so that any vehicle can be prevented. Can not. Further, when the availability is determined only by the geographical position relationship, unauthorized charging by a vehicle outside the target cannot be prevented from the relationship of the position estimation accuracy.

  In contrast, in the present embodiment, in the configuration of FIG. 9, the above-described authentication server 1 is installed on the service provider side, and the above-described service providing devices are provided on the EV chargers A, B, C, and D sides, respectively. 2 is installed, and the above-described in-vehicle communication device 3 is installed on each of the EV cars <1>, <2>, <3>, and <4> side.

  With this configuration, it is possible to determine whether or not the vehicle can be used on a vehicle basis, and it is possible to prevent unauthorized use by a non-target vehicle.

  Moreover, according to the present Example, addition / deletion of the target vehicle carrying the vehicle-mounted communication apparatus 3 can be implemented easily. The server 1 for authentication on the service provider side only needs to manage the mobile communication information of the target vehicle, and the service provider device 2 on the EV charger side has geographical location information, a fixed IP address, SSL / TLS certificates may be managed and notified to each in-vehicle communication device using mobile communication.

  The combination of the target vehicle and the available EV charger can be easily managed by managing the information on the available charger notified to the in-vehicle communication device 3 on the authentication server 1.

(Second embodiment)
In the second embodiment, a service form combining vehicle sharing and parking is considered.
For example, it is a service of sharing a vehicle for a resident of an apartment and a dedicated parking lot attached to the apartment.

  In order to reduce the burden on the residents, unmanned parking is desirable for private parking lots, and it is necessary to minimize the burden of loading and unloading.

  In order to avoid unauthorized use by vehicles not covered by the parking lot, in the existing form, it is necessary to provide a gate and a gate controller at the entrance of the parking lot, and further stop the user at the time of warehousing and operate the gate controller. For this reason, it is necessary to provide a temporary stop space in a part of the parking lot.

  On the other hand, in this embodiment, the service providing device 2 is installed in the gate controller. As a result, the gate can be opened and closed only by the vehicle approaching the gate controller, and a parking lot that allows quick gate passage can be realized.

  As a result, it is possible to realize a service that makes it unnecessary to secure the temporary stop space and uses as little parking as possible as a parking lot.

(Third embodiment)
In the third embodiment, consider an opening / closing operation of a garage with an opening / closing device in a private house.
In this case, the vehicle-mounted communication device 3 is mounted on a private vehicle, and the service providing device 2 is installed on the opening / closing device of the garage.

  In this case, opening and closing of the garage is operated when the vehicle comes in front of the garage. However, even if communication is wiretapped, the unauthorized opening and closing using the wiretapping contents can be made difficult.

  As described in detail above, according to the embodiment, it is possible to make unauthorized use of services difficult even when wiretapping / reuse is performed.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

  DESCRIPTION OF SYMBOLS 1 ... Authentication server 1, 2 ... Service provision apparatus, 3 ... In-vehicle communication apparatus, 20 ... Service provision facility, 30 ... Mobile body.

Claims (14)

Consists of an authentication server, a service providing device capable of communicating with the authentication server, and an in-vehicle communication device provided with mobile communication means, and at the start of service provision, the service is used in units of vehicles equipped with the in-vehicle communication device In the service use authentication system that performs authentication of availability,
The in-vehicle communication device is
Based on the own vehicle position or time or specific position passing information indicating the passage of a specific position, the authentication server requests and acquires information necessary for authentication and service connection information using the mobile communication means. Means for controlling timing, storing the acquired service connection information and information necessary for authentication, and transmitting the stored service connection information and information necessary for authentication to the service providing device;
The service providing device is:
Information necessary for authentication received from the in-vehicle communication device by storing the service connection information received from the authentication server, controlling communication connection with the in-vehicle communication device serving as a service providing partner using the service connection information By means of transmitting to the authentication server, the means for obtaining the expiration date of information necessary for authentication and determining whether or not to provide the target service,
The authentication server is:
In response to a request from the in-vehicle communication device, create service connection information, transmit the service connection information to the in-vehicle communication device and the service providing device, and further create information necessary for authentication, Means for transmitting information necessary for the authentication to the in-vehicle communication device, validity of the information necessary for authentication received from the service providing device, and providing the service with the verification result and information indicating the expiration date Means for transmitting to the device,
Service usage authentication system.   The specific position passing information is information indicating whether or not the predicted time required for entering or moving within a predetermined distance range from the service providing device has changed to a threshold value or less, or whether or not the specific position on the map has been passed. The service use authentication system according to claim 1, comprising: The in-vehicle communication device is
Means for storing service connection information received from the authentication server and information necessary for the acquired authentication; means for performing connection control of communication with the service providing device and authentication of service availability using the stored information; With
The service use authentication system according to claim 1 or 2. The position for transmitting and receiving information necessary for authentication between the in-vehicle communication device and the authentication server is physically separated from the position of the service providing device, and the in-vehicle communication device and the authentication server The communication between the service providing device and the in-vehicle communication device can be performed using short-range wireless communication, and between the service providing device and the authentication server. Wired communication or wireless communication can be used for the communication of
The service use authentication system according to any one of claims 1 to 3. The in-vehicle communication device is
When requesting service connection information to the authentication server, comprising means for transmitting the vehicle position or time or specific position passing information,
The authentication server is:
A means for creating service connection information based on the position or time of the in-vehicle communication device or specific location passage information and transmitting the information to the in-vehicle communication device.
The service use authentication system according to any one of claims 1 to 4. In the communication connection between the service providing device and the in-vehicle communication device, the service identifier included in the service connection information, using means as a communication encryption key,
The service use authentication system according to any one of claims 1 to 5. In connection of communication between the service providing device and the in-vehicle communication device, the service providing device includes means for using a service identifier included in the service connection information as a wireless LAN access point name of the service providing device.
The service use authentication system according to any one of claims 1 to 6. In the communication connection between the service providing device and the in-vehicle communication device, the service providing device includes the service identifier included in the service connection information in the transmission content of the short-range wireless communication transmitted by the in-vehicle communication device. Provided with means for enabling the connected communication partner to be identified,
The service use authentication system according to any one of claims 1 to 7. A service identifier included in the service connection information created in the authentication server is created based on a random number for each request from the in-vehicle communication device, and connection control between the in-vehicle communication device and the service providing device is performed. By using means for preventing unauthorized access to communication connection between the service providing device and the in-vehicle communication device;
The service use authentication system according to any one of claims 1 to 8. Information required for authentication created in the authentication server is created based on a random number for each request from the in-vehicle communication device, transmitted to the in-vehicle communication device, and received from the service providing device by the authentication server When verifying the validity of the information required for authenticated authentication, it is impossible to verify more than once by discarding part of the information required for stored authentication. With measures to prevent unauthorized use of
The service use authentication system according to any one of claims 1 to 9. Information required for authentication created in the authentication server is created based on a random number for each request from the in-vehicle communication device, transmitted to the in-vehicle communication device, and received from the service providing device by the authentication server When verifying the validity of the information required for authentication, the expiration date is determined from a part of the information required for the stored authentication. The service use authentication system according to any one of claims 1 to 10, further comprising means for preventing unauthorized use of information necessary for authentication. The service connection information includes information related to means used for communication between the service providing device and the in-vehicle communication device, and the in-vehicle communication device communicates with the service providing device using the communication means indicated in the service connection information. A means for automatically selecting and using the optimum communication means for communication with the service providing device by
The service use authentication system according to any one of claims 1 to 11. In transmitting the validity verification result of information necessary for authentication from the authentication server to the service providing device, the transmission content includes a random number and uses information necessary for authentication from the in-vehicle communication device to the service providing device. And means for preventing unauthorized use of the service by intercepting or duplicating communication from the authentication server to the service providing device by performing encryption.
The service use authentication system according to any one of claims 1 to 12. Consists of an authentication server, a service providing device capable of communicating with the authentication server, and an in-vehicle communication device provided with mobile communication means, and at the start of service provision, the service is used in units of vehicles equipped with the in-vehicle communication device It is a service usage authentication method that performs authentication of availability,
Using the mobile communication means, information necessary for authentication and service connection information are sent from the in-vehicle communication device to the authentication server at a timing based on specific position passage information indicating passage of the vehicle position or time or specific position. Request and
The created service connection information is transmitted to the in-vehicle communication device from the authentication server to the in-vehicle communication device and is also transmitted to the service providing device, and further, the information necessary for the created authentication is transmitted to the in-vehicle communication device. And
Sending the acquired service connection information and information necessary for authentication from the in-vehicle communication device to the service providing device to the service providing device,
Sending the information required for authentication received from the in-vehicle communication device to the authentication server from the service providing device to the authentication server,
Sending the verification result verifying the validity of the information received from the service providing device and the information indicating the expiration date from the authentication server to the service providing device,
In the service providing device, based on the verification result received from the authentication server and the information indicating the expiration date, to determine the expiration date of information necessary for authentication and whether to provide the target service,
Service usage authentication method.