ETC system centralized management method and system, cloud center and PSAM card matrix

Abstract

The invention provides an ETC system centralized management method and system, a cloud center and a PSAM card matrix. The method comprises the following steps: requesting to distribute or release a PSAM card to the PSAM card matrix through the cloud center; in a vehicle identity verification link, requesting to decrypt the vehicle information ciphertext from the PSAM card distributed by the PSAM card matrix through the cloud center, and receiving the vehicle information plaintext decrypted by the PSAM card; and in the ETC transaction link, requesting and receiving ETC transaction element information for ETC transaction from the PSAM cards distributed by the PSAM card matrix through the cloud center. According to the invention, the external device can realize vehicle identity verification and ETC payment in the ETC system through the remote access interface provided by the PSAM card matrix. Through a PSAM centralization mode, great convenience can be provided for the management of the PSAM card, the error-tolerant rate is reduced, the management efficiency is improved, and the operation cost is saved.

Description

Technical Field

[0001] The present invention relates to the field of ETC technology, and in particular to an ETC system centralized management method, system and cloud center, and PSAM card matrix. Background Art

[0002] The ETC antenna device needs PSAM card information to read the ETC card online. Deductions, etc. At present, the ETC antenna devices in conventional scenarios are all equipped with independent personal secure access module cards (Pin Secure Access Module Card, PSAM card) in each device, that is, one card and one device. If the usage scenario is large and there are many entrances and exits, there will be a lot of PSAM cards to be managed as a whole, and the distribution of PSAM cards will be relatively wide, which is very cumbersome. Not only are they easy to confuse, lose or damage, but they also increase the difficulty and cost of daily operation and maintenance management, requiring manual running of the racing field, changing the antenna, etc. Moreover, after the PSAM card is damaged, the ETC antenna device will be unusable, resulting in low fault tolerance of the ETC antenna device. Among them, the PSAM card is a smart card used to encrypt and protect data, provide security authentication, encryption and decryption, digital signature and other functions, can be used to verify the legitimacy of the user card, and protect the terminal equipment from deductions.

[0003] In summary, the problem with the existing technology is that in a scenario with dense ETC antenna equipment, the decentralized management of PSAM cards may cause problems such as high management costs, low operating efficiency, and poor fault tolerance. Summary of the invention

[0004] In view of this, an embodiment of the present invention provides an ETC system centralized management method, system and cloud center, and PSAM card matrix to eliminate or improve one or more defects existing in the prior art.

[0005] One aspect of the present invention provides a centralized management method for an ETC system, the method comprising the following steps: requesting the allocation or release of a PSAM card to a PSAM card matrix through a cloud center; in a vehicle identity verification link, requesting the decryption of vehicle information ciphertext to a PSAM card allocated to the PSAM card matrix through the cloud center, and receiving the vehicle information plaintext decrypted by the PSAM card; in an ETC transaction link, requesting and receiving ETC transaction element information for an ETC transaction to a PSAM card allocated to the PSAM card matrix through the cloud center.

[0006] In some embodiments of the present invention, the step of requesting the PSAM card matrix to allocate or release the PSAM card through the cloud center includes: when a vehicle entering the ETC detection range triggers a transaction process, requesting the PSAM card matrix to allocate the PSAM card; when the ETC transaction link is completed, requesting the PSAM card matrix to release the PSAM card; or requesting the PSAM card matrix to reallocate or release the PSAM card according to preset rules or time intervals.

[0007] In some embodiments of the present invention, when a vehicle entering the ETC detection range triggers a transaction process, the step of requesting the PSAM card matrix to allocate a PSAM card includes: receiving a PSAM card allocation request from an external device; applying for PSAM card authorization from the PSAM card matrix; receiving the allocated PSAM card information returned by the PSAM card matrix, and returning it to the external device; receiving an authorization confirmation request from an external device; requesting authorization confirmation from the PSAM card matrix; receiving the authorization result returned by the PSAM card matrix and the relevant authorization information for accessing the corresponding PSAM card in the vehicle identity verification link and the ETC transaction link, and returning them to the external device.

[0008] In some embodiments of the present invention, the relevant authorization information includes a PSAM channel number and a PSAM terminal number; the relevant authorization information also includes multiple of a PSAM serial number, a PSAM version number, a PSAM key card type, a PSAM application area identifier, and a PSAM random number.

[0009] In some embodiments of the present invention, in the vehicle identity verification link, before the step of requesting decryption of the vehicle information ciphertext to the PSAM card assigned to the PSAM card matrix through the cloud center, the method also includes: receiving a decryption request containing the vehicle information ciphertext and the vehicle OBU information from an external device, performing network number verification and blacklist verification on the decryption request, and sending a ciphertext parsing request containing the vehicle information ciphertext and the vehicle OBU information to the PSAM card assigned to the PSAM card matrix.

[0010] In some embodiments of the present invention, in the ETC transaction link, the step of requesting and receiving ETC transaction element information for ETC transactions from the PSAM card assigned to the PSAM card matrix through the cloud center includes: receiving an ETC transaction element information acquisition request from an external device, parsing the request and requesting the ETC transaction element information for this ETC transaction from the PSAM card assigned to the PSAM card matrix through the cloud center; receiving the ETC transaction element information returned by the PSAM card assigned to the PSAM card matrix, and returning the ETC transaction element information to the external device.

[0011] Another aspect of the present invention provides an ETC system centralized management method. When an external device interacts with an on-board unit of a vehicle entering an ETC detection range, the method includes: requesting the PSAM card matrix to allocate or release a PSAM card through a cloud center; in a vehicle identity verification link, reading the vehicle information ciphertext recorded in the on-board unit, requesting the PSAM card allocated to the PSAM card matrix through the cloud center to decrypt the vehicle information ciphertext, and receiving the vehicle information plaintext decrypted by the PSAM card returned by the cloud center; in an ETC transaction link, requesting and receiving ETC transaction element information used for ETC transactions from the PSAM card allocated to the PSAM card matrix through the cloud center.

[0012] Another aspect of the present invention provides a cloud center, which establishes a communication connection with an external device and a PSAM card matrix; the cloud center is used to request the PSAM card matrix to allocate or release a PSAM card; the cloud center is used to request decryption of vehicle information ciphertext through the PSAM card allocated by the cloud center to the PSAM card matrix in a vehicle identity verification link, and receive the vehicle information plaintext decrypted by the PSAM card; the cloud center is also used to request and receive ETC transaction element information for ETC transactions through the PSAM card allocated by the cloud center to the PSAM card matrix in an ETC transaction link.

[0013] Another aspect of the present invention provides a PSAM card matrix, which includes multiple PSAM cards managed in a matrix manner, and provides a functional interface for external device request allocation and release.

[0014] Another aspect of the present invention provides an ETC system centralized management system, comprising: a cloud center and a PSAM card matrix as in the above embodiments, to implement the steps of the method described in any one of the above embodiments.

[0015] The ETC system centralized management method, system and cloud center, and PSAM card matrix proposed in the present invention can enable external devices (including ETC antenna devices in the parking lot that do not require the installation of PSAM cards, etc.) to implement vehicle identity verification and ETC payment in the ETC system through the remote access interface provided by the PSAM card matrix, and obtain secret keys, encryption and decryption, etc. through the remote access interface provided by the PSAM card matrix. Based on the method proposed in the present invention, in the scenario where ETC antenna devices are densely packed, the PSAM centralized mode can provide great convenience for the management of PSAM cards, reduce the fault tolerance rate, improve management efficiency, and save operating costs.

[0016] Additional advantages, purposes, and features of the present invention will be described in part in the following description, and will become apparent to those skilled in the art after studying the following, or may be learned from the practice of the present invention. The purposes and other advantages of the present invention may be achieved and obtained by the structures specifically indicated in the specification and the accompanying drawings.

[0017] Those skilled in the art will appreciate that the objectives and advantages that can be achieved with the present invention are not limited to the above specific description, and the above and other objectives that can be achieved by the present invention will be more clearly understood from the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present invention, constitute a part of the present application, and do not constitute a limitation of the present invention. In the drawings:

[0019] Figure 1 This is a flow chart of a centralized management method for an ETC system in one embodiment of the present invention.

[0020] Figure 2 This is a flow chart of applying for PSAM authorization through a cloud center in one embodiment of the present invention.

[0021] Figure 3 The figure is a flow chart of vehicle information decryption in one embodiment of the present invention.

[0022] Figure 4 This is a flow chart for obtaining ETC transaction element information in one embodiment of the present invention.

[0023] Figure 5 The figure is a PSAM card scheduling flow chart in one embodiment of the present invention.

[0024] Figure 6 This is a diagram of the centralized management system architecture of the ETC system in one embodiment of the present invention. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments and the accompanying drawings. Here, the illustrative embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0026] It should also be noted that, in order to avoid obscuring the present invention due to unnecessary details, only structures and / or processing steps closely related to the solutions according to the present invention are shown in the accompanying drawings, while other details that are not closely related to the present invention are omitted.

[0027] It should be emphasized that the term “include / comprises” when used herein refers to the presence of features, elements, steps or components, but does not exclude the presence or addition of one or more other features, elements, steps or components.

[0028] It should also be noted that, unless otherwise specified, the term “connection” herein may refer not only to a direct connection but also to an indirect connection involving an intermediate.

[0029] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. In the accompanying drawings, the same reference numerals represent the same or similar components, or the same or similar steps.

[0030] In order to overcome the problems existing in the prior art, the present invention proposes an ETC system centralized management method, system and cloud center, and PSAM card matrix, which are used to centrally manage all PSAM card information, thereby forming a PSAM centralized management mode, which can provide great convenience for the management of PSAM cards, improve management efficiency, and save operating costs.

[0031] Figure 1 The flowchart of the centralized management method of the ETC system in one embodiment of the present invention is shown in FIG. In the specific implementation process, the execution subject of the method may be a cloud center, and the method includes:

[0032] Step S110: Request the PSAM card matrix to allocate or release a PSAM card through the cloud center.

[0033] During the specific implementation process, the cloud center may receive PSAM card requests from external devices (including ETC antenna equipment in the parking lot, etc.), and then the cloud center requests the PSAM card matrix to allocate or release PSAM cards. The cloud center records the PSAM cards corresponding to different external devices, and according to the calls of external devices, satisfies the calls of external devices to PSAM cards in the process of realizing the functions of the ETC system.

[0034] Step S120: In the vehicle identity verification link, the cloud center requests the PSAM card allocated to the PSAM card matrix to decrypt the vehicle information ciphertext, and receives the vehicle information plaintext decrypted by the PSAM card.

[0035] Step S130: In the ETC transaction link, the PSAM card allocated to the PSAM card matrix through the cloud center requests and receives ETC transaction element information for the ETC transaction.

[0036] The vehicle information plain text and ETC transaction element information are composed in the same manner as in the prior art, except that in the request process, since the PSAM card assigned by the PSAM card matrix needs to be called, the channel number, serial number, etc. of the assigned PSAM card need to be included in the request instruction. The present invention is not limited to this, and this is only an example of an implementation method.

[0037] The ETC system centralized management method, system and cloud center, and PSAM card matrix proposed in the present invention can enable external devices (including ETC antenna devices in the parking lot that do not require the installation of PSAM cards, etc.) to implement vehicle identity verification and ETC payment in the ETC system through the remote access interface provided by the PSAM card matrix, and obtain secret keys, encryption and decryption, etc. through the remote access interface provided by the PSAM card matrix. Based on the method proposed in the present invention, in the scenario where ETC antenna devices are densely packed, the PSAM centralized mode can provide great convenience for the management of PSAM cards, reduce the fault tolerance rate, improve management efficiency, and save operating costs.

[0038] In some embodiments of the present invention, each time a transaction of an ETC antenna device occurs, the ETC antenna device requests to call a PSAM card in the PSAM card matrix, or the PSAM card is allocated to different ETC antenna devices according to a preset rule or time interval. That is, in the step of requesting the PSAM card matrix to allocate or release a PSAM card through the cloud center, it includes: (1) when a vehicle entering the ETC detection range triggers a transaction process, requesting the PSAM card matrix to allocate a PSAM card; when the ETC transaction link is completed, requesting the PSAM card matrix to release the PSAM card; or (2) requesting the PSAM card matrix to reallocate or release the PSAM card according to a preset rule or time interval. Here are only two examples of PSAM card allocation rules, and the present invention is not limited to this, and can be adjusted according to the ideas of those skilled in the art.

[0039] By adopting the embodiment of the invention, the rules for allocating PSAM cards in the PSAM card matrix to external devices can be flexibly adjusted, thereby flexibly meeting the needs in different scenarios.

[0040] In some embodiments of the present invention, in step S130, when a vehicle entering the ETC detection range triggers a transaction process, the step of requesting the PSAM card matrix to allocate a PSAM card includes:

[0041] (1) Receive a PSAM card allocation request from an external device;

[0042] (2) Apply for PSAM card authorization from the PSAM card matrix;

[0043] (3) Receive the PSAM card matrix to return the assigned PSAM card information, and return it to the external device;

[0044] (4) receiving an authorization confirmation request from an external device;

[0045] (5) Request authorization confirmation from the PSAM card matrix;

[0046] (6) Receive the authorization result returned by the PSAM card matrix and the relevant authorization information for accessing the corresponding PSAM card in the vehicle identity verification link and the ETC transaction link, and return them to the external device.

[0047] A specific embodiment of the present invention is Figure 2 As shown, Figure 2 This is a flowchart of applying for PSAM authorization through a cloud center in one embodiment of the present invention. First, PSAM authorization refers to an external device accessing the PSAM card matrix through the function of the cloud center and applying for authorization from the PSAM matrix. The method comprises the following steps:

[0048] (1) The cloud center applies for authorization from the PSAM card matrix (via the F8 instruction), the PSAM matrix returns the assigned PSAM card information (via the E8 information), and the cloud center processes the authorization application.

[0049] (2) The external device sends the authorization confirmation request again through the cloud center (through the F9 instruction) to the PSAM card matrix for authorization confirmation, and finally receives the authorization result and related authorization information (through the E9 instruction information) returned by the cloud center, and the cloud center performs authorization confirmation processing.

[0050] In layman's terms, the external device sends an application to the PSAM card matrix, and the PSAM card matrix allocates the available PSAM card information to the external device that submitted the application. Each PSAM card on the PSAM card matrix can be authorized through the cloud center system, or in other words, which external device the PSAM card on the PSAM card matrix is ​​authorized to is managed by the cloud center. The authorization application and authorization confirmation need to call the cloud center (or department center) interface to implement. Authorization confirmation means that the cloud center obtains the authorization confirmation information from the PSAM card matrix, and then follows up the authorization confirmation information to call the department center interface for authorization confirmation.

[0051] Among them, the F9 instruction contains APDU and MAC. Application Protocol Data Unit (APDU) is the protocol used for communication between smart cards (such as IC cards) and card readers (or called interface devices IFD). The APDU protocol defines the data format and rules transmitted during the interaction process, allowing the reader to send instructions and receive responses from smart cards. The message authentication code (MAC code), also expressed as mac, can be divided into mac1 and mac2, representing a string of information, which can be understood as a signature value.

[0052] By adopting the above-mentioned embodiment of the invention, the cloud center can respond to the request of the external device and request the PSAM card matrix to allocate a PSAM card.

[0053] In some embodiments of the present invention, the relevant authorization information mentioned in step S130 at least includes a PSAM channel number and a PSAM terminal number, through which transmission channel the PSAM card matrix needs to be accessed is determined by the PSAM channel number, and which PSAM card is assigned to which external device is determined by the PSAM terminal number. In some embodiments, according to the requirements in different scenarios, the relevant authorization information may also include multiple of a PSAM serial number, a PSAM version number, a PSAM key card type, a PSAM application area identifier, and a PSAM random number.

[0054] Table 1 shows the PSAM initialization information structure with a length of 35 bytes.

[0055] Byte length Byte content meaning 1 byte PSAM channel number 6 bytes PSAM Terminal Number 10 bytes PSAM Serial Number 1 byte PSAM version number 1 byte PSAM Key Card Type 8 bytes PSAM application area identification 8 bytes PSAM random numbers

[0056] The concept of channel number is a unique identifier used to distinguish different information transmission channels. In this embodiment, the PSAM initialization information is 35 bytes: 1 byte PSAM channel number; 6 bytes PSAM terminal number; 10 bytes PSAM serial number; 1 byte PSAM version number; 1 byte PSAM key card type; 8 bytes PSAM application area identification; 8 bytes PSAM random number.

[0057] In some embodiments of the present invention, in the vehicle identity verification link, before the step of requesting decryption of the vehicle information ciphertext to the PSAM card assigned to the PSAM card matrix through the cloud center, the method also includes: receiving a decryption request containing the vehicle information ciphertext and the vehicle OBU information from an external device, performing network number verification and blacklist verification on the decryption request, and sending a ciphertext parsing request containing the vehicle information ciphertext and the vehicle OBU information to the PSAM card assigned to the PSAM card matrix.

[0058] like Figure 3 As shown, Figure 3 The vehicle information decryption flow chart in one embodiment of the present invention is shown in FIG. The application scenario of the embodiment of the present invention is a parking lot, and the embodiment of the present invention provides a centralized management method and system for a parking lot ETC system. Figure 3 The external device in is the parking lot program, which refers to the whole of the parking lot charging equipment connected to the antenna and the camera, which can interact through the ETC antenna, and can also be understood as an abstract whole of the ETC equipment in the parking lot environment. First, the parking lot program obtains the vehicle information ciphertext from the vehicle's on-board unit, and then sends a decryption request containing the vehicle information ciphertext to the cloud center. The cloud center preliminarily parses the decryption request, verifies the network number and the blacklist (which belongs to the prior art here), and after the verification passes, sends a further decryption request to the PSAM card matrix to call the PSAM card (the PSAM card stores key information and other information). Specifically, the decryption request can be an F9 instruction containing two APDU instructions (instruction 1: 8-byte OBU number + 4-byte OBU issuer identifier + 4-byte issuer identifier, instruction 2: vehicle information ciphertext length + content). The cloud center receives the parsed vehicle information plaintext returned by the PSAM card matrix, performs plaintext parsing, and returns the information result after plaintext parsing to the parking lot program.

[0059] By adopting the embodiment of the invention, the vehicle information ciphertext read from the vehicle on-board unit OBU can be parsed, so that the vehicle information ciphertext can be parsed to obtain the vehicle information plaintext by calling the PSAM card allocated by the PSAM card matrix.

[0060] In some embodiments of the present invention, in the ETC transaction link, the step of requesting and receiving ETC transaction element information for ETC transaction from the PSAM card assigned to the PSAM card matrix through the cloud center includes: (1) receiving an ETC transaction element information acquisition request from an external device, parsing the request and requesting the ETC transaction element information for this ETC transaction from the PSAM card assigned to the PSAM card matrix through the cloud center; (2) receiving the ETC transaction element information returned by the PSAM card assigned to the PSAM card matrix, and returning the ETC transaction element information to the external device.

[0061] In some scenarios, the request for obtaining ETC transaction element information may include information such as the vehicle's license plate number, OBU number, and preset or selected payment path. ETC transaction element information is necessary information that external devices (including roadside units, road test antenna equipment, and ETC antenna equipment) need to obtain from the vehicle's on-board unit to implement ETC payment. The ETC transaction element information can be the same as the existing technology, except that the request information needs to additionally include necessary information for accessing the PSAM card matrix to implement the functions in this solution scenario.

[0062] Figure 4This is a flow chart for obtaining ETC transaction element information in one embodiment of the present invention. Figure 4 The external device in is the parking lot program, which refers to the whole connected with the parking lot charging equipment, antenna and camera, which can interact through the ETC antenna, and can also be understood as a whole abstracted from the ETC equipment in the parking lot environment. In an embodiment of the present invention, the ETC transaction element information includes mac1 and the terminal transaction sequence number, where mac1 belongs to the message authentication code (Message Authentication Code, MAC code). First, the parking lot program generates a request to obtain element information. In this embodiment, the element information includes the message authentication code mac and the terminal transaction sequence number, and sends a request to obtain the message authentication code mac to the cloud center. After parsing the request, the cloud center sends a decryption instruction (i.e., F9 instruction) to the PSAM card matrix, and the PSAM card matrix responds (i.e., E9 instruction, including mac1 and the terminal transaction sequence number, and the E9 instruction represents the decrypted plaintext in the industry) to the cloud center, and the cloud center returns mac1 and the terminal transaction sequence number to the parking lot program. Among them, the message authentication code mac1 can be understood as a function similar to the order number in this scenario.

[0063] In this embodiment, the F9 instruction may include an APDU instruction (the APDU instruction includes a 4-byte random number + a 2-byte transaction sequence number + a 4-byte deduction amount). The transaction time in the instruction may be represented in the form of YYYYMMDDHHmmSS. The parsed mac1 may include: (1) a 1-byte key version number + a 1-byte key algorithm identifier; (2) a 0015 file CPU card internal number; (3) a 4-byte OBU issuer identifier + a 4-byte issuer identifier.

[0064] Figure 5 The PSAM card scheduling flow chart in one embodiment of the present invention. In this embodiment of the invention, PSAM card scheduling refers to allocating PSAM cards to different ETC devices according to the requests of different ETC devices during a single transaction. The method includes: (1) the vehicle triggers an external device to enter the ETC transaction process, and the external device requests to obtain the card slot number; (2) the PSAM card matrix determines whether it is empty, and if so, determines whether the preset number of cycles is reached, and if so, the ETC transaction ends (subsequently requesting hardware support to replace and iterate the PSAM card), and if not, the card slot number is re-acquired; (3) if the card slot number is determined to be non-empty, the external device holds the card slot number, queries the PSAM card information, and calls the PSAM card matrix; (4) when the ETC transaction ends, the external device releases the card slot number, and the ETC transaction ends.

[0065] Among them, in the above embodiment, one PSAM card notification can only process one transaction. When the lane conducts a transaction, a PSAM card is first applied for. After the application is successful, the transaction can be carried out. During the entire transaction process, the PSAM card will not be used by other lanes. After the transaction is successful, the PSAM card is released and other transactions can continue to be applied for.

[0066] In some embodiments of the present invention, the cloud center can use the List data structure and brpop command of the remote dictionary server to implement a circular queue. The PSAM card slot location and other information are configured through the page and loaded into the remote dictionary server. When a service request is made, the PSAM card slot number is obtained from the head of the queue and held until the operation is completed. After the service is completed, the card slot number is released to implement PSAM card scheduling. Among them, the remote dictionary server (Remote Dictionary Server, referred to as redis server) is an open source data structure server that uses memory storage. The List data structure can be a linked list data structure (LinkedList) or a string list (List of String). The brpop command is an operation command applicable to remote dictionary servers. It is used to pop up elements from the end of a linked list in a blocking manner, that is, to remove and obtain the last element of a string list from the right side (or tail) of the string list. When the string list is empty, the brpop command will block the connection.

[0067] In one embodiment of the present invention, the process of an ETC antenna device scanning a vehicle and completing a transaction includes: (1) when a vehicle enters an ETC lane, first, the ETC device in the parking lot is triggered to enter the transaction process; (2) the ETC device requests the PSAM matrix to allocate a PSAM card through the cloud center; (3) the vehicle identity verification link is entered to verify the identity of the vehicle; (4) the transaction information acquisition link is entered to complete the payment under the ETC system; (5) after the transaction is completed, the external device releases the PSAM card to the PSAM card matrix through the cloud center.

[0068] Another aspect of the present invention provides a centralized management method for an ETC system. The execution subject of the method may be an external device. When the external device interacts with the on-board unit of a vehicle entering the ETC detection range, the method includes:

[0069] (1) Request the PSAM card matrix to allocate or release PSAM cards through the cloud center.

[0070] (2) In the vehicle identity verification phase, the vehicle information ciphertext recorded in the vehicle-mounted unit is read, and the PSAM card allocated to the PSAM card matrix is ​​requested to decrypt the vehicle information ciphertext through the cloud center, and the vehicle information plaintext decrypted by the PSAM card returned by the cloud center is received.

[0071] (3) In the ETC transaction process, the PSAM card allocated to the PSAM card matrix through the cloud center requests and receives ETC transaction element information used for ETC transactions.

[0072] Among them, the external device can be a parking lot program or an ETC antenna device without a PSAM card installed, etc.

[0073] By adopting the embodiment of the invention, the external device can: on the one hand, exchange information with the on-board unit OBU to realize fee deduction; on the other hand, access the PSAM card matrix through the cloud center to realize access to the centrally managed PSAM card matrix.

[0074] Correspondingly, another aspect of the present invention provides a cloud center, which establishes a communication connection with an external device and a PSAM card matrix; the cloud center is used to request the PSAM card matrix to allocate or release a PSAM card; the cloud center is used to request decryption of vehicle information ciphertext through the PSAM card allocated by the cloud center to the PSAM card matrix in the vehicle identity verification link, and receive the vehicle information plaintext decrypted by the PSAM card; the cloud center is also used to request and receive ETC transaction element information used for ETC transactions through the PSAM card allocated by the cloud center to the PSAM card matrix in the ETC transaction link.

[0075] Correspondingly, another aspect of the present invention provides a PSAM card matrix, wherein the PSAM card matrix includes multiple PSAM cards managed in a matrix manner, and the PSAM card matrix provides a functional interface for external device request allocation and release.

[0076] Correspondingly, another aspect of the present invention provides an ETC system centralized management system, comprising the above-mentioned cloud center and PSAM card matrix, for implementing the steps of the method described in any one of the above embodiments.

[0077] Figure 6 This is an architecture diagram of the centralized management system of the ETC system in one embodiment of the present invention. The system includes multiple external devices in the parking lot that do not need to install PSAM cards. The external devices submit requests to the cloud center to access the PSAM card matrix. The cloud center receives and parses the requests from the external devices and forwards the requests to the PSAM card matrix. The PSAM card matrix responds to the cloud center's requests and implements the functions that the external devices that originally installed the PSAM cards can implement. Among them, the cloud center forwarding the request of the external device can also be understood as the cloud center calling the PSAM card matrix according to the request of the external device. It should be noted that Figure 6 The cards 1 to 5 and the external devices 1 to 5 are merely examples, and the present invention is not limited thereto.

[0078] As described above, the execution subject of the method proposed in the present invention includes one or more of an external device that does not require the installation of a PSAM card, a cloud center, and a PSAM card matrix, which can be each one individually or a combined system as the execution subject.

[0079] The ETC system centralized management method proposed in the present invention can enable external devices (including ETC antenna devices in the parking lot that do not require the installation of PSAM cards, etc.) to implement vehicle identity verification and ETC payment in the ETC system through the remote access interface provided by the PSAM card matrix, and obtain secret keys, encryption and decryption, etc. through the remote access interface provided by the PSAM card matrix. Based on the method proposed in the present invention, in the scenario where ETC antenna devices are densely populated, the PSAM centralized mode can provide great convenience for the management of PSAM cards, reduce the fault tolerance rate, improve management efficiency, and save operating costs.

[0080] The advantages of the solution proposed by the present invention include but are not limited to:

[0081] (1) The present invention centrally manages PSAM cards in a matrix manner and provides a remote access interface to the ETC antenna device, so that the ETC antenna device can obtain secret keys, encrypt and decrypt based on the remote access interface.

[0082] (2) Compared with the prior art method of inserting PSAM cards into ETC antenna equipment, the method and system proposed by the present invention will not work properly if the PSAM card is damaged or lost. However, the centralized PSAM card deployment and management method proposed by the present invention will not affect the normal operation of the ETC antenna equipment in the event of partial damage or loss. In other words, centralized PSAM card management can improve the fault tolerance of operation. As long as the management center of the PSAM card is not damaged as a whole, the ETC antenna equipment can normally obtain PSAM information and work normally.

[0083] (3) The cloud center proposed in the present invention centrally manages the PSAM card information and provides an interface for obtaining the PSAM card information for each ETC antenna device that needs to obtain the PSAM card information, so that the ETC antenna device has the ability to remotely access the key, encrypt, and decrypt.

[0084] (4) Further, the PSAM card matrix proposed in the present invention can automatically offline the damaged PSAM card information based on the automatic identification status strategy when detecting problems with some PSAM cards in the PSAM centralized management, thereby avoiding affecting the equipment in use and improving the overall fault tolerance of the system. For PSAM cards with problems, they only need to be maintained and replaced in the central computer room, and the operation and maintenance cost is significantly reduced, without the need for manual replacement of PSAM cards at the ETC antenna equipment site.

[0085] It should be understood by those skilled in the art that the exemplary components, systems and methods described in conjunction with the embodiments disclosed herein can be implemented in hardware, software or a combination of the two. Whether it is performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present invention are programs or code segments used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link via a data signal carried in a carrier.

[0086] It should be clear that the present invention is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present invention is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present invention.

[0087] In the present invention, features described and / or illustrated for one embodiment may be used in the same or similar manner in one or more other embodiments, and / or combined with features of other embodiments or replace features of other embodiments.

[0088] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the embodiments of the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A centralized management method for an ETC system, characterized in that: The ETC system centralized management method receives and responds to requests from external devices through a cloud center, wherein the external devices include ETC antenna devices without PSAM cards installed, and the method includes the following steps: Request the PSAM card matrix to allocate or release PSAM cards through the cloud center; In the vehicle identity verification phase, the cloud center requests the PSAM card assigned to the PSAM card matrix to decrypt the vehicle information ciphertext, and receives the vehicle information plaintext decrypted by the PSAM card; In the ETC transaction process, the PSAM card allocated to the PSAM card matrix through the cloud center requests and receives ETC transaction element information used for ETC transactions.

2. The method according to claim 1, characterized in that The step of requesting the PSAM card matrix to allocate or release the PSAM card through the cloud center includes: When a vehicle entering the ETC detection range triggers a transaction process, it requests the PSAM card matrix to allocate a PSAM card; when the ETC transaction is completed, it requests the PSAM card matrix to release the PSAM card; or According to preset rules or time intervals, request the PSAM card matrix to reallocate or release PSAM cards.

3. The method according to claim 2, characterized in that The step of triggering a transaction process when a vehicle enters the ETC detection range and requesting the PSAM card matrix to allocate a PSAM card includes: Receive PSAM card allocation request from external device; Apply for PSAM card authorization from the PSAM card matrix; The receiving PSAM card matrix returns the allocated PSAM card information and returns it to the external device; receiving an authorization confirmation request from an external device; Request authorization confirmation from the PSAM card matrix; Receive the authorization result returned by the PSAM card matrix and the relevant authorization information for accessing the corresponding PSAM card in the vehicle identity verification link and ETC transaction link, and return them to the external device.

4. The method according to claim 3, characterized in that: The relevant authorization information includes a PSAM channel number and a PSAM terminal number; The relevant authorization information also includes multiple ones of a PSAM serial number, a PSAM version number, a PSAM key card type, a PSAM application area identifier and a PSAM random number.

5. The method according to claim 1, characterized in that In the vehicle identity verification link, before the step of requesting the PSAM card assigned to the PSAM card matrix to decrypt the vehicle information ciphertext through the cloud center, the method also includes: receiving a decryption request containing the vehicle information ciphertext and the vehicle OBU information from an external device, performing network number verification and blacklist verification on the decryption request, and sending a ciphertext parsing request containing the vehicle information ciphertext and the vehicle OBU information to the PSAM card assigned to the PSAM card matrix.

6. The method according to claim 1, characterized in that In the ETC transaction link, the steps of requesting and receiving ETC transaction element information for ETC transactions from the PSAM card allocated to the PSAM card matrix through the cloud center include: Receive a request for obtaining ETC transaction element information from an external device, parse the request, and request the ETC transaction element information for this ETC transaction from the PSAM card allocated by the cloud center to the PSAM card matrix; Receive the ETC transaction element information returned by the PSAM card allocated by the PSAM card matrix, and return the ETC transaction element information to the external device.

7. A centralized management method for an ETC system, characterized in that: When the external device interacts with the on-board unit of the vehicle entering the ETC detection range, the method includes: Request the PSAM card matrix to allocate or release PSAM cards through the cloud center; In the vehicle identity verification phase, the vehicle information ciphertext recorded in the vehicle-mounted unit is read, and the PSAM card allocated by the cloud center is requested to decrypt the vehicle information ciphertext, and the vehicle information plaintext decrypted by the PSAM card returned by the cloud center is received; In the ETC transaction process, the PSAM card allocated to the PSAM card matrix through the cloud center requests and receives ETC transaction element information used for ETC transactions.

8. A cloud center, characterized in that: The cloud center establishes a communication connection with external devices and a PSAM card matrix; the cloud center is used to request the PSAM card matrix to allocate or release a PSAM card; the cloud center is used to request decryption of vehicle information ciphertext through the PSAM card allocated by the cloud center to the PSAM card matrix in the vehicle identity verification link, and receive the vehicle information plaintext decrypted by the PSAM card; the cloud center is also used to request and receive ETC transaction element information for ETC transactions through the PSAM card allocated by the cloud center to the PSAM card matrix in the ETC transaction link.

9. A PSAM card matrix, characterized in that: The PSAM card matrix includes multiple PSAM cards managed in a matrix manner, and the PSAM card matrix provides a functional interface for external device request allocation and release.

10. A centralized management system for an ETC system, characterized in that: It comprises: the cloud center described in claim 8 and the PSAM card matrix described in claim 9, so as to implement the steps of the method described in any one of claims 1-7.

Images