Fraud detection device, fraud detection system, fraud detection method, and program

Abstract

This fraud detection device (20) is provided with: a first recording unit that receives, from a portable information terminal (30) installed on a vehicle (V), and records, first probe information including a plurality of time-series sets of first position information that is position information for the vehicle and first time information indicating the time at which the first position information was acquired, and first identification information that is identification information for the vehicle; a second recording unit that receives, from an onboard device (10) installed on a vehicle, and records, second probe information including a plurality of time-series sets of second position information that is position information for the vehicle and second time information indicating the time at which the second position information was acquired, and second identification information that is identification information for the vehicle; a comparison unit that compares the first probe information and the second probe information for which the first identification information and the second identification information correspond to each other; and a determination unit that determines whether there is suspicion that the first probe information may be fraudulent on the basis of the result of the comparison by the comparison unit.

Description

Technical Field

[0001] The present disclosure relates to an unauthorized detection device, an unauthorized detection system, an unauthorized detection method, and a program.

Background Art

[0002] In recent years, GNSS (Global Navigation Satellite System), which measures the position of vehicles and the like based on signals received from satellites, has been widely used. GNSS is used, for example, for charging vehicles passing through highways. In the charging process using GNSS, if the signals received from satellites are spoofed, the charging process cannot be correctly performed. As a countermeasure against spoofing, for example, Patent Document 1 discloses a technique in which in-vehicle devices (on-vehicle units) mounted on two vehicles in motion perform vehicle-to-vehicle communication with each other, and based on the results of the vehicle-to-vehicle communication, spoofing of signals is detected.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] By the way, in portable information terminals such as smartphones, it is common to acquire position information using GNSS. Therefore, there is no major hardware problem in using a portable information terminal in a charging system. However, even when using a portable information terminal, countermeasures against the above-described spoofing problem are necessary. On the other hand, the technique described in Patent Document 1 has a problem that it does not deal with the case of using a portable information terminal because it detects spoofing using vehicle-to-vehicle communication.

[0005] This disclosure was made to solve the above-mentioned problems and aims to provide a fraud detection device, fraud detection system, fraud detection method, and program that can detect fraud when using a mobile information terminal. [Means for solving the problem]

[0006] To solve the above problems, the fraud detection device according to this disclosure includes: a first recording unit that receives and records first probe information, which includes a plurality of time series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle, from a portable information terminal installed in the vehicle; a second recording unit that receives and records second probe information, which includes a plurality of time series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle, from an in-vehicle device installed in the vehicle; a comparison unit that compares the first probe information and the second probe information, where the first identification information and the second identification information correspond to each other; and a determination unit that determines whether the first probe information is suspected of being falsified based on the comparison result by the comparison unit.

[0007] Furthermore, the fraud detection system relating to this disclosure includes a first recording unit that receives and records first probe information, which includes a plurality of time series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle, from a portable information terminal installed in the vehicle; a second recording unit that receives and records second probe information, which includes a plurality of time series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle, from an in-vehicle device installed in the vehicle; a comparison unit that compares the first probe information and the second probe information, which correspond to each other, and a determination unit that determines whether the first probe information is suspected of being falsified based on the comparison result by the comparison unit; and the in-vehicle device.

[0008] The fraud detection method relating to this disclosure includes the steps of: receiving and recording first probe information, which includes a plurality of time series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle, from a portable information terminal installed in the vehicle; receiving and recording second probe information, which includes a plurality of time series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle, from an in-vehicle device installed in the vehicle; comparing the first probe information and the second probe information, which correspond to each other, and determining whether the first probe information is suspected of being falsified based on the comparison result.

[0009] The program relating to this disclosure causes a computer to perform the following steps: receive and record first probe information, which includes a plurality of time series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle, from a portable information terminal installed in the vehicle; receive and record second probe information, which includes a plurality of time series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle, from an in-vehicle device installed in the vehicle; compare the first probe information and the second probe information, which correspond to each other, and determine whether there is suspicion of falsification in the first probe information based on the comparison result. [Effects of the Invention]

[0010] According to the fraud detection device, fraud detection system, fraud detection method, and program of this disclosure, it is possible to detect impersonation when using a mobile information terminal. [Brief explanation of the drawing]

[0011] [Figure 1]This figure shows the overall configuration of the fraud detection system according to the embodiment of this disclosure. [Figure 2] This figure shows an example of mobile information terminal information according to the embodiment of this disclosure. [Figure 3] This figure shows an example of in-vehicle device information according to the embodiments of this disclosure. [Figure 4] This figure shows an example of roadside antenna information according to an embodiment of the present disclosure. [Figure 5] This figure shows the overall configuration of the fraud detection system and the functional configuration of the fraud detection device according to the embodiment of this disclosure. [Figure 6] This is a first flowchart illustrating an example of the processing of the fraud detection device according to the embodiment of this disclosure. [Figure 7] This is a second flowchart illustrating an example of the processing of the fraud detection device according to the embodiment of this disclosure. [Figure 8] This is a third flowchart illustrating an example of the processing of the fraud detection device according to the embodiment of this disclosure. [Figure 9] This is a fourth flowchart illustrating an example of the processing of the fraud detection device according to the embodiment of this disclosure. [Modes for carrying out the invention]

[0012] The following description of the fraud detection system 1 and fraud detection device 20 according to the location embodiment of this disclosure will be made with reference to the figures. Figure 1 shows the overall configuration of the fraud detection system according to the embodiment of this disclosure. As shown in Figure 1, the fraud detection system 1 consists of an on-board unit 10 for the Electronic Toll Collection System installed in the vehicle V, and a system mounted on the vehicle V. The system comprises a mobile information terminal 30 such as a smartphone, a roadside antenna device 11 installed on the roadside of the road R on which the vehicle V travels, and a tamper detection device 20 independent of the vehicle V and the roadside antenna device 11. Note that the in-vehicle unit 10 is an example of the "in-vehicle device" in this disclosure. Note that Figure 1 shows one vehicle V and one roadside antenna device 11, but there may be multiple.

[0013] The fraud detection system 1 and fraud detection device 20 determine whether there is any suspicion of falsification in the location information and time information contained in the mobile information terminal information D1 received from the mobile information terminal 30 by comparing it with the in-vehicle device information D2 and roadside antenna information D3 as a reference. The fraud detection system 1 and fraud detection device 20 are used in toll systems such as toll roads and toll areas, as well as installed on general roads for daily enforcement. In this embodiment, the case in which the fraud detection system 1 and fraud detection device 20 are used in a toll system 50 such as a toll road or toll area will be described as an example. The roadside antenna device 11 in this embodiment is installed, for example, at the entrance, exit, or connection point to multiple roads of a toll road or toll area.

[0014] The personal information terminal 30 is, as described above, a smartphone, for example, that has a positioning function using GNSS. The personal information terminal 30 is a terminal carried by a user who has been pre-registered with the billing system 50 by running application software (hereinafter simply referred to as "app") for the billing system 50. In this case, the registered user is assigned an account ID (identification information). In this disclosure, the state in which the personal information terminal 30 is loaded onto the vehicle V means the state in which it is loaded onto the vehicle V and moves due to the movement of the vehicle V. The personal information terminal 30 repeatedly acquires location information at predetermined time intervals using a positioning function using GNSS, and periodically transmits multiple pieces of location information for the predetermined time period, along with time information representing the time each piece of location information was acquired, as personal information terminal information D1 to the fraud detection device 20 via the base station B of the mobile communication network, the wide-area communication network 41, etc. Furthermore, the transmission of the mobile information terminal information D1 to the fraud detection device 20 may include communication means such as local 5G, Wi-Fi®, and Bluetooth®, in addition to the base station B and wide-area communication network 41 of the mobile communication network. Figure 2 shows an example of mobile information terminal information D1 according to the embodiment of this disclosure.

[0015] The mobile information terminal information D1 shown in FIG. 2 includes an account ID (D11), an in-vehicle device ID (D12), and a plurality of time-series information D10. Each piece of information D10 includes location information D13, a data creation time D14, and acceleration data D15. The account ID (D11) is an ID registered in the charging system 50 described above. The in-vehicle device ID (D12) is identification information of the in-vehicle device 10. When the in-vehicle device ID is recorded in association with an account during user registration in the charging system 50, the mobile information terminal information D1 may not include one of the account ID (D11) and the in-vehicle device ID (D12). Also, the in-vehicle device ID (D12) can be manually input by the user to the application, or the application can automatically acquire it by performing short-range wireless communication or communication via a wired connection between the mobile information terminal 30 and the in-vehicle device 10. The location information D13 is the location information of the vehicle V (more precisely, the mobile information terminal 30) calculated based on the GNSS information D4 acquired by the mobile information terminal 30 using GNSS, and includes information representing latitude, longitude, etc. The GNSS information D4 is a positioning GNSS signal transmitted by the satellite S and includes time data, orbital data of the satellite S, etc. The data creation time D14 is the time when the location information D13 was created (or the time when the location information D13 was acquired). The acceleration data D15 is data representing the acceleration calculated based on a plurality of time-series location information D13.

[0016] In this embodiment, the mobile information terminal information D1 is an example of the "first probe information" in this disclosure. In this embodiment, "probe information" is information including a time series of location information acquired at predetermined intervals using a positioning function utilizing GNSS in the mobile information terminal 30, the in-vehicle unit 10, etc. Alternatively, in this embodiment, "probe information" is information including location information created in the roadside antenna device 11 based on information received from the in-vehicle unit 10, etc. In addition, the in-vehicle unit ID (D12) is an example of the "first identification information" which is the identification information of the vehicle V. If the in-vehicle unit ID (D12) is omitted, the account ID (D11) is an example of the "first identification information" which is the identification information of the vehicle V. In addition, the mobile information terminal information D1 may include identification information displayed on the license plate of the vehicle V in place of or together with the in-vehicle unit ID (D12). In this case, the identification information displayed on the license plate is also an example of the "first identification information". Furthermore, location information D13 is an example of "first location information," data creation time D14 is an example of "first time information," acceleration data D15 is an example of "first acceleration information," and multiple information D10 is an example of "multiple sets of time series." Note that acceleration data D15 does not necessarily have to be included in mobile information terminal information D1.

[0017] The on-board unit 10 has a function to acquire location information of the vehicle V (more precisely, the receiving antenna for the GNSS information D4 of the on-board unit 10) using GNSS, and acquires location information repeatedly at predetermined intervals, for example. The on-board unit 10 repeatedly acquires location information at predetermined time intervals using a positioning function that utilizes GNSS, and decimates the location information to create a time series of pairs of location information and time information for each predetermined distance, for example, and transmits it to the roadside antenna device 11 as on-board unit information D2. Figure 3 is a diagram showing an example of on-board unit information D2 according to the embodiment of this disclosure.

[0018] The in-vehicle device information D2 shown in FIG. 3 includes an in-vehicle device ID (D22) and a plurality of pieces of information D20 in time series. Each piece of information D20 includes position information D23, a data creation time D24, and acceleration data D25. The in-vehicle device ID (D22) is identification information of the in-vehicle device 10 and is information preset for each in-vehicle device 10. The position information D23 is position information calculated based on the GNSS information D4 acquired by the in-vehicle device 10 using GNSS and includes information representing latitude, longitude, etc. The data creation time D24 is the time when the position information D23 was created (or the time when the position information D23 was acquired). The acceleration data D25 is data representing acceleration calculated based on a plurality of pieces of position information D23 in time series. Note that the acceleration data D25 may not be included in the in-vehicle device information D2.

[0019] Note that in this embodiment, the in-vehicle device information D2 is an example of the "second probe information" in the present disclosure. Also, the in-vehicle device ID (D22) is an example of the "second identification information" which is the identification information of the vehicle V. Note that the in-vehicle device information D2 may include, together with the in-vehicle device ID (D22), the identification information included in the license plate of the vehicle V. In this case, the identification information included in the license plate is also an example of the "second identification information". Also, the in-vehicle device ID (D12) included in the portable information terminal information D1 and the in-vehicle device ID (D22) included in the in-vehicle device information D2 are the same. In this case, the "first identification information" and the "second identification information" are the same. However, as described above, when the portable information terminal information D1 includes, instead of the in-vehicle device ID (D12), the identification information displayed on the license plate as the identification information of the vehicle V, the "first identification information" and the "second identification information" in the present disclosure are different information. However, in this case, the fraud detection device 20 should be able to associate the "first identification information" and the "second identification information" using the information for associating the "first identification information" and the "second identification information". Also, the position information D23 is an example of the "second position information", the data creation time D24 is an example of the "second time information", the acceleration data D25 is an example of the "second acceleration information", and the plurality of pieces of information D20 are an example of the "plurality of sets in time series".

[0020] The roadside antenna device 11 transmits and receives predetermined information with the in-vehicle unit 10 using DSRC (Dedicated Short Range Communications) technology. The roadside antenna device 11 receives in-vehicle unit information D2 from the in-vehicle unit 10. The roadside antenna device 11 also transmits the in-vehicle unit information D2 received from the in-vehicle unit 10 to the fraud detection device 20 via the wide-area communication network 42. Furthermore, the roadside antenna device 11 creates roadside antenna information D3 based on the in-vehicle unit information D2 received from the in-vehicle unit 10, and transmits the created roadside antenna information D3 to the fraud detection device 20 via the wide-area communication network 42. When using the billing system 50 without using the mobile information terminal 30, the roadside antenna device 11 transmits and receives predetermined information used for billing with the in-vehicle unit 10, and transmits and receives predetermined information based on the transmitted and received information with the billing system 50.

[0021] Figure 4 shows an example of roadside antenna information D3 according to the embodiment of this disclosure. The roadside antenna information D3 shown in Figure 4 includes an identification ID (D31), installation location information D32, on-board unit ID (D33), communication result D34, and data creation time D35. The identification ID (D31) is the identification information of the roadside antenna device 11. The installation location information D32 is the location information of the installation location of the roadside antenna device 11. The on-board unit ID (D32) is the identification information of the on-board unit 10 that transmitted the on-board unit information D2. The communication result D34 is information indicating whether the communication with the on-board unit 10 was normal or abnormal. The data creation time D35 is the time when the roadside antenna information D3 was created (or the time when the on-board unit information D2 was received).

[0022] In this embodiment, roadside antenna information D3 is an example of the "third probe information" in this disclosure. Also, identification ID (D31) is an example of "identification information of the roadside antenna device". Also, onboard unit ID (D33) is an example of "second identification information" which is the identification information of vehicle V. Also, installation location information D32 is an example of "location information of the roadside antenna device". Note that roadside antenna information D3 does not have to include either identification ID (D31) or installation location information D32. In this case, the fraud detection device 20 is configured to associate "identification information of the roadside antenna device" with "location information of the roadside antenna device" using information that associates "identification information of the roadside antenna device" with "location information of the roadside antenna device".

[0023] The fraud detection device 20 is a so-called central server (computer). The fraud detection device 20 compares the mobile information terminal information D1 received from the mobile information terminal 30 installed in the vehicle V with the on-board unit information D2 received from the on-board unit 10 installed in the vehicle V via the roadside antenna unit 11, and determines whether there is suspicion of falsification in the mobile information terminal information D1. Alternatively, the fraud detection device 20 compares the received mobile information terminal information D1 with the roadside antenna information D3 received from the roadside antenna unit 11, and determines whether there is suspicion of falsification in the mobile information terminal information D1. Here, the ease with which information can be tampered with differs between the in-vehicle device information D2 and the mobile device information D1. Specifically, the in-vehicle device 10 is mainly installed and set up in vehicles by qualified professionals, and it is difficult for users to intervene in the process until the received location information and other data have been processed for necessary tasks such as billing. Furthermore, the in-vehicle device 10 is designed as a device limited to the purpose of obtaining and utilizing traffic information such as location information, and it provides location information that is optimal for obtaining and utilizing traffic information. On the other hand, the mobile device 30 (smartphone) allows users to add various applications as they wish, and is designed to be used for purposes other than obtaining and utilizing traffic information. Therefore, compared to the in-vehicle device 10, the mobile device 30 can support flexible payment methods, but it is also easier to install malicious apps (for example, location information spoofing apps), making it difficult to guarantee the accuracy of the acquired location information.

[0024] (Functional configuration of the fraud detection device) The functional configuration of the fraud detection device 20 will be explained with reference to Figure 5. Figure 5 shows the overall configuration of the fraud detection system 1 and the functional configuration of the fraud detection device 20 according to the embodiment of this disclosure. As shown in Figure 2, the fraud detection device 20 includes a processor 21, main memory 22, storage 23, and a communication interface 24.

[0025] The processor 21 is, for example, a CPU (Central Processing Unit) and executes each process of the fraud detection device 20. The functions of the processor 21 will be described later.

[0026] The main memory 22 has the memory area necessary for the operation of the processor 21.

[0027] Storage 23 is a so-called auxiliary storage device. Examples of storage 23 include magnetic disks, magneto-optical disks, and semiconductor memory. Storage 23 may be an internal medium directly connected to the computer's bus, or an external medium connected to the fraud detection device 20 (computer) via a communication interface 24 or a communication line.

[0028] The communication interface 24 is an interface for sending and receiving information with external devices (a mobile information terminal 30 and a roadside antenna device 11).

[0029] Next, the functions of the processor 21 will be described. The processor 21 performs the functions of a recording unit 210, a comparison unit 214, and a determination unit 215 by operating according to a predetermined program. The recording unit 210 also includes a first recording unit 211, a second recording unit 212, and a third recording unit 213.

[0030] The first recording unit 211 receives portable information terminal information D1 from a portable information terminal 30 installed in the vehicle V and records it in storage 23. This information includes multiple time-series sets D10 of vehicle V's location information D13 and data creation time D14 representing the time when the location information D13 was acquired, and the in-vehicle device ID (D12) which is the identification information of the vehicle V.

[0031] The second recording unit 212 receives and records in storage 23 on in-vehicle device information D2, which includes multiple time-series sets D20 of vehicle V's location information D23 and data creation time D24 representing the time when the location information D23 was acquired, and the vehicle V's identification information, the vehicle V's identification information, the vehicle device ID (D22). In this process, the second recording unit 212 receives and records the vehicle device information D2 from the vehicle device 10 via the roadside antenna device 11.

[0032] The third recording unit 213 receives roadside antenna information D3 from the roadside antenna device 11, which includes the installation location information D32 and / or identification ID (D31) of the roadside antenna device 11 that received the in-vehicle device information D2, the in-vehicle device ID (D33) corresponding to the in-vehicle device 10 that transmitted the in-vehicle device information D2, and the data creation time D35 corresponding to the time the in-vehicle device information D2 was received, and records it in the storage 23.

[0033] The comparison unit 214 compares the mobile information terminal information D1 and the in-vehicle information D2, where the in-vehicle device ID (D12) and the in-vehicle device ID (D22) correspond to each other. In doing so, the comparison unit 214 compares, for example, location information D13 and location information D23 where the data creation time D14 and data creation time D24 are within a predetermined time difference, or / or compares data creation time D14 and data creation time D24 where the location information D13 and location information D23 are within a predetermined distance. The comparison unit 214 also compares, for example, acceleration data D15 and acceleration data D25 where the data creation time D14 and data creation time D24 are within a predetermined time difference, or / or compares acceleration data D15 and acceleration data D25 where the location information D13 and location information D23 are within a predetermined distance. Furthermore, the comparison unit 214 compares, for example, the in-vehicle device ID (D12) and the in-vehicle device ID (D33) included in the roadside antenna information D3 with the mobile information terminal information D1 and roadside antenna information D3, which correspond to each other.

[0034] Furthermore, the determination unit 215 determines whether there is suspicion of falsification in the mobile information terminal information D1 based on the comparison results from the comparison unit 214. In this case, the determination unit 215 determines that there is suspicion of falsification in the mobile information terminal information D1 if, for example, the distance between the compared location information D13 and location information D23 is greater than a predetermined location threshold (also called the first threshold), or if the time difference between the compared data creation time D14 and data creation time D24 is greater than a predetermined time threshold (also called the second threshold). Alternatively, the determination unit 215 determines that there is suspicion of falsification in the mobile information terminal information D1 if the difference between the compared acceleration data D15 and acceleration data D25 is greater than a predetermined acceleration threshold (also called the third threshold). Alternatively, the determination unit 215 determines that there is suspicion of falsification in the mobile information terminal information D1 if the distance between the location information D13 and the installation location information D32 is greater than a predetermined threshold (this threshold is also called the fourth threshold), or if the time difference between the data creation time D14 and the data creation time D35 is greater than a predetermined threshold (this threshold is also called the fifth threshold).

[0035] Furthermore, for each piece of data for which the determination process has been completed, the determination unit 215 records in the storage 23 that the determination process has been completed, for example, in association with each mobile information terminal information D1. If it is determined that there is a suspicion of forgery, it further records in the storage 23 that it has been determined that there is a suspicion of forgery, in association with the relevant data (for example, the in-vehicle device ID).

[0036] The comparison unit 214 and the determination unit 215 may, for example, repeatedly perform comparison and determination processing at a predetermined interval, or they may perform comparison and determination processing only when, for example, a vehicle V enters a specific determination area or passes through a specific determination area. A specific determination area is, for example, an area corresponding to the entrance and exit of a toll road or toll area, or an intermediate route such as a connection point to multiple roads. Comparison and determination processing can be performed when mobile information terminal information D1 with location information within these areas is received, or when the roadside antenna device 11 and the in-vehicle unit 10 communicate within these areas and receive roadside antenna information D3.

[0037] (For each threshold) Each threshold depends on the location information acquisition cycle of the in-vehicle unit 10 and the mobile information terminal 30. For example, if the in-vehicle unit 10 acquires location information at 200m intervals, the passage time will be 4 seconds if vehicle V is traveling at 180km / h. If the mobile information terminal 30 secures at least two positioning points at 200m intervals, positioning will be required every 2 seconds. Assuming that at least one of the two points will fall within a 200m interval even if there are positioning errors or missing data, and assuming that a positioning point will always be present in the three sections including before and after, each threshold can be set as follows, for example.

[0038] The position threshold (first threshold) and the fourth threshold can be, for example, 200m. The time threshold (second threshold) and the fifth threshold can be, for example, 4 seconds.

[0039] Note that acceleration depends on the time difference, road structure, and traffic congestion. For highways, for example, the acceleration threshold (third threshold) can be set to, for example, 40 km / (h*h).

[0040] In this embodiment, since tampering with data from the in-vehicle unit 10 is more difficult than tampering with data from the mobile information terminal 30, the presence or absence of tampering is determined by assuming that the data from the in-vehicle unit 10 (location information and time information) is correct.

[0041] Furthermore, the operations of the recording unit 210 (first recording unit 211, second recording unit 212, and third recording unit 213), comparison unit 214, and determination unit 215 described above are stored in storage 23 in the form of a program. The processor 21 reads the program from storage 23, loads it into main memory 22, and executes the above processing according to the program. The processor 21 also allocates memory areas in main memory 22 corresponding to the recording unit 210 (first recording unit 211, second recording unit 212, and third recording unit 213), comparison unit 214, and determination unit 215 described above, according to the program.

[0042] A program may be intended to implement a part of the functions that the computer is to perform. For example, a program may perform its functions in combination with other programs already stored in storage 23, or in combination with other programs implemented in other devices.

[0043] Furthermore, the program may be intended to implement some of the functions described above. Moreover, the program may be a so-called differential file (differential program) that implements the functions described above in combination with other programs already stored in storage 23.

[0044] Furthermore, if this program is delivered to a computer via a communication line, the receiving computer may load the program into main memory 22 and execute the above-mentioned process.

[0045] The aforementioned fraud detection device 20 may, in addition to or instead of the above configuration, include a custom LSI (Large Scale Integrated Circuit) such as a PLD (Programmable Logic Device). It may be provided. Examples of PLDs include PAL (Programmable Array Logic), GAL (Generic Array Logic), CPLD (Complex Programmable Logic Device), and FPGA (Field Programmable Gate Array). In this case, it is implemented by processor 21. Some or all of the functions may be implemented by the integrated circuit.

[0046] (Processing flow of the fraud detection device) The following describes the processing flow of the fraud detection device 20, referring to Figures 6 to 9. The processing flow of the fraud detection device 20 will be explained in two ways: one that does not utilize roadside antenna information D3 (Figure 6) and another that utilizes the roadside antenna (Figures 7 to 9).

[0047] Figure 6 is a first flowchart showing an example of the processing of a fraud detection device according to the embodiment of this disclosure. Figure 6 shows the processing flow when roadside antenna information D3 is not used. The processing shown in Figure 6 may be executed repeatedly at a predetermined interval, or when location information within a specific determination area is received.

[0048] In the process shown in Figure 6, the comparison unit 214 searches the storage 23 for data to be subject to enforcement determination (step S101). In step S101, the comparison unit 214 searches for data of vehicles V that have not yet undergone comparison and determination processing, or searches for data of vehicles V that have not yet undergone comparison and determination processing and have location information within a specific determination area.

[0049] Next, the comparison unit 214 determines whether the retrieved data contains data with the same in-vehicle unit ID for both the mobile information terminal information D1 and the in-vehicle unit information D2 (step S102). If there is no data containing the same in-vehicle unit ID in either the mobile information terminal information D1 or the in-vehicle unit information D2 (step S102; NO), the comparison unit 214 determines that there is no data to be determined (step S103) and terminates the enforcement determination process shown in Figure 6.

[0050] On the other hand, if there is data in both the mobile information terminal information D1 and the in-vehicle device information D2 that contains the same in-vehicle device ID (step S102; YES), the comparison unit 214 compares the data in the mobile information terminal information D1 and the data in the in-vehicle device information D2 to check if the target data is falsified (step S104).

[0051] Next, the determination unit 215 determines whether the location information (distance between location information) is within the location threshold and the time (time difference between time points) is within the time threshold (step S105). If the location information is greater than the location threshold or the time is greater than the time threshold (step S105; NO), the determination unit 215 determines that the mobile information terminal information D1 that exceeds the threshold is suspected of being forged (step S106). If the location information is within the location threshold and the time is within the time threshold (step S105; YES), the determination unit 215 determines that the mobile information terminal information D1 is not suspected of being forged (step S107).

[0052] Figures 7 and 8 are second and third flowcharts illustrating an example of the processing of the fraud detection device according to the present disclosure. The flows shown in Figures 7 and 8 are processing flows when using roadside antenna information D3. The flows shown in Figures 7 and 8 are executed repeatedly, for example, at a predetermined period. The flows shown in Figure 7 and Figure 8 are connected to each other by a connector C1. The processing from steps S101 to S106 shown in Figure 7 is the same as the processing from steps S101 to S106 described with reference to Figure 6. However, in step S101 shown in Figure 7, the comparison unit 214 searches for data of a vehicle V that has not yet undergone comparison and judgment processing.

[0053] In Figure 7, if the location information is within the location threshold and the time is within the time threshold (step S105; YES), the comparison unit 214 searches the storage 23 for roadside antenna information D3 corresponding to the enforcement determination (step S201).

[0054] Next, the comparison unit 214 determines whether the retrieved data contains data with the same in-vehicle unit ID for the mobile information terminal information D1 and the roadside antenna information D3 (step S202 in Figure 8). If there is no data containing the same in-vehicle unit ID for the mobile information terminal information D1 and the roadside antenna information D3 (step S202; NO), the comparison unit 214 determines that there is no data to be determined (step S203) and terminates the enforcement determination process shown in Figures 7 and 8.

[0055] On the other hand, if there is data in the mobile information terminal information D1 and the roadside antenna information D3 that contains the same in-vehicle device ID (step S202; YES), the comparison unit 214 compares the data in the mobile information terminal information D1 and the data in the roadside antenna information D3 to check if the target data is falsified (step S204).

[0056] Next, the determination unit 215 determines whether the location information (distance between location information) is within the fourth threshold and the time (time difference between time points) is within the fifth threshold (step S205). If the location information is greater than the fourth threshold or the time is greater than the fifth threshold (step S205; NO), the determination unit 215 determines that the mobile information terminal information D1 that exceeds the threshold is suspected of being forged (step S206). If the location information is within the fourth threshold and the time is within the fifth threshold (step S205; YES), the determination unit 215 determines that the mobile information terminal information D1 is not suspected of being forged (step S207).

[0057] Figure 9 is a fourth flowchart showing an example of the processing of the fraud detection device according to the embodiment of this disclosure. The connector C1 shown in Figure 9 is connected to the connector C1 shown in Figure 8. The flows shown in Figures 9 and 8 are processing flows when roadside antenna information D3 is used. The flows shown in Figures 9 and 8 are executed, for example, when location information within a specific determination area is received. Note that the processing of steps S101 to S102 and steps S104 to S106 shown in Figure 9 is the same as the processing of steps S101 to S102 and steps S104 to S106 described with reference to Figure 6. However, in step S101 shown in Figure 9, the comparison unit 214 searches for data of a vehicle V that has location information within a specific determination area and has not yet undergone comparison and determination processing. Furthermore, in step S102 shown in Figure 9, if there is no data containing the same in-vehicle device ID in the mobile information terminal information D1 and the in-vehicle device information D2 (step S102; NO), the comparison unit 214 searches the storage 23 for roadside antenna information D3 corresponding to the enforcement determination (step S201). The processing from step S201 onward is the same as the processing described above, with reference to Figure 8.

[0058] As described above, according to this embodiment, if the mobile information terminal information D1 contains data (location information or time information) that is suspected of being falsified, the suspicion of falsification can be detected based on the in-vehicle device information D2 or the in-vehicle device information D2 and the roadside antenna information D3.

[0059] If fraud is suspected, the following actions may be taken by the fraud detection system 1: For example, a search of past driving history for the suspected fraudulent vehicle (past fraud suspicion determination for the same onboard unit ID). Alternatively, if the suspicion of fraud is strong, such as through multiple repetitions, the system can assist in reporting to the relevant government agencies (for example, by providing information encouraging reporting). Alternatively, the system can assist in the process of suspending cards or credit cards used for the electronic toll collection system. Furthermore, the system can assist in the process of collecting payments at a later date from personal information obtained from the onboard unit information.

[0060] Furthermore, according to this embodiment, since the fraud detection device 20 can collect location information acquired by the mobile information terminal 30 via the wide-area communication network 42, it is possible to utilize data for any area or route nationwide using probe information without any gaps in the data. For example, possible uses of the data include congestion countermeasures through early detection of congestion, traffic safety measures through early detection of traffic anomalies, pricing measures such as dynamic pricing, area-based charges, and mileage taxes, logistics support such as monitoring of large vehicle operations and monitoring of vehicles transporting dangerous goods, and public transportation support such as providing on-time operation information.

[0061] Furthermore, according to this embodiment, payment methods can be easily diversified by linking with other application software such as electronic payment using 2D codes that operate on the mobile information terminal 30, or by enabling payment via carrier billing.

[0062] (Effects and Benefits) According to this embodiment, if the mobile information terminal information D1 acquired from the mobile information terminal 30 contains data that is suspected of being falsified (location information, time information, or both), the suspicion of falsification can be detected based on the in-vehicle device information D2 or the in-vehicle device information D2 and the roadside antenna information D3.

[0063] As described above, embodiments relating to this disclosure have been explained, but these embodiments are presented as examples and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their variations are included in the scope and spirit of the invention, as well as in the claims and their equivalents.

[0064] (Other embodiments) For example, in the above embodiment, in-vehicle device information D2 and roadside antenna information D3 were used as information to be compared with the mobile information terminal information D1, but the invention is not limited to these. For example, if the vehicle V is an autonomous vehicle or the like and has a function to perform driving assistance or autonomous driving using GNSS, probe information including location information and time information may be obtained from the control device of the vehicle V. In this case, the fraud detection device 20 receives probe information including location information and time information from the control device of the vehicle V, for example via a wide-area communication network 42. Furthermore, the device can detect suspicion of fraud by comparing the probe information including location information and time information from the control device of the vehicle V with the mobile information terminal information D1 obtained from the mobile information terminal 30. In this case, the control device of the vehicle V is an example of the "in-vehicle device" of this disclosure.

[0065] Furthermore, a camera may be installed in the vicinity of the roadside antenna device 11 or independently of the installation location of the roadside antenna device 11, so that, for example, the license plate information and external appearance information of vehicle V can be recognized and compared with pre-registered information to detect suspected deception.

[0066] <Note> The fraud detection device described in the above embodiment can be understood, for example, as follows.

[0067] (1) The fraud detection device 20 according to the first embodiment includes: a first recording unit 211 that receives and records first probe information (mobile information terminal information D1) from a mobile information terminal 30 installed in the vehicle V, which includes a plurality of time series sets of first location information which is the location information of the vehicle V and first time information which represents the time when the first location information was acquired, and first identification information which is the identification information of the vehicle; a second recording unit 212 that receives and records second probe information (onboard device information D2) from an onboard device (onboard device 10) installed in the vehicle V, which includes a plurality of time series sets of second location information which is the location information of the vehicle V and second time information which represents the time when the second location information was acquired, and second identification information which is the identification information of the vehicle; a comparison unit 214 that compares the first probe information and the second probe information which correspond to each other, and a determination unit 215 that determines whether the first probe information is suspected of being falsified based on the comparison result by the comparison unit 214. According to this embodiment and the following embodiments, if probe information (mobile information terminal information D1) acquired from the mobile information terminal 30 contains data suspected of being falsified (location information, time information, or both), the suspicion of falsification can be detected based on the in-vehicle device information D2.

[0068] (2) The fraud detection device 20 according to the second embodiment is the fraud detection device 20 of (1), wherein the comparison unit compares the first position information and the second position information such that the first time information and the second time information are within a predetermined time difference, and / or compares the first time information and the second time information such that the first position information and the second position information are within a predetermined distance, and the determination unit determines that there is suspicion of falsification in the first probe information if the distance between the compared first position information and the second position information is greater than a first threshold, or if the time difference between the compared first time information and the second time information is greater than a second threshold. According to this embodiment, it is possible to determine that there is suspicion of falsification when the position information or time information is greater than a predetermined threshold.

[0069] (3) The fraud detection device 20 according to the third embodiment is the fraud detection device 20 of (1) or (2), wherein the first probe information includes first acceleration information representing the acceleration of the vehicle, the second probe information includes second acceleration information representing the acceleration of the vehicle, the comparison unit compares the first acceleration information and the second acceleration information where the first time information and the second time information are within a predetermined time difference, and / or compares the first acceleration information and the second acceleration information where the first position information and the second position information are within a predetermined distance, and the determination unit determines that the first probe information is suspected of being falsified if the difference between the compared first acceleration information and the second acceleration information is greater than a third threshold. According to this embodiment, it is possible to determine that there is a suspicion of falsification if the difference in acceleration is greater than a predetermined threshold.

[0070] (4) The fraud detection device 20 according to the fourth embodiment is the fraud detection device 20 of (1) to (3), wherein the in-vehicle device transmits the second probe information to a roadside antenna device installed on the roadside of the road on which the vehicle travels, and the second recording unit receives and records the second probe information from the in-vehicle device via the roadside antenna device, and records the location information and / or identification information of the roadside antenna device that received the second probe information, the second identification information corresponding to the in-vehicle device that transmitted the second probe information, and the time corresponding to the time the second probe information was received. The system further includes a third recording unit that receives and records third probe information (roadside antenna information D3) including time information from the roadside antenna device. The comparison unit compares the first probe information and the third probe information, where the first identification information and the second identification information included in the third probe information correspond to each other. The determination unit determines that the first probe information is suspected of being falsified if the distance between the first position information and the position information of the roadside antenna device is greater than a fourth threshold, or if the time difference between the first time information and the third time information is greater than a fifth threshold. According to this embodiment, if probe information (mobile information terminal information D1) acquired from the mobile information terminal 30 includes data suspected of being falsified (location information or time information or both), the suspicion of falsification can be detected based on the in-vehicle device information D2 and the roadside antenna information D3. [Industrial applicability]

[0071] According to the fraud detection device, fraud detection system, fraud detection method, and program of this disclosure, it is possible to detect impersonation when using a mobile information terminal. [Explanation of Symbols]

[0072] 1. Fraud detection system 10 Onboard equipment 11. Roadside antenna equipment 20 Fraud detection device 21 processors 30. Mobile information terminals 210 Records Section 211 First Record Section 212 Second Record Section 213 Third Record Section 214 Comparison Section 215 Judgment section 22 Main Memory 23 Storage 24 Communication Interfaces

Claims

1. A first recording unit receives and records first probe information from a portable information terminal mounted on the vehicle, which includes a plurality of time-series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle. A second recording unit receives and records second probe information, which includes a plurality of time-series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle, from an in-vehicle device installed on the vehicle. A comparison unit that compares the first probe information and the second probe information that correspond to each other, A determination unit determines whether the first probe information is suspected of being falsified based on the comparison results from the comparison unit, Equipped with, The comparison unit compares the first position information and the second position information, where the first time information and the second time information are within a predetermined time difference. The determination unit determines that there is suspicion of falsification in the first probe information if the distance between the compared first position information and the second position information is greater than the first threshold. Fraud detection device.

2. A first recording unit receives and records first probe information from a portable information terminal mounted on the vehicle, which includes a plurality of time-series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle. A second recording unit receives and records second probe information, which includes a plurality of time-series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle, from an in-vehicle device installed on the vehicle. A comparison unit that compares the first probe information and the second probe information that correspond to the first identification information and the second identification information, A determination unit determines whether the first probe information is suspected of being falsified based on the comparison results from the comparison unit, Equipped with, The comparison unit compares the first time information and the second time information, where the first position information and the second position information are within a predetermined distance from each other. The determination unit determines that there is suspicion of falsification in the first probe information if the time difference between the compared first time information and the second time information is greater than the second threshold. Fraud detection device.

3. The first probe information includes first acceleration information representing the acceleration of the vehicle, The second probe information includes second acceleration information representing the acceleration of the vehicle, The comparison unit compares the first acceleration information and the second acceleration information where the first time information and the second time information are within a predetermined time difference, and / or compares the first acceleration information and the second acceleration information where the first position information and the second position information are within a predetermined distance. The determination unit determines that there is suspicion of falsification in the first probe information if the difference between the compared first acceleration information and the second acceleration information is greater than the third threshold. The fraud detection device according to claim 1 or 2.

4. The in-vehicle device transmits the second probe information to a roadside antenna device installed on the roadside of the road on which the vehicle travels. The second recording unit receives and records the second probe information from the in-vehicle device via the roadside antenna device. The system further includes a third recording unit that receives and records third probe information from the roadside antenna device, which includes location information and / or identification information of the roadside antenna device that received the second probe information, second identification information corresponding to the in-vehicle device that transmitted the second probe information, and third time information corresponding to the time the second probe information was received. The comparison unit compares the first probe information and the third probe information, where the second identification information contained in the first identification information and the third probe information correspond to each other. The determination unit determines that there is suspicion of falsification in the first probe information if the distance between the first position information and the position information of the roadside antenna device is greater than the fourth threshold, or if the time difference between the first time information and the third time information is greater than the fifth threshold. The fraud detection device according to either claim 1 or 2.

5. A first recording unit receives and records first probe information from a portable information terminal mounted on the vehicle, which includes a plurality of time-series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle. A second recording unit receives and records second probe information, which includes a plurality of time-series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle, from an in-vehicle device installed on the vehicle. A comparison unit that compares the first probe information and the second probe information that correspond to the first identification information and the second identification information, A determination unit determines whether the first probe information is suspected of being falsified based on the comparison results from the comparison unit, An unauthorized detection device equipped with, The above-mentioned in-vehicle device, Equipped with, The comparison unit compares the first position information and the second position information, where the first time information and the second time information are within a predetermined time difference. The determination unit determines that there is suspicion of falsification in the first probe information if the distance between the compared first position information and the second position information is greater than the first threshold. Fraud detection system.

6. The steps include receiving and recording first probe information from a portable information terminal installed in the vehicle, which includes a plurality of time series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle; The steps include receiving and recording second probe information from an in-vehicle device installed on the vehicle, which includes a plurality of time-series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle; A step of comparing the first probe information and the second probe information that correspond to the first identification information and the second identification information, A step of determining whether there is suspicion of falsification in the first probe information based on the comparison results. Includes, In the comparison step described above, the first time information and the second time information are compared with the first position information and the second position information, where the first time information and the second time information are within a predetermined time difference. In the determination step described above, if the distance between the compared first position information and the second position information is greater than the first threshold, it is determined that there is suspicion of falsification in the first probe information. Fraud detection methods.

7. The steps include receiving and recording first probe information from a portable information terminal installed in the vehicle, which includes a plurality of time series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle; The steps include receiving and recording second probe information from an in-vehicle device installed on the vehicle, which includes a plurality of time-series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle; A step of comparing the first probe information and the second probe information that correspond to the first identification information and the second identification information, A step of determining whether there is suspicion of falsification in the first probe information based on the comparison results. A program that causes a computer to execute, In the comparison step described above, the first time information and the second time information are compared with the first position information and the second position information, where the first time information and the second time information are within a predetermined time difference. In the determination step described above, if the distance between the compared first position information and the second position information is greater than the first threshold, it is determined that there is suspicion of falsification in the first probe information. program.

8. A first recording unit that receives and records first probe information from a portable information terminal mounted on the vehicle, which includes a plurality of time series sets of first location information, which is the location information of the vehicle, and first time information, which represents the time when the first location information was acquired, and first identification information, which is the identification information of the vehicle. A second recording unit receives and records second probe information, which includes a plurality of time-series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle, from an in-vehicle device installed on the vehicle. A comparison unit that compares the first probe information and the second probe information that correspond to the first identification information and the second identification information, A determination unit determines whether the first probe information is suspected of being falsified based on the comparison results from the comparison unit, An unauthorized detection device equipped with, The above-mentioned in-vehicle device, Equipped with, The comparison unit compares the first time information and the second time information, where the first position information and the second position information are within a predetermined distance from each other. The determination unit determines that there is suspicion of falsification in the first probe information if the time difference between the compared first time information and the second time information is greater than the second threshold. Fraud detection system.

9. A step of receiving and recording first probe information from a portable information terminal installed in the vehicle, which includes a plurality of time series sets of first location information which is the location information of the vehicle and first time information which represents the time when the first location information was acquired, and first identification information which is the identification information of the vehicle. The steps include receiving and recording second probe information from an in-vehicle device installed on the vehicle, which includes a plurality of time-series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle; A step of comparing the first probe information and the second probe information that correspond to the first identification information and the second identification information, A step of determining whether there is suspicion of falsification in the first probe information based on the comparison results. Includes, In the comparison step described above, the first time information and the second time information are compared such that the first position information and the second position information are within a predetermined distance from each other. In the determination step described above, if the time difference between the compared first time information and the second time information is greater than the second threshold, it is determined that there is suspicion of falsification in the first probe information. Fraud detection methods.

10. A step of receiving and recording first probe information from a portable information terminal installed in the vehicle, which includes a plurality of time series sets of first location information which is the location information of the vehicle and first time information which represents the time when the first location information was acquired, and first identification information which is the identification information of the vehicle. The steps include receiving and recording second probe information from an in-vehicle device installed on the vehicle, which includes a plurality of time-series sets of second location information, which is the location information of the vehicle, and second time information, which represents the time when the second location information was acquired, and second identification information, which is the identification information of the vehicle; A step of comparing the first probe information and the second probe information that correspond to the first identification information and the second identification information, A step of determining whether there is suspicion of falsification in the first probe information based on the comparison results. A program that causes a computer to execute, In the comparison step described above, the first time information and the second time information are compared such that the first position information and the second position information are within a predetermined distance from each other. In the determination step described above, if the time difference between the compared first time information and the second time information is greater than the second threshold, it is determined that there is suspicion of falsification in the first probe information. program.

Images