GB/T 20851.4-2019Electronic toll collection - Dedicated short range communication - Part 4: Equipment application (English PDF)

3.1 Terms and definitions The terms and definitions defined in GB/T 20135-2006 and

GB/T 20839-2007 apply to this document.

3.2 Acronyms The following abbreviations apply to this document. AVI. Automatic Vehicle Identification (Automatic Vehicle Identification) DID. DirectoryIdentifier DSRC. DedicatedShortRangeCommunication ETC. Electronic Toll Collection FID. File Identifier ICC. Integrated Circuit Card MAC. Message Authentication Code OBE. On-Board Equipment RSE. Roadside Equipment UI. UnnumberedInformation

4.2 General requirements for OBE data

4.2.1 The data in OBE is organized using directories and files.

4.2.2 The directory in OBE is divided into a system directory and an application directory.The system directory is the root directory of OBE. There can be multiple subdirectories recorded, one for each application. There are multiple files in each directory, there should be no other subdirectories in the subdirectory table of Contents.

4.2.3 The files are divided into two types. key files and application files. key files store keys used to control secure access to application data; Files are used to store application data.

4.2.4 Directories and files are identified by DID and FID, respectively. Directory ID DID range is 0x00 ~ 0x0F, where DID is 0x

00 This is the root directory. The file ID FID range is 0x00 ~ 0x7F, where the FID is 0x00 is the key file. The file in the root directory is System files and application files are stored in the application directory. For ETC applications, the catalog number should be 0x01.

4.2.5 OBE data organization structure is shown in Table 1. Table 1 OBE data organization structure Directory/file ASN.1 data structurea 0x

00 Root directory 0x00 system key file SysKeyFile 0x

01 SysInfoFile 0x01 ETC Application Catalog 0x00 ETC application key file EtcAppKeyFile 0x01 ETC application vehicle information file EtcAppVehicleFile Other application directories aASN.1 data structure according to Appendix A.

4.3 OBE Key There are four types of keys. master key, maintenance key, authentication key, and encryption key. Master key sub-system master key and application master Key, the system master key is in the system key file, and the application master key is in the corresponding application key file. See Table 2 for key functions. Table

2 Key functions Key Type Key Function Application Process Master key Files can be created after passing the certification; Write to itself safely; Write securely to other keys in the same directory; The master key in the root directory is used to write the master key in the subdirectory issued Maintain a secure way to write key catalog files to releases Authentication key, directory file access, read and write permissions, control transactions Encryption and decryption of data during encryption key transmission

4.4 File Properties File access is controlled by a key. The deletion and creation of directories and files takes place under the control of the master key. Ordinary files (non-key files) have four attributes. See Table 3 for file attributes. Table

3 File attributes Attribute description Read and write freely, without any authentication or encryption processing, transmitted as clear text data Can be read or written after authentication, transmitted as clear text data Encrypted read or write data content is encrypted and transmitted as ciphertext data Prohibit read or write permission

4.5 Extended Application Interface The ETC device should provide an application interface based on the ACTION service primitive. The ACTION service primitive shall meet the requirements of GB/T 20851.3-2019. The extended ETC application interface is shown in Table 4. Table

5.1 OBE overall technical requirements

5.1.1 Wireless link communication The DSRC between OBE and RSE shall comply with the relevant provisions of GB/T 20851.1-2019 ~ GB/T 20851.3-2019.

5.1.2 Security OBE safety requirements should meet the following requirements.

a) A secure access module should be provided to store access control keys and ETC application information, etc .;

b) shall support SM4 algorithm for data access and access control;

c) The writing of all initialization data should be transmitted using the encryption method of the SM4 algorithm;

d) It should have an ICC read-write interface, which should comply with ISO /IEC 7816-1 ~ ISO /IEC 7816-4 or ISO /IEC 14443 Relevant provisions of the TYPE-A standard;

e) The supported ICC transaction process shall comply with the regulations

7.4 of JR/T 0025.9-2010.

5.1.3 Information Storage The storage of user information in OBE should be in the form of data blocks, and the addressing should be in the form of directories and files. The secure access module in the OBE should have a storage space of not less than 16k bytes.

5.1.4 Parts

5.1.4.1 Standard configuration components The two-chip type OBE should be configured with ICC read-write modules.

5.1.4.2 Optional configuration parts OBE optional configuration components. speakers, character display, red and green indicator lights, USB interface, RS232 serial port, Bluetooth module, etc.

5.1.5 Anti-disassembly and recovery The OBE should have the function of preventing the user from disassembling. Once it is disassembled, it should immediately set the corresponding standard in the corresponding information storage area in the OBE. Log byte/flag. ETC application failure caused by disassembly should be recoverable by software setting.

5.1.6 Application updates OBE should support application updates, which can be done in DSRC or other ways.

5.1.7 Transaction history OBE should support the storage of no less than 50 latest transaction records. The transaction records can be read out by DSRC or other methods.

5.1.8 Battery OBE batteries should have corresponding safety, and meet the requirements of UL1642 and UN38.3.

5.1.9 Reliability The OBE mean time between failures should be greater than 50000h.

5.1.10 Average maintenance-free time OBE average maintenance-free time should be no less than 2 years (calculated based on 10 transactions per day).

5.1.11 Environmental conditions Environmental conditions should meet the following requirements.

a) Working temperature. -25 °C ~ 70 °C, cold area -40 °C ~ 70 °C;

b) Storage temperature. -20 °C ~ 55 °C;

c) Relative working humidity. 5% ~ 100%;

d) Vibration. It shall meet the requirements for the severity level of equipment application given in the third line of Table C.1 in Appendix C of GB/T 2423.10-2008. The frequency range is 10Hz ~ 150Hz, the acceleration is 10m/s2, and the number of frequency sweep cycles in each axis direction is 20;

e) Shock. It should meet the requirements of the severe level given in the third line of Table 1 in Chapter 5 of GB/T 2423.5-1995, and the peak acceleration 300m/s2, the corresponding nominal pulse duration is 18ms, and the corresponding velocity variation is a half-sine of 3.4m/s.

5.2 RSE overall technical requirements

5.2.1 Working methods RSE works online. The RSE shall provide an application-level service primitive interface.

5.2.2 Wireless link communication The DSRC between RSE and OBE shall comply with the relevant provisions of GB/T 20851.1-2019 ~ GB/T 20851.3-2019.

5.2.3 Security The RSE should be equipped with a security access module or a chip, board or auxiliary device that achieves the same security level to store the access control secret. Key, all encryption and authentication processes are performed by secure hardware products.

5.2.4 Interface The interface requirements supported by RSE are as follows:

a) It should support the communication interface of the host computer in Ethernet mode, other RS232, RS485 or USB interface forms are optional;

b) It should have a network monitoring interface that supports RSE key parameters, configuration management, version management, diagnostic testing, log management, alarms, etc. Information monitoring function;

c) It should have TTL level isolated interface.

5.2.5 Program and application updates RSE should have the ability to update online programs and applications through the host computer interface.

5.2.6 Installation RSE equipment in the fixed installation mode shall support outdoor installation, and the protection level shall meet the requirements of GB/T 4208-2017, and may be Roadside or top-hanging method; top-hanging installation method should be adopted, and it should be hoisted in the middle of the lane, and the hanging height should not be lower than 5.5m.

5.2.7 Communication area The width of the communication area of the RSE equipment should be adjustable within the range of 3.3m. Figure