Access restriction device, on-board communication system and method for communication restriction

• US 10,027,672 B2
• Filed: 01/17/2014
• Issued: 07/17/2018
• Est. Priority Date: 01/31/2013
• Status: Active Grant

• Current Assignee: Autonetworks Technologies, Ltd. (Sumitomo Corporation), Sumitomo Electric Industries Limited (Sumitomo Corporation), Sumitomo Wiring Systems Limited (Sumitomo Corporation)
• Original Assignee: Autonetworks Technologies, Ltd. (Sumitomo Corporation), Sumitomo Electric Industries Limited (Sumitomo Corporation), Sumitomo Wiring Systems Limited (Sumitomo Corporation)
• Inventors: Noda, Tetsuya, Horihata, Satoshi, Okada, Hiroshi, Adachi, Naoki
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): TRUONG, THONG P
• Application Number:
  US14/764,019
• Publication Number:
  US 20150358329A1
• Time in Patent Office: 1,642 Days
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

An access restriction device as well as an on-board communication system and a method for communication restriction, which prevent outside leakage of information caused by unauthorized access of malicious programs to an in-car network. The communication between the in-car network of the vehicle and an external device is performed by a security controller. The security controller can perform addition or update of a program involving processing for transmission and reception of the information. The security controller performs processing for restricting access to information of the in-car network performed by program execution according to an access authorization level of each program and an access permission level of each type of information. The security controller restricts the transmission depending on the access authorization level of each program and the access permission level of each type of information in case of transmitting the information to the in-car network by the program execution.

Claims

1. An access restriction device to be installed in a vehicle, the access restriction device comprising:

a first receiver/transmitter communicating with an on-board device by way of an in-car network arranged in the vehicle;

a second receiver/transmitter communicating with an external device;

a first memory storing a program which performs processing on information transmitted and received by the first receiver/transmitter and/or processing on information transmitted and received by the second receiver/transmitter;

a processor programmed to execute one or a plurality of programs stored in the first memory, including;

performing addition or update of a program to be executed by the processor by communicating between the second receiver/transmitter and the external device;

determining, for each program, a level of access authorization with respect to information received with the first receiver/transmitter;

determining, for each type of information received with the first receiver/transmitter, a level of access authorization for permission to access the information received with the first receiver/transmitter, the received information being identified on the basis of;

(i) an identifier number appended to a frame to be transmitted or received, or (ii) an order in which information is stored in the frame; and

acquire position information of the vehicle;

determine whether or not the position of the vehicle according to the acquired position information is a predetermined position or within a predetermined position region;

determine whether or not the vehicle is in a stopped state, depending on the acquired information regarding the vehicle;

restricting access to the information, depending on;

(i) the determined level of access authorization of the received information and the determined level of access authorization for permission, when an access request is made for the information received by the first receiver/transmitter, (ii) a determination result of the position of the vehicle with respect to the predetermined position or the predetermined position region, and (iii) if the vehicle is determined as being not in the stopped state.

2. The access restriction device according to claim 1, wherein the processor restricts information transmission from the first receiver/transmitter to the on-board device, depending on the determined level of access authorization of the received information and the determined level of access authorization for permission, when a request to transmit information from the first receiver/transmitter to the in-car network is made.

3. The access restriction device according to claim 1, wherein the processor restricts the addition or update of the program depending on the access authorization level of the program and the determination result.

4. The access restriction device according to claim 1, wherein the acquired information is velocity information of the vehicle and/or information indicating an operation state of a motor of the vehicle.

5. The access restriction device according to claim 1, further comprising:

a second memory that stores access authorization level information in which a plurality of program distributors are associated with respective levels of access authorization;

wherein the processor determines the level of access authorization of the received information on the basis of the access authorization level information stored in the second memory.

6. The access restriction device according to claim 1, wherein the processor is further programmed to:

block the information transmission when the amount of information transmitted from the first receiver/transmitter to the in-car network surpasses a predetermined amount.

7. The access restriction device according to claim 6, wherein the predetermined amount is an amount determined according to the level of access authorization of the program.

8. The access restriction device according to claim 1, wherein the processor is further programmed to:

in response to the processor restricting access to information, generate log information capturing information on the access restriction; and

a third memory that stores the generated log information.

9. An on-board communication system comprising:

one or more on-board devices, and

an access restriction device connected to the one or more on-board devices by way of an in-car network, the access restriction device including;

a first receiver/transmitter communicating with an on-board device by way of an in-car network arranged in the vehicle;

a second receiver/transmitter communicating with an external device;

a memory storing a program which performs processing on information transmitted and received from the first receiver/transmitter and/or processing on information transmitted and received from the second receiver/transmitter;

a processor programmed to execute the program stored in the memory, the program having steps including;

performing addition or update of a program to be executed by the processor by communicating between the second receiver/transmitter and the external device;

determining, for each program, a level of access authorization with respect to information received with the first receiver/transmitter;

determining, for each type of information received with the first receiver/transmitter, a level of access authorization for permission to access the information received with the first receiver/transmitter, the received information being identified on the basis of;

(i) an identifier number appended to a frame to be transmitted or received, or (ii) an order in which information is stored in the frame;

acquiring position information of the vehicle;

determining whether or not the position of the vehicle according to the acquired position information is a predetermined position or within a predetermined position region;

determining whether or not the vehicle is in a stopped state, depending on the acquired information regarding the vehicle; and

restricting access to the information, depending on the determined level of access authorization of the received information and the determined level of access authorization for permission, when an access request is made for the information received by the first receiver/transmitter, (ii) a determination result of the position of the vehicle with respect to the predetermined position or the predetermined position region, and (iii) if the vehicle is determined as being not in the stopped state;

wherein the on-board device is configured to communicate with the external device via the access restriction device.

10. A communication restriction method utilizing an access restriction device to be installed in a vehicle, the access restriction device including:

(i) a first receiver/transmitter which communicates with an on-board device by way of an in-car network arranged in the vehicle;

(ii) a second receiver/transmitter which communicates with an external device;

(iii) a memory storing a program which performs processing concerning information to be transmitted and received with the first receiver/transmitter and/or processing concerning information to be transmitted and received with the second receiver/transmitter;

(iv) a processor which executes one or a plurality of programs stored in the memory;

the communication restriction method restricting the communication of the on-board device and the external device by utilizing the access restriction device;

the communication restriction method comprising;

determining, for each program, a level of access authorization for information received with the first receiver/transmitter;

determining, for each type of information received in the first receiver/transmitter, a level of access authorization for permission to access information received with the first receiver/transmitter, the received information being identified on the basis of;

(i) an identifier number appended to a frame to be transmitted or received, or (ii) an order in which information is stored in the frame;

acquiring position information of the vehicle;

determining whether or not the position of the vehicle according to the acquired position information is a predetermined position or within a predetermined position region;

determining whether or not the vehicle is in a stopped state, depending on the acquired information regarding the vehicle; and

restricting access to the information, depending on;

(i) the determined level of access authorization of the received information and the determined level of access authorization for permission, when an access request is made for the information received by the first receiver/transmitter, (ii) a determination result of the position of the vehicle with respect to the predetermined position or the predetermined position region, and (iii) if the vehicle is determined as being not in the stopped state.