On-vehicle communication system

• US 10,104,094 B2
• Filed: 12/04/2017
• Issued: 10/16/2018
• Est. Priority Date: 12/15/2014
• Status: Active Grant

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Inventors: Ichihara, Masaaki
• Primary Examiner(s): Vaughan, Michael R
• Application Number:
  US15/830,758
• Publication Number:
  US 20180091525A1
• Time in Patent Office: 316 Days
• Field of Search: None
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/121 Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

An Electric Control Unit (ECU) device connected to an on-vehicle network and a network outside a vehicle. The ECU generating an ECU receiver code using an encryption key upon receipt of a message data frame, the encryption key being shared among ECUs communicable with the ECU, successfully authenticating the message data frame received the ECU, when the ECU receiver code matches a receiver code extracted from the message data frame received by the ECU, and when the message data frame received by the ECU is successfully authenticated, generate an ECU transmitter code using the encryption key, and transmit a message data frame that includes the generated ECU transmitter code to the on-vehicle network.

Claims

1. An Electric Control Unit (ECU) device connected to an on-vehicle network and a network outside a vehicle, the ECU comprising:

a network communication interface configured to communicate via the network outside of the vehicle;

one or more processors; and

a memory coupled with and readable by the one or more processors, wherein

the memory stores a first encryption key, and

the one or more processors are configured to;

upon receipt of communication information from the network outside of the vehicle via the network communication interface;

generate a transmitter code from the received communication information by using the first encryption key, the first encryption key being different from a second encryption key that is shared among other on-vehicle ECUs communicable with the ECU device via the on-vehicle network, and

transmit, to the on-vehicle network, a message data frame that includes an identifier associated with the received communication information, the received communication information, and the generated transmitter code, wherein at least one of the other on-vehicle ECUs successfully authenticates the message data frame containing the communication information by using the first encryption key to generate a receiver code, and matching the received code with the transmitter code, upon receipt of the message data frame, and successfully authenticates other message data frames generated by the other on-vehicle ECUs by use of the second encryption key to generate the transmitter code used for the matching, upon receipt of the other message data frames.

2. The ECU device according to claim 1, wherein the one or more processors are configured to:

generate the transmitter code from the received communication information by using the first encryption key and a monotonically increasing value.

3. The ECU device according to claim 2, wherein the monotonically increasing value is a most recent accumulated travel distance.

4. The ECU device according to claim 1, wherein the ECU device is not configured to generate a receiver code for verifying message data frames.

5. The ECU device according to claim 4, wherein the ECU device is configured to receive the communication information from a multimedia external terminal that performs verification of the communication information before transmitting the communication information to the ECU device.

6. The ECU device according to claim 5, wherein

the ECU device is configured to cause connection between the external multimedia terminal and the other on-vehicle ECUs, and

the ECU device merely passes data communicated between the external multimedia terminal and the other on-vehicle ECUs.

7. A vehicle including an Electric Control Unit (ECU) device connected to an on-vehicle network and a network outside the vehicle, the ECU device comprising:

a network communication interface configured to communicate via the network outside of the vehicle;

one or more processors; and

a memory coupled with and readable by the one or more processors, wherein

the memory stores a first encryption key, and

the one or more processors are configured to;

upon receipt of communication information from the network outside of the vehicle via the network communication interface;

generate a transmitter code from the received communication information by using the first encryption key, the first encryption key being different from a second encryption key that is shared among other on-vehicle ECUs communicable with the ECU device via the on-vehicle network, and

transmit, to the on-vehicle network, a message data frame that includes an identifier associated with the received communication information, the received communication information, and the generated transmitter code, wherein at least one of the other on-vehicle ECUs successfully authenticates the message data frame containing the communication information by using the first encryption key to generate a receiver code, and matching the received code with the transmitter code, upon receipt of the message data frame, and successfully authenticates other message data frames generated by the other on-vehicle ECUs by use of the second encryption key to generate the transmitter code used for the matching, upon receipt of the other message data frames.

8. The vehicle according to claim 7, wherein the one or more processors are configured to:

generate the transmitter code from the received communication information by using the first encryption key.

9. The vehicle according to claim 8, wherein the monotonically increasing value is a most recent accumulated travel distance.

10. The vehicle according to claim 7, wherein the ECU device is not configured to generate a receiver code for verifying message data frames.

11. The vehicle according to claim 10, wherein the ECU device is configured to receive the communication information from an external multimedia terminal that performs verification of the communication information before transmitting the communication information to the ECU device.

12. The vehicle according to claim 11, wherein

the ECU device is configured to cause connection between the external multimedia terminal and the other on-vehicle ECUs, and

the ECU device merely passes data communicated between the external multimedia terminal and the other on-vehicle ECUs.

13. A method executed by an Electric Control Unit (ECU) device connected to an on-vehicle network and a network outside a vehicle, the method comprising:

upon receipt of communication information from the network outside of the vehicle via a network communication interface of an outside network-enabled ECU;

generating, by the outside network-enabled ECU, a transmitter code from the received communication information by using a first encryption key stored in a memory of the outside network-enabled ECU, the first encryption key being different from a second encryption key that is shared among other on-vehicle ECUs communicable with the ECU device via the on-vehicle network, and

transmitting, by the outside network-enabled ECU to the on-vehicle network, a message data frame that includes an identifier associated with the received communication information, the received communication information, and the generated transmitter code, wherein at least one of the other on-vehicle ECUs successfully authenticates the message data frame containing the communication information by using the first encryption key to generate a receiver code, and matching the received code with the transmitter code, upon receipt of the message data frame, and successfully authenticates other message data frames generated by the other on-vehicle ECUs by use of the second encryption key to generate the transmitter code used for the matching, upon receipt of the other message data frames.

14. The method according to claim 13, wherein the generating of the transmitter code includes generating the transmitter code using the first encryption key and a monotonically increasing value.

15. The method according to claim 14, wherein the monotonically increasing value is a most recent accumulated travel distance.

16. The method according to claim 13, wherein the outside network-enabled ECU is not configured to generate a receiver code for verifying message data frames.

17. The method according to claim 16, wherein the outside network-enabled ECU is configured to receive the communication information from an external multimedia terminal that performs verification of the communication information before transmitting the communication information to the ECU device.

18. The method according to claim 17, wherein

the outside network-enabled ECU is configured to cause connection between the external multimedia terminal and the other on-vehicle ECUs, and

the outside network-enabled ECU merely passes data communicated between the external multimedia terminal and the other on-vehicle ECUs.