Information processing system

• US 10,445,493 B2
• Filed: 03/15/2017
• Issued: 10/15/2019
• Est. Priority Date: 03/17/2016
• Status: Active Grant

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Suzuki, Hiroki, Kishigami, Tomohisa
• Primary Examiner(s): Le, Chau
• Application Number:
  US15/459,444
• Publication Number:
  US 20170270291A1
• Time in Patent Office: 944 Days
• CPC Class Codes: B60Q 9/00 Arrangement or adaptation of signal devices not provided for in one of main groups B60Q1/00 - B60Q7/00 , e.g. haptic signalling
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 2221/033 Test or assess software

Abstract

An information processing system made up of a plurality of controllers in a vehicle has a tamperproof configuration by including, in a specific controller among the plurality of controllers: a starter putting the specific controller among the plurality of controllers in a executable state which enables the specific controller among the plurality of controllers to execute a preset program; a determiner determining, before the specific controller among the plurality of controllers is put in the executable state, whether software that is memorized in a preset memory area and at least includes the preset program is tampered; and an outputter outputting, to one of processing devices outside the vehicle. In such manner, the tampering of the software is quickly detectable while preventing an increase of communication load of a communication network and/or the information processing system.

Claims

1. An information processing system comprising:

a plurality of controllers in a vehicle, the plurality of controllers including a specific controller, the specific controller including;

a starter configured to put the specific controller in an executable state that enables the specific controller to execute a preset program;

a preset memory configured to store (i) a software that includes at least the preset program and (ii) a first hash value;

a second memory that is different than the preset memory, the second memory configured to store a second hash value,

a determiner configured to, before the specific controller is put in the executable state by the starter, compare the first hash value to the second hash value, and determine that the software has been tampered with when the first hash value does not match the second hash value; and

an outputter configured to output a preset signal to (i) at least one of the plurality of controllers other than the specific controller or (ii) one of a plurality of information processing devices disposed outside of the vehicle, in response to the determiner determining that the software has been tampered with.

2. The information processing system of claim 1, wherein

the outputter is further configured to output the preset signal to the at least one of the plurality of controllers other than the specific controller by one of:

(i) a communication line that is used for enabling communications among the plurality of controllers;

(ii) a dedicated line that is dedicated to an output of the preset signal;

or

(iii) wirelessly outputting the preset signal.

3. The information processing system of claim 1, wherein

the preset signal that is output by the outputter includes at least one of:

(i) information identifying a type of the vehicle in which the specific controller is disposed,

(ii) information identifying the specific controller,

(iii) a version of the software stored in the specific controller,

(iv) time information, or

(v) position information.

4. The information processing system of claim 1, wherein

the at least one of the plurality of controllers other than the specific controller is configured to control a warning device to output a warning in response to receiving the preset signal from the outputter, the warning at least one of a visual warning or an audio warning.

5. The information processing system of claim 1, wherein

the at least one of the plurality of controllers other than the specific controller is configured to drive a drive device disposed in the vehicle, and wherein

the at least one of the plurality of controllers other than the specific controller is further configured to restrict a drive of the drive device in response to receiving the preset signal.

6. The information processing system of claim 1, wherein

the at least one of the plurality of controllers other than the specific controller is configured to output information to an information receiver outside the information processing system, and wherein

the at least one of the plurality of controllers is further configured to transmit at least one of (i) information identifying the specific controller or (ii) information on a version of the software stored in the specific controller to the information receiver, in response to receiving the preset signal from the outputter.

7. The information processing system of claim 1, wherein

the information processing device is configured to output at least one of (i) an abnormality notification indicating an abnormality, or (ii) an inspection notification indicating that an inspection is required, and wherein

the information processing device is further configured to output the at least one of the abnormality notification or the inspection notification, in response to receiving the preset signal from the outputter.

8. The information processing system of claim 1, wherein

the at least one of the plurality of controllers other than the specific controller is configured (i) to transmit a signal to a wireless communication terminal outside of the information processing system, and (ii) to output a specific signal to the wireless communication terminal, in response to receiving the preset signal from the outputter, the specific signal including information identifying the specific controller, and wherein

the wireless communication terminal is configured

(i) to output at least one of (a) an abnormality notification indicating an abnormality, or (b) an inspection notification indicating that an inspection is required, and

(ii) to output the at least one of the abnormality notification or the inspection notification in response to receiving the specific signal.

9. The information processing system of claim 1, wherein

the at least one of the plurality of controllers other than the specific controller is configured to transmit a signal to an information receiver outside of the information processing system, and to output a first signal to the information receiver, the first signal including information that enables identification of the specific controller, in response to receiving the preset signal from the outputter, and wherein

the information receiver is configured to transmit a signal to a communication terminal outside of the information processing system, and to transmit a second signal to the communication terminal in response to receiving the first signal, and wherein

the communication terminal is configured to output at least one of (a) an abnormality notification indicating an abnormality, or (b) an inspection notification indicating that an inspection is required, in response to receiving the second signal from the information receiver.

10. The information processing system of claim 1, wherein the preset memory is a first memory device and the second memory is a second memory device separate from the first memory device.

11. The information processing system of claim 1, wherein the executable state, into which the starter puts the specific controller after the determiner determines whether the software has been tampered with, realizes a main function of the specific controller.

12. The information processing system of claim 1, wherein the preset signal indicates possible software tampering of the software in the preset memory.

13. The information processing system of claim 1, wherein

the preset memory is a first memory device and the second memory is a second memory device separate from the first memory device,

the executable state, into which the starter puts the specific controller after the determiner determines whether the software has been tampered with, realizes a main function of the specific controller,

the preset signal indicates possible software tampering of the software in the preset memory.

14. An information processing system comprising:

a plurality of controllers in a vehicle, the plurality of controllers including a specific controller, the specific controller including;

a starter configured to put the specific controller in an executable state that enables the specific controller to execute a preset program;

a preset memory configured to store a software that includes at least the preset program;

a determiner configured to determine, before the specific controller is put in the executable state by the starter, whether the software has been tampered with; and

an outputter configured to output a preset signal to (i) at least one of the plurality of controllers other than the specific controller or (ii) one of a plurality of information processing devices disposed outside the vehicle, in response to the determiner determining that the software has been tampered with, wherein

the at least one of the plurality of controllers other than the specific controller is configured to drive a drive device disposed in the vehicle, and wherein

the at least one of the plurality of controllers other than the specific controller is further configured to restrict a drive of the drive device in response to receiving the preset signal.

15. The information processing system of claim 14, wherein the executable state, into which the starter puts the specific controller after the determiner determines whether the software has been tampered with, realizes a main function of the specific controller.

16. The information processing system of claim 14, wherein the preset signal indicates possible software tampering of the software in the preset memory.

17. The information processing system of claim 14, wherein

the executable state, into which the starter puts the specific controller after the determiner determines whether the software has been tampered with, realizes a main function of the specific controller,

the preset signal indicates possible software tampering of the software in the preset memory.

18. An information processing system comprising:

a plurality of controllers in a vehicle, the plurality of controllers including a specific controller, the specific controller is configured to;

put, by a starter, the specific controller in an executable state that enables the specific controller to execute a preset program, wherein the executable state realizes a main function of the specific controller;

store, in a preset memory, a software that includes at least the preset program;

determine, by a determiner, before the specific controller is put in the executable state by the starter, whether the software has been tampered with; and

output, by an outputter, a preset signal to (i) at least one of the plurality of controllers other than the specific controller or (ii) one of a plurality of information processing devices disposed outside the vehicle, in response to the determiner determining that the software has been tampered with, wherein the preset signal indicates possible software tampering of the software in the preset memory,

wherein

the at least one of the plurality of controllers other than the specific controller is configured to drive a drive device disposed in the vehicle, and

the at least one of the plurality of controllers other than the specific controller is further configured to restrict a drive of the drive device in response to receiving the preset signal.