Vehicle data rewrite control device and vehicle data rewrite authentication system

• US 10,621,331 B2
• Filed: 06/15/2016
• Issued: 04/14/2020
• Est. Priority Date: 06/30/2015
• Status: Active Grant

• Current Assignee: Hitachi Astemo Ltd. (Hitachi, Ltd.)
• Original Assignee: Hitachi Automotive Systems Limited (Hitachi, Ltd.)
• Inventors: Nakamura, Masaaki, Nakanishi, Kazuhiro
• Primary Examiner(s): Rahman, Shawnchoy
• Application Number:
  US15/569,423
• Publication Number:
  US 20180300472A1
• Time in Patent Office: 1,399 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

The purpose of the present invention is to provide a vehicle data rewrite control device and a data rewrite authentication system which prevent unauthorized rewriting of data due to password leakage and/or by spoofing of a connected device. The vehicle data rewrite control device outputs authentication information generated on the basis of data to be updated and a pre-stored vehicle number. In addition, the vehicle data rewrite authentication system comprises: a vehicle having an information processing device which contains pre-stored data to be updated and a vehicle number for the vehicle for which the data is updated and which generates first authentication information from the data and the vehicle number, and the vehicle data rewrite control device which generates and outputs second authentication information on the basis of the data and the vehicle number received from the information processing device; and a vehicle-user communication terminal which, when the updating of the data is permitted on the basis of the second authentication information received from the vehicle, outputs the second authentication information to the information processing device, wherein the information processing device determines whether or not the updating of the data is to be permitted by collating the first authentication information with the second authentication information received from the communication terminal.

Claims

1. A data rewrite authentication system, comprising:

an electronic control unit, ECU, which includes pre-stored data to be updated and a vehicle number for a vehicle for which the data is updated, and which generates first authentication information from the data and the vehicle number;

a vehicle which includes a vehicle data rewrite control device to generate and output second authentication information on the basis of the received data from the ECU and the vehicle number; and

a communication terminal of a user of the vehicle which outputs the second authentication information to the ECU in a case where the data update is permitted on the basis of the second authentication information received from the vehicle,

wherein the ECU collates the first authentication information and the second authentication information received from the communication terminal, and determines whether the data update is permitted,

wherein the communication terminal is set to notify the second authentication information from the vehicle, and the second authentication information is output to the set communication terminal, and

wherein the ECU collates a first time in the first authentication information, a second time acquired from a satellite, or a third time of an inner current time, and outputs data to be updated to the vehicle in a case where the data is within a predetermined expiration date.

2. The data rewrite authentication system according to claim 1,

wherein the ECU collates the first time, the second time, or the third time, and discards the pre-stored data to be updated in a case where the data is out of the predetermined expiration date.

3. The data rewrite authentication system according to claim 1,

wherein the ECU collates first vehicle location information in the first authentication information and second vehicle location information acquired from a satellite, and outputs the data to be updated to the vehicle in a case where the vehicle is within a predetermined data update area.

4. The data rewrite authentication system according to claim 3,

wherein the ECU collates the first vehicle location information and the second vehicle location information, and discards the pre-stored data to be updated in a case where the vehicle is out of a predetermined data update area.

5. An apparatus comprising:

an electronic control unit, ECU, which includes pre-stored data to be updated and a vehicle number for a vehicle for which the data is updated, and which generates first authentication information from the data and the vehicle number;

a vehicle data rewrite control device, disposed in a vehicle, configured to generate and output second authentication information on the basis of the received data from the ECU and the vehicle number; and

a communication terminal of a user of the vehicle which outputs the second authentication information to the ECU in a case where the data update is permitted on the basis of the second authentication information received from the vehicle,

wherein the ECU collates the first authentication information and the second authentication information received from the communication terminal, and determines whether the data update is permitted,

wherein the communication terminal is set to notify the second authentication information from the vehicle, and the second authentication information is output to the set communication terminal, and

wherein the ECU collates a first time in the first authentication information, a second time acquired from a satellite, or a third time of an inner current time, and outputs data to be updated to the vehicle in a case where the data is within a predetermined expiration date.

6. The apparatus according to claim 5, wherein the ECU collates the first time, the second time, or the third time, and discards the pre-stored data to be updated in a case where the data is out of the predetermined expiration date.

7. The apparatus according to claim 5, wherein the ECU collates first vehicle location information in the first authentication information and second vehicle location information acquired from a satellite, and outputs the data to be updated to the vehicle in a case where the vehicle is within a predetermined data update area.

8. The apparatus according to claim 7, wherein the ECU collates the first vehicle location information and the second vehicle location information, and discards the pre-stored data to be updated in a case where the vehicle is out of a predetermined data update area.