Verifying electronic control unit code

• US 20090125985A1
• Filed: 11/14/2007
• Published: 05/14/2009
• Est. Priority Date: 11/14/2007
• Status: Active Grant

• Current Assignee: Caterpillar Incorporated
• Original Assignee: Caterpillar Incorporated
• Inventors: Bierdeman, Paul W., Traenkenschuh, John L., Wagner, Todd
• Granted Patent: US 8,484,752 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability

Abstract

A method and apparatus are provided for verifying authenticity of program code for an electronic control unit. In one implementation, a method is provided. According to the method, program code for an the electronic control unit is received. The method may access metadata embedded in the program code. The metadata may identify a source of the program code. The method may further communicate via a network with a server to determine a status of the program code. The method may verify the authenticity of the program code based on the source of the program code and the status.

Claims

1. A method for verifying authenticity of program code for an electronic control unit, comprising:

receiving the program code for the electronic control unit;

accessing metadata embedded in the program code, the metadata identifying a source of the program code;

communicating via a network with a server to determine a status of the program code; and

verifying the authenticity of the program code based on the source of the program code and the status.

2. The method of claim 1, wherein the program code is received directly by a machine component that determines whether to install the program code.

3. The method of claim 1, further comprising:

loading the program code into the electronic control unit when the source and the status of the program code are determined to be valid.

4. The method of claim 1, wherein the program code is received from an external code-loading device by a machine component and the machine component verifies the authenticity of the program code.

5. The method of claim 1, wherein the authenticity of the program is verified by accessing a digital signature included in the metadata.

6. The method of claim 1, wherein the metadata further includes properties of the program code, the properties including one or more of an identification of individuals that have modified the program code and an indication of when the program code was modified.

7. The method of claim 1, further comprising:

receiving a message indicating that the program code has been revoked.

8. The method of claim 1, further comprising:

verifying whether the program code has been tampered with or corrupted.

9. A system for verifying authenticity of program code for an electronic control unit, comprising:

a receiving component that receives the program code for the electronic control unit;

a communication component for communication via a network with a server to determine a status of the program code;

a verification component that accesses metadata embedded in the program code, the metadata identifying a source of the program code, the verification component further verifying the authenticity of the program code based on the source of the program code and the status.

10. The system of claim 9, wherein the verification component loads the program code into the electronic control unit when the source and the status of the program code are determined to be valid.

11. The system of claim 9, wherein the receiving component and verification component constitute a code-loading device that is external to a machine comprising the electronic control unit.

12. The system of claim 9, wherein the receiving component and verification component are included in a machine comprising the electronic control unit.

13. The system of claim 9, wherein the verification component verifies the authenticity of the program by accessing a digital signature included in the metadata.

14. The system of claim 9, wherein the metadata further includes properties of the program code, the properties including one or more of an identification of individuals that have modified the program code and an indication of when the program code was modified.

15. The system of claim 9, wherein the communication component receives a message indicating that the program code has been revoked.

16. The system of claim 9, wherein the verification component further verifies whether the program code has been tampered with or corrupted.

17. A computer-readable medium tangibly storing program instructions for verifying authenticity of program code for an electronic control unit according to a method, the method comprising:

receiving the program code for the electronic control unit;

accessing metadata embedded in the program code, the metadata identifying a source of the program code;

communicating via a network with a server to determine a status of the program code; and

verifying the authenticity of the program code based on the source of the program code and the status.

18. The computer-readable medium of claim 17, wherein the program code is received directly by a machine component and the machine component verifies the authenticity of the program code.

19. The computer-readable medium of claim 17, the method further comprising:

loading the program code into the electronic control unit when the source and the status of the program code are determined to be valid.

20. The computer-readable medium of claim 17, wherein the program code is received from an external code-loading device by a machine component and the machine component verifies the authenticity of the program code.