VEHICLE, MAINTENANCE DEVICE, MAINTENANCE SERVICE SYSTEM, AND MAINTENANCE SERVICE METHOD

• US 20110083161A1
• Filed: 06/04/2008
• Published: 04/07/2011
• Est. Priority Date: 06/04/2008
• Status: Abandoned Application

• Current Assignee: Renesas Electronics Corporation
• Original Assignee: Renesas Electronics Corporation
• Inventors: Tashiro, Kazuo, Hirokawa, Masayuki, Ishida, Takayuki
• Application Number:
  US12/996,156
• Publication Number:
  US 20110083161A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G07C 2205/02 using a vehicle scan tool
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

The vehicle includes electronic control units, and performs an authentication process to judge the validity of an external device outside the vehicle, e.g. a maintenance device, which tries accessing the electronic control unit. Based on the result of the judgment, the vehicle decides a range in which the maintenance device can access the electronic control unit. In the authentication, e.g. both the maintenance device and the vehicle use authentication microcomputers respectively. According to the invention, an external device outside the vehicle can be inhibited from making an unwanted access to the electronic control unit of the vehicle.

Claims

1. A vehicle comprising:

a plurality of electronic control units arranged to electronically control an action of the vehicle;

an on-vehicle network connected with the electronic control units; and

an externally-connecting electronic control unit operable to interface the on-vehicle network to a maintenance device outside the vehicle,

wherein the externally-connecting electronic control unit performs an authenticate process on the maintenance device in order to decide a range in which the maintenance device can access the electronic control units.

2. The vehicle according to claim 1, wherein the externally-connecting electronic control unit has an authentication microcomputer for performing the authentication process, and

the authentication microcomputer performs the authentication process on an authentication microcomputer mounted on the maintenance device.

3. The vehicle according to claim 2, wherein the electronic control units each have an authentication microcomputer, and

the authentication microcomputer mounted on the electronic control unit performs an authentication process on an authentication computer mounted on another electric control unit in order to judge validity thereof.

4. The vehicle according to claim 3, wherein the authentication microcomputers mounted on the electronic control units start the authentication process in response to power-on of operating power.

5. The vehicle according to claim 1, wherein the externally-connecting electronic control unit decides a range of access to be restricted, based on an ID code provided by the maintenance device connected thereto, after having checked validity of the maintenance by the authentication process.

6. The vehicle according to claim 5, further comprising:

a memory for holding a history of maintenance by the maintenance device,

wherein the memory is targeted for control of the access range according to a result of the authentication process.

7. A vehicle comprising:

a plurality of electronic control units arranged to electronically control an action of the vehicle;

an on-vehicle network connected with the electronic control units; and

an externally-connecting electronic control unit operable to interface the on-vehicle network to a maintenance device outside the vehicle,

wherein the externally-connecting electronic control unit has an authentication microcomputer, and

the authentication microcomputer performs an authentication process on the maintenance device in order to decide whether or not to permit the maintenance device to access the electronic control unit.

8. A vehicle comprising:

a plurality of electronic control units arranged to electronically control an action of the vehicle;

an on-vehicle network connected with the electronic control units; and

an externally-connecting electronic control unit for interfacing the on-vehicle network to an external device outside the vehicle,

wherein the externally-connecting electronic control unit performs an authentication process on the external device outside the vehicle in order to decide whether or not to permit the external device to access the electronic control unit.

9. A maintenance device for supporting maintenance of a vehicle having a plurality of electronic control units operable to electrically control an action of the vehicle, comprising:

an authentication microcomputer connectable with an externally-connecting electronic control unit of the vehicle; and

a microcomputer operable to control the maintenance support,

wherein the authentication microcomputer and the externally-connecting electronic control unit connected therewith perform an authentication process on each other, and

a range in which the microcomputer operable to control the maintenance support can access the electronic control unit of the vehicle is decided according to a result of the authentication process by the externally-connecting electronic control unit.

10. The maintenance device according to claim 9, wherein the authentication microcomputer sends a result of a judgment on validity of the vehicle connected therewith to the microcomputer operable to control the maintenance support.

11. A maintenance service system, comprising:

a maintenance device for supporting maintenance of a vehicle having a plurality of electronic control units operable to electrically control an action of the vehicle; and

an online server operable to manage maintenance information of the vehicle,

wherein the maintenance device is allowed to access maintenance information in the online server on condition that the vehicle, maintenance device and online server have been authenticated as results of authentication processes between the vehicle and maintenance device, between the maintenance device and online server, and between the online server and vehicle, and

a range in which the maintenance device can access the electronic control unit of the vehicle is decided according to a result of the authentication process between the vehicle and maintenance device.

12. The maintenance service system according to claim 11, wherein the maintenance device has an authentication microcomputer for performing a mutual authentication process between the maintenance device and online server,

the online server is paired with an authentication microcomputer of the vehicle, and the online server and authentication microcomputer perform an authentication process on each other, and

the authentication microcomputer of the maintenance device is paired with the authentication microcomputer of the vehicle, and the authentication microcomputers perform an authentication process on each other.

13. A vehicle maintenance service method, using a maintenance device for supporting maintenance of a vehicle having a plurality of electronic control units operable to electrically control an action of the vehicle, and an online server operable to manage maintenance information of the vehicle, comprising:

a first step of performing an authentication process between the vehicle and maintenance device;

a second step of performing an authentication process between the maintenance device and online server;

a third step of performing an authentication process between the online server and vehicle;

a fourth step of accessing maintenance information of the online server by the maintenance device on condition that the vehicle, maintenance device, and online server have been authenticated as results of the first to third steps; and

a fifth step of accessing the electronic control unit of the vehicle by the maintenance device in a range determined according to a result of the authentication process between the maintenance device and vehicle.

14. The maintenance service method according to claim 13, wherein the maintenance device includes an authentication microcomputer for performing a mutual authentication process between the maintenance device and online server,

the online server performs an authentication process between the online server and an authentication microcomputer mounted on the automobile, and

the authentication microcomputer of the maintenance device performs an authentication process between the authentication microcomputer of the maintenance device and the authentication microcomputer mounted on the automobile.