Vehicle-Mounted Network System

• US 20130227650A1
• Filed: 11/04/2011
• Published: 08/29/2013
• Est. Priority Date: 11/12/2010
• Status: Abandoned Application

• Current Assignee: Hitachi Automotive Systems Limited (Hitachi, Ltd.)
• Original Assignee: Hitachi Automotive Systems Limited (Hitachi, Ltd.)
• Inventors: Miyake, Junji
• Application Number:
  US13/882,617
• Publication Number:
  US 20130227650A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

Provided is a method capable of enhancing security of a vehicle-mounted network while reducing processing loads in each vehicle-mounted control device.

In a vehicle-mounted network system according to the present invention, a communication device issuing a read request or a write request on data held in the vehicle-mounted control device is previously authenticated by an authentication device (see FIG. 1).

Claims

1. A vehicle-mounted network system comprising:

a vehicle-mounted control device provided with a memory for storing data; and

an authentication device that authenticates a communication device issuing a read request or a write request on data stored in the memory provided in the vehicle-mounted control device,

wherein the authentication device performs an authentication processing on the communication device and holds a result before the communication device issues the read request or the write request,

the vehicle-mounted control device inquires at the authentication device about the result of the authentication processing on the communication device when receiving the read request or the write request from the communication device,

accepts the read request or the write request when the authentication device authenticates the communication device, and

denies the read request or the write request when the authentication device does not authenticate the communication device.

2. The vehicle-mounted network system according to claim 1, wherein, when responding completion of the authentication processing to the communication device, the authentication device transmits the response without containing information on whether authentication is made in the response.

3. The vehicle-mounted network system according to claim 1, wherein the authentication device operates as a communication gateway for relaying communication between devices connected to the vehicle-mounted network system.

4. The vehicle-mounted network system according to claim 3, wherein the authentication device relays communication between the vehicle-mounted control device and the communication device, and

when the communication device is not authenticated in the authentication processing on the communication device, the authentication device does not relay communication from the communication device to the vehicle-mounted control device.

5. The vehicle-mounted network system according to claim 1, wherein the vehicle-mounted control device periodically confirms whether communication with the authentication device is established, and

when the connection with the authentication device is not confirmed, the vehicle-mounted control device denies the read request or the write request from the communication device.

6. The vehicle-mounted network system according to claim 1, wherein the authentication device periodically confirms whether connection with the vehicle-mounted control device is established, and

when the connection with the vehicle-mounted control device is not confirmed, the authentication device does not authenticate the communication device in the authentication processing on the communication device.

7. The vehicle-mounted network system according to claim 1, wherein the authentication device periodically confirms whether connection with the vehicle-mounted control device is established, and

when the connection with the vehicle-mounted control device is not confirmed, the authentication device originates an alarm indicating a fact.

8. The vehicle-mounted network system according to claim 1, wherein the authentication device monitors communication between the vehicle-mounted control device and the authentication device, and

when detecting an interference or block against the communication between the vehicle-mounted control device and the authentication device from another device or when detecting that another device spoofs as the authentication device, the authentication device originates an alarm indicating the fact.

9. The vehicle-mounted network system according to claim 1, wherein, when the vehicle-mounted control device and the communication device are in communication after the communication device is authenticated in the authentication processing, the authentication device notifies a fact to other devices connected to the vehicle-mounted network system.

10. The vehicle-mounted network system according to claim 1, wherein, when authenticating the communication device in the authentication processing, the authentication device distributes a communication identifier indicating the authentication to the communication device,

when receiving the read request or the write request from the communication device, the vehicle-mounted control device confirms whether the communication device holds the communication identifier,

accepts the read request or the write request when the communication device holds the communication identifier, and

denies the read request or the write request when the communication device does not hold the communication identifier.

11. The vehicle-mounted network system according to claim 1, wherein the authentication device is configured to update a processing procedure performed in the authentication processing.

12. The vehicle-mounted network system according to claim 1, wherein the authentication device performs the authentication processing by verifying a digital signature based on a public key encryption system.

13. The vehicle-mounted network system according to claim 1, wherein the authentication device performs the authentication processing in a challenge and response system.

14. The vehicle-mounted network system according to claim 5, wherein the vehicle-mounted control device uses a challenge and response system or a message ID hopping system to confirm whether connection with the authentication device is established.

15. The vehicle-mounted network system according to claim 6, wherein the authentication device uses a challenge and response system or a message ID hopping system to confirm whether connection with the vehicle-mounted control device is established.