METHOD FOR CONFIRMING CORRECTION PROGRAM AND INFORMATION PROCESSING APPARATUS

• US 20150113520A1
• Filed: 09/24/2014
• Published: 04/23/2015
• Est. Priority Date: 10/18/2013
• Status: Active Grant

• Current Assignee: Fujitsu Limited, Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Fujitsu Limited, Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Inventors: KOTANI, Seigo, SUZUKI, Masato, OGUMA, Hisashi
• Granted Patent: US 10,157,050 B2
• Time in Patent Office: Days
• US Class Current: 717/172
• CPC Class Codes: G06F 11/1433 during software upgrading
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories

Abstract

A method includes receiving first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile, calculating second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information, transmitting the correction program to the control unit, receiving from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit, comparing the received third information with the calculated second information, and judging whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

Claims

1. A method for confirming a correction program executed by a computer, the method comprising:

receiving, by the computer, first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile;

calculating, by the computer, second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information;

transmitting, by the computer, the correction program to the control unit;

receiving, by the computer, from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit;

comparing, by the computer, the received third information with the calculated second information; and

judging, by the computer, whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

2. The method according to claim 1, wherein

the first information and the third information is information prepared by software for which authenticity is confirmed.

3. The method according to claim 2, wherein

the first information and the third information is information prepared by software for which authenticity is confirmed by a function loaded onto a Trusted Platform Module.

4. The method according to claim 1, the method further comprising:

transmitting to the control unit an instruction to validate the control program to which the correction program has been applied, when it is judged that processing of applying the correction program to the control unit has succeeded.

5. The method according to claim 1, the method further comprising:

transmitting to the control unit an instruction to roll back processing of applying the correction program, when it is judged that processing of applying the correction program to the control unit has failed.

6. The method for confirming a correction program executed by a computer according to claim 1, the method further comprising:

deciding whether a state of the control program is normal on the basis of the received first information, wherein the processing of transmitting includes transmitting the correction program to the control unit when it is decided that the state of the control program is normal.

7. A non-transitory computer-readable recording medium having stored therein a program for confirming a correction program for causing a computer to execute a process, the process comprising:

receiving first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile;

calculating second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information;

transmitting the correction program to the control unit;

receiving from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit;

comparing the received third information with the calculated second information; and

judging whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

8. The non-transitory computer-readable recording medium according to claim 7, wherein

the first information and the third information is information prepared by software for which authenticity is confirmed.

9. The non-transitory computer-readable recording medium according to claim 8, wherein

the first information and the third information is information prepared by software for which authenticity is confirmed by a function loaded into a Trusted Platform Module.

10. The non-transitory computer-readable recording medium according to claim 7, the process further comprising:

transmitting to the control unit an instruction to validate the control program to which the correction program has been applied, when it is judged that processing of applying the correction program to the control unit has succeeded.

11. An information processing apparatus comprising:

a processor configured

to receive first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile;

to calculate second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information;

to transmit the correction program to the control unit;

to receive from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit;

to compare the received third information with the calculated second information; and

to judge whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

12. The information processing apparatus according to claim 11, wherein

the first information and the third information is information prepared by software for which authenticity is confirmed.

13. The information processing apparatus according to claim 12, wherein

the first information and the third information is information prepared by software for which authenticity is confirmed by a function loaded into a Trusted Platform Module.

14. The information processing apparatus according to claim 11, the processor further configured

to transmit an instruction to validate the control program to which the correction program is applied, when it is judged that processing of applying the correction program to the control unit has succeeded.