VEHICLE NETWORK AUTHENTICATION SYSTEM, AND VEHICLE NETWORK AUTHENTICATION METHOD

• US 20150350176A1
• Filed: 12/05/2012
• Published: 12/03/2015
• Est. Priority Date: 12/05/2012
• Status: Active Grant

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Inventors: MABUCHI, Mitsuhiro
• Granted Patent: US 9,450,937 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Provided is a vehicle network authentication system such that processing by a vehicle control device can be smoothed while security of communication using dummy data is maintained. A vehicle control device as an authenticating entity is provided with an authentication unit that allocates authority in accordance with the amount of authentication of data for authentication transmitted from a vehicle control device as an authenticated entity. The vehicle control device includes an authentication data generation unit that generates the data for authentication, a data division unit that divides the generated data for authentication, and a dummy data addition unit that adds dummy data as data that is transmitted to a vehicle network together with the data for authentication.

Claims

1. A vehicle network authentication system in which communication data is transmitted and received by use of a unit of communication specified based on a communications protocol of a vehicle network, the vehicle network authentication system comprising:

a data dividing section that divides authentication data for authenticating a communication target;

a dummy data addition section that adds dummy data for a dummy representation of the divided authentication data, the dummy data being used as data to be transmitted to the vehicle network together with the authentication data; and

an authentication section that verifies the divided authentication data and the dummy data by use of a plurality of pieces of verification data for verifying the divided authentication data and gives authority according to an amount of authentication of the verified authentication data.

2. The vehicle network authentication system according to claim 1, wherein the authentication section performs authentication by use of the authentication data based on a challenge-response method.

3. The vehicle network authentication system according to claim 2, wherein

the authentication section transmits challenge data based on the challenge-response method to the vehicle network in order to authenticate a communication target, and

the data dividing section generates response data based on the challenge data transmitted to the vehicle network and generates the divided authentication data by dividing the generated response data.

4. The vehicle network authentication system according to claim 3, wherein

the authentication section performs first authentication with respect to a communication target based on the challenge data transmitted to the vehicle network, and performs second and subsequent authentication with respect to the communication target by using, as new challenge data, data in which at least one of communication data transmitted from the communication target and the challenge data has been converted by a common conversion key.

5. The vehicle network authentication system according to claim 4, wherein

the vehicle network is provided with a plurality of vehicle control devices,

the data dividing section and the dummy data addition section are provided in a vehicle control device on an authenticated side whereas the authentication section is provided in a vehicle control device on an authenticating side, and

as the first authentication, the authentication section performs authentication to verify correctness of the vehicle control device on the authenticated side while using the vehicle control device on the authenticated side as the communication target, and

as the second and subsequent authentication, the authentication section performs message authentication to verify correctness of the communication data while using communication data transmitted from the vehicle control device on the authenticated side as the communication target.

6. The vehicle network authentication system according to claim 1, wherein, based on either the round-robin method or the random method, the data dividing section determines an order of transmission of the divided authentication data.

7. The vehicle network authentication system according to claim 6, wherein when the order of transmission of the pieces of divided authentication data is determined based on the round-robin method, the authentication section verifies correctness of received data in order of reception of data that is a verification target while using the pieces of verification data sequentially in order of transmission determined based on the round-robin method.

8. The vehicle network authentication system according to claim 7, wherein

a1;

the authentication section recursively performs a process in which, when one piece of verification data selected from the pieces of verification data and data that is set as a target to be verified coincide with each other, the authentication section authenticates the data that is set as a target to be verified as partial data of the authentication data, and sets, as a target to be verified, data received subsequently to the authentication data that has been authenticated by use of verification data specified as being sequentially subsequent to the verification data used for authentication, and

b1;

the authentication section recursively performs a process in which, when one piece of verification data selected from the pieces of verification data and data that is set as a target to be verified do not coincide with each other, the authentication section identifies, as the dummy data, the data that is set as a target to be verified, and sets, as a target to be verified, data received subsequently to the data identified as the dummy data by use of the verification data used for authentication.

9. The vehicle network authentication system according to claim 6, wherein when the order of transmission of the divided authentication data is determined based on the random method, the authentication section verifies correctness of the authentication data divided by the data dividing section by recursively using the pieces of verification data.

10. The vehicle network authentication system according to claim 9, wherein

a2;

the authentication section recursively performs a process in which, when one piece of verification data selected from the pieces of verification data and data that is set as a target to be verified coincide with each other, the authentication section authenticates the data that is set as a target to be verified as partial data of the authentication data, and identifies, as an order specified in the verification data used for authentication, an order specified in the authentication data that has been authenticated, and the authentication section sets, as a target to be verified, data received subsequently to the authentication data that has been authenticated by use of verification data specified as being sequentially first among the pieces of verification data except the verification data used for authentication, and

b2;

the authentication section recursively performs a process in which, when one piece of verification data selected from the pieces of verification data and data that is set as a target to be verified do not coincide with each other, the authentication section verifies the data that is set as a target to be verified by sequentially using other verification data except verification data that has been used for authenticating the authentication data, and the authentication section identifies, as the dummy data, the data that is set as a target to be verified on condition that all the verification data and the data that is set as a target to be verified do not coincide with each other.

12. The vehicle network authentication system according to claim 1, wherein the authentication unit uses an authentication rate as the amount of authentication, the authentication rate being calculated from at least one of division results of the number of authentication establishment with respect to a division number of the authentication data and division results of a data amount of authentication data in which authentication has been established with respect to a total data amount of the authentication data.

13. The vehicle network authentication system according to claim 1, wherein

the vehicle network is provided with a plurality of vehicle control devices,

the data dividing section and the dummy data addition section are provided in a vehicle control device on an authenticated side whereas the authentication section is provided in a vehicle control device on an authenticating side, and

the authentication section changes management authority of an application program installed on at least one of the authenticated side and the authenticating side in accordance with the amount of authentication.

11. The vehicle network authentication system according to claim, wherein

when all the authentications of the divided authentication data are established, the authentication section combines pieces of authentication data in which authentication has been established together in specified order, and combines the pieces of verification data together in the specified order, and

the authentication section performs final authentication with respect to a communication target based on whether the combined authentication data and the combined verification data coincide with each other.

14. A vehicle network authentication method in which communication data is transmitted and received by use of a unit of communication specified based on a communications protocol of a vehicle network, the vehicle network authentication method comprising:

dividing authentication data for authenticating a communication target;

adding dummy data for a dummy representation of the divided authentication data, the dummy data being used as data to be transmitted to the vehicle network together with the authentication data; and

discriminating between the divided authentication data and the dummy data and giving authority according to an amount of authentication of the discriminated authentication data.

15. The vehicle network authentication method according to claim 14, wherein, in giving authority, authentication using the authentication data is performed based on a challenge-response method.