INFORMATION PROCESSING DEVICE AND INFORMATION PROCESSING METHOD

• US 20150372975A1
• Filed: 01/16/2014
• Published: 12/24/2015
• Est. Priority Date: 02/25/2013
• Status: Active Grant

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Inventors: MORIYA, Tomokazu, GOTO, Hideki, YURA, Koji
• Granted Patent: US 9,866,527 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: B60K 31/00 Vehicle fittings, acting on a single sub-unit only, for automatically controlling vehicle speed, i.e. preventing speed from exceeding an arbitrarily established velocity or maintaining speed at a particular velocity, as selected by the vehicle operator fittings acting on two or more sub-units B60W30/14; speedometers G01P; systems or devices for controlling speed in general G05D13/00 ; in traffic anti-collision system for road vehicles G08G1/16
• CPC Class Codes: B61L 15/0018 Communication with or on the vehicle or train
• CPC Class Codes: B61L 27/70 Details of trackside communication
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

An information processing device is connected to a plurality of networks and performs information processing. The networks include a control network connected to a control device in a mobile object, an information network connected to an information device in the mobile object, and an external network connected to an external device outside of the mobile object. The information processing device includes firewalls each connected to one of the networks, and a processor connected to each network via the corresponding firewall. The information processing device isolates at least the control network from the other networks.

Claims

1. An information processing device connected to a plurality of networks and performing information processing, the networks including a control network connected to a control device in a mobile object, an information network connected to an information device in the mobile object, and an external network connected to an external device outside of the mobile object,

the information processing device comprising:

firewalls each connected to one of the networks, and

a processor connected to each network via the corresponding firewall,

wherein the information processing device is configured to isolate at least the control network from the other networks, wherein

each firewall is configured to permit communication only between the processor and the network to which the firewall is connected,

the processor is configured, to receive, from a network except the control network, a request signal that requests control information about the control device, the control the processor is configured to acquire from the control network the control information requested in the request signal,

the processor is configured to generate a response signal responsive to the request signal, the response signal containing the acquired control information, and

the processor is configured to transmit the response signal to the network that is the transmission source of the request signal.

3. The information processing device according to claim 1, wherein the processor is configured to acquire the control information from the control network each time the request signal is received from the external network or the information network.

4. The information processing device according to claim 1, wherein

the processor includes a storage that stores the control information acquired from the control network, and

the processor is configured to incorporate the stored control information into the response signal.

5. The information processing device according to claim 1, wherein

the processor includes

a proxy server that changes a transmission destination of the received request signal, and

a data server that generates a response signal responsive to the received request signal,

the proxy server is configured to change a transmission destination of the received request signal to the data server,

the data server is configured to receive the request signal the transmission destination of which has been changed by the proxy server,

the data server is configured to acquire the control information requested in the received request signal, and

the data server is configured to generate the response signal containing the acquired control information.

6. The information processing device according to claim 1, wherein

the processor includes an authenticating unit that authenticates a device that has transmitted the request signal, and

the processor is configured to acquire control information requested only in a request signal transmitted from a device authenticated by the authenticating unit.

7. The information processing device according to claim 1, wherein

the processor includes a monitoring unit that monitors the request signal based on a monitoring condition, and

when determining that “

an abnormality has occurred in the request signal”

as a result of monitoring based on the monitoring condition, the monitoring unit is configured to prohibit the processor from acquiring the control information.

8. The information processing device according to claim 1, wherein the processor includes a log unit that stores the request signals chronologically.

9. The information processing device according to claim 1, wherein

the processor is configured to acquire, in response to the request signal requesting acquisition of a plurality of pieces of control information, the pieces of control information requested in the request signal one by one successively from the control network, and

the processor is configured to repeat generation of the response signal while incorporating the acquired pieces of control information in order in the response signal.

10. The information processing device according to claim 1, wherein

a protocol converter is provided between the control network and the firewall connected to the control network, and

the protocol converter is configured to convert a communication protocol of the request signal processed by the processor to a communication protocol of the control network.

11. The information processing device according to claim 1, wherein

the processor is configured to receive, from the information network, setting data relating to setting of a device in the control network, and

the processor is configured to generate, based on the setting data, a transmission signal to be transmitted to the control network.

12. The information processing device according to claim 1, wherein

the processor is configured to authenticate a transmission source of a request signal received from the information network,

the processor is configured to acquire control information requested in the request signal from the control network, and

the processor is configured to generate a response signal while incorporating the acquired control information in the response signal and to transfer the response signal to the authenticated transmission source in the information network.

13. The information processing device according to claim 1, wherein, in order to isolate the control network from the other networks, the processor is configured to permit passage of communication messages between the processor and the control network while prohibiting flow of communication messages from the other networks into the control network.

2. (canceled)

14. An information processing method implemented in an information processing device, the information processing device being connected to a plurality of networks and performing information processing, the networks including a control network connected to a control device in a mobile object, an information network connected to an information device in the mobile object, and an external network connected to an external device outside of the mobile object, wherein

a firewall is connected to each of the networks,

a processor is connected to each network via the corresponding firewall,

the information processing method comprises isolating at least the control network from the other networks;

making each firewall permit communication only between the processor and the network to which the firewall is connected;

making the processor receive, from the other network, a request signal that requests control information about the control device, wherein the control information is acquired from the control network;

making the processor acquire the control information requested in the request signal from the control network;

making the processor generate a response signal responsive to the request signal by incorporating the acquired control information in the response signal; and

making the processor transmit the response signal to the network that is the transmission source of the request signal.

15. (canceled)

16. An information processing method implemented in an information processing device, the information processing device being connected to a plurality of networks and performing information processing, the networks including a control network connected to a control device in a mobile object, an information network connected to an information device in the mobile object, and an external network connected to an external device outside of the mobile object, wherein

a firewall is connected to each of the networks,

a processor is connected to each network via the corresponding firewall,

the information processing method comprising permitting passage of communication messages between the processor and the control network and preventing flow of communication messages from the other networks into the control network;

making each firewall permit communication only between the processor and the network to which the firewall is connected;

making the processor receive, from the other network, a request signal that requests control information about the control device, wherein the control information is acquired from the control network;

making the processor acquire the control information requested in the request signal from the control network;

making the processor generate a response signal responsive to the request signal by incorporating the acquired control information in the response signal; and

making the processor transmit the response signal to the network that is the transmission source of the request signal.