OVER-THE-AIR VEHICLE SYSTEMS UPDATING AND ASSOCIATED SECURITY PROTOCOLS

• US 20160366247A1
• Filed: 08/25/2016
• Published: 12/15/2016
• Est. Priority Date: 06/25/2010
• Status: Active Grant

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Motor Engineering & Manufacturing North America Incorporated (Toyota Motor Corporation)
• Inventors: Lewis, Derek Lane
• Granted Patent: US 12,041,171 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G01C 21/3896 Transmission of map data from central databases
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems

Abstract

A method of updating a vehicle ECU includes establishing communication between a data communications module of a vehicle and an update server via a cellular network; validating the vehicle using a key exchange protocol between the data communications module and the update server; and sending update information from the update server to the data communications module of the vehicle via the cellular network, the update information configured to be used to update the vehicle ECU.

Claims

1. A vehicle comprising:

a vehicle ECU;

a data communications module; and

machine readable instructions stored in one or more memory modules that, when executed by a processor, cause the vehicle to;

send a first security key from the data communications module to an update server;

receive, at the data communications module, a request for an updated security key from the update server after sending the first security key;

send a second security key from the data communications module to the update server after receiving the request for the updated security key;

receive, at the data communications module, update information from the update server after sending the second security key; and

update the vehicle ECU with the update information.

2. The vehicle of claim 1, further comprising a diagnostic ECU, wherein when executed by the processor, the machine readable instructions further cause the vehicle to provide the update information to the diagnostic ECU.

3. The vehicle of claim 2, wherein when executed by the processor, the machine readable instructions further cause the vehicle to send the update information from the diagnostic ECU to the vehicle ECU.

4. The vehicle of claim 3, further comprising a CAN network, wherein the diagnostic ECU sends the update information to the vehicle ECU over the CAN network.

5. The vehicle of claim 1, wherein when executed by the processor, the machine readable instructions further cause the vehicle to send current ECU update version information and VIN number information from the data communications module to the update server.

6. The vehicle of claim 1, wherein when executed by the processor, the machine readable instructions further cause the vehicle to encrypt at least one of the first security key and the second security key.

7. The vehicle of claim 1, wherein the vehicle ECU is a navigation ECU.

8. The vehicle of claim 1, wherein the vehicle ECU is an engine control unit.

9. A method of updating a vehicle ECU, the method comprising:

determining that an ignition start of a vehicle has occurred;

a data communications module of the vehicle contacting an update server to determine whether an update to the vehicle ECU is available upon the ignition start of the vehicle;

receiving update information from the update server at the data communications module of the vehicle after contacting the update server; and

updating the vehicle ECU with the update information.

10. The method of claim 9, further comprising:

the data communications module of the vehicle sending a first security key to the update server;

the data communications module of the vehicle receiving a request for an updated security key from the update server after sending the first security key; and

the data communications module of the vehicle sending a second security key to the update server after receiving the request for the updated security key.

11. The method of claim 10, further comprising encrypting at least one of the first security key and the second security key.

12. The method of claim 9, further comprising:

the data communications module of the vehicle receiving an indication of the availability of the update.

13. The method of claim 9, further comprising:

the data communications module of the vehicle sending an indication that the data communications module is ready for the update.

14. The method of claim 9, further comprising:

the data communications module of the vehicle sending current ECU update version information and VIN number information to the update server.

15. A vehicle comprising:

a vehicle ECU;

a data communications module; and

machine readable instructions stored in one or more memory modules that, when executed by a processor, cause the vehicle to;

determine that an ignition start of the vehicle has occurred;

contact an update server to determine whether an update to the vehicle ECU is available upon the ignition start of the vehicle;

receive update information from the update server at the data communications module after contacting the update server; and

update the vehicle ECU with the update information.

16. The vehicle of claim 15, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:

send a first security key from the data communications module to the update server;

receive, at the data communications module, a request for an updated security key from the update server after sending the first security key; and

send a second security key from the data communications module to the update server after receiving the request for the updated security key.

17. The vehicle of claim 16, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:

encrypt at least one of the first security key and the second security key.

18. The vehicle of claim 15, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:

receive, at the data communications module, an indication of the availability of the update.

19. The vehicle of claim 15, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:

send an indication that the data communications module is ready for the update from the data communications module to the update server.

20. The vehicle of claim 15, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:

send current ECU update version information and VIN number information from the data communications module to the update server.