UPDATE CONTROL DEVICE, TERMINAL, AND METHOD OF CONTROLLING

• US 20190057214A1
• Filed: 02/12/2018
• Published: 02/21/2019
• Est. Priority Date: 08/21/2017
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Xia, Zhengfan, Komano, Yuichi, Kawabata, Takeshi
• Application Number:
  US15/894,161
• Publication Number:
  US 20190057214A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 11/1433 during software upgrading
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/06 Authentication

Abstract

According to an embodiment, an update control device includes a first communication circuit, a second communication circuit, and a processor. The first communication circuit is configured to receive patch data for each block of the software and first authentication data for each block for authenticating software in a terminal updated using the patch data on a per-block basis. The second communication circuit is configured to transmit the patch data and the first authentication data to the terminal on a per-block basis and receive an update result for each block from the terminal. The processor is configured to request the terminal to perform rollback processing for restoring a first block to an (M−1)th block using the patch data used to update the first block to the (M−1)th block of the software, upon receipt of an update result indicating a failure in authenticating an Mth block (M>1) from the terminal.

Claims

1. An update control device configured to control update of software in a terminal connected to a network, the update control device comprising:

a first communication circuit configured to receive, from a server outside the network, patch data for each block of the software and first authentication data for each block for authenticating the software updated using the patch data on a per-block basis;

a second communication circuit configured to transmit the patch data and the first authentication data to the terminal on a per-block basis via the network and receive an update result for each block from the terminal via the network; and

a processor configured to request the terminal to perform rollback processing for restoring a first block to an (M−

1)th block of the software using the patch data used to update the first block to the (M−

1)th block of the software, upon receipt of an update result indicating a failure in authenticating an Mth block (M>

1) of the software from the terminal.

2. The device according to claim 1, wherein the patch data is data obtained on a per-block basis by performing processing based on an exclusive-or operation using the software before update and the software after update.

3. The device according to claim 1, wherein the second communication circuit is configured to, when the processor requests the terminal to perform the rollback processing, transmit the patch data corresponding to the first block to the (M−

1)th block of the software to the terminal via the network.

4. The device according to claim 3, wherein the second communication circuit is configured to, when the processor requests the terminal to perform the rollback processing, further transmit, out of second authentication data for each block for authenticating the software before update on a per-block basis, second authentication data corresponding to the first block to the (M−

1)th block of the software to the terminal via the network.

5. The device according to claim 1, wherein the terminal is configured to temporarily store the patch data received from the update control device and, when the processor requests to perform the rollback processing, restore the first block to the (M−

1)th block of the software using patch data corresponding to the first block to the (M−

1)th block of the software, out of the temporarily stored patch data.

6. The device according to claim 1, wherein

the network is an in-vehicle network, and

the terminal is an electronic control device connected to the in-vehicle network.

7. A terminal configured to communicate with an update control device via a network, the terminal comprising:

a storage configured to store software;

a communication circuit configured to receive, on a per-block basis of the software, patch data and first authentication data for authenticating a block of the software updated using the patch data, from the update control device via the network; and

a processor configured to;

apply the patch data on a per-block basis of the software; and

authenticate the software to which the patch data has been applied, using the first authentication data on a per-block basis of the software, wherein

the processor is further configured to, upon failure in authenticating an Mth block (M>

1) of the software, restore a first block to an (M−

1)th block of the software using the patch data used to update the first block to the (M−

1)th block of the software.

8. A method of controlling update of software in a terminal connected to a network, the method comprising:

receiving patch data for each block of the software and first authentication data for each block for authenticating the software updated using the patch data on a per-block basis from a server outside the network;

transmitting the patch data and the first authentication data to the terminal on a per-block basis via the network;

receiving an update result for each block from the terminal via the network; and

requesting the terminal to perform rollback processing for restoring a first block to an (M−

1)th block of the software using the patch data used to update the first block to the (M−

1)th block of the software, upon receipt of an update result indicating a failure in authenticating an Mth block (M>

1) of the software from the terminal.