METHOD AND SYSTEM FOR SETTING ELECTRONIC CONTROLLER SECURITY FUNCTION

• US 20200134186A1
• Filed: 12/27/2019
• Published: 04/30/2020
• Est. Priority Date: 06/30/2017
• Status: Active Grant

• Current Assignee: Fescaro Co., Ltd.
• Original Assignee: Fescaro Co., Ltd.
• Inventors: HONG, Seok Min, LEE, Hyun Jeong
• Granted Patent: US 11,379,587 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

Provided is an electronic control unit (ECU) security function setting system including an ECU and a tester connected to the ECU through a communication network. The tester includes a security function requester configured to request a security function loader to the ECU when the ECU is in a security function setting mode; an user authenticator configured to receive a user authentication request from the ECU and perform an user authentication; and a firmware transmitter configured to transmit stored security function firmware to the ECU when the user authentication is passed, and the ECU activates an instruction present in the received security function firmware and perform a security function setting.

Claims

1. An electronic control unit (ECU) security function setting system comprising:

an ECU; and

a tester connected to the ECU through a communication network,

wherein the tester comprises;

a security function requester configured to request a security function loader to the ECU when the ECU is in a security function setting mode;

an user authenticator configured to receive a user authentication request from the ECU and perform an user authentication; and

a firmware transmitter configured to transmit stored security function firmware to the ECU when the user authentication is passed, and

the ECU activates an instruction present in the received security function firmware and perform a security function setting.

2. The ECU security function setting system of claim 1, wherein the ECU and the tester operate as watchdog-based instruction interpreters.

3. The ECU security function setting system of claim 1, wherein the ECU temporarily loads the received security function firmware to a volatile memory region of the ECU.

4. The ECU security function setting system of claim 1, wherein an instruction present in the security function firmware is an instruction related to storing, changing, or deleting values in a protected memory region present in a non-volatile memory of the ECU.

5. The ECU security function setting system of claim 1, wherein ECU checks the integrity of the received security function firmware during transmission and reception through the communication network, and then activates an instruction in the security function firmware.

6. An electronic control unit (ECU) security function setting method comprising:

requesting a security function loader to the ECU when an ECU is in a security function setting mode;

performing receiving a user authentication request from the ECU and performing an user authentication;

transmitting stored security function firmware to the ECU when the user authentication is passed;

checking the integrity of the received security function firmware during transmission and reception through a communication network;

temporarily loading the received security function firmware to a volatile memory region of the ECU; and

activating an instruction present in the received security function firmware and performing a security function setting.

7. A computer program stored in a computer readable recording medium for carrying out the method of claim 6.