Control information rewriting system

• US 7,068,147 B2
• Filed: 12/06/2000
• Issued: 06/27/2006
• Est. Priority Date: 12/07/1999
• Status: Expired due to Term

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Suganuma, Takeshi, Fujii, Yoshimitsu, Hozuka, Minoru
• Primary Examiner(s): Zimmerman, Brian
• Assistant Examiner(s): BROWN, VERNAL U
• Application Number:
  US09/729,836
• Publication Number:
  US 20010002814A1
• Time in Patent Office: 2,029 Days
• Field of Search: 340/5.74, 340/5.6, 340/5.72, 340/825.69, 340/5.24, 340/5.63, 340/5.62, 340/5.31, 340/10.42, 307/10.5, 307/10.1, 307/10.3, 701/29, 701/35, 380/30, 380/270
• US Class Current: 340/5.74
• CPC Class Codes: G05B 19/0426 Programming the control sequence
• CPC Class Codes: G05B 2219/23305 Transfer program into prom with passwords
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06F 8/60 Software deployment

Abstract

In a control information rewriting system, a rewriting device for vehicle ECUs and a control center are provided. A function f necessary for the rewriting device to access the ECUs is stored the control center. When data communication is carried out by way of a telephone line network, the control center acquires ID information from the rewriting device and acquires a telephone number of the call origin. When the association relationship between this ID and telephone number matches an association relationship stored in the database, the control center determines the rewriting device to be a legitimate one. Only when the control center determines that the rewriting device is a legitimate one, it transmits the function f to the rewriting device to enable rewriting of control information of the ECUs.

Claims

1. A control information rewriting system for a vehicle comprising:

an electronic control unit mounted in the vehicle for a vehicle control and having control information stored in electrically rewritable nonvolatile memory for the vehicle control;

a rewriting device connectable to the electronic control unit for rewriting the control information by transmitting predetermined identification information and associated information related to the predetermined identification information; and

a control center in data communication with the rewriting device for receiving the identification information and the associated information from the rewriting device,

wherein the control center includes

storing means for storing predetermined access information, the predetermined identification information of the rewriting device and the associated information related to the predetermined identification information, and an association relationship between the predetermined identification information and the associated information; and

legitimacy determining means in data communication with the rewriting device and for acquiring a relationship between the predetermined identification information and the associated information of the rewriting device and for comparing the acquired relationship with the association relationship between the predetermined identification information and the association information stored in the storing means, and transmitting the predetermined access information stored in the storing means to the rewriting device when the acquired relationship matches the association relationship stored in the storing means thereby to control rewriting operation of the rewriting device.

2. The control information rewriting system as in claim 1, wherein:

the rewriting device acquires from the control center as the access information a function f specific to a function F stored in the electronic control unit, and transmits to the electronic control unit a function value f(r) specific to a predetermined value r transmitted from the electronic control unit; and

the electronic control unit determines that the rewriting device is legitimate if a function value F(f(r)) specific to the function value f(r) transmitted from the rewriting device corresponds to the transmitted predetermined value r.

3. The control information rewriting system as in claim 2, wherein:

the predetermined value r is a random number generated by the electronic control unit.

4. The control information rewriting system as in claim 1, wherein:

the electronic control unit refuses access from the rewriting device for a fixed period, when determining a predetermined number of times that the rewriting device is not legitimate.

5. The control information rewriting system as in claim 1, wherein:

the associated information is inputted to the rewriting device by a user every time a state wherein data communication with the control center is possible is established; and

the rewriting device transmits the associated information inputted by the user to the control center together with the identification information.

6. The control information rewriting system as in claim 1, wherein:

a data communication possible state is established between the control center and the rewriting device by way of a telephone network; and

the control center acquires the telephone number of the rewriting device as the associated information, when the data communication possible state is established.

7. The control information rewriting system as in claim 1, wherein:

the control center refuses access from the rewriting device for a fixed period when non-matching of the acquired relationship and the association relationship is determined by the legitimacy determining means a predetermined number of times.

8. The control information rewriting system as in claim 1, wherein:

the control center further includes modification data storing means storing modification data of the control information; and

the control center transmits the modification data to the rewriting device when the electronic control unit determines that the rewriting device is legitimate.

9. The control information rewriting system as in claim 8, wherein:

the electronic control unit transmits vehicle information to the rewriting device when determining that the rewriting device is legitimate; and

the control center further includes update history storing means storing an update history of the control information pertaining to the vehicle, refers to the update history stored in the update history storing means on the basis of the vehicle information when the vehicle information from the electronic control unit is transmitted by the rewriting device, determines necessity of rewriting of the control information in that vehicle, and transmits the modification data to the rewriting device when determining that rewriting is necessary.

10. The control information rewriting system as in claim 1, wherein:

the control center updates history specific to the vehicle when rewriting of control information is completed by the electronic control unit.

11. The control information rewriting system as in claim 1, wherein:

the rewriting device erases the predetermined access information when rewriting of the control information is completed by the electronic control unit.

12. The control information rewriting system as in claim 1, wherein:

the rewriting device stops rewriting of the control information after a data communication possible state is established between the rewriting device and the control center, if data communication between the rewriting device and the control center becomes impossible before rewriting of the control information is completed by the electronic control unit.

31. The control information rewriting system as in claim 1, wherein:

the rewriting device is provided apart from the vehicle mounted with the electronic control unit.

33. The control information rewriting system as in claim 1, wherein the control center is located remotely from the electronic control unit mounted in the vehicle and from the rewriting device.

13. A control center for communication with a control information rewriting device which rewrites control information stored in a nonvolatile memory, the control center comprising:

storing means storing an association relationship between identification information of the rewriting device and associated information related to the identification information; and

legitimacy determining means in data communication with the rewriting device for acquiring an association relationship between the identification information and the associated information related to the identification information, and for transmitting rewriting permission to the rewriting device when the acquired association relationship corresponds to the association relationship stored in the storing means, thereby to control rewriting operation of the rewriting device.

14. The control center as in claim 13, wherein:

the storing means stores a history of rewriting of the control information.

15. The control center as in claim 13, further comprising:

control information transmitting means for transmitting modification data of the control information to the rewriting device.

16. The control center as in claim 14, further comprising:

determining means for determining whether the modification data should be transmitted to the rewriting device based on the history stored in the storing means.

17. The control center as in claim 14, further comprising:

history updating means for updating the history stored in the storing means when receiving data of completion of control information rewriting from the rewriting device.

34. The control information rewriting system as in claim 13, wherein the control center is located remotely from the rewriting device.

18. A control center for communication with a control information rewriting device which rewrites control information stored in an electronic control unit, the control center comprising:

storing means storing an association relationship between identification information of the rewriting device and associated information related to the identification information;

a processing unit programmed to receive information from the rewriting device that is specific to a vehicle having the electronic control unit as well as an association relationship between identification information of the rewriting device and associated information related to the identification information to determine modification data to be used to rewrite the control information, and to transmit the determined modification data to the rewriting device,

wherein the processing unit is further programmed to determine whether the rewriting device is legitimate, and to permit the rewriting device to rewrite the modification data only upon determining that the rewriting device is legitimate, and

wherein the processing unit is further programmed to compare the stored association relationship stored in the storing means with the association relationship received from the rewriting device, and to determine that the rewriting device is legitimate when the compared association relationships match.

19. The control center as in claim 18, wherein:

the processing unit is further programmed to update a history of rewriting operation of the rewriting device.

20. The control center as in claim 19, wherein:

the processing unit is further programmed to determine whether rewriting of the control information is necessary by referring to the history of rewriting operation based on the information specific to the electronic control unit and received from the rewriting device, and transmit information indicative of completion of the rewriting operation to the rewriting device when determining that rewriting is not necessary.

35. The control information rewriting system as in claim 18, wherein the control center is located remotely from the rewriting device.

21. A rewriting device for rewriting control information stored in an electronic control unit while communicating with an external device, the rewriting device comprising:

receiving means for receiving a rewriting permission from the external device;

processing execution means for executing predetermined processing with the electronic control unit in response to the receiving means receiving the rewriting permission from the external device;

control information transmitting means for acquiring the control information from the external device after the processing execution means executes the predetermined processing with the electronic control unit, and for transmitting the control information to the electronic control unit, wherein

the predetermined processing includes checking a match between the electronic control unit and the rewriting device by using access information received from the external device.

22. The rewriting device as in claim 21, further comprising:

identification information transmitting means for transmitting identification information of the rewriting device to the external device, so that the external device transmits the rewriting permission when the identification information is appropriate.

36. The control information rewriting system as in claim 21, wherein the rewriting device is provided apart from the elctronic control unit.

23. A control information rewriting system for a vehicle comprising:

an electronic control unit mounted in the vehicle for vehicle control and having control information stored in an electrically rewritable nonvolatile memory for vehicle control;

a rewriting device connectable to the electronic control unit for rewriting the control information stored in the electrically rewritable nonvolatile memory; and

a control center for performing data communication with the rewriting device and for storing access information required by the rewriting device to rewrite the control information in the electronic control unit,

wherein the rewriting device converts data received from the electronic control unit based on the access information received from the control center and transmits the converted data to the electronic control unit to enable the electronic control unit to determine whether the rewriting device is legitimate.

24. The control information rewriting system as in claim 23, wherein:

the rewriting device erases the access information received from the control center after rewriting has been completed normally in the electronic control unit.

32. The control information rewriting system as in claim 23, wherein:

the rewriting device is provided apart from the electronic control unit mounted in the vehicle.

25. A control information rewriting system for a vehicle comprising:

an electronic control unit mounted in the vehicle for a vehicle control and having control information stored in electrically rewritable nonvolatile memory for vehicle control;

a rewriting device connectable to the electronic control unit for rewriting the control information; and

a control center for performing data communication with the rewriting device and for storing predetermined access information necessary for the rewriting device to rewrite the control information,

wherein the electronic control unit determines whether the rewriting device is legitimate by receiving information which is formed by the rewriting device based on the predetermined access information received from the control center.

26. The control information rewriting system as in claim 25, wherein:

the electronic control unit outputs predetermined data to the rewriting device, receives converted data which is converted from the predetermined data by the rewriting device based on the access information, and determines the legitimacy of the rewriting device by determining whether the converted data is formed from the predetermined data.

27. The control information rewriting system as in claim 25, wherein:

the electronic control unit is set to a condition for waiting for an input of the control information to be rewritten into the nonvolatile memory when determining that the rewriting device is legitimate.

28. The control information rewriting system as in claim 25, wherein:

the electronic control unit transmits specific information specific to a vehicle to the rewriting device; and

the rewriting device determines the control information to be transmitted to the electronic control unit based on the specific information.

29. The control information rewriting system as in claim 28, wherein:

the control information to be transmitted to the electronic control unit is determined by the control center based on the specific information.

37. The control information rewriting system as in claim 25, wherein the control center is located remotely from the electronic control unit mounted in the vehicle and from the rewriting device.

30. A control information rewriting system for a vehicle comprising:

an electronic control unit mounted in the vehicle for vehicle control and having a control program stored in an electrically rewritable nonvolatile memory for the vehicle control;

a rewriting device connectable to the electronic control unit for rewriting the control program; and

a control center for performing data communication with the rewriting device,

wherein the control center is programmed to determine whether the control program has already been rewritten or is not broken by checking a check sum of the control program transmitted from the electronic control unit through the rewriting device along with vehicle specific information, and to transmit a new control program to the rewriting device so that the new control program is rewritten in the nonvolatile memory when determining that the control program has not been rewritten or is broken.

38. The control information rewriting system as in claim 30, wherein the control center is located remotely from the electronic control unit mounted in the vehicle and from the rewriting device.