Communication system

• US 7,295,136 B2
• Filed: 02/25/2005
• Issued: 11/13/2007
• Est. Priority Date: 02/27/2004
• Status: Expired due to Fees

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Wakiyama, Kenichi
• Primary Examiner(s): PHAM, TOAN NGOC
• Application Number:
  US11/065,284
• Publication Number:
  US 20050190619A1
• Time in Patent Office: 991 Days
• Field of Search: 340/995.27, 340/5.8, 340/5.86, 340/5.1, 340/425.5, 340/426.1, 340/505, 340/506, 340/568.1, 340/571, 702/165, 713193-194, 701/32, 701/35
• US Class Current: 340/995.27
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G11C 16/22 Safety or protection circuits preventing unauthorised or accidental access to memory cells
• CPC Class Codes: G11C 7/24 Memory cell safety or protection circuits, e.g. arrangements for preventing inadvertent reading or writing; Status cells; Test cells
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD

Abstract

In a communication system, a receiving module provided in a second electronic unit receives first information transmitted from a first electronic unit. A comparing module provided in the second electronic unit compares the received first information with second information previously stored in the second electric unit to determine whether data stored in the first electronic unit is tampered based on the compared result.

Claims

1. A communication system with first and second electronic units communicably coupled to each other, the first electronic unit storing data, the communication system comprising:

a transmitting module provided in the first electronic unit and configured to transmit to the second electronic unit first information indicative of a feature of the data stored in the first electronic unit in response to when the first electronic unit detects its shutdown state;

a storing module provided in the second electronic unit and configured to receive the first information transmitted from the transmitting module and to store the received first information as second information;

a first transmitting module provided in the first electronic unit and configured to transmit to the second electronic unit the first information in response to when the first electronic unit starts to operate;

a receiving module provided in the second electronic unit and configured to receive the first information transmitted from the first transmitting module; and

a comparing module provided in the second electronic unit and configured to compare the received first information with the second information to determine whether the data stored in the first electronic unit is tampered based on the compared result.

2. A communication system according to claim 1, wherein the first information is the data itself stored in the first electronic unit.

3. A communication system according to claim 1, wherein the first information is a function value obtained by passing the data as an argument to a predetermined function.

4. A communication system according to claim 1 wherein the storing module is provided with a storage medium and is configured to previously store the second information in the storage medium, the storage medium being designed to a tamper resistant module.

5. A communication system according to claim 1, wherein the data includes at least one of computed data that varies during operations of the first electronic unit, a program, and constant data.

6. A communication system according to claim 1, further comprising:

a first termination module provided in the first electronic unit and configured to execute a termination processing in response to when the first electronic unit detects its shutdown state after that the second transmitting module transmits to the second electronic unit the first information; and

a second termination module provided in the second electronic unit and configured to execute a termination processing in response to when the second electronic unit detects its shutdown state after that the storing module receives the first information transmitted from the second transmitting module to store the received first information as the second information.

7. A communication system with first and second electronic units communicably coupled to each other, the first electronic unit storing data, the communication system comprising:

a first transmitting module provided in the first electronic unit and configured to transmit to the second electronic unit first information indicative of a feature of the data stored in the first electronic unit;

a storing module provided in the second electronic unit and configured to previously store second information corresponding to the first information;

a receiving module provided in the second electronic unit and configured to receive the first information transmitted from the first electronic unit; and

a comparing module provided in the second electronic unit and configured to compare the received first information with the second information to determine whether the data stored in the first electronic unit is tampered based on the compared result, wherein the data stored in the first electronic unit has been updated with a predetermined change tendency during operations of the first electronic unit, the first transmitting module is configured to transmit to the second electronic unit the data itself as the first information every predetermined timing, the receiving module is configured to receive the data transmitted from the first electronic unit every predetermined timing, and the comparing module is configured to compare a relationship between a current value of the data and a previous value thereof with the predetermined change tendency, and to determine that the data stored in the first electronic unit is tampered when the relationship is mismatched with the predetermined change tendency, the current value of the data being currently received by the receiving unit, the previous value of the data being received by the receiving unit previous to the current value.

8. A communication system with first and second electronic units communicably coupled to each other, the first electronic unit storing data, the communication system comprising:

a first transmitting module provided in the first electronic unit and configured to transmit to the second electronic unit first information indicative of a feature of the data stored in the first electronic unit;

a storing module provided in the second electronic unit and configured to previously store second information corresponding to the first information;

a receiving module provided in the second electronic unit and configured to receive the first information transmitted from the first electronic unit; and

a comparing module provided in the second electronic unit and configured to compare the received first information with the second information to determine whether the data stored in the first electronic unit is tampered based on the compared result, wherein the first information is a function value obtained by passing the data as an argument to a one-way function.

9. A communication system with first and second electronic units communicably coupled to each other, the first electronic unit storing data, the communication system comprising:

a first transmitting module provided in the first electronic unit and configured to transmit to the second electronic unit first information indicative of a feature of the data stored in the first electronic unit;

a storing module provided in the second electronic unit and configured to previously store second information corresponding to the first information;

a receiving module provided in the second electronic unit and configured to receive the first information transmitted from the first electronic unit; and

a comparing module provided in the second electronic unit and configured to compare the received first information with the second information to determine whether the data stored in the first electronic unit is tampered based on the compared result,

wherein the first transmitting module is configured to;

pass the data as an argument to a one-way function every predetermined timing to calculate a first function;

store therein the first function calculated every predetermined timing; and

transmit to the second electronic unit a new function value of the first function calculated every predetermined timing and an old function value thereof stored therein at each predetermined timing,

wherein the receiving module is configured to receive the new and old function values transmitted from the first electronic unit every predetermined timing,

wherein the storing module is configured to store the received new function value as the second information,

wherein the comparing module is configured to;

compare the old function value currently received by the receiving module with the new function value previously received by the receiving module to be stored by the storing module as the second information; and

determine that the data stored in the first electronic unit is tampered when the old function value currently received by the receiving module is inconsistent with the new function value previously received by the receiving module to be stored by the storing module.

10. A communication system installed in a vehicle and having first and second electronic control units communicably coupled to each other for controlling devices installed in the vehicle, the first electronic control unit storing data, the communication system comprising:

a transmitting module provided in the first electronic control unit and configured to transmit to the second electronic control unit first information indicative of a feature of the data stored in the first electronic unit in response to when the first electronic control unit detects its shutdown state;

a storing module provided in the second electronic control unit and configured to receive the first information and to store the received first information as second information;

a first transmitting module provided in the first electronic control unit and configured to transmit to the second electronic control unit the first information in response to when the first electronic control unit starts to operate;

a receiving module provided in the second electronic control unit and configured to receive the first information transmitted from the first transmitting module; and

a comparing module provided in the second electronic control unit and configured to compare the received first information with the second information to determine whether the data stored in the first electronic control unit is tampered based on the compared result.

11. A communication system according to claim 10, wherein the vehicle has an ignition switch and a battery, and the ignition switch is connected to the battery and the first and second electronic control units, respectively, so that power is fed from the battery to each of the first and second electronic control units through the ignition switch, and the transmitting module transmits to the second electronic control unit the first information in response to when the first electronic control unit detects a turning off of the ignition switch corresponding to its shutdown state.