Electronic module update detection

• US 8,464,068 B2
• Filed: 12/14/2006
• Issued: 06/11/2013
• Est. Priority Date: 12/14/2006
• Status: Active Grant

• Current Assignee: General Motors LLC (General Motors Company)
• Original Assignee: General Motors LLC (General Motors Company)
• Inventors: Ampunan, Nathan, Hering, Carl J.
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): BROWN, ANTHONY D
• Application Number:
  US11/610,566
• Publication Number:
  US 20080148409A1
• Time in Patent Office: 2,371 Days
• Field of Search: 713/187, 726/4, 726/17, 726/21, 726 26- 30
• US Class Current: 713/187
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

A method for detecting an unauthorized programming or installation of software on an electronic module on a vehicle. The method obtains information regarding programming of the electronic module. The information may be obtained by detecting a programming session of the electronic module or after the module has been programmed. The obtained information is compared with information identifying whether programming of the electronic module is authorized or unauthorized. A determination whether the programming is authorized or unauthorized is made based on the comparison.

Claims

1. A method for detecting an unauthorized programming of an electronic module located onboard a vehicle, comprising the steps of:

obtaining, via a wireless carrier system, information that identifies software for programming an electronic module on a vehicle;

comparing the obtained information with identifying information of authorized software for programming the electronic module using a vehicle telematics unit;

determining a location of the vehicle using vehicle hardware on the vehicle;

comparing the location of the vehicle with authorized programming locations; and

determining whether the programming of the electronic module is authorized based on the comparison of the obtained information with the identifying information and the location of the vehicle with the authorized programming locations.

2. The method of claim 1, wherein the obtaining step further comprises monitoring a vehicle communication bus for a message on the bus indicating a programming session.

3. The method of claim 1, wherein the obtaining step further comprises identifying a request to enter a programming mode.

4. The method of claim 1, wherein the obtaining step further comprises querying the electronic module for an identification of software stored on the module.

5. The method of claim 1, wherein the obtaining step further comprises querying an electronic module for a cyclic redundancy check checksum of software on the module.

6. The method of claim 1, further comprising the step of communicating the obtained software from an in-vehicle telematics unit to a call center via a wireless network.

7. The method of claim 1, wherein the step of comparing the obtained information with identifying information of authorized software further comprises comparing an identification of software stored on the module with an identification of authorized software.

8. The method of claim 7, wherein the step of comparing the obtained information with identifying information of authorized software further comprises comparing a cyclic redundancy check checksum of the software on the module with an expected checksum.

9. The method of claim 1, wherein the obtaining step further comprises logging a detection of a programming session.

10. The method of claim 9, wherein the comparing step further comprises comparing a log of the detected programming session with a list of authorized programming sessions.

11. The method of claim 1, further comprising the step of preventing programming of the module when the determination concludes that the programming is unauthorized.

12. A method for detecting an unauthorized programming of an electronic module located onboard a vehicle, comprising the steps of:

detecting programming of an electronic module using a vehicle telematics unit;

accessing a log of software programming sessions that includes an identity of the electronic module and either the number of times the electronic module has been previously programmed or a time at which the electronic module was programmed, or both;

comparing the log of software programming sessions with previously-authorized software programming sessions; and

determining whether the programming is authorized based on a comparison between the log of programming sessions and a list of previously-authorized software programming sessions.

13. The method of claim 12, further comprising preventing the programming of the module if it is determined that the programming is not authorized.

14. The method of claim 12, wherein the detecting step further comprises monitoring a vehicle communication bus for a message indicating a programming of the module.

15. The method of claim 14, wherein the determining step further comprises identifying a request to program the module.

16. The method of claim 12, wherein the determining step further comprises querying the electronic module for an identification of software stored on the module and for a cyclic redundancy check checksum of the software.

17. The method of claim 12, wherein the determining step further comprises:

comparing an identification of software stored on the module with an identification of authorized software; and

comparing a cyclic redundancy check checksum of the software on the module with an expected checksum.

18. The method of claim 12, wherein the detecting step further comprises logging a detection of the programming.

19. A method for detecting an unauthorized programming of an electronic module located onboard a vehicle, comprising the steps of:

monitoring a vehicle communication bus with an in-vehicle telematics module for messages indicating a start of a programming session for the electronic module;

detecting a message indicating the start of the programming session for the electronic module;

querying the electronic module for a software identification after completion of the programming session;

performing a cyclic redundancy check of software on the electronic module to obtain a checksum;

communicating the software identification and the checksum from the in-vehicle telematics module to a call center; and

determining from the software identification and the checksum whether the programming of the module was authorized.