Data communication authentication system for vehicle gateway apparatus for vehicle data communication system for vehicle and data communication apparatus for vehicle

• US 9,489,544 B2
• Filed: 06/30/2014
• Issued: 11/08/2016
• Est. Priority Date: 02/20/2012
• Status: Active Grant

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Naitou, Hideto, Natsume, Mitsuyoshi, Harata, Yuzo, Hanai, Shouichirou
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): Malinowski, Walter
• Application Number:
  US14/318,723
• Publication Number:
  US 20140317729A1
• Time in Patent Office: 862 Days
• Field of Search: 726/4, 726/9, 726/21
• US Class Current: 1/1
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

A vehicular data communication system includes an authentication device for authenticating an external tool connected to a bus, an authentication control device for determining whether an external tool is authenticated by the authentication device and for setting an authenticated state to permit a data communication between the external tool and an access target ECU on the bus upon determining that the external tool is authenticated by the authentication device, and an authentication maintain device for maintaining the authenticated state within a predetermined period after the authenticated state is set by the authentication control device.

Claims

1. A vehicular data communication authentication system in which an external tool is connectable to a bus connected with electronic control units (ECUs) including an access target ECU, the vehicular data communication authentication system comprising:

an authentication device that performs authentication of the external tool connected to the bus;

an authentication control device that;

determines whether or not a result of the authentication of the external tool performed by the authentication device is affirmative;

when determining that the result of the authentication of the external tool is affirmative, sets an authenticated state as a state in which the external tool is authenticated;

permits a data communication between the external tool and the access target ECU as long as the authenticated state is set;

when determining that the result of the authentication of the external tool is not affirmative, does not set the authenticated state; and

prohibits the data communication between the external tool and the access target ECU as long as the authenticated state is not set; and

an authentication maintain device that maintains the authenticated state within a specific period of time after the authenticated state is set by the authentication control device, and that ends the authenticated state and starts prohibiting the data communication between the external tool and the access target ECU upon elapse of the specific period of time, wherein;

the specific period of time is a period during which an immobilizer is in an unlocked state; and

the external tool is an apparatus other than a wireless communication device that sets the unlocked state and a locked state of the immobilizer, the vehicular data communication authentication system further comprising;

a vehicular gateway apparatus that partitions the external tool from the ECUs, wherein;

the authentication device, the authentication control device and the authentication maintain device are provided in the vehicular gateway apparatus, and

a communication control device that, in a situation where the authenticated state is not set by the authentication device, permits the data communication between the external tool and the access target ECU only for a specified data, wherein

the vehicular gateway apparatus and the access target ECU is mounted in a vehicle;

the external tool is external with respect to the vehicle;

the vehicular gateway apparatus is separated from the access target ECU and the external tool and

the communication control device is provided in the vehicular gateway apparatus.

2. The vehicular data communication authentication system according to claim 1, wherein

the authentication control device determines whether or not it is necessary to set the authenticated state based on a received data request from the external tool.

3. The vehicular data communication authentication system according to claim 1, wherein the authentication control device determines that it is necessary to set the authenticated state when the received data request comprises a non-regulation message.

4. A vehicular data communication authentication system in which an external tool is connectable to a bus connected with electronic control units (ECUs) including an access target ECU, the vehicular data communication authentication system comprising:

an authentication device that performs authentication of a vehicle state;

an authentication control device that;

determines whether or not a result of the authentication of the vehicle state performed by the authentication device is affirmative;

when determining that the result of the authentication of the vehicle state is affirmative, sets an authenticated state as a state in which the external tool is authenticated;

permits a data communication between the external tool and the access target ECU as long as the authenticated state is set;

when determining that the result of the authentication of the vehicle state is not affirmative, does not set the authenticated state; and

prohibits the data communication between the external tool and the access target ECU as long as the authenticated state is not set; and

an authentication maintain device that maintains the authenticated state within a specific period of time after the authenticated state is set by the authentication control device, and that ends the authenticated state and starts prohibiting the data communication between the external tool and the access target ECU upon elapse of the specific period of time, wherein;

the specific period of time is a period during which an immobilizer is in an unlocked state; and

the external tool is an apparatus other than a wireless communication device that sets the unlocked state and a locked state of the immobilizer, further comprising

a vehicular gateway apparatus that partitions the external tool from the ECUs, wherein;

the authentication device, the authentication control device and the authentication maintain device are provided in the vehicular gateway apparatus, and

a communication control device that, in a situation where the authenticated state is not set by the authentication device, permits the data communication between the external tool and the access target ECU only for a specified data, wherein

the vehicular gateway apparatus and the access target ECU is mounted in a vehicle;

the external tool is external with respect to the vehicle;

the vehicular gateway apparatus is separated from the access target ECU and the external tool; and

the communication control device is provided in the vehicular gateway apparatus.

5. A vehicular gateway apparatus in a vehicular data authentication system, in which an external tool is connectable to a bus connected with electronic control units (ECUs) including an access target ECU and in which the vehicular gateway apparatus partitions the external tool from the ECUs, the vehicular gateway apparatus comprising:

an authentication device that performs authentication of the external tool connected to the bus;

an authentication control device that;

determines whether or not a result of the authentication of the external tool performed by the authentication device is affirmative;

when determining that the result of the authentication of the external tool is affirmative, sets an authenticated state as a state in which the external tool is authenticated;

permits a data communication between the external tool and the access target ECU as long as the authenticated state is set;

when determining that the result of the authentication of the external tool is not affirmative, does not set the authenticated state; and

prohibits the data communication between the external tool and the access target ECU as long as the authenticated state is not set; and

an authentication maintain device that maintains the authenticated state within a specific period of time after the authenticated state is set by the authentication control device, and that ends the authenticated state and starts prohibiting the data communication between the external tool and the access target ECU upon elapse of the specific period of time, wherein;

the specific period of time is a period during which an immobilizer is in an unlocked state; and

the external tool is an apparatus other than a wireless communication device that sets the unlocked state and a locked state of the immobilizer, further comprising;

a communication control device that, in a situation where the authenticated state is not set by the authentication device, permits the data communication between the external tool and the access target ECU only for a specified data, wherein

the vehicular gateway apparatus and the access target ECU is mounted in a vehicle;

the external tool is external with respect to the vehicle;

the vehicular gateway apparatus is separated from the access target ECU and the external tool and

the communication control device is provided in the vehicular gateway apparatus.

6. The vehicular gateway apparatus according to claim 5, wherein:

the external tool is configured to rewrite a control program of the access target ECU and read out a data from the access target ECU according to an operator'"'"'s input operation to the external tool; and

the gateway apparatus receives information on whether the immobilizer is in the unlocked state or the lock state, not from the external tool but from an ECU other than the access target ECU.

7. A vehicular gateway apparatus in a vehicular data authentication system, in which an external tool is connectable to a bus connected with electronic control units including an access target ECU and in which the vehicular gateway apparatus partitions the external tool from the ECUs, the vehicular gateway apparatus comprising:

an authentication device that performs authentication of a vehicle state;

an authentication control device that;

determines whether or not a result of authentication of the vehicle state performed by the authentication device is affirmative;

when determining that the result of authentication of the vehicle state is affirmative, sets an authenticated state as a state in which the external tool is authenticated;

permits a data communication between the external tool and the access target ECU as long as the authenticated state is set;

when determining that the result of authentication of the vehicle state is not affirmative, does not set the authenticated state; and

prohibits the data communication between the external tool and the access target ECU as long as the authenticated state is not set; and

an authentication maintain device that maintains the authenticated state within a specific period of time after the authenticated state is set by the authentication control device, and that ends the authenticated state and starts prohibiting the data communication between the external tool and the access target ECU upon elapse of the specific period of time, wherein;

the specific period of time is a period during which an immobilizer is in an unlocked state; and

the external tool is an apparatus other than a wireless communication device that sets the unlocked state and a locked state of the immobilizer, further comprising;

a communication control device that, in a situation where the authenticated state is not set by the authentication device, permits the data communication between the external tool and the access target ECU only for a specified data, wherein

the vehicular gateway apparatus and the access target ECU is mounted in a vehicle;

the external tool is external with respect to the vehicle;

the vehicular gateway apparatus is separated from the access target ECU and the external tool; and

the communication control device is provided in the vehicular gateway apparatus.

8. A vehicular data communication authentication system in which an external tool is connectable to a bus connected with electronic control units (ECUs) including an access target ECU, the vehicular data communication authentication system comprising:

an authentication device that performs authentication of the external tool connected to the bus;

an authentication control device that;

determines whether or not a result of the authentication of the external tool performed by the authentication device is affirmative;

when determining that the result of the authentication of the external tool is affirmative, sets an authenticated state as a state in which the external tool is authenticated;

permits a data communication between the external tool and the access target ECU as long as the authenticated state is set;

when determining that the result of the authentication of the external tool is not affirmative, does not set the authenticated state; and

prohibits the data communication between the external tool and the access target ECU as long as the authenticated state is not set; and

an authentication maintain device that maintains the authenticated state within a specific period of time after the authenticated state is set by the authentication control device, and that ends the authenticated state and starts prohibiting the data communication between the external tool and the access target ECU upon elapse of the specific period of time, wherein;

the specific period of time is a period during which an authenticated state maintain request is inputted from the access target ECU to the authentication control device, the vehicular data communication authentication system further comprising;

a vehicular gateway apparatus that partitions the external tool from the ECUs, wherein;

the authentication device, the authentication control device and the authentication maintain device are provided in the vehicular gateway apparatus, and a communication control device that, in a situation where the authenticated state is not set by the authentication device, permits the data communication between the external tool and the access target ECU only for a specified data, wherein

the vehicular gateway apparatus and the access target ECU is mounted in a vehicle;

the external tool is external with respect to the vehicle;

the vehicular gateway apparatus is separated from the access target ECU and the external tool and

the communication control device is provided in the vehicular gateway apparatus.

9. A vehicular data communication authentication system in which an external tool is connectable to a bus connected with electronic control units (ECUs) including an access target ECU, the vehicular data communication authentication system comprising:

an authentication device that performs authentication of a vehicle state;

an authentication control device that;

determines whether or not a result of the authentication of the vehicle state performed by the authentication device is affirmative;

when determining that the result of the authentication of the vehicle state is affirmative, sets an authenticated state as a state in which the external tool is authenticated;

permits a data communication between the external tool and the access target ECU as long as the authenticated state is set;

when determining that the result of the authentication of the vehicle state is not affirmative, does not set the authenticated state; and

prohibits the data communication between the external tool and the access target ECU as long as the authenticated state is not set; and

an authentication maintain device that maintains the authenticated state within a specific period of time after the authenticated state is set by the authentication control device, and that ends the authenticated state and starts prohibiting the data communication between the external tool and the access target ECU upon elapse of the specific period of time, wherein;

the specific period of time is a period during which an authenticated state maintain request is inputted from the access target ECU to the authentication control device, the vehicular data communication authentication system further comprising;

a vehicular gateway apparatus that partitions the external tool from the ECUs, wherein;

the authentication device, the authentication control device and the authentication maintain device are provided in the vehicular gateway apparatus, and

a communication control device that, in a situation where the authenticated state is not set by the authentication device, permits the data communication between the external tool and the access target ECU only for a specified data, wherein

the vehicular gateway apparatus and the access target ECU is mounted in a vehicle;

the external tool is external with respect to the vehicle;

the vehicular gateway apparatus is separated from the access target ECU and the external tool; and

the communication control device is provided in the vehicular gateway apparatus.

10. A vehicular gateway apparatus in a vehicular data authentication system, in which an external tool is connectable to a bus connected with electronic control units (ECUs) including an access target ECU and in which the vehicular gateway apparatus partitions the external tool from the ECUs, the vehicular gateway apparatus comprising:

an authentication device that performs authentication of the external tool connected to the bus;

an authentication control device that;

determines whether or not a result of the authentication of the external tool performed by the authentication device is affirmative;

when determining that the result of the authentication of the external tool is affirmative, sets an authenticated state as a state in which the external tool is authenticated;

permits a data communication between the external tool and the access target ECU as long as the authenticated state is set;

when determining that the result of the authentication of the external tool is not affirmative, does not set the authenticated state; and

prohibits the data communication between the external tool and the access target ECU as long as the authenticated state is not set; and

an authentication maintain device that maintains the authenticated state within a specific period of time after the authenticated state is set by the authentication control device, and that ends the authenticated state and starts prohibiting the data communication between the external tool and the access target ECU upon elapse of the specific period of time, wherein;

the specific period of time is a period during which an authenticated state maintain request is inputted from the access target ECU to the authentication control device, further comprising;

a communication control device that, in a situation where the authenticated state is not set by the authentication device, permits the data communication between the external tool and the access target ECU only for a specified data, wherein

the vehicular gateway apparatus and the access target ECU is mounted in a vehicle;

the external tool is external with respect to the vehicle;

the vehicular gateway apparatus is separated from the access target ECU and the external tool; and

the communication control device is provided in the vehicular gateway apparatus.

11. A vehicular gateway apparatus in a vehicular data authentication system, in which an external tool is connectable to a bus connected with electronic control units including an access target ECU and in which the vehicular gateway apparatus partitions the external tool from the ECUs, the vehicular gateway apparatus comprising:

an authentication device that performs authentication of a vehicle state;

an authentication control device that;

determines whether or not a result of authentication of the vehicle state performed by the authentication device is affirmative;

when determining that the result of authentication of the vehicle state is affirmative, sets an authenticated state as a state in which the external tool is authenticated;

permits a data communication between the external tool and the access target ECU as long as the authenticated state is set;

when determining that the result of authentication of the vehicle state is not affirmative, does not set the authenticated state; and

prohibits the data communication between the external tool and the access target ECU as long as the authenticated state is not set; and

an authentication maintain device that maintains the authenticated state within a specific period of time after the authenticated state is set by the authentication control device, and that ends the authenticated state and starts prohibiting the data communication between the external tool and the access target ECU upon elapse of the specific period of time, wherein;

the specific period of time is a period during which an authenticated state maintain request is inputted from the access target ECU to the authentication control device, further comprising;

a communication control device that, in a situation where the authenticated state is not set by the authentication device, permits the data communication between the external tool and the access target ECU only for a specified data, wherein

the vehicular gateway apparatus and the access target ECU is mounted in a vehicle;

the external tool is external with respect to the vehicle;

the vehicular gateway apparatus is separated from the access target ECU and the external tool; and

the communication control device is provided in the vehicular gateway apparatus.