Information processing device and information processing method

• US 9,866,527 B2
• Filed: 01/16/2014
• Issued: 01/09/2018
• Est. Priority Date: 02/25/2013
• Status: Active Grant

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Inventors: Moriya, Tomokazu, Goto, Hideki, Yura, Koji
• Primary Examiner(s): Jhaveri, Jayesh
• Application Number:
  US14/765,937
• Publication Number:
  US 20150372975A1
• Time in Patent Office: 1,454 Days
• CPC Class Codes: B60K 31/00 Vehicle fittings, acting on a single sub-unit only, for automatically controlling vehicle speed, i.e. preventing speed from exceeding an arbitrarily established velocity or maintaining speed at a particular velocity, as selected by the vehicle operator fittings acting on two or more sub-units B60W30/14; speedometers G01P; systems or devices for controlling speed in general G05D13/00 ; in traffic anti-collision system for road vehicles G08G1/16
• CPC Class Codes: B61L 15/0018 Communication with or on the vehicle or train
• CPC Class Codes: B61L 27/70 Details of trackside communication
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

An information processing device is connected to a plurality of networks and performs information processing. The networks include a control network connected to a control device in a mobile object, an information network connected to an information device in the mobile object, and an external network connected to an external device outside of the mobile object. The information processing device includes firewalls each connected to one of the networks, and a processor connected to each network via the corresponding firewall. The information processing device isolates at least the control network from the other networks.

Claims

1. An information processing device connected to a plurality of networks including a control network connected to a control device in a mobile object, an information network connected to an information device in the mobile object, and an external network connected to an external device outside of the mobile object, the information processing device comprising:

firewalls each connected to one of the networks, and

a processor connected to each of the networks via the corresponding firewall, wherein

the information processing device is configured to isolate at least the control network from the other networks,

each of the firewalls is configured to permit communication only between the processor and the respective one of the networks to which the respective firewall is connected,

the processor includes;

a proxy server that is configured to;

receive, from a network other than the control network, a request signal that requests control information about the control device,

change a transmission destination of the received request signal to the data server, according to the contents of the received request signal, and

transmit the received request signal to the data server, according to the contents of the received request signal; and

a data server that is configured to;

acquire from the control network or a storage that stores control information from the control network, the control information requested in the received request signal,

generate a response signal responsive to the request signal, the response signal responsive to the request signal containing the acquired control information, and

transmit the generated response signal responsive to the request signal to the network that is the transmission source of the request signal.

2. The information processing device according to claim 1, wherein the processor is further configured to:

authenticate the device that transmitted the request signal received by the proxy server, and

acquire the requested control information in the received request signal, if the device that transmitted the request signal received by the proxy server has been authenticated.

3. The information processing device according to claim 1, wherein the processor is further configured to:

monitor the request signal received by the proxy server based on a monitoring condition, and

upon the determination that an abnormality has occurred in the request signal as a result of the monitoring based on the monitoring condition, prohibit the data server from acquiring the control information.

4. The information processing device according to claim 1, wherein the processor is configured to store received request signals chronologically.

5. The information processing device according to claim 1, wherein

the request signal is a request signal requesting acquisition of a plurality of pieces of control information, and

the data server is configured to:

acquire the pieces of control information requested in the request signal one by one successively from the control network, and

repeat generation of the response signal while incorporating the acquired pieces of control information in order in the response signal.

6. The information processing device according to claim 1, wherein a controller is provided between the control network and the firewall connected to the control network, and the controller is configured to convert a communication protocol of the request signal processed by the processor to a communication protocol of the control network.

7. The information processing device according to claim 1, wherein

the processor is configured to receive, from the information network, setting data relating to setting of a device in the control network, and

the data server is configured to generate, based on the received setting data, a transmission signal to be transmitted to the control network.

8. The information processing device according to claim 1, wherein

the processor is configured to authenticate a transmission source of a request signal received from the information network, and

the data server is configured to:

transfer the generated response signal to the authenticated transmission source in the information network.

9. The information processing device according to claim 1, wherein, in order to isolate the control network from the other networks, the processor is configured to permit passage of communication messages between the processor and the control network while prohibiting flow of communication messages from the other networks into the control network.

10. An information processing method implemented in an information processing device, the information processing device being connected to a plurality of networks including a control network connected to a control device in a mobile object, an information network connected to an information device in the mobile object, and an external network connected to an external device outside of the mobile object, the information processing device including firewalls each connected to one of the networks, a processor connected to each of the networks via the corresponding firewall, the information processing device being configured to isolate at least the control network from the other networks, and each of the firewalls is configured to permit communication only between the processor and the respective one of the networks to which the respective firewall is connected, the method comprising:

receiving, by a proxy server of the processor from a network other than the control network, a request signal that requests control information about the control device,

changing, by the proxy server, a transmission destination of the received request signal to a data server of the processor, according to the contents of the received request signal;

transmitting, by the proxy server, the received request signal to the data server, according to the contents of the received request signal;

acquiring, by the data server, from the control network or a storage that stores control information from the control network, the control information requested in the received request signal;

generating, by the data server, a response signal responsive to the request signal, the response signal responsive to the request signal containing the acquired control information; and

transmitting, by the data server, the generated response signal responsive to the request signal to the network that is the transmission source of the request signal.

11. An information processing method implemented in an information processing device, the information processing device being connected to a plurality of networks including a control network connected to a control device in a mobile object, and another network connected to another device other than the control device, the information processing device including firewalls each connected to one of the networks, a processor connected to each of the networks via the corresponding firewall, the information processing device being configured to permit passage of communication messages between the processor and the control network and prevent flow of communication messages from the other network into the control network, each of the firewalls being configured to permit communication only between the processor and the respective one of the networks to which the respective firewall is connected, the method comprising:

receiving, by a proxy server of the processor from a network other than the control network, a request signal that requests control information about the control device,

changing, by the proxy server, a transmission destination of the received request signal to a data server of the processor, according to the contents of the received request signal;

transmitting, by the proxy server, the received request signal to the data server, according to the contents of the received request signal;

acquiring, by the data server, from the control network or a storage that stores control information from the control network, the control information requested in the received request signal;

generating, by the data server, a response signal responsive to the request signal, the response signal responsive to the request signal containing the acquired control information; and

transmitting, by the data server, the generated response signal responsive to the request signal to the network that is the transmission source of the request signal.