ELECTRONIC MODULE UPDATE DETECTION

• US 20080148409A1
• Filed: 12/14/2006
• Published: 06/19/2008
• Est. Priority Date: 12/14/2006
• Status: Active Grant

• Current Assignee: General Motors LLC (General Motors Company)
• Original Assignee: General Motors Corporation (Motors Liquidation Co. GUC Trust)
• Inventors: Ampunan, Nathan, Hering, Carl J.
• Granted Patent: US 8,464,068 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

A method for detecting an unauthorized programming or installation of software on an electronic module on a vehicle. The method obtains information regarding programming of the electronic module. The information may be obtained by detecting a programming session of the electronic module or after the module has been programmed. The obtained information is compared with information identifying whether programming of the electronic module is authorized or unauthorized. A determination whether the programming is authorized or unauthorized is made based on the comparison.

Claims

1. A method for detecting an unauthorized programming of an electronic module located onboard a vehicle, comprising the steps of:

obtaining information regarding programming of an electronic module on a vehicle;

comparing the obtained information with information that identifies whether the programming of the electronic module is authorized; and

determining whether the programming of the electronic module is authorized based on the comparison.

2. The method of claim 1, wherein the obtaining step further comprises monitoring a vehicle communication bus for a message on the bus indicating a programming session.

3. The method of claim 1, wherein the obtaining step further comprises identifying a request to enter a programming mode.

4. The method of claim 1, wherein the obtaining step further comprises querying the electronic module for an identification of software stored on the module.

5. The method of claim 1, wherein the obtaining step further comprises querying an electronic module for a cyclic redundancy check checksum of software on the module.

6. The method of claim 1, further comprising the step of communicating the obtained information from an in-vehicle telematics unit to a call center via a wireless network.

7. The method of claim 1, wherein the comparing step further comprises comparing an identification of software stored on the module with an identification of authorized software.

8. The method of claim 1, wherein the comparing step further comprises comparing a cyclic redundancy check checksum of the software on the module with an expected checksum.

9. The method of claim 1, wherein the obtaining step further comprises logging a detection of a programming session.

10. The method of claim 9, wherein the comparing step further comprises comparing the log of the detected programming session with a list of authorized programming sessions.

11. The method of claim 1, further comprising the step of preventing programming of the module when the determination concludes that the programming is unauthorized.

12. A method for detecting an unauthorized programming of an electronic module located onboard a vehicle, comprising the steps of:

detecting programming of an electronic module;

requesting information to verify that the programming is authorized;

communicating the requested information between an in-vehicle telematics unit and a call center via a wireless carrier system; and

determining whether the programming is authorized by comparing the requested information with information that identifies whether the programming of the electronic module is authorized.

13. The method of claim 12, further comprising preventing the programming of the module if it is determined that the programming is not authorized.

14. The method of claim 12, wherein the detecting step further comprises monitoring a vehicle communication bus for a message indicating a programming of the module.

15. The method of claim 14, wherein the obtaining step further comprises identifying a request to program the module.

16. The method of claim 12, wherein the obtaining step further comprises querying the electronic module for an identification of software stored on the module and for a cyclic redundancy check checksum of the software.

17. The method of claim 12, wherein the determining step further comprises:

comparing an identification of software stored on the module with an identification of authorized software; and

comparing a cyclic redundancy check checksum of the software on the module with an expected checksum.

18. The method of claim 12, wherein the detecting step further comprises logging a detection of the programming.

19. The method of claim 18, wherein the determining step further comprises comparing the log of the detected programming with a list of authorized programming sessions and making the determination based on the comparison.

20. A method for detecting an unauthorized programming of an electronic module located onboard a vehicle, comprising the steps of:

monitoring a vehicle communication bus with an in-vehicle telematics module for messages indicating the start of a programming session for the electronic module;

detecting a message indicating the start of the programming session for the electronic module;

querying the electronic module for a software identification after completion of the programming session;

performing a cyclic redundancy check of software on the electronic module to obtain a checksum;

communicating the software identification and the checksum from the telematics modules to a call center; and

determining from the software identification and the checksum whether the programming of the module was authorized.