Vehicle-Mounted Network System

• US 20160173530A1
• Filed: 02/13/2013
• Published: 06/16/2016
• Est. Priority Date: 02/16/2012
• Status: Abandoned Application

• Current Assignee: Hitachi Automotive Systems Limited (Hitachi, Ltd.)
• Original Assignee: Hitachi Automotive Systems Limited (Hitachi, Ltd.)
• Inventors: MIYAKE, Junji
• Application Number:
  US14/377,625
• Publication Number:
  US 20160173530A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

Provided is a vehicle-mounted network system that enhances security of a vehicle by detecting or eliminating an attack on a vehicle-mounted network from an unauthorized ECU while reducing an increase in a processing load (and cost) of each vehicle-mounted control device.

The vehicle-mounted network system according to the present invention provides a communication protocol issue device having a function of distributing definition data that defines a portion that is based on implementation on the vehicle-mounted network among communication protocols to the vehicle-mounted control device via a registration device that allows the vehicle-mounted control device to register in the vehicle-mounted network.

Claims

1. A vehicle-mounted network system comprising:

a vehicle-mounted control device provided with a memory for storing definition data that defines a portion which is based on implementation on a vehicle-mounted network among communication protocols used on the vehicle-mounted network; and

a communication protocol issue device configured to issue the definition data to the vehicle-mounted control device,

wherein, when receiving a registration request that requests to allow the vehicle-mounted control device to participate in the vehicle-mounted network from a registration device for allowing the vehicle-mounted control device to participate in the vehicle-mounted network, after authenticating the registration device, the communication protocol issue device generates the definition data based on implementation on the vehicle-mounted network and returns the definition data to the registration device,

the registration device receives the definition data transmitted from the communication protocol issue device and requests the vehicle-mounted control device to store the received definition data in the memory, and

the vehicle-mounted control device receives the definition data from the registration device, stores the definition data in the memory, and communicates using the vehicle-mounted network in conformity with the communication protocol according to the portion defined by the definition data.

2. The vehicle-mounted network system according to claim 1, wherein, after the registration device transmits the definition data to the vehicle-mounted control device, the communication protocol issue device controls operation of the vehicle-mounted control device with respect to the vehicle-mounted network by performing broadcast transmission, to the vehicle-mounted network, of a data transmission stop command for stopping the vehicle-mounted control device transmitting data to the vehicle-mounted network.

3. The vehicle-mounted network system according to claim 2, wherein, after transmitting the data transmission stop command to the vehicle-mounted network, when detecting a vehicle-mounted control device that fails to follow the data transmission stop command, the communication protocol issue device considers that an unauthorized vehicle-mounted control device is connected to the vehicle-mounted network for a purpose of one of intervention and interference, and originates an alarm indicating a fact.

4. The vehicle-mounted network system according to claim 1, wherein, after the registration device transmits the definition data to the vehicle-mounted control device, the communication protocol issue device controls operation of the vehicle-mounted control device with respect to the vehicle-mounted network by performing broadcast transmission, to the vehicle-mounted network, of an ACK return stop command for stopping the vehicle-mounted control device returning a delivery confirmation response.

5. The vehicle-mounted network system according to claim 4, wherein, after transmitting the ACK return stop command to the vehicle-mounted network, when detecting a vehicle-mounted control device that fails to follow the ACK return stop command, the communication protocol issue device considers that an unauthorized vehicle-mounted control device is connected to the vehicle-mounted network for a purpose of wiretapping, and originates an alarm indicating a fact.

6. The vehicle-mounted network system according to claim 1, wherein the communication protocol issue device issues the definition data that defines a correspondence between an ID that defines a type of data on the vehicle-mounted network and a data name that describes a name of the type of data, and the vehicle-mounted control device communicates with the vehicle-mounted network using the ID corresponding to the type of data in accordance with the correspondence defined by the definition data.

7. The vehicle-mounted network system according to claim 1, wherein the communication protocol issue device issues the definition data that defines a correspondence between a size of data for each type of data transmitted and received on the vehicle-mounted network and a data arrangement position in a packet, and a data name that describes a name of the type of data, and the vehicle-mounted control device communicates with the vehicle-mounted network using the size and the arrangement position corresponding to the type of data in accordance with the correspondence defined by the definition data.