Vehicular relay device, in-vehicle communication system, failure diagnostic system, vehicle management device, server device and detection and diagnostic program

• US 6,694,235 B2
• Filed: 06/26/2002
• Issued: 02/17/2004
• Est. Priority Date: 07/06/2001
• Status: Active Grant

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Akiyama, Susumu
• Primary Examiner(s): Black, Thomas G.
• Assistant Examiner(s): MANCHO, RONNIE M
• Application Number:
  US10/179,685
• Publication Number:
  US 20030009271A1
• Time in Patent Office: 601 Days
• Field of Search: 701/1, 701/33, 701/29, 701/35, 701/32, 701/31, 455/418, 455/423, 455/424, 455/507, 340/426.16, 711/101, 711/100
• US Class Current: 701/33
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G07C 5/085 using electronic data carriers
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A gateway ECU identifies a requested ECU from a plurality of ECUs through a LAN based on an access request of an external device for requesting access to the requested ECU and determines whether the external device has been authorized to access the ECUs based on first authentication information of the external device. Furthermore, the gateway ECU determines whether a trouble of the vehicle currently exists based on data transmitted from each ECU through the LAN. If the trouble exists, the gateway identifies a failed part, which causes the current trouble in the vehicle, based on information transmitted from each corresponding ECU by executing a detection and diagnostic program obtained from a customer server.

Claims

1. A vehicular relay device, which is located between an in-vehicle LAN and a communication device that performs data communication with an external device located outside of a vehicle, wherein the in-vehicle LAN is arranged in the vehicle and is connected with a plurality of in-vehicle electronic devices, and the vehicular relay device relays communication between the external device and the in-vehicle electronic devices, the vehicular relay device comprising:

a first identifying means, which identifies a requested in-vehicle electronic device from the in-vehicle electronic devices based on an access request for requesting access to the requested in-vehicle electronic device upon reception of the access request from the external device and determines whether the access request requires authentication of the external device based on a result of identification of the requested in-vehicle electronic device;

a first authenticating means, which determines whether the external device has been authorized to access the in-vehicle electronic devices based on first authentication information, which is transmitted from the external device, when the first identifying means determines that the access request requires the authentication of the external device; and

a first delivering means, which delivers communication data transmitted from the external device through the communication device to the requested in-vehicle electronic device when the first authenticating means determines that the external device has been authorized to access the in-vehicle electronic devices or when the first identifying means determines that the access request requires no authentication of the external device.

2. A vehicular relay device according to claim 1, wherein:

the in-vehicle electronic devices connected to the in-vehicle LAN include at least one information system electronic device and at least one control system electronic device, wherein the at least one information system electronic device is used for providing external information, which is obtained from outside the vehicle, to a passenger of the vehicle, and the at least one control system electronic device is used for controlling the vehicle;

the first identifying means determines whether the access request requires the authentication of the external device by determining whether the requested in-vehicle electronic device is one of the at least one information system electronic device or one of the at least one control system electronic device when the access request is received from the external device; and

the first authentication means determines whether the external device has been authorized to access the in-vehicle electronic devices based on the first authentication information when the first identifying means determines that the requested in-vehicle electronic device is the one of the at least one control system electronic device.

3. A vehicular relay device according to claim 1, further comprising:

a second identifying means, which determines whether the access request is a write request for writing one of a program and a parameter in the requested in-vehicle electronic device when the access request is received from the external device, wherein the program operates in the requested in-vehicle electronic device, and the parameter is used in operation of the requested in-vehicle electronic device;

a second authenticating means, which actuates the first identifying means when the second identifying means determines that the access request is not the write request, and the second authenticating means determines whether the external device has been authorized to write the one of the program and the parameter in the requested in-vehicle electronic device based on second authentication information transmitted from the external device when the second identifying means determines that the access request is the write request; and

a second delivering means, which delivers the communication data transmitted from the external device through the communication device to the requested in-vehicle electronic device only when the second authenticating means determines that the external device has been authorized to write the one of the program and the parameter in the requested in-vehicle electronic device.

4. A vehicular relay device according to claim 3, wherein:

the second authenticating means determines whether the external device has been authorized to access the in-vehicle electronic devices based on the first authentication information when the second identifying means determines that the access request is the write request; and

the second authenticating means determines whether the external device has been authorized to write the one of the program and the parameter in the requested in-vehicle electronic device based on the second authentication information when the second authenticating means determines that the external device has been authorized to access the in-vehicle electronic devices.

5. A vehicular relay device according to claim 4, wherein:

the second authenticating means determines whether the external device has been authorized to access the in-vehicle electronic devices by verifying whether the first authentication information is identical with authentication information stored in the second authenticating means;

the second authenticating means transfers the second authentication information to the requested in-vehicle electronic device and commands the requested in-vehicle electronic device to verify whether the second authentication information is identical with authentication information stored in the requested in-vehicle electronic device when the second authenticating means determines that the external device has been authorized to access the in-vehicle electronic devices;

the second authenticating means obtains a result of verifying whether the second authentication information is identical with the authentication information stored in the requested in-vehicle electronic device; and

the second authenticating means determines whether the external device has been authorized to write the one of the program and the parameter in the requested in-vehicle electronic device based on the result of verifying whether the second authentication information is identical with the authentication information stored in the requested in-vehicle electronic device.

6. A vehicular relay device according to claim 1, wherein:

each in-vehicle electronic device stores a failure detection program that is executed to detect a failure of the vehicle during control operation of a controlled apparatus controlled by the in-vehicle electronic device;

the vehicular relay device communicates with the in-vehicle electronic devices through the in-vehicle LAN to manage the failure of the vehicle; and

the vehicular relay device further comprises;

a trouble determining means for determining whether a trouble of the vehicle currently exists based on data transmitted from each in-vehicle electronic device through the in-vehicle LAN;

a program obtaining means for obtaining a corresponding detection and diagnostic program corresponding to the current trouble when the trouble determining means determines that the trouble of the vehicle currently exists, wherein the corresponding detection and diagnostic program is previously prepared to handle the current trouble;

a failed part identifying means for identifying a failed part, which causes the current trouble in the vehicle, based on information transmitted from each corresponding in-vehicle electronic device by executing the corresponding detection and diagnostic program obtained by the program obtaining means, wherein the execution of the corresponding detection and diagnostic program, in turn, causes execution of an associated process in each corresponding in-vehicle electronic device, so that the information is outputted from each corresponding in-vehicle electronic device to the failed part identifying means; and

an information outputting means for outputting failure information relevant to the failed part based on a result obtained through operation of the failed part identifying means.

7. An in-vehicle communication system comprising:

an in-vehicle LAN, which is arranged in a vehicle and is connected with a plurality of in-vehicle electronic devices;

a communication device that performs data communication with an external device located outside of the vehicle; and

a vehicular relay device, which is located between the communication device and the in-vehicle LAN and relays communication between the external device and the in-vehicle electronic devices, wherein the vehicular relay device including;

a first identifying means, which identifies a requested in-vehicle electronic device from the in-vehicle electronic devices based on an access request for requesting access to the requested in-vehicle electronic device upon reception of the access request from the external device and determines whether the access request requires authentication of the external device based on a result of identification of the requested in-vehicle electronic device;

a first authenticating means, which determines whether the external device has been authorized to access the in-vehicle electronic devices based on first authentication information, which is transmitted from the external device, when the first identifying means determines that the access request requires the authentication of the external device; and

a first delivering means, which delivers communication data transmitted from the external device through the communication device to the requested in-vehicle electronic device when the first authenticating means determines that the external device has been authorized to access the in-vehicle electronic devices or when the first identifying means determines that the access request requires no authentication of the external device.

8. An in-vehicle communication system according to claim 7, wherein:

each in-vehicle electronic device stores a failure detection program that is executed to detect a failure of a vehicle during control operation of a controlled apparatus controlled by the in-vehicle electronic device;

the vehicular relay device communicates with the in-vehicle electronic devices through the in-vehicle LAN to manage the failure of the vehicle; and

the vehicular relay device further including;

a trouble determining means for determining whether a trouble of the vehicle currently exists based on data transmitted from each in-vehicle electronic device through the in-vehicle LAN;

a program obtaining means for obtaining a corresponding detection and diagnostic program corresponding to the current trouble when the trouble determining means determines that the trouble of the vehicle currently exists, wherein the corresponding detection and diagnostic program is previously prepared to handle the current trouble;

a failed part identifying means for identifying a failed part, which causes the current trouble in the vehicle, based on information transmitted from each corresponding in-vehicle electronic device by executing the corresponding detection and diagnostic program obtained by the program obtaining means, wherein the execution of the corresponding detection and diagnostic program, in turn, causes execution of an associated process in each corresponding in-vehicle electronic device, so that the information is outputted from each corresponding in-vehicle electronic device to the failed part identifying means; and

an information outputting means for outputting failure information relevant to the failed part based on a result obtained through operation of the failed part identifying means.

9. A failure diagnostic system comprising:

a plurality of electronic control devices, which are interconnected through an in-vehicle network, wherein each electronic control device stores a failure detection program, which is executed to detect a failure of a vehicle during control operation of a controlled apparatus controlled by the electronic control device; and

a vehicle management device, which communicates with the electronic control devices through the in-vehicle network to manage the failure of the vehicle, wherein the vehicle management device includes;

a trouble determining means for determining whether a trouble of the vehicle currently exists based on data transmitted from each electronic control device through the in-vehicle network;

a program obtaining means for obtaining a corresponding detection and diagnostic program corresponding to the current trouble when the trouble determining means determines that the trouble of the vehicle currently exists, wherein the corresponding detection and diagnostic program is previously prepared to handle the current trouble;

a failed part identifying means for identifying a failed part, which causes the current trouble in the vehicle, based on information transmitted from each corresponding electronic control device by executing the corresponding detection and diagnostic program obtained by the program obtaining means, wherein the execution of the corresponding detection and diagnostic program, in turn, causes execution of an associated process in each corresponding electronic control device, so that the information is outputted from each corresponding electronic control device to the failed part identifying means; and

an information outputting means for outputting failure information relevant to the failed part based on a result obtained through operation of the failed part identifying means.

10. A failure diagnostic system according to claim 9, wherein the data transmitted from each electronic control device through the in-vehicle network is outputted from each electronic control device to the vehicle management device upon execution of the failure detection program in each electronic control device.

11. A failure diagnostic system according to claim 9, wherein the data transmitted from each electronic control device through the in-vehicle network is further transmitted through at least one of the followings:

a path between the electronic control devices via the vehicle management device; and

a path between the vehicle management device and one of the electronic control devices.

12. A failure diagnostic system according to claim 9, wherein the failed part identifying means requests the program obtaining means to obtain another detection and diagnostic program when the failed part cannot be identified with the previously obtained detection and diagnostic program.

13. A failure diagnostic system according to claim 9, further comprising a server device, which is located outside of the vehicle and is capable of data communication with the vehicle management device, wherein the server device includes a storage means for storing the corresponding detection and diagnostic program, and the program obtaining means of the vehicle management device obtains the corresponding detection and diagnostic program from the server device.

14. A failure diagnostic system according to claim 13, wherein:

the program obtaining means of the vehicle management device transmits inquiry information, which contains current trouble information indicative of the current trouble, to the server device;

the storage means of the server device stores a plurality of detection and diagnostic programs each linked to its relevant trouble information, and the corresponding detection and diagnostic program is one of the detection and diagnostic programs and is linked with the current trouble information; and

the server device searches for the corresponding detection and diagnostic program stored in the storage means based on the current trouble information and transmits the corresponding detection and diagnostic program to the vehicle management device when the inquiry information is received from the program obtaining means.

15. A failure diagnostic system according to claim 14, wherein:

the server device further stores customer information in the storage means, wherein the customer information is prepared for each user; and

the server device transmits the corresponding detection and diagnostic program to the vehicle management device based on the customer information when the inquiry information is received from the program obtaining means of the vehicle management device.

16. A failure diagnostic system according to claim 13, wherein the program obtaining means of the vehicle management device performs authentication process for determining whether the server device is legitimate before the corresponding detection and diagnostic program is received from the server device.

17. A failure diagnostic system according to claim 13, wherein:

the program obtaining means of the vehicle management device obtains an associated process program, which executes the associated process in each corresponding electronic control device, from the server device and transmits the associated process program to each corresponding electronic control device; and

each corresponding electronic control device stores the associated process program received from the vehicle management device.

18. A failure diagnostic system according to claim 13, wherein:

the information outputting means of the vehicle management device transmits the failure information to the server device based on the result obtained through the operation of the failed part identifying means; and

the server device stores the failure information in the storage means.

19. A failure diagnostic system according to claim 18, wherein the server device transmits externally a notification based on the failure information.

20. A failure diagnostic system according to claim 13, wherein the program obtaining means is capable of obtaining the corresponding detection and diagnostic program before the trouble determining means determines that the trouble of the vehicle currently exists.

21. A failure diagnostic system according to claim 20, wherein the program obtaining means of the vehicle management device obtains the corresponding detection and diagnostic program when other data other than the detection and diagnostic program is transmitted from the server device such that the corresponding detection and diagnostic program is transmitted to the vehicle management device along with the other data.

22. A vehicle management device, which is used together with a plurality of electronic control devices, which are interconnected through an in-vehicle network, wherein each electronic control device stores a failure detection program, which is executed to detect a failure of a vehicle during control operation of a controlled apparatus controlled by the electronic control device, and the vehicle management device communicates with the electronic control devices through the in-vehicle network to manage the failure of the vehicle, the vehicle management device comprising:

a trouble determining means for determining whether a trouble of the vehicle currently exists based on data transmitted from each electronic control device through the in-vehicle network;

a program obtaining means for obtaining a corresponding detection and diagnostic program corresponding to the current trouble when the trouble determining means determines that the trouble of the vehicle currently exists, wherein the corresponding detection and diagnostic program is previously prepared to handle the current trouble;

a failed part identifying means for identifying a failed part, which causes the current trouble in the vehicle, based on information transmitted from each corresponding electronic control device by executing the corresponding detection and diagnostic program obtained by the program obtaining means, wherein the execution of the corresponding detection and diagnostic program, in turn, causes execution of an associated process in each corresponding electronic control device, so that the information is outputted from each corresponding electronic control device to the failed part identifying means; and

an information outputting means for outputting failure information relevant to the failed part based on a result obtained through operation of the failed part identifying means.

23. A server device, which constitutes part of a failure diagnostic system, wherein the failure diagnostic system also includes a plurality of electronic control devices and a vehicle management device, wherein the electronic control devices are interconnected through an in-vehicle network, and each electronic control device stores a failure detection program, which is executed to detect a failure of a vehicle during control operation of a controlled apparatus controlled by the electronic control device, and the vehicle management device communicates with the electronic control devices through the in-vehicle network to manage the failure of the vehicle, the server device comprising:

a storage means, which stores a plurality of detection and diagnostic programs each linked to its relevant trouble information indicative of one of troubles of the vehicle, wherein when an inquiry information, which includes current trouble information indicative of a current trouble of the vehicle, is received from the vehicle management device, the server device searches for a corresponding detection and diagnostic program stored in the storage means based on the current trouble information and transmits the corresponding detection and diagnostic program to the vehicle management device, and the vehicle management device executes the corresponding detection and diagnostic program to cause execution of an associated process in each corresponding electronic control device, so that information is outputted from each corresponding electronic control device to the vehicle management device, and a failed part, which causes the current trouble of the vehicle, is identified by the vehicle management device based on the information of each corresponding electronic control device.

24. A detection and diagnostic program executed in a vehicle management device, which constitutes part of a failure diagnostic system, wherein the failure diagnostic system also includes a plurality of electronic control devices, which are interconnected through an in-vehicle network, wherein each electronic control device stores a failure detection program, which is executed to detect a failure of a vehicle during control operation of a controlled apparatus controlled by the electronic control device, and the vehicle management device communicates with the electronic control devices through the in-vehicle network to manage the failure of the vehicle, the detection and diagnostic program comprising instructions for:

executing an associated process in each corresponding electronic control device, so that information is outputted from each corresponding electronic control device to the vehicle management device; and

identifying a failed part of the vehicle based on the information of each corresponding electronic control device.