Program management system

• US 8,209,084 B2
• Filed: 04/05/2007
• Issued: 06/26/2012
• Est. Priority Date: 04/07/2006
• Status: Active Grant

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Fujinaga, Terumitsu
• Primary Examiner(s): MANCHO, RONNIE M
• Application Number:
  US11/730,996
• Publication Number:
  US 20070239329A1
• Time in Patent Office: 1,909 Days
• Field of Search: 701/35, 701/29, 701/33, 701/34, 455/419, 455/423, 340/853.1, 705/8, 705/36
• US Class Current: N/A
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G08G 1/205 Indicating the location of the monitored vehicles as destination, e.g. accidents, stolen, rental

Abstract

A program management system includes a center and a vehicle control device having a program in a vehicle. In management processing, the center selects one of preset examination methods, and requests the vehicle control device to send data according to the selected examination method. When receiving the request, the vehicle control device extracts data pertaining to the program according to the examination method specified by the request, and transmits the extracted data to the center. When receiving data from the vehicle control device, the center determines whether or not the value of the received data is within a preset permissible range, and thereby determines the presence or absence of an anomaly in the program installed in the vehicle control device.

Claims

1. A computer program management system for reliably testing computer program anomalies in a vehicular computer program memory, said system comprising:

a vehicle control device having an executable computer program stored in a digital memory; and

a management device managing the computer program of the vehicle control device, the vehicle control device and the management device communicating with each other,

the vehicle control device comprising;

a communication control unit that (a) receives a request for data, the request specifying a computing method, which is one of a plurality of preset computing methods, from the management device, (b) computes data pertaining to the computer program using the specified computing method to process the contents of at least a portion of said digital memory, and (c) transmits the computed data to the management device,

the management device comprising;

a computing method selecting unit that selects at least one computing method from said plurality of preset computing methods;

a requesting unit that makes a request for data based on the selected computing method to the vehicle control device; and

a data range determining unit that receives the data transmitted by the communication control unit of the vehicle control device based on the request by the requesting unit, and determines that there is no anomaly in the computer program installed in the vehicle control device when the received data is within a preset permissible range or that there is an anomaly in the computer program when the received data is out of the preset permissible range.

3. The computer program management system of claim 1,

wherein the computing method selecting unit includes an examination area selecting unit for selecting an examination area of said digital memory that contains at least part of the executable computer program code held by the vehicle control device for use by the computing method, and

wherein the communication control unit computes data using the contents of an examination area of said digital memory selected by the examination area selecting unit from executable computer program code held by the vehicle control device and transmits the computed data to the management device.

4. The computer program management system of claim 3,

wherein the examination area selecting unit selects only the examination ending address of the examination area in said digital memory, and

wherein the communication control unit (a) computes data using the contents of said digital memory from a preset examination starting address to the examination ending address selected by the examination area selecting unit, and (b) transmits the computed data to the management device.

5. The computer program management system of claim 3,

wherein the examination area selecting unit sets an examination area of said digital memory containing data preset as important data.

6. The computer program management system of claim 3,

wherein the examination area selecting unit selects all the computer program data held by the vehicle control device as computer program code to be examined by processing it using the specified computing method.

7. The computer program management system of claim 1,

wherein the computing method selecting unit selects at least one computing method from a plurality of computing methods held by the vehicle control device as the computing method, and

wherein the communication control unit carries out computation using data pertaining to the computer program held by the vehicle control device according to a computing method selected by the computing method selecting unit, and transmits data indicating the result of the computation to the management device.

8. The computer program management system of claim 1,

wherein the management device includes a reckoning unit for reckoning a range of data transmitted from the vehicle control device.

9. The computer program management system of claim 8,

wherein the data range determining unit determines that there is no anomaly in a computer program installed in the vehicle control device when received data agrees with preset reference data stored in the management device or that there is an anomaly in a computer program installed in the vehicle control device when the received data disagrees with the reference data, and

wherein the computing method selecting unit selects a checksum method as the computing method.

10. The computer program management system of claim 1,

wherein the management device includes a first instructing unit that, when it is determined by the data range determining unit that there is an anomaly in a computer program installed in the vehicle control device, instructs the vehicle control device to bring the vehicle into a start disabled state, and

wherein the vehicle control device includes a prohibiting unit that, when an instruction to bring the vehicle into a start disabled state is received from the management device, prohibits the vehicle from being started.

11. The computer program management system of claim 10, further comprising:

a first notifying unit that, when the prohibiting unit prohibits the vehicle from being started, notifies a preset point of contact that starting of the vehicle has been prohibited.

12. The computer program management system of claim 10,

wherein the management device includes a computer program transmitting unit that, when it is determined by the data range determining unit that there is an anomaly in a computer program installed in the vehicle control device, transmits a legitimate computer program to the vehicle control device, and

wherein the vehicle control device includes a rewriting unit that, when a legitimate computer program is received from the management device, rewrites the computer program held by the vehicle control device with the received legitimate computer program.

13. The computer program management system of claim 12,

wherein the vehicle control device includes an inquiring unit that, after a computer program is rewritten by the rewriting unit, inquires about validity of the rewritten computer program, and

wherein the management device includes a rewrite determining unit that, when inquiry about the validity of a computer program is received from the vehicle control device, receives data transmitted from the vehicle control device in correspondence with the inquiry, and determines that there is no anomaly in the computer program installed in the vehicle control device when the value of the received data is within a preset permissible range or that there is an anomaly in the computer program installed in the vehicle control device when the value of the received data is out of the permissible range.

14. The computer program management system of claim 13,

wherein the management device includes a second instructing unit that, when it is determined by the rewrite determining unit that there is no anomaly in a computer program, instructs the vehicle control device to bring the vehicle into a start enabled state, and

wherein the vehicle control device includes a releasing unit that, when an instruction to bring the vehicle into a start enabled state is given by the management device, withdraws the prohibition against starting of the vehicle established by the prohibiting unit.

15. The computer program management system of claim 13,

wherein when the rewrite determining unit determines that there is an anomaly in a computer program installed in the vehicle control device, the rewrite determining unit actuates the computer program transmitting unit again.

16. The computer program management system of claim 15, further comprising:

a monitoring unit that monitors the number of times when it was determined by the rewrite determining unit that there is an anomaly in a computer program; and

a second notifying unit that, when a number of times monitored by the monitoring unit becomes equal to or larger than a preset predetermined number of times, notifies a preset point of contact that the computer program is not normally rewritten.

17. The computer program management system of claim 1, further comprising:

a start control unit that starts the computing method selecting unit on at least any occasion of (a) when the vehicle control device is started, (b) at predetermined time intervals when the vehicle control device is on, and (c) when the vehicle control device is shut down.

2. A computer program management system for reliably testing computer program anomalies in a vehicular computer program memory, said system comprising:

a vehicle control device having an executable computer program stored in a digital memory; and

a management device managing the computer program of the vehicle control device, the vehicle control device and the management device communicating with each other,

the vehicle control device comprising;

a computing method selecting unit that selects at least one computing method from a plurality of preset computing methods; and

a communication control unit that (a) computes data pertaining to the computer program according to the selected computing method by processing the contents of at least a portion of said digital memory and (b) transmits the computed data, together with identification information indicating the selected computing method, to the management device,

the management device comprising;

a data range determining unit that receives computed data transmitted by the communication control unit of the vehicle control device and determines (a) that there is no anomaly in the computer program installed in the vehicle control device when the received computed data is within a permissible range preset in correspondence with the identification information or (b) that there is an anomaly in the computer program when the received computed data is out of the permissible range.

18. The computer program management system of claim 2,

wherein the computing method selecting unit includes an examination area selecting unit for selecting an examination area of said digital memory that contains at least part of the computer program code held by the vehicle control device as the computing method, and

wherein the communication control unit computes data in an examination area selected by the examination area selecting unit from computer program code held by the vehicle control device and transmits the computed data to the management device.

19. The computer program management system of claim 18,

wherein the examination area selecting unit selects only the examination ending address of the examination area of said digital memory, and

wherein the communication control unit computes data using the contents of said digital memory from a preset examination starting address to the examination ending address selected by the examination area selecting unit from computer program code held by the vehicle control device, and transmits the computed data to the management device.

20. The computer program management system of claim 18,

wherein the examination area selecting unit sets an examination area from a portion of said digital memory preset as important data.

21. The computer program management system of claim 18,

wherein the examination area selecting unit selects all the computer program code held by the vehicle control device as a computer program to be examined.

22. The computer program management system of claim 2,

wherein the computing method selecting unit selects at least one computing method from a plurality of computing methods held by the vehicle control device as the examination method, and

wherein the communication control unit carries out computation using computer program code held by the vehicle control device according to a computing method selected by the computing method selecting unit, and transmits data indicating the result of the computation to the management device.

23. The computer program management system of claim 2,

wherein the management device includes a reckoning unit for reckoning a range of computed data transmitted from the vehicle control device.

24. The computer program management system of claim 23,

wherein the data range determining unit determines that there is no anomaly in a computer program installed in the vehicle control device when received data agrees with preset reference data stored in the management device or that there is an anomaly in a computer program installed in the vehicle control device when the received data disagrees with the reference data, and

wherein the computing method selecting unit selects a checksum method as the computing method.

25. The computer program management system of claim 2,

wherein the management device includes a first instructing unit that, when it is determined by the data range determining unit that there is an anomaly in a computer program installed in the vehicle control device, instructs the vehicle control device to bring the vehicle into a start disabled state, and

wherein the vehicle control device includes a prohibiting unit that, when an instruction to bring the vehicle into a start disabled state is received from the management device, prohibits the vehicle from being started.

26. The computer program management system of claim 25, further comprising:

a first notifying unit that, when the prohibiting unit prohibits the vehicle from being started, notifies a preset point of contact that starting of the vehicle has been prohibited.

27. The computer program management system of claim 25,

wherein the management device includes a computer program transmitting unit that, when it is determined by the data range determining unit that there is an anomaly in a computer program installed in the vehicle control device, transmits a legitimate computer program to the vehicle control device, and

wherein the vehicle control device includes a rewriting unit that, when a legitimate computer program is received from the management device, rewrites the computer program held by the vehicle control device with the received legitimate computer program.

28. The computer program management system of claim 27,

wherein the vehicle control device includes an inquiring unit that, after a computer program is rewritten by the rewriting unit, inquires about validity of the rewritten computer program, and

wherein the management device includes a rewrite determining unit that, when inquiry about the validity of a computer program is received from the vehicle control device, receives data transmitted from the vehicle control device in correspondence with the inquiry, and determines that there is no anomaly in the computer program installed in the vehicle control device when the value of the received data is within a preset permissible range or that there is an anomaly in the computer program installed in the vehicle control device when the value of the received data is out of the permissible range.

29. The computer program management system of claim 28,

wherein the management device includes a second instructing unit that, when it is determined by the rewrite determining unit that there is no anomaly in a computer program, instructs the vehicle control device to bring the vehicle into a start enabled state, and

wherein the vehicle control device includes a releasing unit that, when an instruction to bring the vehicle into a start enabled state is given by the management device, withdraws the prohibition against starting of the vehicle established by the prohibiting unit.

30. The computer program management system of claim 28,

wherein when the rewrite determining unit determines that there is an anomaly in a computer program installed in the vehicle control device, the rewrite determining unit actuates the computer program transmitting unit again.

31. The computer program management system of claim 30, further comprising:

a monitoring unit that monitors the number of times when it was determined by the rewrite determining unit that there is an anomaly in a computer program; and

a second notifying unit that, when a number of times monitored by the monitoring unit becomes equal to or larger than a preset predetermined number of times, notifies a preset point of contact that the computer program is not normally rewritten.

32. The computer program management system of claim 2, further comprising:

a start control unit that starts the computing method selecting unit on at least any occasion of (a) when the vehicle control device is started, (b) at predetermined time intervals when the vehicle control device is on, and (c) when the vehicle control device is shut down.

33. A computer program management system for reliably testing computer program anomalies in a vehicular computer program memory, said system comprising:

a vehicle control device having an executable computer program stored in a digital memory;

a management device managing the computer program of the vehicle control device; and

a communication control unit in the vehicle control device for communicating data with the management device;

computing method selecting means for selecting at least one computing method from a plurality of preset computing methods;

computing means for computing data pertaining to the computer program according to the selected computing method by processing the contents of at least a portion of said digital memory; and

data range determining means for determining (a) that there is no anomaly in the computer program installed in the vehicle control device when the computed data is within a preset permissible range or (b) that there is an anomaly in the computer program when the computed data is out of the preset permissible range.