Abstract:
Provided is an update management method that causes an external tool, capable of transmitting an update message to update data such as shared keys and the like within electronic control units (ECUs) making up an onboard network, to update shared keys and the like within the ECUs, while reducing the risk of all ECUs being unauthorizedly rewritten in a case where secret information given to the external tool is leaked. The update management method is to receive and verify update authority information indicating authority of the external tool, and in a case that an update message instructing updating of shared keys or the like of one or multiple ECUs has been transmitted from the external tool (step S1010), if the verification is successful and the update authority information indicates that the transmission of the update message is within the range of authority of the external tool (step S1013), the update is executed at the ECU (step S1019), and otherwise, update at the ECU is inhibited.
Abstract:
An anti-fraud method for use in an in-vehicle network system including a plurality of electronic control units that exchange data frames, each having added thereto a MAC, via a bus includes a receiving step of receiving a data frame transmitted on the bus, a verification step of generating a MAC by using data and verifying that the data frame received in the receiving step has added thereto the MAC, and an update processing step of performing an update process on the data used for generating the MAC in a case where verification has failed in the verification step.
Abstract:
A fraud detection method for use in an in-vehicle network system including a plurality of electronic control units that communicate with one another via a bus in accordance with the CAN protocol includes receiving a data frame sent to the bus and verifying, if a data frame that does not follow a predetermined rule regarding a transmission period is received in receiving a data frame, a specific identifier in the data frame.
Abstract:
An update processing method for updating data used to generate a MAC in an in-vehicle network system including a plurality of electronic control units that communicate a data frame having a MAC added thereto with one another via a bus in accordance with the CAN protocol is provided. The method includes the detection step of detecting a state of a vehicle having the in-vehicle network system mounted therein and the update step of updating a MAC key used to generate a MAC under the condition that the state of the vehicle detected in the detection step is a predetermined state.
Abstract:
In a fraud-detection method for use in an in-vehicle network system including a plurality of electronic control units (ECUs) that exchange messages on a bus and a fraud-detection ECU connected to the bus, the fraud-detection ECU includes a memory that stores rule information indicating a rule regarding transmission of a message to be transmitted on the bus, the fraud-detection ECU determines whether or not a message transmitted on the bus is malicious by using the rule information, and, in a case where the message is malicious, transmits an error message including a message identifier of the malicious message. The fraud-detection ECU acquires updated rule information transmitted from an external server, and updates the rule information by using the updated rule information.
Abstract:
A server receives log information including an operational state of one electric home appliance inside a house from the one electric home appliance, receives information indicating the operational state of the one electric home appliance from another electric home appliance that is capable of monitoring the operational state of the one electric home appliance, and receives positional information of a display terminal of a user of the electric home appliance from the display terminal. When it is determined that a position of the display terminal is within a rang of a prescribed distance from the house and when it is determined that the log information and the information indicating the operational state of the one electric home appliance are not consistent with each other, the server provides the display terminal with information on a possibility of a malfunction of the one electric home appliance while the position of the display terminal is still within the range of the prescribed distance from the house.
Abstract:
A controller and a first device perform mutual authentication, create a group key, and share the group key, and the first device is set as a reference device. Thereafter, at a group key update timing when the controller and the reference device update the group key, the controller and a second device, which is not the reference device, perform mutual authentication, and the updated group key is also shared by the second device. Further, encrypted data is generated by encrypting transmission data by using the group key, a MAC is generated from the transmission data, a header, a transmission source address, and a transmission destination address, and a message that includes the encrypted data, the header, the transmission source address, the transmission destination address, and the MAC is broadcast.
Abstract:
A controller and a first device perform mutual authentication, create a group key, and share the group key, and the first device is set as a reference device. The controller and a second device perform mutual authentication, and the group key is also shared by the second device. Thereafter, the controller and the first device, which is the reference device, perform mutual authentication again, update the group key, and share the updated group key. At a group key update timing when the controller and the reference device update the group key, the controller and the second device, which is not the reference device, perform mutual authentication, and the updated group key is also shared by the second device.