JP2017024626A - Vehicle and communication method of vehicle - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a vehicle, which is configured to authenticate communication with an external device by inputting cryptographic operation.SOLUTION: A vehicle 100 comprises: driving devices 1 and 3 which drive the vehicle; operation devices 50, 52 and 53 which are operated by a driver; a control unit 40 that controls the driving devices 1 and 3 on the basis of operation of the operation devices 50, 52 and 53; and a communication unit 45 that mediates communication between an external device 80 and the control unit 40. The communication unit 45, when cryptographic operation is inputted to the operation devices 50, 52 and 53, authenticates the communication unit 45 and the control unit 40; and when authenticating the units, authenticates the external device 80 and then permits communication between the external device 80 and the control unit 40 when receiving communication request from the external device 80.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a vehicle and a vehicle communication method.

  A vehicle including a driving force source such as an engine and a motor and an automatic transmission is configured to be able to communicate between an external device such as a failure diagnosis tester and the control unit of the vehicle via an interface such as an ODB connector.

  As such a vehicle, a continuously variable transmission shift in which information such as a fixed gear ratio can be changed by changing the contents of a rewritable memory of the vehicle by a failure diagnosis tester connected via a failure diagnosis connector. A ratio control device is disclosed (see Patent Document 1).

JP 2003-106431 A

  The conventional technique described in Patent Document 1 is configured to be able to read and write data related to the transmission ratio of the continuously variable transmission via a failure diagnosis tester. In such a configuration, by connecting a diagnostic device such as a failure diagnosis tester, data related to the behavior of the vehicle can be freely read and written, data acquisition that is not desired to be disclosed to a third party, and the behavior of the vehicle are affected. Data can be changed.

  On the other hand, it is possible to restrict the exchange of information with an external diagnostic device, but there is an inconvenience that the reading and writing of data when necessary, such as analysis by vehicle manufacturers and parts manufacturers, is limited. There was a problem to do.

  The present invention has been made in view of such problems, and an object thereof is to provide a vehicle that authenticates communication between a control unit of a vehicle and an external device by inputting a cryptographic operation.

  According to an embodiment of the present invention, a drive device that drives a vehicle, an operation device that is operated by a driver, a control unit that controls the drive device based on an operation of the operation device, and between an external device and the control unit A communication unit that mediates communication, and the communication unit authenticates the communication unit and the control unit when a cryptographic operation is input to the operation device. If authentication is performed, communication is performed from an external device. When the request is received, the external device is authenticated, and communication between the external device and the control unit is permitted.

  According to the above aspect, since communication is possible only after authentication between the communication unit and the control unit and authentication between the external device and the communication unit are performed, security of communication of the control unit with respect to the external device is improved. be able to.

It is explanatory drawing which shows an example of a structure of the vehicle centering on the automatic transmission of embodiment of this invention. It is a flowchart of the control which ATCU and GW of embodiment of this invention perform. It is explanatory drawing which shows the predetermined operation performed by the user of embodiment of this invention

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is an explanatory diagram illustrating an example of a configuration of a vehicle 100 centering on an automatic transmission 3 according to an embodiment of the present invention.

  The vehicle 100 includes a drive device including the engine 1, the automatic transmission 3, the engine control unit 30 that controls the operation of the engine 1, and a transmission control unit 40 that controls the operation of the automatic transmission 3.

  The rotation of the crankshaft 11 driven by the engine 1 is transmitted to the automatic transmission 3 via the torque converter 2 and the input shaft 12. The automatic transmission 3 shifts the input rotation and outputs it to the output shaft 13. The rotation of the output shaft 13 is transmitted to the wheels 6 via the final reduction gear 4 and the axle 14 so that the vehicle 100 moves forward and backward.

  The torque converter 2 includes a lock-up clutch, and is controlled to a converter state and a lock-up state by hydraulic pressure.

  The automatic transmission 3 includes a primary pulley 31 connected to the input shaft 12, a secondary pulley 32 connected to the output shaft 13 arranged in parallel with the input shaft 12, and the primary pulley 31 and the secondary pulley 32. The belt-type continuously variable transmission mechanism includes an endless belt (V-belt) 33 that is wound around.

  The primary pulley 31 and the secondary pulley 32 are provided with a hydraulic chamber. By adjusting the hydraulic pressure supplied from the hydraulic control device 20, the width of the V groove changes, and the V belt 33, the primary pulley 31, the secondary pulley 32, The contact radius of the automatic transmission 3 changes steplessly.

  The hydraulic control device 20 includes an oil pump, and supplies hydraulic pressure to the hydraulic chambers of the primary pulley 31 and the secondary pulley 32 of the automatic transmission 3 as indicated by dotted lines in FIG. The hydraulic control device 20 also supplies hydraulic oil to the torque converter 2 and the bearings and gears of the automatic transmission 3.

  The engine control unit (hereinafter referred to as “ECU”) 30 receives an ignition ON signal sent from the ignition switch 54, an accelerator opening signal sent from the accelerator pedal 52, and a brake signal sent from the brake pedal 53, The engine 1 is driven based on the received signal.

  A transmission control unit (hereinafter referred to as “ATCU”) 40 controls the operation of the automatic transmission 3 by controlling the hydraulic pressure supplied by the hydraulic control device 20. The ATCU 40 determines the gear ratio of the automatic transmission 3 based on the range signal sent from the inhibitor switch 51 that outputs a signal in conjunction with the operation of the shift lever 50 by the driver and the engine operation signal sent from the ECU 30. Then, a control signal is transmitted to the hydraulic control device 20.

  A gateway 45 is connected to the ATCU 40. The gateway (hereinafter referred to as “GW”) 45 has a connector 47. The connector 47 is configured to be connectable to the diagnostic device 80 via the cable 81. The connector 47 is composed of, for example, an ODB connector.

  The GW 45 is a communication unit that controls communication between the diagnostic device 80 and the ATCU 40, and determines whether the diagnostic device 80 can communicate with the ATCU 40 by the control described later.

  Next, the operation of the GW 45 will be described.

  When the diagnostic device 80 is connected to the connector 47, the GW 45 is a predetermined operation (hereinafter referred to as “cryptographic operation”) that permits communication of the diagnostic device 80 to which an operation performed on the vehicle by the user is connected. In some cases, communication between the diagnostic device 80 and the ATCU 40 is permitted.

  FIG. 2 is a flowchart of control performed by the ATCU 40 and the GW 45 according to the present embodiment.

  The flowchart shown in FIG. 2 is executed at predetermined intervals (for example, every 10 ms) in the ATCU 40 and the GW 45.

  In step S10, the ATCU 40 determines whether or not an ignition ON signal is sent from the ignition switch 54 via the ECU 30. If it is determined that the ignition ON signal has been sent, the process proceeds to step S20. When the ignition ON signal is not sent, the process of this flowchart is terminated.

  In step S <b> 20, the GW 45 determines whether or not the diagnostic device 80 is connected to the connector 47. If it is determined that the diagnostic device 80 is connected to the connector 47, the process proceeds to step S30. At this time, the GW 45 records the ID and the like transmitted from the diagnostic device 80. If the diagnostic device 80 is not connected to the connector 47, the process of this flowchart is terminated.

  In step S30, the ATCU determines whether or not an encryption operation permitting communication of the diagnostic device 80 has been performed based on the accelerator opening signal and brake signal sent via the ECU 30, and the range signal sent from the inhibitor switch 51. .

  If it is determined that the cryptographic operation has been performed, the process proceeds to step S50. If it is determined that the predetermined operation is not a cryptographic operation, the process proceeds to step S40, and the ATCU 40 repeats the process of step S20 until a predetermined time elapses after the cryptographic operation is performed. If it is determined that the predetermined time has elapsed, the processing of this flowchart ends.

  The trigger for the predetermined time in step S40 may be the time when the first operation in the cryptographic operation (for example, the operation (2) in FIG. 3) is performed or the time when the ignition ON signal is sent.

  The predetermined operation in step S30 will be described later with reference to FIG.

  In step S50, the ATCU 40 transmits a seed signal to the GW 45.

  When the seed signal is transmitted from the ATCU 40, the GW 45 transmits the Key signal to the ATCU 40 in step S60.

  Next, in step S <b> 70, the ATCU 40 that has received the Key signal creates a response signal that is calculated for the Key signal using a predetermined algorithm, and transmits the response signal to the GW 45. The GW 45 collates the response signal from the AUCT 40 with respect to the Key signal and the result calculated by a predetermined algorithm inside the GW 45. If the two match, the GW 45 permits communication between the diagnostic device 80 and the ATCU 40.

  When the communication is permitted, the process proceeds to step S80, and the GW 45 requests the ATCU 40 for a response corresponding to the ID of the diagnostic device 80 acquired in step S20. The ATCU 40 responds with data corresponding to the request.

  As described above, the processing shown in the flowchart of FIG. 2 allows the communication of the diagnostic device 80 when the operation performed by the user in step S30 is a cryptographic operation.

  In step S80, when the GW 45 permits communication of the diagnostic device 80, the permission may be continued until the ignition switch 54 is turned OFF, or control is performed so as to permit only communication for the ID acquired in step S20. May be. Further, the communication may be permitted only for a predetermined time (for example, 5 minutes) after the communication is permitted in step S70.

  Next, the predetermined operation in step S30 will be described.

  FIG. 3 is an explanatory diagram showing a predetermined operation performed by the user of this embodiment.

  In the present embodiment, the GW 45 determines whether a “cryptographic operation” that is not normally performed is performed by the brake pedal 53, the accelerator pedal 52, and the shift lever 50, and permits communication of the diagnostic device 80.

  The cryptographic operation is obtained by a combination of operations shown in FIG.

  The ignition switch 54 is in a state where the ATCU 40, the GW 45, etc. operate when the ignition is ON.

  For the shift lever 50, any one of the P range, the N range, the D range, and the L range is selected.

  The brake pedal 53 is selected to be either on (the brake pedal 53 is depressed) or off (the brake pedal is released).

  The accelerator pedal 52 is selected to be off (TVO = 0), on (0 <TVO ≦ 8/8), full throttle (TVO = 8/8), or the like. Further, an intermediate opening (for example, TVO = 3/8 ± α, TVO = 2/8 to 4/8) may be selected. This α is set to a value that takes into account the difference in the amount of depression by the operator.

  For example, in the cryptographic operation, the operation of moving the controller device of FIG. 3 in a complex manner is completed within a predetermined time (for example, 10 seconds).

  Such an operation is an operation that cannot be performed by a normal user, and a normal user cannot perform a series of these operations in a short time such as a predetermined time.

  Therefore, by setting such a cryptographic operation in advance, even if the diagnostic device 80 is connected by a third party who does not know the cryptographic operation, it is extremely difficult for the diagnostic device 80 and the ATCU 40 to communicate with each other. . Thereby, the security of the reading / writing of the data to ATCU40 mounted in the vehicle can be improved.

  Note that the above-described cryptographic operation is an example, and various combinations can be taken.

  For example, the accelerator pedal 52 can be easily operated by a third party when the foot pedal is released or fully throttled. It becomes difficult for a third party who does not know to perform cryptographic operations.

  By setting the combination of the operation of the accelerator pedal 52, the brake pedal 53, and the shift lever 50 as a cryptographic operation, it becomes extremely difficult for a third party to perform the cryptographic operation. Data read / write security can be improved. When the operation of the accelerator pedal 52 is included in the cryptographic operation, it is desirable to turn on the ignition in a state where the driving force source such as the engine 1 is not operated for safety.

  As described above, the embodiment of the present invention is an operation including the engine 1 that drives the vehicle 100, the driving device including the automatic transmission 3, the accelerator pedal 52 that is operated by the driver, the brake pedal 53, and the shift lever 50. And a GW 45 (communication unit) that mediates communication between the ATCU 40 and an external device such as the diagnostic device 80, and the GW 45 is provided in the operation device. When the cryptographic operation is input, the GW 45 and the ATCU 40 are authenticated. When the authentication is performed, when the communication request from the diagnostic device 80 is received, the diagnostic device 80 is authenticated, and the diagnostic device 80 And allow communication between ATCU 40 and ATCU 40.

  With this configuration, communication is possible only when authentication between the GW 45 and the ATCU 40 and authentication between the diagnostic device 80 and the GW 45 are performed, and thus security of communication between the diagnostic device 80 and the ATCU 40 is improved. Can be improved. This effect corresponds to claims 1 and 5.

  In the embodiment of the present invention, the GW 45 prohibits authentication between the GW 45 and the ATCU 40 when the input of the cryptographic operation is not completed within a set time after the predetermined operation on the controller device is started. Counting is started with the operation as a trigger, and authentication is not performed unless the cryptographic operation is completed within the set time, so that security of communication between the diagnostic device 80 and the ATCU 40 can be improved. This effect corresponds to claim 2.

  In the embodiment of the present invention, the operating device has the accelerator pedal 52, and the cryptographic operation is an operation in which the accelerator pedal 52 is depressed and the accelerator pedal 52 has an intermediate opening degree that is not maximum. Since it is included, the security of communication between the diagnostic device 80 and the ATCU 40 can be improved by setting the value so as to avoid the maximum opening (full throttle) that may be attempted by a third party. . This effect corresponds to the third aspect.

  In the embodiment of the present invention, the operating device includes the accelerator pedal 52, the brake pedal 53, and the shift lever 50, and the cryptographic operation is performed using at least two of the accelerator pedal 52, the brake pedal 53, and the shift lever 50. Since simultaneous operation is included, the security of communication between the diagnostic apparatus 80 and the ATCU 40 can be improved by setting the cryptographic operation more complicated. This effect corresponds to claim 4.

  The embodiment of the present invention has been described above, but the above embodiment is merely one example of application of the present invention, and the technical scope of the present invention is limited to the specific configuration of the above embodiment. is not.

  In the present embodiment, the automatic transmission 3 has been described as an example of a belt-type continuously variable transmission that is configured by belting a set of pulleys, but is not limited thereto. The automatic transmission 3 may be a stepped transmission or a combination of a continuously variable transmission and a stepped transmission.

  Moreover, although this embodiment demonstrated to the example which a drive device consists of the engine 1, it is not restricted to this. The drive device may be an HEV (Hybrid Electric Vehicle) including an engine, a motor, and an automatic transmission, or may be an EV (Electric Vehicle) including a motor and an automatic transmission.

1 Engine 2 Torque Converter 3 Automatic Transmission 20 Hydraulic Control Device 30 Engine Control Unit (ECU)
40 Transmission control unit (ATCU)
45 Gateway (GW, communication unit)
47 Connector 50 Shift lever 51 Inhibitor switch 52 Accelerator pedal 53 Brake pedal 54 Ignition switch 80 Diagnostic device (external device)

Claims (5)

A driving device for driving the vehicle;
An operating device operated by a driver;
A control unit for controlling the driving device based on an operation of the operating device;
A communication unit that mediates communication between an external device and the control unit;
With
The communication unit is
When a predetermined cryptographic operation is input to the operating device, the communication unit and the control unit are authenticated,
When the authentication is performed, when the communication request is received from the external device, the external device is authenticated and communication between the external device and the control unit is permitted. vehicle. The vehicle according to claim 1,
The communication unit prohibits authentication between the communication unit and the control unit when the input of the cryptographic operation is not completed within a set time after a predetermined operation on the operation device is started. That the vehicle. In the vehicle according to claim 1 or claim 2,
The operating device has an accelerator pedal,
The cryptography operation includes an operation in which the accelerator pedal is depressed and an intermediate opening degree at which the opening degree of the accelerator pedal is not maximum is included. The vehicle according to any one of claims 1 to 3,
The operating device has an accelerator pedal, a brake pedal, and a shift lever,
The vehicle is characterized in that the cryptographic operation includes simultaneously operating at least two of the accelerator pedal, the brake pedal, and the shift lever. A drive device for driving a vehicle, an operation device operated by a driver, a control unit for controlling the drive device based on an operation of the operation device, and a communication unit for mediating communication between an external device and the control unit A vehicle communication method comprising:
When a cryptographic operation is input to the operation device, the communication unit and the control unit are authenticated,
When the authentication is performed, when the communication request is received from the external device, the external device is authenticated and communication between the external device and the control unit is permitted. Vehicle communication method.

Images