JP6049841B1 - In-vehicle network management apparatus and in-vehicle network management method - Google Patents

Abstract

Provided is an in-vehicle network management device and an in-vehicle network management method that can analyze communication contents by canceling encryption without distributing a password even when using an in-vehicle network analysis tool that does not have a function to cancel encryption. To do. A request acquisition unit that acquires a request to perform or release encryption from a user, a key position acquisition unit that acquires a position of a car key, and a request acquisition unit acquire a request to cancel encryption And an encryption communication management unit that generates a signal for decrypting the network communication data when it is determined that the key position acquired by the key position acquisition unit exists in a location within a preset range; Is provided. [Selection] Figure 1

Description

  The present invention relates to an in-vehicle network management apparatus and an in-vehicle network management method, and more particularly to an in-vehicle network management apparatus and management method mounted on a vehicle.

In recent years, security vulnerabilities such as hijacking of automobile management systems have been pointed out, and efforts to improve security using technologies such as encryption and authentication are also drawing attention between control units in an in-vehicle network.
However, if communication remains encrypted, communication for maintenance and repair purposes cannot be performed freely. If an attempt is made to use a dedicated tool having an encryption release function, the maintenance shop must introduce a different tool for each manufacturer, which is a heavy burden.

  In order to solve such problems, different authentication procedures for each manufacturer are installed as a program, so that maintenance can be performed with a single tool even if the method of canceling authentication differs depending on the vehicle being maintained. (For example, Patent Document 1).

  With a tool such as this patent document 1, it is possible to operate to cancel encrypted communication only when necessary by installing an authentication procedure and password for canceling encrypted communication in the tool and discarding them after use. become.

Special table 2014-514203 gazette

  However, even in the case of such a tool, the point that a new tool having a function for downloading and using an authentication procedure and a password is still required for a maintenance shop. In addition, the advantage of being able to execute with a single tool cannot be used unless the manufacturers have unified their authentication procedures and password downloading platforms.

  The present invention has been made in view of such a state of the art, and even when an in-vehicle network analysis tool that does not have a function of releasing encryption is used, the communication can be analyzed by analyzing the communication content by releasing the encryption. The object is to realize a network management device.

In order to achieve the above object, an in-vehicle network management device according to the present invention includes a request acquisition unit that acquires a request for execution or cancellation of encryption from a user, and a key position acquisition unit that acquires a position of a car key. When the request acquisition unit acquires the request for cancellation of encryption and determines that the key position acquired by the key position acquisition unit exists in a location within a preset range, the network communication data On the other hand, an encryption communication management unit that generates a signal for canceling the encryption, and an instruction signal so that the speed of the vehicle does not exceed a set value when the encryption communication management unit cancels the encryption A speed limit instruction unit .
Further, in the present invention, the request acquisition unit for acquiring a request for performing or canceling encryption from a user, the key position acquisition unit for acquiring the position of a car key, and the request acquisition unit are configured to cancel the encryption. And when determining that the key position acquired by the key position acquisition unit exists in a location within a preset range, a signal for canceling the encryption for network communication data is received. And a partial encryption communication unit that generates a signal for encrypting only specified data according to an instruction of the encryption communication management unit when the encryption communication management unit cancels the encryption. An in-vehicle network management device is provided.
Further, in the present invention, a request acquisition unit that acquires a request for performing or canceling encryption from a user, a key position acquisition unit that acquires a position of a car key, and the request acquisition unit are configured to cancel the encryption. And when determining that the key position acquired by the key position acquisition unit exists in a location within a preset range, a signal for canceling the encryption for network communication data is received. An encrypted communication management unit that generates, and a communication monitoring unit that monitors whether unauthorized communication is performed according to an instruction of the encrypted communication management unit when the encrypted communication management unit releases the encryption An in-vehicle network management device is provided.

In order to achieve the above object, an in-vehicle network management method according to the present invention obtains a request for execution or release of encryption from a user, obtains a position of a car key, and sends a request for release of the encryption. When it is acquired and it is determined that the position of the acquired key exists in a location within a preset range, a signal for releasing the encryption is generated for the network communication data, and the encryption is released. At this time, an instruction signal is generated so that the speed of the vehicle does not exceed the set value.
Further, in the present invention, a request for performing or releasing encryption from a user is acquired, a position of a car key is acquired, a request for releasing the encryption is acquired, and the position of the acquired key is stored in advance. If it is determined that it exists in a set range location, a signal for deciphering the network communication data is generated, and when deciphering, only the specified data is encrypted. An in-vehicle network management method for generating a signal is provided.
Furthermore, in the present invention, a request for performing or releasing encryption is acquired from a user, a position of a car key is acquired, a request for releasing the encryption is acquired, and the acquired key position is If it is determined that it exists in a set range location, a signal for releasing the encryption is generated for the network communication data, and whether or not unauthorized communication is performed when the encryption is released An in-vehicle network management method for monitoring the network is provided.

  In the in-vehicle network management device and the in-vehicle network management method according to the present invention, when a request for cancellation of encryption is obtained from the user and it is determined that the position of the car key exists in a predetermined range, the encryption Because the system is configured to generate a signal to cancel encryption, a vehicle that performs encrypted communication can be used in a maintenance shop that does not have a dedicated encryption analysis tool, that is, a maintenance shop that does not have an encryption release function and has only a network analysis tool. Even when maintenance is performed, communication contents can be browsed according to a user's request without disclosing a password, and maintenance and repair can be performed.

It is a block diagram which shows the structure of the vehicle-mounted network management apparatus by Embodiment 1 of this invention. It is a flowchart figure which shows the operation | movement concept of the vehicle-mounted network management apparatus by Embodiment 1 of this invention. It is a block diagram which shows the structure of the vehicle-mounted network management apparatus by Embodiment 2 of this invention. It is a flowchart figure which shows the operation | movement concept of the vehicle-mounted network management apparatus by Embodiment 2 of this invention. It is a block diagram which shows the structure of the vehicle-mounted network management apparatus by Embodiment 3 of this invention. It is a flowchart figure which shows the operation | movement concept of the vehicle-mounted network management apparatus by Embodiment 3 of this invention. It is a block diagram which shows the structure of the vehicle-mounted network management apparatus by Embodiment 4 of this invention. It is a flowchart figure which shows the operation | movement concept of the vehicle-mounted network management apparatus by Embodiment 4 of this invention.

  Hereinafter, an in-vehicle network management device and an in-vehicle network management method according to the present invention will be described in detail with reference to the drawings based on embodiments of the in-vehicle network management device. Note that the present invention is not limited to these embodiments.

Embodiment 1 FIG.
Conceptually speaking, the in-vehicle network management device according to the first embodiment is (1) a location in a range where a car key is set in advance when there is a decryption instruction from the user (hereinafter referred to as a predetermined location). (2-1) When there is an instruction to carry out encryption from the user, or (2-2) When the key does not exist at a predetermined location In addition, communication encryption is performed.

  The in-vehicle network management device 110 according to the first embodiment shown in FIG. 1 is mounted on the vehicle 100, and includes a request acquisition unit 111 that acquires a user operation instruction, and a key position acquisition unit 112 that acquires a key position. An encryption communication management unit 113 for instructing execution or cancellation of encryption for network communication data.

  In addition, control units 120A and 120B are connected to the in-vehicle network management apparatus 110 via a common bus 130, and network communication data to be encrypted is mutually transmitted and received. These control units include various units such as a management unit.

The user's operation terminal that communicates with the request acquisition unit 111 may be a user's mobile phone or smartphone, or an in-vehicle device having an input function such as a car navigation system. The password input corresponding to the decryption operation and encryption Any device can be used as long as it can input an instruction to cancel or resume the operation. The communication method with the user's operation terminal may be wired or wireless, and in the case of wireless, communication may be performed via a server or direct communication.
In addition, the user may specify the timing of the resumption of encryption by designating the date and time or the elapsed time since the decryption is canceled by the user.

  The key position acquisition unit 112 detects the key position. That is, it may be detected whether the key is inserted into the cylinder, or may be detected by wireless communication with a wireless communication function attached to the key. Further, the key position acquisition unit 112 may determine whether or not the position of the acquired key exists at a predetermined location.

  The encryption communication management unit 113 receives the key position acquired by the key position acquisition unit 112 and determines whether the key exists at a predetermined location. Alternatively, the encryption communication management unit 113 may only receive the result of the key position acquisition unit 112 determining whether or not the key position exists at a predetermined location.

The operation of the in-vehicle network management apparatus 110 will be described with reference to the flowchart shown in FIG.
(1) It is determined whether the request acquisition unit 111 has acquired a decryption request from the user (step S1). And it is determined whether the key position acquired by the key position acquisition part 112 exists in a predetermined place (step S2). As a result, when a request for descrambling is obtained in step S1 and it is determined in step S2 that the key position exists at a predetermined location, the encryption communication management unit 113 determines in step S3, for example, an external control unit A decryption signal is sent to 120A and 120B via the common bus 130. Thereby, the encryption of the network communication data between the control units 120A and 120B is released.

  (2-1) Generates a signal for performing or restarting encryption when there is an instruction to restart encryption from the user (step S4). (2-2) A signal for performing or resuming encryption is generated even when the key does not exist at a predetermined location (step S4).

  Even after the key is once removed from the predetermined location and the encryption is resumed, if the user has not instructed the encryption to resume, the decryption is again performed when it is confirmed that the key exists again in the predetermined location. May be implemented.

  The encryption communication management unit 113 can instruct to encrypt network communication data by generating a command signal, and can instruct the communication target to perform or release encryption by a specific message or communication procedure. To do. Encryption may be performed on software or dedicated hardware.

  By configuring as described above, the user can leave the vehicle with the key in the factory, and the user can input the decryption request together with the password, so that the encryption can be canceled without notifying the password to the factory side. Can perform repairs and maintenance using conventional network analysis tools. Since it is necessary for the decryption to have a human operation to know the password and to have the car key, it is possible to prevent a third party from canceling the encryption without permission.

  Further, since the encryption is resumed when the key is removed from the predetermined place, it is possible to prevent the encryption from being released.

  As described above, the in-vehicle network management device mounted on the vehicle has the request acquisition unit, the key position acquisition unit, and the encryption communication management unit, and (1) there is a decryption instruction from the user, and When the key exists at a predetermined location, the encryption of the network communication with the other device is canceled, and (2-1) the user is instructed to resume the encryption, or (2-2) the key is predetermined The network communication data is encrypted when it is not in the location.

  This makes it possible to perform maintenance and repair by releasing the encryption only when necessary, without the need to teach the password to the factory, and without the need for the factory to prepare a dedicated tool for encryption. A management device can be provided.

Embodiment 2. FIG.
In the first embodiment described above, the configuration for suppressing the unauthorized release of encrypted communication has been described. However, in practice, it is difficult to completely eliminate the risk of unauthorized access.
Therefore, in the second embodiment, in addition to the configuration of the first embodiment, by providing a function for limiting the maximum speed of the vehicle during the cancellation of the encryption, the vehicle is illegal in a state where the encryption is released. Even when it is accessed, it has a configuration that reduces the risk of serious accidents.

FIG. 3 is a configuration diagram of the in-vehicle network management device according to the second embodiment, and only the configuration added to the first embodiment will be described below with reference to the flowchart of FIG.
The in-vehicle network management device 110 is provided with a speed limit instruction unit 114. The speed limit instruction unit 114 is connected to the encryption communication management unit 113. When the encryption communication management unit 113 cancels the encryption, the speed limit instruction unit 114 receives the speed limitation instruction unit 114 via the common bus 130 so that the vehicle speed does not exceed the set value. Thus, the control unit 120A or 120B that controls the speed control is instructed (step S5 in FIG. 4).

Alternatively, when the encryption communication management unit 113 cancels the encryption, the encryption communication management unit 113 may directly instruct the speed limit unit 121 in the control unit 120B without using the speed limit instruction unit 114.
As a result, the maximum speed is limited when communication encryption is released.

  The speed limit signal is given to the control unit 120A or 120B that controls driving of the vehicle. If the condition is satisfied, the speed limit signal 114 and the speed limit unit 121 are not used, and the in-vehicle network is used. The management device 110 itself may have a speed limiting function.

  According to said structure, even if it receives unauthorized access during the cancellation | release of encryption, the safety | security of a system can be improved by reducing the risk that a serious accident will occur.

Embodiment 3 FIG.
In the first embodiment described above, a configuration has been described in which the problem that information necessary for maintenance cannot be browsed by encrypted communication is solved by providing means for releasing encryption. In some cases, information that is not necessary for maintenance and that is related to the privacy of the user is exchanged.

  Therefore, in the third embodiment, in addition to the configuration of the first embodiment, a configuration in which processing for separately encrypting only information designated by the user is added.

FIG. 5 is a configuration diagram of the in-vehicle network management device according to the third embodiment, and only the configuration added to the first embodiment will be described below with reference to the flowchart of FIG.
Each of the in-vehicle network management device 110 and the control unit 120 includes partial encryption communication units 115 and 122 that generate signals for separately encrypting and communicating only the data designated by the user when the encryption is released, respectively. Even when the encryption is canceled, only the information designated by the user is separately encrypted and communicated (step S6 in FIG. 6).

  The partial cipher communication unit 115 constitutes the transmission side of each message, and the partial cipher communication unit 122 constitutes the reception side. Depending on the message to be encrypted, a partial encryption communication unit may be provided in each of the control unit 120A and another control unit 120B, and encryption may be performed between both partial encryption communication units.

  According to the above configuration, it is possible to provide a device that protects information that is not necessary for maintenance and is related to user privacy while disclosing information necessary for maintenance by releasing encryption.

Embodiment 4 FIG.
In the fourth embodiment, in addition to the configuration of the first embodiment described above, a configuration corresponding to unauthorized access is provided by monitoring the communication being decrypted.

FIG. 7 is a configuration diagram of the in-vehicle network management device according to the fourth embodiment. Only the configuration added to the first embodiment will be described below with reference to the flowchart of FIG.
The in-vehicle network management device 110 is provided with a communication monitoring unit 116. This communication monitoring unit 116 is connected to the encryption communication management unit 113, and whether or not there is an unauthorized access in the contents of communication when the encryption is released. Is monitored (step S7 in FIG. 8). This compensates for the decrease in security performance during the decryption.

  The communication monitoring unit 116 holds the content of communication in the normal case, and may have a mechanism for monitoring compared to the actual communication content, or the communication content is sequentially or once held and uploaded to the server. The result monitored by the server may be acquired.

According to such a configuration, since the contents of communication are monitored even when the encryption is released, the risk of unauthorized access can be reduced.
Also, when monitoring with a server, not all vehicles are constantly monitored, but monitoring is focused on vehicles that have been decrypted, so that the resources of the server can be used effectively.

  DESCRIPTION OF SYMBOLS 100 Vehicle, 110 Vehicle-mounted network management apparatus, 111 Request acquisition part, 112 Key position acquisition part, 113 Encryption communication management part, 114 Speed limit instruction part, 115 Partial encryption communication part, 116 Communication monitoring part, 120A, 120B Control unit, 121 Speed limiter, 122 Partial encryption communication unit.

Claims (11)

A request acquisition unit for acquiring a request to perform or release encryption from a user;
A key position acquisition unit for acquiring the position of the car key;
When the request acquisition unit acquires the request for cancellation of encryption and determines that the key position acquired by the key position acquisition unit exists in a location within a preset range, the network communication data An encryption communication management unit for generating a signal for releasing the encryption ,
An in-vehicle network management device comprising: a speed limit instruction unit that generates an instruction signal so that a speed of a vehicle does not exceed a set value when the encryption communication management unit releases the encryption . The in-vehicle network management device according to claim 1, wherein the encryption communication management unit generates a signal for performing communication encryption when the request acquisition unit acquires the encryption execution request. The said encryption communication management part produces | generates the signal for implementing the said encryption, when the said key position acquisition part determines with the said key not existing in the place of the said preset range. In-vehicle network management device. The in-vehicle network management device according to claim 1 , wherein the speed limit instruction unit is provided inside. The in-vehicle network management device according to claim 1 , wherein the speed limit instruction unit is provided outside. A request acquisition unit for acquiring a request to perform or release encryption from a user;
A key position acquisition unit for acquiring the position of the car key;
When the request acquisition unit acquires the request for cancellation of encryption and determines that the key position acquired by the key position acquisition unit exists in a location within a preset range, the network communication data An encryption communication management unit for generating a signal for releasing the encryption,
When the encryption communication management unit releases the encryption, according to an instruction of the encryption communication management unit, vehicle network management device that includes a partial cryptographic communication unit for generating a signal for encrypting only the specified data. The in-vehicle network management device according to claim 6 , wherein the partial cipher communication unit is provided inside and outside. A request acquisition unit for acquiring a request to perform or release encryption from a user;
A key position acquisition unit for acquiring the position of the car key;
When the request acquisition unit acquires the request for cancellation of encryption and determines that the key position acquired by the key position acquisition unit exists in a location within a preset range, the network communication data An encryption communication management unit for generating a signal for releasing the encryption,
When the encryption communication management unit releases the encryption, according to an instruction of the encryption communication management unit, vehicle network management device and a communication monitoring unit for monitoring whether or not performed unauthorized communication. Obtain a request to perform or release encryption from the user,
Get the key position of the car,
When a request to cancel the encryption is acquired and it is determined that the position of the acquired key is within a preset range, a signal for releasing the encryption is generated for network communication data And
An in- vehicle network management method for generating an instruction signal so that the speed of a vehicle does not exceed a set value when the encryption is canceled .   Obtain a request to perform or release encryption from the user,
  Get the key position of the car,
  When a request to cancel the encryption is acquired and it is determined that the position of the acquired key is within a preset range, a signal for releasing the encryption is generated for network communication data And
  Generates a signal to encrypt only the specified data when the encryption is canceled
  In-vehicle network management method.   Obtain a request to perform or release encryption from the user,
  Get the key position of the car,
  When a request to cancel the encryption is acquired and it is determined that the position of the acquired key is within a preset range, a signal for releasing the encryption is generated for network communication data And
  When releasing the encryption, monitor whether unauthorized communication is taking place
  In-vehicle network management method.

Images