JP2002333989A - System for distributing information to vehicle and method for the same - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information distributing system and method capable of preventing any inconvenience from being generated in vehicle control at the time of inputting contents to be distributed to a vehicle. SOLUTION: A computer 8 of a management company 7 receives a contents and virus check authentication request signal transmitted from a vehicle 1 or receives the contents name, and diagnoses the transmitted contents or the contents received from a contents providing company by referring to a virus data base and a vaccine data base by a server for analyzing contents, and at the time of judging that the contents are not infected by any virus, or at the time of removing the virus from the contents, transmits the contents added with an electronic key to the vehicle 1, and inputs the contents to a computer 2 of the vehicle 1.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and a method for distributing information to a vehicle suitable for safely providing content information to a computer mounted on an automobile, for example.

[0002]

2. Description of the Related Art As a prior art, for example,
As described in JP-A-122162, personal identification of all the occupants is performed by input from an ID card or other input means at the time of boarding, and the delivery destination is determined based on the distribution level of the message received by the personal authentication information. With
2. Description of the Related Art There is an in-vehicle information distribution system that determines whether information can be distributed based on a recognition of a traveling state of a vehicle or a vehicle environment and distributes information. Further, as described in Japanese Patent Application Laid-Open No. H11-274999, a plurality of versions of a common key are used for cryptographic communication between a fixed station and a plurality of mobile units, and the mobile unit uses its own key version at the time of a communication request. The fixed station determines whether the received key version of the normal key is validly supported and responds with the version and key usage (normal) if it is valid, and the key version and key if invalid There is a mobile communication system adapted to respond to an application (urgent).

[0003]

Problems to be Solved by the Invention
The in-vehicle information distribution system described in Japanese Patent Publication No. 62 is a system for safely distributing information received by a vehicle by recognizing a passenger's distribution level, a traveling state of the vehicle, and a vehicle environment. Since it is not assumed that the information received by the vehicle is infected with a computer virus or that the information already entered in the computer has been altered, the control program of the vehicle will be destroyed and a serious accident will occur. No consideration has been given to preventing this from happening. Also, JP-A-11-274999
Although the mobile communication system described in Japanese Patent Application Publication No. H10-107125 improves the security of communication, even in the case of the conventional technology, if the received information is infected with a computer virus, the control program of the vehicle is destroyed, and the seriousness is serious. No consideration has been given to preventing accidents.

[0004] A first object of the present invention is to provide a system and a method for distributing information to a vehicle, which can prevent inconvenience in vehicle control when inputting content to be distributed to the vehicle.

A second object of the present invention is to provide a system and a method for distributing information to a vehicle, which can prevent contents infected with a virus from entering a computer of the vehicle.

A third object of the present invention is to provide a system and a method for distributing information to a vehicle, which can prevent tampering when setting value information of the vehicle is changed.

[0007]

In order to achieve the first and second objects, an information distribution system for a vehicle according to the present invention receives a content from a vehicle and a virus check authentication request signal and analyzes the content. When the server for the application diagnoses the content by referring to the virus database and the vaccine database and judges that the content is not infected with the virus, or when the virus can be removed from the content, the server attaches an electronic key to the content and attaches the electronic key to the content. It is transmitted to a vehicle.

In addition, a desired content name is received from the vehicle to obtain the content, and a content analysis server diagnoses the content by referring to a virus database and a vaccine database, and determines that the content is not infected by a virus. If it is determined or the virus can be removed from the content, the content is attached to an electronic key and transmitted to the vehicle.

[0009] Further, in a vehicle provided with a communication device for transmitting a content and a virus check authentication request signal to a management company, when the communication device receives the content attached with an electronic key from the management company, The electronic key and the content are transmitted to a computer of the vehicle by a control unit.

[0010] Also, a vehicle comprising a communication device for transmitting a desired content name to a management company, wherein when the communication device receives a content attached with an electronic key from the management company, the control unit controls the communication device. The electronic key and the content are transmitted to a vehicle computer.

[0011] Further, the method of distributing information to the vehicle is such that a computer of a management company receives a content transmitted from the vehicle and a virus check authentication request signal or receives a content name, and receives the transmitted content or content from the content provider. When the received content is diagnosed by a content analysis server with reference to a virus database and a vaccine database and it is determined that the content is not infected with a virus, or when the virus can be removed from the content, an electronic key is assigned to the content. The information is transmitted to the vehicle and input to a computer of the vehicle.

In addition, the content received from the vehicle and the created virus check authentication request signal or the desired content name are transmitted to the management company, and when the content with the electronic key is received from the management company, the electronic key And transmitting the content to the computer of the vehicle.

In order to achieve the third object, an information distribution system for a vehicle according to the present invention includes a storage unit for storing vehicle setting information, and a driver's request for changing the vehicle setting information. An input unit, and a communication device that transmits the request to be changed input at the input unit to a management company,
The setting information of the changed car provided that the changed setting information of the car attached with the electronic key from the management company is received by the communication device and the electronic key is compared with a previously recorded electronic key. Is stored in the storage unit.

[0014]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention is shown in FIGS.
4 will be described. As an information distribution system for vehicles,
In the following, description will be made by taking a car as an example, but the present invention can be applied to a moving body such as a train. As shown in FIGS. 1 and 2, the information distribution system for a vehicle according to the present embodiment is bidirectional with a computer 2 mounted on a vehicle 1 (also referred to as a vehicle 1) and used for running control of the vehicle. A car navigation device 5a, a mobile terminal 5b such as a PDA (abbreviation of Personal Digital Assistants), a mobile phone 5c, or a mobile personal computer 5d connected by a broadband communication network 3 or a communication line 4 such as a local communication, a terrestrial wave, a satellite communication, or the like. And a computer 8 of a management company 7 connected to the portable information terminal 5 via a two-way broadband communication network 3. The computer 8 is connected via a communication network 3 to a computer of a provider of the latest external computer virus information and vaccine program information (not shown), a computer of a provider of detailed information on automobiles, and a computer of a provider of content. . The computer 2 and the portable information terminal 5 are connected to a content holder 16 which is a content provider by a communication network 3 or a communication line 4.

As shown in FIG. 3, the computer 8 of the management company 7 includes a server 9 for content analysis, a server 10 for authentication and a server 11 for billing, a billing database 12,
The information database 14 includes a certificate database 13, a virus database, a vaccine database, a security setting value database, and the like, and a network 15 connecting them. The information database 14 records computer virus information received and accumulated from an external provider and vehicle setting value information related to vehicle safety settings.

As shown in FIG. 4, the portable information terminal 5 has a communication interface 21 connected to a communication device 20, a CPU 22 connected to the communication interface 21 via a bus 28, a storage unit 23 of RAM / ROM, Card interface 24, input unit 25, output unit 2
6, a control unit 27. The portable information terminal 5 is provided with an insertion slot for a flash card 16, and is used with the flash card 16 attached to the flash card interface 24. The flash card 16 is provided with a normal memory area 16a for storing vehicle setting information, application programs, and various contents, and a tamper-resistant area 16b for preventing unauthorized tampering from the outside. A tamper-resistant area can be provided in the storage unit 23 of the RAM / ROM in addition to the normal memory area. In this case, the flash card and the flash card interface can be omitted.

As shown in FIG. 5, the computer 2 is connected via a bus 41 to a communication interface 31 connected to the communication device 30, a buffer area 40 provided immediately after the communication interface 31, and a buffer area 40. CPU 32, RAM / ROM storage unit 33, certificate check unit 34, input unit 35, output unit 36, control unit 3
7, a large-capacity storage 38, and various sensors 39.

Next, the operation of the vehicle information providing system configured as described above will be described. Hereinafter, this type of operation is referred to as type 1. As shown in FIGS. 6 and 8, when the passenger operates the portable information terminal 5 or the input unit 35 of the computer 2 to input or select and transmit the desired content name in step 101, the content holder 16 is transmitted. Transmits the desired content to the portable information terminal 5. The portable information terminal 5 that has received the content does not transmit the received content to the computer 2,
It is stored in the storage unit 23 of the portable information terminal 5. The control unit 27 of the portable information terminal 5 creates a virus check authentication request signal to be transmitted to the computer 8 of the management company 7, as shown in FIGS. Also, a request signal is generated in step 102 by using a content ID for specifying the content to be checked for viruses and a vehicle ID for specifying the transmitted vehicle or using a predefined vehicle ID.
The content ID, the vehicle ID, and the content are transmitted to the computer 8 of the management company 7 via the communication interface 21 and the communication device 20.

The computer 8 that has received the request signal, the content ID, the vehicle ID and the content in step 121 shown in FIG. 9 analyzes the content received by the content analysis server 9 in step 122. That is, it is determined whether or not the content distributed by the virus diagnosis program is infected with a virus by referring to the virus database. If it is determined that the vehicle has not been infected with a virus, the electronic key issued in advance for each automobile 1 in the server 10 for authentication is referred to as the content ID by referring to the certificate database 13 in steps 123 to 125. And sends it to the portable information terminal 5. Step 1
If it is determined in step 26 that the computer is infected with a virus, the contents analysis server 9 removes the virus from the contents by referring to the vaccine database in steps 127 and 128. If the virus can be removed from the content, the electronic key is attached to the content created in steps 123 to 125 and transmitted to the portable information terminal 5. If the content analysis server 9 cannot remove the virus, or if there is no request from the portable information terminal 5 to remove the virus, the information that the virus has been infected is added to the content ID in steps 129 and 125. A reply is sent to the portable information terminal 5.

In step 103 shown in FIG.
D, the portable information terminal 5 that has received the electronic key or the information in which the content is infected with the virus and the content receives the electronic key in step 104, and stores the electronic key in the tamper-resistant area in step 106. In step 131 shown in FIG. 10, the portable information terminal 5 transmits a content transmission request signal and an electronic key to the computer 2.
The computer 2 that has received the electronic key, which is the certificate in step 132, checks the electronic key received in step 133 with the electronic key that has been registered in advance. Content that is not infected with a virus on computer 2 of car 1
Send a signal requesting transmission to The computer 2 receiving the content stores the content in the storage unit 3
Record in 3. In step 133, the received electronic key is compared with a pre-registered electronic key. If not, no content transmission request signal is created, and in step 137, a non-permission notification is sent to the portable information terminal 5. Perform and display. Looking at this display, the passenger can take measures such as confirming with the management company 7.

When receiving a content infected with a virus without an electronic key, the portable information terminal 5
The corresponding content name or content ID and the fact that it is infected with a virus are displayed. The passenger looks at the display and performs processing such as erasing the content.

As described above, after the transmitted content is checked by the management company whether the content is infected with a virus, the content that is not infected with the virus is input to the computer, so that the control program of the vehicle is destroyed. It is possible to prevent a serious accident from being caused.
In general, it is difficult for individuals to reflect on the latest virus information and take countermeasures, but it is difficult for individuals to take measures against the latest virus by transmitting the obtained content to the management company and diagnosing it. be able to. Further, even if the content is infected with a virus, the virus can be deleted on the management company side, and there is an effect that the content obtained by paying money is less wasted. In addition, since the computer of the vehicle receives the content when it is verified with the electronic key set in advance on the vehicle, it is possible to block information other than the information transmitted from the management company. Erroneous transmission from the user can be prevented.

Next, the vehicle set value information will be described. By registering the purchaser of the car and the person who normally drives, the weight of the steering wheel, the weight of the accelerator, and the stepping on the brakes depend on the age, gender, driving history, physical requirements, etc. of that person. Weight adjustment, speed upper limit, shifting timing,
Control constants for acceleration and the like are recorded in advance in the storage unit 33 of the computer 2 as vehicle setting value information. When the driver drives the vehicle with the set value information of the set vehicle and wants to change, for example, the weight of the steering wheel according to the driver's preference, the input unit 3 of the computer 2
5 or the portable information terminal 5 to input a request that the driver wants to change, and the communication interface 21 and the communication device 2
0 to the management company 7. The computer 8 of the management company 7 receiving this information updates the vehicle setting value information by the content analysis server 9 with reference to the safety setting value database. The updated setting value information of the car has been checked for virus infection by the server for content analysis, and is data free from virus infection. The updated vehicle setting value information is transmitted to the computer 2 of the vehicle 1 with an electronic key attached. The computer 2 that has received the set value information of the car to which the electronic key is attached performs collation with the electronic key registered in advance, and records the set value information of the car in the storage unit 33 on condition that the keys match.

As described above, since the vehicle can be driven with the control constant of the vehicle corresponding to the driver, the driving suitable for the driver can be performed. Further, when changing the set value information of the vehicle in accordance with the preference of the driver, the set value information can be changed by new information accumulated in the management company, so that more appropriate driving of the vehicle can be performed.
Also, when the vehicle is compared with the electronic key set in advance, the computer of the vehicle receives the set value information of the vehicle, so that information other than the information transmitted from the management company can be blocked. It is possible to prevent receiving an erroneous transmission from the management company.

FIG. 7 is a flowchart showing a modification of the present embodiment. In this example, the portable information terminal 5 or the computer 2 does not receive the content directly from the content holder 16 but has the desired content. The desired content is transmitted from the management company 7. Hereinafter, this is referred to as type 2. In step 109 shown in FIG. 8, the passenger operates the portable information terminal 5 or the input unit 35 of the computer 2 to input or select the content name desired to be obtained, and the management company together with the vehicle ID for specifying the vehicle. 7, the management company 7 receives the desired content from the content provider in step 121 in FIG. The computer 2 that has received the content diagnoses the content received by the content analysis server 9 in step 122. When it is determined that the vehicle is not infected with a virus, the electronic key issued in advance for each automobile 1 in the server for authentication 10 is set as the content ID by referring to the certificate database 13 in steps 123 to 125. And sends it to the portable information terminal 5. If it is determined in step 126 that the content is infected with a virus, the content analysis server 9 removes the virus from the content in steps 127 and 128. If you can remove the virus from your content,
An electronic key is attached to the content created in steps 123 to 125 and transmitted to the portable information terminal 5. If the content analysis server 9 cannot remove the virus, the contents are returned to the portable information terminal 5 with information that the desired content is infected with the virus in steps 129 and 125.

In the portable information terminal 5 that has received the authenticated content in step 110 shown in FIG.
In step 5, the electronic key is stored in the tamper-resistant area. In step 131 shown in FIG. 10, the portable information terminal 5 transmits a content transmission request signal and an electronic key to the computer 2. The computer 2 that has received the electronic key, which is a certificate in step 132, checks the electronic key received in step 133 with the electronic key registered in advance. Requesting that the content be transmitted to the computer 2 of the vehicle 1. The computer 2 that has received the content records the content in the storage unit 33. Step 133
The electronic key received in step 2 is compared with the electronic key registered in advance. If the electronic key is not matched, a content transmission request signal is not created, and a non-permission notification is sent to the portable information terminal 5 in step 137. indicate. Looking at this display, the passenger can take measures such as confirming with the management company 7.

In this example, after the desired content is checked by the management company, the content that is not infected with the virus is input to the computer, so that the content infected with the virus is not received by the vehicle side, and the control of the vehicle is prevented. It is possible to further prevent the program from being destroyed and leading to a serious accident. Further, the content infected with the virus can be checked in advance by the management company, and there is an effect that the content obtained by paying money is less wasted. In addition, since the computer of the vehicle receives the content when it is verified with the electronic key set in advance on the vehicle, it is possible to block information other than the information transmitted from the management company. Erroneous transmission from the user can be prevented.

In the examples shown in FIGS. 11 to 14, contents are obtained by using the buffer area 40 of the computer 2 without using the portable information terminal 5, and FIG.
In the example shown in FIG. 12, when the input unit of the computer 2 is operated to obtain the content from the content holder 16 (hereinafter, referred to as type 3), the examples shown in FIGS. When operating and acquiring content from the management company 7 (hereinafter referred to as type 4)
Is shown.

In the examples shown in FIGS. 11 and 12, the passenger
In step 151, when the user operates the input unit 35 of the computer 2 to input or select the content name desired to be obtained and transmit the content, the content holder 16 transmits the desired content to the portable information terminal 5. The computer 2 that has received the content stores the received content in the buffer area 40. The control unit 37 creates a virus check authentication request signal to be transmitted to the computer 8 of the management company 7. In steps 152 and 153, a request signal, a content ID, and a content ID for specifying the content to be checked for viruses and a vehicle ID for specifying the transmitted vehicle are created or used. The vehicle ID and the content are transmitted to the computer 8 of the management company 7 via the communication interface 31 and the communication device 30.

The computer 2, which has received the request signal, the content ID, the vehicle ID, and the content, diagnoses whether the content is infected with a virus as described above, and determines that the content is not infected with the virus. Is
The electronic key is attached to the content ID and transmitted to the computer 2. If you are determined to have a virus,
A virus is removed from the content, an electronic key is attached to the created content, and the created content is transmitted to the computer 2. If the virus cannot be removed, or if there is no request from the computer 2 to remove the virus, the content ID is returned to the computer 2 with the information that the computer is infected with the virus.

At step 154 shown in FIG. 12, the computer 2 which has received the content ID, the electronic key or the information indicating that the content is infected with a virus, and the content has received the electronic key at step 155, and has received the information at step 156. The electronic key is compared with a pre-registered electronic key.
At 7, the content is recorded in the storage unit 33 of the computer 2. In step 133, the received electronic key is collated with a pre-registered electronic key. If the electronic key is not collated, a non-permission notification is sent to the management company 7 in step 159.
indicate. Looking at this display, the passenger can take measures such as confirming with the management company 7.

In this example, since a buffer area is provided in the computer 2 to check whether or not the content is infected with a virus by the management company, the content which is not infected with the virus is input to the computer. Even without using, it is possible to prevent the control program of the vehicle from being destroyed and leading to a serious accident. In addition, since the computer of the vehicle receives the content when it is verified with the electronic key set in advance on the vehicle, it is possible to block information other than the information transmitted from the management company. Erroneous transmission from the user can be prevented.

In the example shown in FIGS. 13 and 14, in step 161 shown in FIG. 14, the passenger operates the input unit 35 of the computer 2 to input or select the content name desired to be obtained, thereby specifying the vehicle. When the content is transmitted to the management company 7 together with the vehicle ID to be performed, the management company 7 receives the desired content from the content provider and diagnoses the content as described above. If it is determined that the computer is not infected with a virus, the electronic key is attached to the content and transmitted to the computer 2. If you determine that you have a virus, remove the virus from your content,
An electronic key is attached to the content and transmitted to the computer 2. If the virus cannot be removed, a reply is sent to the computer 2 with information that the desired content is infected with the virus.

The computer 2 that has received the authenticated content in step 162 shown in FIG. 14 stores the authenticated content in the buffer area. The computer 2 that has received the electronic key, which is a certificate, compares the electronic key received in step 163 with the electronic key registered in advance, and if the electronic key is verified, records the content in the storage unit 33 in step 164. I do. If not verified, a non-permission notification is sent to the management company 7 in step 166,
indicate. Looking at this display, the passenger can take measures such as confirming with the management company 7.

In this example, after the desired content is checked by the management company without using the portable information terminal,
Since the content that is not infected with the virus is input to the computer, the content infected with the virus is not received on the vehicle side, and the control program of the vehicle is destroyed, which can further prevent a serious accident. . Further, the content infected with the virus can be checked in advance by the management company, and there is an effect that the content obtained by paying money is less wasted. In addition, since the computer of the vehicle receives the content when it is verified with the electronic key set in advance on the vehicle, it is possible to block information other than the information transmitted from the management company. Erroneous transmission from the user can be prevented.

[0036]

According to the present invention, content that is not infected by a virus is input to a computer, so that it is possible to prevent a vehicle control program from being destroyed and leading to a serious accident.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of an information distribution system to a vehicle according to an embodiment of the present invention.

FIG. 2 is a configuration diagram of the present embodiment.

FIG. 3 is a configuration diagram of a computer of a management company.

FIG. 4 is a configuration diagram of a portable information terminal.

FIG. 5 is a configuration diagram of a computer of the vehicle.

FIG. 6 is a diagram showing a flow of information.

FIG. 7 is a diagram showing a flow of information.

FIG. 8 is a flowchart of processing in the portable information terminal.

FIG. 9 is a flowchart of processing on a computer of a management company.

FIG. 10 is a flowchart of a process performed by a computer of the vehicle.

FIG. 11 is a diagram showing a flow of information.

FIG. 12 is a flowchart of processing in a computer of the vehicle.

FIG. 13 is a diagram showing a flow of information.

FIG. 14 is a flowchart of a process performed by a computer of the vehicle.

[Explanation of symbols]

1 ... car, 2,8 ... computer, 3,6 ... communication network,
4 local communication, 5 personal digital assistant, 7 management company,
9, 10, 11: server, 12: accounting database, 1
3 ... certificate database, 14 ... information database, 1
6 Flash card, 20, 30 Communication device, 21,
31: communication interface, 22, 32: CPU, 2
3, 33 ... storage unit, 24 ... flash card interface, 25, 35 ... input unit, 26, 36 ... output unit, 2
7, 37: control unit, 38: mass storage, 39: sensor.

Claims (7)

[Claims] An information processing system includes a virus database, a vaccine database, and a content analysis server. The server receives content from a vehicle and a virus check authentication request signal, and the content analysis server stores the virus database and the vaccine database. A vehicle, wherein the content is diagnosed with reference to the content and it is determined that the content is not infected with a virus, or when the virus is removed from the content, the content is attached to an electronic key and transmitted to the vehicle. Information distribution system to. 2. A system comprising a virus database, a vaccine database, and a server for content analysis. The server receives a desired content name from a vehicle to obtain the content, and the content analysis server receives the virus database, When the content is diagnosed with reference to the vaccine database and it is determined that the content is not infected with a virus, or when the virus can be removed from the content, the content is attached to an electronic key and transmitted to the vehicle. Information distribution system to the vehicle. 3. A storage unit for storing received content,
A vehicle comprising: a control unit that creates a virus check authentication request signal; and a communication device that transmits the content and the virus check authentication request signal to a management company, wherein the content provided with an electronic key from the management company is An information distribution system for a vehicle, wherein the control unit transmits the electronic key and the content to a computer of the vehicle when the information is received by a communication device. 4. A vehicle comprising: a control unit for creating a desired content name; and a communication device for transmitting the content name to a management company, wherein the communication device transmits a content to which an electronic key is attached from the management company. An information delivery system for a vehicle, wherein the electronic key and the content are transmitted to a vehicle computer by the control unit when the information is received by a device. 5. A storage unit for storing vehicle setting information, an input unit for inputting a driver's request for changing the vehicle setting information, and a request for the change input from the input unit to the management company. A communication device for transmitting, the condition that the changed setting information of the car attached with the electronic key from the management company is received by the communication device and the electronic key is compared with the electronic key recorded in advance. An information delivery system for a vehicle, wherein the changed setting information of the vehicle is stored in the storage unit. 6. A computer of a management company receives a content transmitted from a vehicle and a virus check authentication request signal, or receives a content name, and analyzes the transmitted content or the content received from the content provider for content analysis. If the server is diagnosed by referring to the virus database and the vaccine database and is not infected with a virus, or if the virus can be removed from the content, an electronic key is attached to the content and transmitted to the vehicle. Inputting the information into a computer of the vehicle. 7. A content received from a vehicle and a created virus check authentication request signal or a desired content name are transmitted to a management company, and when content with an electronic key is received from the management company, the electronic key And transmitting the content to a computer of the vehicle.