JP2023166101A - Communication control system for vehicle and communication control method for vehicle - Google Patents

Abstract

To enable an on-vehicle unit to acquire vehicle information by decrypting encrypted vehicle information, which is encrypted using an encryption key, through a relay device.SOLUTION: An information communication apparatus 4 transmits a pairing request and an information communication apparatus ID and an on-vehicle communicator 2 transmits a vehicle ID to a data center 5 (S6-S9). The data center 5 reads out vehicle information list based on them and transmits it to a gateway 1 (S10-S12). The gateway 1 transmits to the information communication apparatus 4 a decryption key corresponding to an encryption key used for encrypting vehicle information from an ECU 3 based on the vehicle information list, and the information communication apparatus 4 receives the decryption key (S13-S15). The information communication apparatus 4 receives encrypted vehicle information which is transmitted from the ECU 3 and encrypted by the gateway 1 using the encryption key (S16-S19) and decrypts the encrypted vehicle information using the decryption key (S20).SELECTED DRAWING: Figure 2

Description

The present invention relates to a vehicle communication control system that uses equipment outside the vehicle (external communication device) such as a data center, and a vehicle communication control method.

2. Description of the Related Art Conventionally, there has been a vehicle communication control system that performs communication between a communication device mounted on a vehicle and a data center (see, for example, Patent Document 1).

JP 2019-144655 Publication

By the way, a vehicle has an in-vehicle LAN (Local Area Network) that includes a CAN (Controller Area Network), etc., and the in-vehicle LAN includes information communication equipment such as display audio (D/A) and navigation, and an ECU. (Electronic Control Unit) Each is connected to a gateway, and the information communication device and the ECU communicate via the gateway. In this case, from the perspective of protecting vehicle information (e.g. vehicle speed, intake amount, etc.), when the ECU sends vehicle information to the information communication device via the gateway, the gateway uses an encryption key to store the vehicle information. The encrypted vehicle information (hereinafter referred to as "encrypted vehicle information" as appropriate) is sent to the information communication device, and the information communication device decrypts the information corresponding to the encryption key used by the gateway. It is conceivable to obtain vehicle information by decrypting encrypted vehicle information using an encryption key. At this time, it is necessary to set a decryption key corresponding to the encryption key used by the gateway in the information communication device in advance.

Information and communications equipment such as display audio (D/A) and navigation systems are developed by vehicle manufacturers disclosing to component manufacturers decryption keys that correspond to the encryption keys used by gateways to encrypt vehicle information. There are information and communication equipment (genuine products) that are installed on vehicles, and information and communication equipment (products made by third parties (non-manufacturer products)) that are retrofitted by users to their vehicles after sale.Many users also retrofit third-party products. For this reason, there is a growing need to reduce the influence of product differences (genuine products, non-manufactured products, etc.) in information communication devices and to realize equivalent functions in vehicles.

However, genuine products can be preset with a decryption key that corresponds to the encryption key used by the gateway to encrypt vehicle information. Encrypted vehicle information can be decrypted to obtain vehicle information. On the other hand, there is a desire to minimize the provision of highly confidential vehicle information to third-party product manufacturers who develop third-party products, and a desire not to disclose the decryption key for the encryption key to the third-party product manufacturer. Because of the It is not possible to decrypt the encrypted vehicle information that has been encrypted using , and the vehicle information cannot be obtained, resulting in inferior functionality compared to genuine products.

An object of the present invention is to enable an in-vehicle device installed in a vehicle to encrypt information using an encryption key by a relay device even if a decryption key corresponding to an encryption key used by the relay device to encrypt vehicle information is not disclosed. An object of the present invention is to provide a vehicle communication control system and a vehicle communication control method that enable acquisition of vehicle information by decoding encrypted vehicle information.

In order to achieve the above object, a vehicle communication control system according to the present invention includes an on-vehicle device mounted on a vehicle, a relay device mounted on the vehicle and communicatively connected to the on-vehicle device, and a relay device mounted on the vehicle and communicably connected to the on-vehicle device. A vehicle communication control system comprising an on-vehicle communication device mounted on the vehicle, communicably connected to the relay device, and capable of communicating with an external communication device installed outside the vehicle, the on-vehicle device comprising: In-vehicle device identification information for identifying the in-vehicle device is transmitted to the external communication device via the relay device and the in-vehicle communication device, and the relay device transmits in-vehicle device identification information to the in-vehicle device identification information provided by the in-vehicle communication device. The relay device receives an encryption key used for encrypting the vehicle information to be relayed based on the result of the predetermined process. the relay device encrypts the vehicle information to be relayed using the encryption key, and relays the encrypted vehicle information to the vehicle device. , the in-vehicle device is characterized in that it decrypts the encrypted vehicle information from the relay device using the decryption key received from the relay device.

According to this configuration, the external communication device performs a predetermined process based on the in-vehicle device identification information, and the result of the predetermined process is transmitted to the relay device via the in-vehicle communication device, and the relay device performs the predetermined process. Based on the result, a decryption key corresponding to the encryption key used to encrypt the vehicle information to be relayed is transmitted to the on-vehicle device. For this reason, a predetermined process related to whether or not the in-vehicle device can acquire vehicle information is performed by the external communication device, and the manufacturer who develops the in-vehicle device is given a decryption key corresponding to the encryption key. The in-vehicle device receives the encrypted data sent from the relay device without disclosing any information about it, and without presetting the encryption key for the relay device or the decryption key for the in-vehicle device in memory. Vehicle information can be obtained by decrypting encrypted vehicle information that has been encrypted using an encryption key using a decryption key that corresponds to the encryption key. In addition, predetermined processing related to whether or not the in-vehicle device is enabled to acquire vehicle information via an external communication device is performed, so that the in-vehicle device is installed after the vehicle is sold or after the development of the vehicle is completed. Even if the device is connected to a relay device, vehicle information can be acquired from the device connected to the relay device.

Furthermore, the in-vehicle device may be retrofittable to the vehicle.

According to this configuration, even if the in-vehicle device is retrofitted to the vehicle, the in-vehicle device can transmit encrypted vehicle information that has been encrypted using the encryption key sent from the relay device. Vehicle information can be obtained by decoding using a decryption key corresponding to the encryption key.

Further, the vehicle communication control method according to the present invention includes: an in-vehicle device installed in a vehicle; a relay device installed in the vehicle and communicably connected to the in-vehicle device; and a relay device installed in the vehicle and connected to the relay device. A vehicle communication control method performed in a vehicle communication control system comprising an on-vehicle communication device that is communicably connected to the device and is capable of communicating with an external communication device installed outside the vehicle, the method comprising: transmits in-vehicle device identification information for identifying the in-vehicle device to the outside communication device via the relay device and the in-vehicle communication device, and the relay device identifies the in-vehicle device performed by the outside communication device. The relay device receives a result of a predetermined process based on the information from the external communication device via the in-vehicle communication device, and the relay device generates a cipher used for encrypting the vehicle information to be relayed based on the result of the predetermined process. The relay device uses the encryption key to encrypt the vehicle information to be relayed, and sends the encrypted vehicle information to the in-vehicle device. The vehicle information is relayed, and the vehicle-mounted device decrypts the encrypted vehicle information from the relay device using the decryption key received from the relay device.

According to this configuration, the external communication device performs a predetermined process based on the in-vehicle device identification information, and the result of the predetermined process is transmitted to the relay device via the in-vehicle communication device, and the relay device performs the predetermined process. Based on the result, a decryption key corresponding to the encryption key used to encrypt the vehicle information to be relayed is transmitted to the on-vehicle device. For this reason, a predetermined process related to whether or not the in-vehicle device can acquire vehicle information is performed by the external communication device, and the manufacturer who develops the in-vehicle device is given a decryption key corresponding to the encryption key. The in-vehicle device receives the encrypted data sent from the relay device without disclosing any information about it, and without presetting the encryption key for the relay device or the decryption key for the in-vehicle device in memory. Vehicle information can be obtained by decrypting encrypted vehicle information that has been encrypted using an encryption key using a decryption key that corresponds to the encryption key. In addition, predetermined processing related to whether or not the in-vehicle device is enabled to acquire vehicle information via an external communication device is performed, so that the in-vehicle device is installed after the vehicle is sold or after the development of the vehicle is completed. Even if the device is connected to a relay device, vehicle information can be acquired from the device connected to the relay device.

According to the present invention, the external communication device performs a predetermined process based on the on-vehicle device identification information, and the result of the predetermined process is transmitted to the relay device via the in-vehicle communication device, and the relay device performs the predetermined process. Based on the result, a decryption key corresponding to the encryption key used to encrypt the vehicle information to be relayed is transmitted to the on-vehicle device. For this reason, a predetermined process related to whether or not the in-vehicle device can acquire vehicle information is performed by the external communication device, and the manufacturer who develops the in-vehicle device is given a decryption key corresponding to the encryption key. The in-vehicle device receives the encrypted data sent from the relay device without disclosing any information about it, and without presetting the encryption key for the relay device or the decryption key for the in-vehicle device in memory. Vehicle information can be obtained by decrypting encrypted vehicle information that has been encrypted using an encryption key using a decryption key that corresponds to the encryption key. In addition, predetermined processing related to whether or not the in-vehicle device is enabled to acquire vehicle information via an external communication device is performed, so that the in-vehicle device is installed after the vehicle is sold or after the development of the vehicle is completed. Even if the device is connected to a relay device, vehicle information can be acquired from the device connected to the relay device.

1 is a system configuration diagram showing the configuration of a vehicle communication control system according to an embodiment of the present invention. 2 is a sequence diagram showing a communication sequence in which an information communication device acquires information from an ECU, which is performed in the vehicle communication control system of FIG. 1. FIG.

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

1. System Configuration of Vehicle Communication Control System The system configuration of a vehicle communication control system S according to an embodiment of the present invention will be described with reference to FIG. 1.

An in-vehicle LAN including CAN and the like is constructed in the vehicle M. The vehicle communication control system S shown in FIG. 1 is a system installed in a vehicle M, and includes a gateway 1, an in-vehicle communication device 2, an ECU 3, and an information communication device 4 included in an in-vehicle LAN including CAN. Equipped with. As will be described later, the information communication device 4 is a non-manufacturer product in this embodiment, and the information communication device 4 and the gateway 1 are connected by an information bus B that connects the non-manufacturer product. Further, the data center 5 shown in FIG. 1 is a device installed outside the vehicle M, and is capable of communicating with the in-vehicle communication device 2 included in the vehicle communication control system S, including, for example, wireless communication. The gateway 1 corresponds to the "relay device" of the present invention, the vehicle-mounted communication device 2 corresponds to the "vehicle-mounted communication device" of the present invention, and the information communication device 4 corresponds to the "vehicle-mounted device" of the present invention. However, the data center 5 corresponds to the "outside vehicle communication device" of the present invention.

The gateway 1 has a function of relaying communication between networks using different communication protocols. An in-vehicle communication device 2, an ECU 3, and an information communication device 4 are connected to the gateway 1 of this embodiment. In this embodiment, the gateway 1 encrypts vehicle information transmitted from the ECU 3 using an encryption key, and outputs the encrypted vehicle information (encrypted vehicle information) to the information bus B for information communication. Send to device 4.

Further, the gateway 1 receives a vehicle information list, which will be described later, from the data center 5 via the in-vehicle communication device 2. Then, the gateway 1 checks whether the vehicle information list includes the vehicle information transmitted from the ECU 3, and confirms that the vehicle information list includes the vehicle information transmitted from the ECU 3. In this case, the decryption key corresponding to the encryption key used to encrypt the vehicle information sent from the ECU 3 is output to the information bus B and transmitted to the information communication device 4.

The in-vehicle communication device 2 is constructed by, for example, a DCM (Data Communication Module), which is a communication device exclusively for vehicles, and is connected to the gateway 1 and also connected to a data center 5 installed outside the vehicle M. It is used for communication.

The ECU 3 is, for example, a body ECU, a VSC (Vehicle Stability Control) ECU, a meter ECU, a stereo camera ECU, an EFI (Electronic Fuel Injection) ECU, and is connected to the gateway 1 . In this embodiment, the ECU 3 transmits vehicle information to the gateway 1 in a regular process performed at a predetermined cycle (for example, a cycle of 10 ms). Vehicle information transmitted by the ECU 3 in regular processing is encrypted by the gateway 1 using an encryption key, and the encrypted vehicle information is output to the information bus B and transmitted to the information communication device 4. Therefore, in order for the information communication device 4 to acquire the vehicle information transmitted by the ECU 3 in regular processing, the gateway 1 requires a decryption key corresponding to the encryption key used to encrypt the vehicle information. Note that the body ECU, VSC ECU, meter ECU, stereo camera ECU, and EFI ECU are common ones, and detailed explanation thereof will be omitted.

The information communication device 4 is, for example, an in-vehicle device such as a display audio (D/A) or a navigation system, and is connected to the gateway 1. The information communication device 4 of this embodiment is a retrofit device (an aftermarket product) that is retrofitted by a user to the vehicle M after sale.

When the information communication device 4 is retrofitted to the vehicle M, the information communication device 4 has a decryption key corresponding to the encryption key used by the gateway 1 to encrypt the vehicle information transmitted and received by the ECU 3 in regular processing. settings have not been made. Therefore, when the information communication device 4 is retrofitted to the vehicle M, the information communication device 4 receives the vehicle information (encrypted vehicle information) cannot be decoded and vehicle information cannot be obtained.

In this embodiment, the information communication device 4 is configured to enable decoding of vehicle information (encrypted vehicle information) transmitted by the ECU 3 in regular processing and encrypted by the gateway 1 using an encryption key. Then, the following processing is performed.

After the information communication device 4 is retrofitted to the vehicle M, the information communication device 4 performs, for example, operation of a pairing switch (an operation that requests the data center 5 to perform verification using a database related to the information communication device 4 and the vehicle M). ), it transmits a pairing request (a request for authentication to the data center 5) and the information communication device ID to the data center 5 via the gateway 1 and the in-vehicle communication device 2. When the pairing request and the information communication device ID are sent from the information communication device 4 to the data center 5 via the gateway 1 and the in-vehicle communication device 2, the in-vehicle communication device 2 sends the vehicle ID to the data center 5. Send. As a result, the data center 5 receives the pairing request, the information communication device ID, and the vehicle ID. Here, the information communication device ID is an ID for identifying the information communication device 4, and corresponds to "vehicle device identification information" of the present invention. Further, the vehicle ID is the VIN (Vehicle Identification Number) of the vehicle M.

Although the information communication device 4 is said to send a pairing request and the information communication device ID to the data center 5 based on the detection of the operation of the pairing switch, the information communication device 4 is not limited to this. The pairing request and the information communication device ID may be transmitted to the data center 5 based on the fact that the previously used vehicle information could not be decoded.

As will be described later, the data center 5 stores a vehicle ID, an information communication equipment ID, and a vehicle information list (information and communication equipment with the information communication equipment ID mounted on the vehicle with the vehicle ID) in a memory (not shown) provided in the data center 5. A list of vehicle information that is permitted to be made public) is stored in the database. When the data center 5 receives the pairing request, the information communication equipment ID, and the vehicle ID, the data center 5 associates the information communication equipment ID received from the database with the received vehicle ID according to the received pairing request. The information list is read and the read vehicle information list is transmitted to the gateway 1 via the on-vehicle communication device 2. Note that the process of reading out a vehicle information list associated with an information communication device ID and a vehicle ID from a database in response to a pairing request corresponds to the "predetermined process" of the present invention.

Note that the data center 5 stores in a memory (not shown) a database in which vehicle IDs, information communication device IDs, and vehicle information lists are associated with each other; however, the data center 5 is not limited to this; A database in which information communication equipment IDs are associated with each other may be stored in a memory (not shown). In this case, in response to the pairing request, the data center 5 checks whether the information communication equipment ID and the vehicle ID are stored in the database in association with each other, and stores the information communication equipment ID and the vehicle ID in the database. If it is confirmed that the vehicle information list is stored in association with the vehicle information list, the vehicle information list is transmitted to the gateway 1 via the vehicle-mounted communication device 2.

The gateway 1 receives a vehicle information list from the data center 5 via the in-vehicle communication device 2.

The gateway 1 checks whether the vehicle information transmitted and received from the ECU 3 in the regular process is included in the vehicle information list. If the gateway 1 can confirm that the vehicle information transmitted and received from the ECU 3 in the regular process is included in the vehicle information list, the gateway 1 uses a decryption key corresponding to the encryption key used to encrypt the vehicle information. is output to the information bus B and transmitted to the information communication device 4.

The information communication device 4 receives the decryption key output from the gateway 1 to the information bus B and transmitted to the information communication device 4 .

The above is the encryption key that enables the information communication device 4 to decrypt the vehicle information (encrypted vehicle information) transmitted by the ECU 3 in regular processing and encrypted by the gateway 1 using the encryption key. This is a series of processes related to obtaining the decryption key corresponding to .

The information communication device 4 performs the following process when acquiring vehicle information transmitted by the ECU 3 in the regular process. Vehicle information transmitted by the ECU 3 in the regular process is encrypted by the gateway 1 using an encryption key, and the information communication device 4 receives the encrypted vehicle information (encrypted vehicle information). The information communication device 4 uses the decryption key obtained from the gateway 1 in response to the pairing request to decrypt the encrypted vehicle information and obtain the vehicle information.

The data center 5 is a device installed outside the vehicle M, as described above. In the present embodiment, a memory (not shown) included in the data center 5 stores a vehicle information list listing vehicle information to be disclosed to information communication equipment such as the information communication equipment 4 mounted on a vehicle such as the vehicle M. Memorized in advance. Specifically, a memory (not shown) included in the data center 5 stores a database in which vehicle IDs, information communication device IDs, and vehicle information lists are associated with each other.

The data center 5 receives the vehicle ID, the information communication device ID, and the pairing request, and in response to the received pairing request, creates a vehicle information list that is associated with the vehicle ID and the information communication device ID received from the database. The vehicle information list is read out and transmitted to the gateway 1 via the in-vehicle communication device 2.

Note that if the information and communication device 4 is an information and communication device whose information and communication device ID does not exist in the database of the data center 5, the data center 5 will receive an authentication failure or a vehicle information list in which no vehicle information that is permitted to be disclosed is listed. is transmitted to the gateway 1 via the in-vehicle communication device 2. The gateway 1 receives a vehicle information list in which authentication has failed or vehicle information that is permitted to be disclosed is not listed, and in this case, the gateway 1 receives the decryption key corresponding to the encryption key used to encrypt the vehicle information from the ECU 3. It is not output to the information bus B and transmitted to the information communication device 4. Therefore, the information communication device 4 cannot decrypt the vehicle information (encrypted vehicle information) transmitted by the ECU 3 and encrypted by the gateway 1 using the encryption key, and cannot acquire the vehicle information. ing.

2. Communication Sequence of Vehicle Communication Control System A communication sequence in which the information communication device 4 acquires information from the ECU 3 performed in the vehicle communication control system S of FIG. 1 will be described with reference to FIG. 2.

At the time when the communication sequence of FIG. 2 is started, a decryption key corresponding to the encryption key used by the gateway 1 to encrypt vehicle information from the ECU 3 is not set in the information communication device 4.

In the regular process, the ECU 3 transmits vehicle information to the gateway 1, and the gateway 1 receives the vehicle information from the ECU 3 (step S1). The gateway 1 encrypts the received vehicle information using an encryption key (step S2). The gateway 1 outputs the encrypted vehicle information (encrypted vehicle information) to the information bus B (step S3), and the encrypted vehicle information is input from the information bus B to the information communication equipment 4 (step S3). S4). Since the information communication device 4 does not have a decryption key corresponding to the encryption key used by the gateway 1 to encrypt the vehicle information, the information communication device 4 cannot decrypt the encrypted vehicle information and cannot acquire the vehicle information. (Step S5).

The information communication device 4 transmits a pairing request and an information communication device ID for identifying the information communication device 4 to the data center 5 . The pairing request and the information communication device ID are output from the information communication device 4 to the information bus B (step S6), input from the information bus B to the gateway 1 (step S7), and transmitted from the gateway 1 to the in-vehicle communication device 2. and is received by the in-vehicle communication device 2 (step S8).

The in-vehicle communication device 2, which has received the pairing request and the information communication device ID from the gateway 1, sends the vehicle ID for identifying the vehicle M to the data center 5 in addition to the pairing request and the information communication device ID. Send to. The pairing request, vehicle ID, and information communication device ID are transmitted from the in-vehicle communication device 2 to the data center 5 and received by the data center 5 (step S9).

The data center 5 receives the vehicle ID, the information communication device ID, and the pairing request in step S9, and in response to the received pairing request, the data center 5 associates the vehicle ID with the information communication device ID received from the database. An information list (a list listing vehicle information that is permitted to be disclosed to the information communication device with the information communication device ID mounted on the vehicle with the vehicle ID) is read out (step S10).

The data center 5 transmits the vehicle information list read from the database in step S10 to the gateway 1 via the in-vehicle communication device 2. The vehicle information list is transmitted from the data center 5 to the in-vehicle communication device 2 and received by the in-vehicle communication device 2 (step S11), and is transmitted from the in-vehicle communication device 2 to the gateway 1 and received by the gateway 1 (step S12). .

The gateway 1 checks whether the vehicle information list received in step S12 includes the vehicle information from the ECU 3 (step S13). In the communication sequence of FIG. 2, it is confirmed that the vehicle information list received in step S12 includes the vehicle information from the ECU 3.

If the gateway 1 can confirm that the vehicle information list includes the vehicle information from the ECU 3, it outputs the decryption key corresponding to the encryption key used to encrypt the vehicle information from the ECU 3 to the information bus B. (Step S14), and the decryption key is input to the information communication device 4 from the information bus B (Step S15). As a result, the information communication device 4 receives the vehicle information (encrypted vehicle information) transmitted from the ECU 3 and encrypted by the gateway 1 using the encryption key, and inputs the decryption key corresponding to the encryption key. It becomes possible to obtain vehicle information by decoding the information using

In the regular process, the ECU 3 transmits vehicle information to the gateway 1, and the gateway 1 receives the vehicle information from the ECU 3 (step S16). The gateway 1 encrypts the received vehicle information using the encryption key (step S17). The gateway 1 outputs the encrypted vehicle information (encrypted vehicle information) to the information bus B (step S18), and the encrypted vehicle information is input from the information bus B to the information communication equipment 4 (step S18). S19). Since the information communication device 4 has a decryption key corresponding to the encryption key used by the gateway 1 to encrypt the vehicle information, the gateway 1 uses the encrypted vehicle information to encrypt the vehicle information. Using a decryption key corresponding to the used encryption key, decryption is performed to obtain vehicle information (step S20).

3. Effects According to the embodiment described above, the information communication device 4 transmits the pairing request and the information communication device ID to the data center 5 via the gateway 1 and the on-vehicle communication device 2, and at this time, the on-board communication device 2 transmits the pairing request and the information communication device ID to the data center 5. Send the ID to the data center 5. The data center 5 reads the vehicle information list associated with the vehicle ID and the information communication device ID from the database, and transmits the read vehicle information list to the gateway 1 via the vehicle-mounted communication device 2. If the vehicle information from the ECU 3 is included in the vehicle information list, the gateway 1 uses the information bus B to transmit the decryption key corresponding to the encryption key used to encrypt the vehicle information from the ECU 3. The information communication device 4 receives the decryption key corresponding to the encryption key used for encrypting the vehicle information from the ECU 3. As a result, the information communication device 4 uses the decryption key corresponding to the encryption key to transmit the vehicle information (encrypted vehicle information) transmitted by the ECU 3 and encrypted by the gateway 1 using the encryption key. can be decoded and vehicle information can be obtained.

Furthermore, even if the information communication device 4 is an aftermarket product that can be retrofitted to the vehicle M, such as an aftermarket product, the information communication device 4 is a vehicle M that is transmitted by the ECU 3 and encrypted by the gateway 1 using the encryption key. Information (encrypted vehicle information) can be decrypted using a decryption key corresponding to the encryption key, and vehicle information can be obtained.

Furthermore, in the case of an information communication device whose information communication device ID does not exist in the database of the data center 5, the information communication device receives a decryption key from the gateway 1 that corresponds to the encryption key used to encrypt the information from the ECU 3. Since the vehicle information cannot be received, the vehicle information transmitted by the ECU 3 and encrypted by the gateway 1 using the encryption key (encrypted vehicle information) cannot be decrypted, and the vehicle information cannot be acquired. In this way, an information communication device whose information communication device ID does not exist in the database of the data center 5 (for example, an information communication device that is not authenticated by the vehicle manufacturer of vehicle M) cannot acquire vehicle information, and the protection of vehicle information is prevented. is planned.

Furthermore, even if the information communication device 4 is an information communication device such as an aftermarket product developed after the sale of the vehicle M or after the completion of the development of the vehicle M, the vehicle ID and the information communication device ID are stored in the database of the data center 5. By storing the information in association with the vehicle information list, the information communication device 4 decrypts the vehicle information (encrypted vehicle information) transmitted by the ECU 3 and encrypted by the gateway 1 using the encryption key. By obtaining the decryption key for decryption, vehicle information can be obtained.

Further, the ECU 3 transmits vehicle information in regular processing performed at a predetermined cycle, so that the information communication equipment 4 and the like can utilize more real-time vehicle information.

Furthermore, since the information communication device 4 does not transmit information when acquiring vehicle information from the ECU 3, it is possible to alleviate the information communication device 4 from occupying a communication bus such as the information bus B.

Furthermore, it is possible to provide vehicle information to the information communication equipment 4, such as a third-party product, while suppressing information disclosure to the developer and manufacturer of the information communication equipment 4.

Moreover, it is possible to enrich the information communication equipment 4 with non-manufactured products that can realize the same functions as genuine products, and it is possible to improve the attractiveness of the vehicle M itself equipped with the vehicle communication control system S.

In addition, various design changes can be made to the above-described configuration within the scope of the claims.

For example, in the above embodiment, the gateway 1 periodically changes the encryption key used for encrypting the vehicle information from the ECU 3, and the information communication equipment 4 is subjected to the processing from step S6 to step S14 in FIG. Regarding this, the processing from step S6 to step S14 in FIG. 2 may be performed again.

Further, in the embodiment described above, the gateway 1 may set the encryption key and the decryption key for each vehicle information, and set the encryption key and the decryption key for each ECU providing the information. Alternatively, the encryption key and decryption key may be set for each information communication device on the information receiving side, or the encryption key and decryption key may be set for each vehicle. Good too. For example, when setting an encryption key and a decryption key for each vehicle, it is possible to prevent a decryption key obtained for one vehicle from being used in another vehicle.

Further, the contents explained in the above embodiment and the contents explained in the above modification may be combined as appropriate.

INDUSTRIAL APPLICABILITY The present invention is widely applicable to a vehicle communication control system and a vehicle communication control method that utilize equipment outside the vehicle (external communication device) such as a data center, for example.

S: Vehicle communication control system M: Vehicle 1: Gateway 2: In-vehicle communication device 3: ECU
4: Information and communication equipment 5: Data center

Claims (3)

An on-vehicle device installed in a vehicle,
a relay device installed in the vehicle and communicably connected to the in-vehicle device;
A communication control system for a vehicle, comprising: an on-vehicle communication device mounted on the vehicle, communicably connected to the relay device, and capable of communicating with an external communication device installed outside the vehicle,
The in-vehicle device transmits in-vehicle device identification information for identifying the in-vehicle device to the external communication device via the relay device and the in-vehicle communication device,
The relay device receives a result of a predetermined process based on the in-vehicle device identification information performed by the out-of-vehicle communication device from the out-of-vehicle communication device via the in-vehicle communication device,
The relay device transmits, to the in-vehicle device, a decryption key corresponding to an encryption key used for encrypting the vehicle information to be relayed, based on the result of the predetermined processing,
The relay device encrypts the vehicle information to be relayed using the encryption key, and relays the encrypted vehicle information to the in-vehicle device,
The vehicle communication control system is characterized in that the in-vehicle device decrypts the encrypted vehicle information from the relay device using the decryption key received from the relay device. The vehicle communication control system according to claim 1, wherein the in-vehicle device can be retrofitted to the vehicle. An on-vehicle device installed in a vehicle,
a relay device installed in the vehicle and communicably connected to the in-vehicle device;
Vehicle communication control performed in a vehicle communication control system comprising: an on-vehicle communication device mounted on the vehicle, communicably connected to the relay device, and capable of communicating with an external communication device installed outside the vehicle. A method,
The in-vehicle device transmits in-vehicle device identification information for identifying the in-vehicle device to the external communication device via the relay device and the in-vehicle communication device,
The relay device receives a result of a predetermined process based on the in-vehicle device identification information performed by the out-of-vehicle communication device from the out-of-vehicle communication device via the in-vehicle communication device,
The relay device transmits, to the in-vehicle device, a decryption key corresponding to an encryption key used for encrypting the vehicle information to be relayed, based on the result of the predetermined processing,
The relay device encrypts the vehicle information to be relayed using the encryption key, and relays the encrypted vehicle information to the in-vehicle device,
The in-vehicle device decrypts the encrypted vehicle information from the relay device using the decryption key received from the relay device.

Images