JP6107716B2 - Vehicle control device and vehicle password setting method - Google Patents

Description

  The present invention relates to a vehicle control device and a vehicle password setting method, and belongs to the technical field of a control device that controls the operation of various in-vehicle systems.

  Generally, a vehicle is provided with various in-vehicle systems such as an engine control system, a brake control system, an anti-theft system, and an audio system. Each in-vehicle system has an electronic control unit (hereinafter referred to as “ECU”) whose operation is unique. (Referred to as “electric control unit”).

  In addition, for this type of in-vehicle system, after vehicle shipment, for example, control information such as rewriting or reprogramming the configuration of each system, forcible driving for operation check, immobilizer parts replacement, key registration, etc. At this time, it can be executed only by releasing security using a password individually set in each ECU of the system.

  On the other hand, as a vehicle sales format, there is an OEM format in which a vehicle manufactured by the same manufacturer is sold under another brand. In this case, usually, a part of the vehicle is changed and shipped for each supply destination (brand).

  In particular, when the control information of some ECUs is changed for each supply destination and the vehicle is shipped, if the password set in the ECU is shared among the supply destinations, the password leaked from any of the supply destinations By using it, it becomes possible to change the control information and to forcibly drive the operation for all the supply destination vehicles.

  On the other hand, different passwords are set for each ECU for each ECU. According to this, even if a password for a certain supplier is leaked, the control information for other brand vehicles is not used in this leaked password. Forced drive, etc. for change or operation check cannot be performed.

  In this regard, Patent Document 1 discloses an ECU stored in a non-volatile memory capable of rewriting a part of control information for each supply destination. However, passwords are not particularly mentioned, and for other brand vehicles, control information can be changed and forced drive for operation check can be freely made after shipping to the supplier.

JP 2001-265601 A

  However, if a different password is set for each ECU for each ECU, it is necessary to treat the ECU as a separate part even if it is the same ECU, and the labor involved in managing the ECU and incorporating it into the vehicle becomes extremely complicated. In addition, when writing control information to the storage device of the ECU at the end of line (EOL) in the vehicle assembly process, a writing device is required for each password, and the writing operation is complicated.

  The present invention has been made to solve the above-mentioned problems, and a vehicle control device capable of eliminating the influence on other companies due to the outflow of a password without increasing the time required for ECU management and incorporation into the vehicle, and A vehicle password setting method is provided.

  In order to solve the above problems, the present invention is configured as follows.

First, the invention according to claim 1 of the present application is
A vehicle control device that controls the operation of an in-vehicle system mounted on a vehicle,
Control information storage means for storing control information provided in the in-vehicle system and controlling the operation of the system;
Password storage means for storing a preset password;
Control information write permission means for permitting writing of control information to the control information storage means when the input password matches the password stored in the password storage means,
In the password storage means, a password writing unit in which a plurality of passwords set for each vehicle supply destination are written, and information for invalidating other passwords except for one of these passwords is written. And an effective password information writing unit.

  Note that the above-mentioned “vehicle supply destination” includes the OEM destination and the manufacturer itself.

The invention according to claim 2
A password setting method for setting a password in a vehicle control device that controls the operation of an in-vehicle system mounted on a vehicle,
A password storage step for storing a plurality of passwords preset for each vehicle supply destination in the password storage means;
A control information storage step of storing control information corresponding to a vehicle supply destination to the vehicle control device in the control information storage means when the input password matches the password stored in the password storage means;
An effective password setting step for performing setting for invalidating other passwords except for the password set in the supply destination of the vehicle among the plurality of passwords stored in the password storage means, And

The invention as set forth in claim 3 is the vehicle password setting method according to claim 2,
The password storing step is performed before the vehicle assembly process is performed.

Further, the invention according to claim 4 is the vehicle password setting method according to any one of claims 2 and 3,
The effective password setting step is performed at the end of the vehicle assembly process.

  According to the invention according to the above claims, the following effects can be obtained.

  According to the first aspect of the present invention, the password storage means includes a password writing section in which a plurality of passwords set for each vehicle supply destination are written, and one of these passwords. And a valid password information writing unit in which information for invalidating other passwords is written. Therefore, when the vehicle control device is incorporated into the vehicle body in the vehicle assembly process with multiple passwords already written and valid password information not yet written, the vehicle control device is supplied until the valid password information is written thereafter. Regardless of the destination, it may be managed as a common part and incorporated into the vehicle body, and it is not necessary to distinguish a vehicle incorporating this vehicle control device for each supply destination. In addition, after the vehicle is shipped with other passwords disabled, the other passwords cannot be used to change the control information of the vehicle or forcibly drive for operation confirmation. Therefore, even if a password is leaked from a vehicle supplier, there is no possibility that the control information of a vehicle shipped to another supplier will be changed with the leaked password or that it will be forcibly driven for operation confirmation. . As described above, it is possible to eliminate the influence on the other supply destination due to the outflow of the password without increasing the time and labor for managing the vehicle control device and incorporating the vehicle control device.

  According to the second aspect of the invention, the password storage means stores a plurality of passwords preset for each vehicle supply destination, and stores control information corresponding to the vehicle supply destination in the vehicle control device. The setting for invalidating other passwords except for the password set in the supply destination of the vehicle among the plurality of passwords stored in the password storage means is performed. The same effect as the invention can be obtained.

  According to the third aspect of the present invention, since the password storing step is performed before the vehicle assembly process is performed, the password is preset in the vehicle control device for each vehicle supply destination when the vehicle assembly process is performed. A plurality of passwords are already stored, and the operation check of the in-vehicle system can be performed at any time after the vehicle control device is assembled to the vehicle body using any stored password.

  According to the invention described in claim 4, since the effective password setting step is executed at the end of the vehicle assembly process, it is not necessary to distinguish the vehicle for each supply destination until the end of the vehicle assembly process.

It is a figure explaining the flow from manufacture of a vehicle concerning an embodiment of the present invention to distribution. It is a block diagram which shows the structure of the vehicle-mounted system of a vehicle. It is a figure which shows the structure of ECU of FIG. It is a figure which shows the structure of the memory | storage device of FIG. It is a flowchart explaining the password setting method for vehicles. It is a figure explaining the control information memorize | stored in the memory | storage device of ECU at the time of parts manufacturer shipment.

  Hereinafter, a vehicle according to an embodiment of the present invention will be described.

  FIG. 1 shows a flow from manufacture to distribution of a vehicle according to an embodiment of the present invention. As shown in FIG. 1, components mounted on a vehicle, for example, an engine ECU, are manufactured by each component manufacturer. Here, in parts manufacturers that manufacture ECUs, passwords are input and set in each assembled ECU using a password input setting device to prevent illegal modification and theft of vehicles, and other parts such as engine bodies Delivered to automakers together with X and Y.

  The delivered parts are sequentially assembled to the vehicle body in the vehicle manufacturer's vehicle assembly process. Vehicles that have been assembled in the EOL of the vehicle assembly process, for example, control parameters such as key settings (smart keyless / normal keyless), handle settings (right handle / left handle), etc. Different control information for each supply destination such as a program is input to the ECU using a control information input device. The vehicle in which these control information is input is shipped to each supplier as a brand vehicle of its own company (Company A) or another company (Company B to D).

  A vehicle shipped to each supply destination can use a predetermined service tool at the supply destination to release a password of each ECU and perform a forced drive for changing control information or confirming an operation. Similarly, when replacing parts at the supplier, the service tool can be used.

  Next, the configuration of the in-vehicle system of the vehicle will be described with reference to FIG.

  As illustrated in FIG. 2, the vehicle 1 includes a plurality of in-vehicle systems 10 to 40 such as an engine control system 10, a brake control system 20, an anti-theft system 30, and an audio system 40.

  Each of the in-vehicle systems 10 to 40 includes an in-vehicle device 100 and an ECU 200 that individually controls the in-vehicle device 100. For example, the engine control system 10 includes an engine 100A and an engine ECU 200A that controls the engine 100A, and mainly electronically controls fuel injection, ignition timing, idle rotation, and the like. The brake control system 20 includes a brake 100B and a brake ECU 200B that controls the brake 100B, and is a so-called EBD (Electronic Brake force Distribution) that electronically controls the distribution of braking force to wheels. The anti-theft system 30 includes an anti-theft device 100C and an anti-theft ECU 200C that controls the anti-theft device 100C, and is a so-called immobilizer that electronically collates the keys so that the engine cannot be started except by a dedicated key. It is. The audio system 40 includes a car audio device 100D and an audio ECU 200D that controls the car audio device 100D.

  The above-described in-vehicle systems 10 to 40 are merely examples, and in-vehicle devices that require electronic control by the ECU (for example, motors, transmissions, airbags, lamps, power steering, power windows, car air conditioners, car navigation systems, suspensions, Any vehicle-mounted system such as a noise reduction device may be used. Moreover, although the above-described ECU 200 is individually provided in each in-vehicle system, it may be a general ECU that controls a plurality of in-vehicle systems in an integrated manner.

  Next, the configuration of each ECU 200 will be described with reference to FIG.

  As shown in FIG. 3, each ECU 200 is connected to an in-vehicle device 100 and an external device such as a sensor (not shown), and has an input / output unit 210 that inputs and outputs signals to and from them. The ECU 200 has a CPU 220 that performs a predetermined calculation based on an input signal input from an external device via the input / output unit 210, and the calculation result by the CPU 220 is transmitted via the input / output unit 210. Is output. Further, the ECU 200 stores, as storage means for storing various control information used for calculation in the CPU 220, read-only storage means 230 that cannot electrically erase or rewrite the stored contents, and is temporarily stored. And rewritable storage means 240 capable of electrically erasing or rewriting the contents.

  Here, the above-described read-only storage means 230 is preferably a non-volatile memory such as a mask ROM that does not lose data even when the power is turned off. Similarly, the rewritable storage unit 240 is preferably a nonvolatile memory such as a flash ROM (flash memory).

  Next, the configuration of each of the storage units 230 and 240 will be described in detail with reference to FIG.

  As illustrated in FIG. 4A, the read-only storage unit 230 includes a password storage unit 231 and an effective password information storage unit 232. The password storage unit 231 stores a plurality of IDs, supply destination names, and passwords preset for the supply destinations for each supply destination. Further, the valid password information storage unit 232 stores only one ID (3 in FIG. 4) of the supply destination (company C in FIG. 4) selected from the password storage unit 231 described above as valid password information. Is done.

  As illustrated in FIG. 4B, the rewritable storage unit 240 includes a control parameter storage unit 241 and a control program storage unit 242. The control parameter storage unit 241 stores control parameters used for calculation by the CPU 220, and the control program storage unit 242 stores a control program executed by the CPU 220.

  The storage units 230 and 240 may be provided with a storage unit that stores control information that does not depend on the vehicle supply destination, if necessary.

  When no valid password information is stored in the valid password information storage unit 232, the ECU 200 configured as described above inputs an arbitrary password among the plurality of supply destination passwords stored in the password storage unit 231 to the input / output unit 210. Is input to the CPU 220, the security of the ECU 200 is released, and the control parameter stored in the control parameter storage unit 241 or the control program stored in the control program storage unit 242 can be erased or rewritten. Yes.

  On the other hand, when the ID of the supply destination of the vehicle is stored as valid password information in the valid password information storage unit 232, the valid password information is valid among the plurality of supply destination passwords stored in the password storage unit 231. The security of the ECU 200 is released and stored in the control parameter or control program storage unit 242 stored in the control parameter storage unit 241 only when the supplied password of the supply destination is input to the CPU 220 via the input / output unit 210. The control program can be erased or rewritten.

  Next, a password setting method of the ECU 200 will be described with reference to FIG.

  First, in an automobile manufacturer's vehicle assembly process, a certain part prepared in advance is assembled to the vehicle body (step S1).

  At this time, as shown in FIG. 6, the storage units 230 and 240 of the ECU 200 to be assembled have a plurality of supply destination passwords already stored in the password storage unit 231, but are valid in the valid password information storage unit 232. No password information is stored, and the control parameter storage unit 241 and the control program storage unit 242 store no control parameters and control programs that differ for each supply destination.

  Next, it is determined whether or not the assembly of the parts is completed (step S2), and the process returns to step S1 until the assembly of all the parts is completed, and the assembly of the parts is repeated.

  If it is determined in step S2 that all parts have been assembled, then in the EOL of the vehicle assembly process, only one ECU is selected from the ECUs of various in-vehicle systems (step S3).

  Next, among the plurality of supply destination passwords stored in the read-only storage means of the selected ECU, an arbitrary supply destination password is input to the ECU using the control information input device (step S4).

  Next, control information different for each supply destination such as a control parameter and a control program is input to the ECU using a control information input device (step S5).

  Next, valid password information of the supply destination of the vehicle is input to the ECU, and settings are made to invalidate other passwords except for the password set for the supply destination of the vehicle (step S6).

  At this time, as shown in FIG. 3, the ECU is in a state where various control information is written in the password storage unit 231, the effective password information storage unit 232, the control parameter storage unit 241, and the control program storage unit 242. Since the entered valid password information is written in the read-only storage means, the valid password information cannot be erased or rewritten after step S6.

  In steps S3 to S6 described above, control information that does not depend on the vehicle supply destination may be input as necessary.

  Finally, it is determined whether or not there is an ECU for which control information input has not been completed (step S7). The process returns to step S3 until the input of control information for all ECUs is completed. When the input of control information is completed for all ECUs, the assembly of the vehicle is completed.

  As described above, according to the present embodiment, when a plurality of passwords are already written and the valid password information is not yet written, when the vehicle control device is incorporated in the vehicle body in the vehicle assembly process, the valid password information is written thereafter. Until then, the vehicle control device may be managed as a common part regardless of the supply destination and incorporated in the vehicle body, and the vehicle incorporating this vehicle control device need not be distinguished for each supply destination.

  Further, according to the present embodiment, after a vehicle is shipped with other passwords invalidated, a password other than the validated supply destination is used to change the control information of the vehicle, forcibly drive to confirm the operation, etc. Can not. Therefore, even if a password is leaked from a vehicle supplier, there is no possibility that the control information of a vehicle shipped to another supplier will be changed with the leaked password or that it will be forcibly driven for operation confirmation. .

  In addition, according to the present embodiment, since a plurality of passwords preset for each supply destination by the component manufacturer that manufactures the ECU are stored in the ECU, the vehicle control device is supplied with the vehicle during the vehicle assembly process. A plurality of passwords set in advance for each destination are already stored, and the operation check of the in-vehicle system can be performed at any time after the vehicle control device is assembled to the vehicle body using the stored password.

  Moreover, according to this embodiment, since an effective password is set in EOL of a vehicle assembly process, it is not necessary to distinguish a vehicle for every supply destination until EOL of a vehicle assembly process.

  Further, according to the present embodiment, when parts are replaced at a supplier, when the parts are shipped from the parts manufacturer to each supplier, the ECU passes the service station of the automobile manufacturer, and the ECU only supplies the password of the supplier. If the setting is made effective, it is possible to eliminate the influence on the other supply destination due to the outflow of the password, as in the case of vehicle assembly.

  As described above, according to the present embodiment, it is possible to eliminate the influence on the other vehicle supply destination due to the outflow of the password of the vehicle control device without increasing the time for managing the vehicle control device and installing the vehicle control device.

  It should be noted that the present invention is not limited to the illustrated embodiment, and it goes without saying that various improvements and design changes can be made without departing from the gist of the present invention.

  For example, the control device for a vehicle has been described as the present embodiment, but the present invention can be similarly applied to a control device for an electric appliance such as a home appliance or a personal computer to which OEM supply is performed. The effect is obtained.

  As described above, according to the present invention, it is possible to eliminate the influence on the other vehicle supply destination due to the outflow of the password of the vehicle control device without increasing the time for management of the vehicle control device and installation in the vehicle. There is a possibility of being suitably used in the manufacturing technical field of this type of vehicle.

1 Vehicle 10-40 In-vehicle system 200 ECU (Vehicle Control Device)
220 CPU (control information write permission means)
230 Read-only storage means (password storage means)
231 Password storage unit (password writing unit)
232 Valid password information storage unit (Valid password information writing unit)
240 Rewritable storage means (control information storage means)

Claims (4)

A vehicle control device that controls the operation of an in-vehicle system mounted on a vehicle,
Control information storage means for storing control information provided in the in-vehicle system and controlling the operation of the system;
Password storage means for storing a preset password;
Control information write permission means for permitting writing of control information to the control information storage means when the input password matches the password stored in the password storage means,
In the password storage means, a password writing unit in which a plurality of passwords set for each vehicle supply destination are written, and information for invalidating other passwords except for one of these passwords is written. And a valid password information writing unit. A password setting method for setting a password in a vehicle control device that controls the operation of an in-vehicle system mounted on a vehicle,
A password storage step for storing a plurality of passwords preset for each vehicle supply destination in the password storage means;
A control information storage step of storing control information corresponding to a vehicle supply destination to the vehicle control device in the control information storage means when the input password matches the password stored in the password storage means;
An effective password setting step for performing setting for invalidating other passwords except for the password set in the supply destination of the vehicle among the plurality of passwords stored in the password storage means, A vehicle password setting method. The vehicle password setting method according to claim 2, wherein the password storing step is performed before the vehicle assembly process is performed. 4. The vehicle password setting method according to claim 2, wherein the effective password setting step is executed at the end of the vehicle assembly process. 5.

Images