KR20180029854A - Diagnostic methods and devices in vehicle network - Google Patents

Abstract

A diagnostic method performed by a gateway in a vehicle network is disclosed. The gateway manages connection conditions of a controller unit and ports and includes a physical (PHY) layer unit connected to the controller unit. The diagnostic method comprises the following: a step that the controller unit receives a diagnostic request message from an external diagnostic unit connected to a first port; a step that the controller unit receives a security authentication request message from the external diagnostic unit when a security authentication is required for the diagnostic request message; a step that the controller unit verifies the security authentication request message; and a step that the PHY layer unit activates the port connected to a target communication node to be diagnosed among the ports by controlling the controller unit when verification of the security authentication request message is completed.

Description

[0001] DIAGNOSTIC METHODS AND DEVICES IN VEHICLE NETWORK [0002]

BACKGROUND OF THE INVENTION 1. Field of the Invention [0002] The present invention relates to vehicle network technology, and relates to a diagnostic method and apparatus for an Ethernet-based vehicle network.

2. Description of the Related Art [0002] With the rapid progress of electronic components for vehicle components, the types and number of electronic devices (for example, electronic control units (ECUs)) mounted on the vehicles have been greatly increased. Electronic devices can be largely used in a power train control system, a body control system, a chassis control system, a vehicle network, a multimedia system, and the like. The powertrain control system may mean an engine control system, an automatic shift control system, and the like. The body control system may refer to a body electrical equipment control system, a convenience device control system, a lamp control system, and the like. The chassis control system may refer to a steering control system, a brake control system, a suspension control system, and the like. The vehicle network may refer to a controller area network (CAN), a FlexRay-based network, or a MOST (media oriented system transport) based network. The multimedia system may refer to a navigation system, a telematics system, an infotainment system, or the like.

The electronic devices constituting each of these systems and systems are connected through a vehicle network, and a vehicle network is required to support the functions of each of the electronic devices. CAN can support transmission rates of up to 1Mbps, support automatic retransmission of collided frames, and error detection based on cycle redundancy check (CRC). FlexRay-based networks can support transmission speeds of up to 10 Mbps, support simultaneous transmission of data over two channels, and synchronous data transmission. The MOST-based network is a communication network for high-quality multimedia and can support transmission rates of up to 150Mbps.

On the other hand, vehicle telematics systems, infotainment systems, and advanced safety systems require high transmission speeds and system scalability, and CAN and FlexRay-based networks do not fully support them. MOST-based networks can support higher transmission speeds than CAN- and FlexRay-based networks, but MOST-based networks are costly for all vehicle networks. Due to these problems, an ethernet-based network can be considered as a vehicle network. An Ethernet-based network can support bidirectional communication through a pair of windings and can support transmission rates up to 10 Gbps.

As the application of Ethernet-based vehicle networks is expanding, existing bus (BUS) type vehicle diagnosis methods and other diagnostic methods are required. In an Ethernet-based vehicle network, the PHY layer unit can switch the connection of the ports, and a corresponding diagnostic method is required. Also, there is a need for a technology that can maintain the security of the vehicle in the diagnosis method using the Ethernet.

It is an object of the present invention to provide a diagnostic method and apparatus for an Ethernet-based vehicle network.

According to a first aspect of the present invention, a gateway of a vehicle network includes a controller unit and a PHY (physical) layer unit connected to the controller unit, the PHY layer unit managing connection states of ports,

Wherein the diagnostic method performed by the gateway comprises: receiving a diagnostic request message from an external diagnostic unit connected to the first port of the controller unit; Receiving a security authentication request message from the external diagnostic unit when the security authentication is required for the diagnosis request message; Verifying the security authentication request message by the controller unit; And activating, when the verification of the security authentication request message is completed, the PHY layer unit, under the control of the controller unit, a port connected to the target communication node to be diagnosed among the ports.

Here, if security authentication is not required for the diagnosis request message, the PHY layer unit may transmit the diagnosis request message to the target communication node without transmitting a diagnosis message to the controller unit.

Here, if the verification of the security authentication request message fails, the controller unit may terminate the diagnostic procedure and may not allow communication between the external diagnostic device 10 and the in-vehicle communication node.

Here, the diagnosis request message includes information on the name or function of the target communication node to be diagnosed,

The method may further include the step of the controller unit determining at least one of an Ethernet MAC address and an Ethernet IP address of the target communication node from the information about the name or the function of the target communication node.

Here, the diagnosis method may further include: when the verification of the security authentication request message is completed, the controller unit transmits security authentication information for the external diagnostic device to the target communication node.

Here, the step of receiving the security authentication request message may receive information on the service time of the external diagnostic device.

The diagnosis method may include deactivating a port connected to the target communication node by the PHY layer unit under the control of the controller unit when the service time is terminated.

Here, the diagnosis method may be such that, when the service time ends, the PHY layer unit can deliver a message to the controller unit excluding monitoring for the target communication node.

Here, the diagnosis method may include: the PHY layer unit receiving a diagnosis response message from the target communication node; And

And the PHY layer unit transfers the diagnostic response message to the external diagnostic unit in a port forwarding manner under the control of the controller unit.

Here, the vehicle network includes an Ethernet-based vehicle network and a CAN (Controller Area Network) based vehicle network, and the target communication node may belong to the Ethernet-based vehicle network.

The gateway of the vehicle network according to the second embodiment of the present invention includes a controller unit and a PHY (physical) layer unit connected to the controller unit, for managing a connection state of the ports,

Wherein the gateway comprises a controller unit and PHY (physical) layer units connected to the controller unit for managing a connection state of the ports,

The method comprising: receiving, by the PHY layer unit, a usage request message of the vehicle network from an external diagnostic device connected to the first port; The controller unit determining whether the vehicle is in a stop state; Setting the port mirroring of the PHY layer unit such that the controller unit is mirroring a message received from the external diagnostic device to a target communication node when the vehicle is in a stationary state; The PHY layer unit receiving a diagnostic request message from the external diagnostic unit; And the PHY layer unit transmitting the diagnosis request message to the target communication node by mirroring.

Here, in the step of receiving the diagnosis request message, the PHY layer unit may receive information on the service time together.

Here, the diagnosis method may include deactivating a port connected to the target communication node by the PHY layer unit when the service time ends.

Here, the diagnosis method may include: the PHY layer unit receiving a diagnosis response message from the target communication node; And the PHY layer unit transmitting the diagnosis response message to the external diagnostic unit.

Here, when the vehicle is not in a stop state, the diagnosis method includes: receiving a diagnosis request message including a unicast address indicating the target communication node from the external diagnostic unit; Determining a port ID to which the controller unit forwards the diagnostic request message from a unicast address indicating the target communication node; And controlling, by control of the controller unit, the PHY layer unit to forward the diagnostic request message through a port corresponding to the port ID.

Here, the diagnosis method may include the steps of: the PHY layer unit receiving a diagnosis response message including a unicast address indicating the external diagnostic device from the target communication node; Determining a port ID to which the controller unit will forward the diagnostic request message from a unicast address indicating the external diagnostic unit; And controlling the PHY layer unit to forward the diagnostic response message through the port corresponding to the port ID, under control of the controller unit.

A gateway of a vehicle network according to a third embodiment of the present invention comprises: a controller unit; And a PHY (physical) layer unit, connected to the controller unit, for managing a connection state of the ports,

The controller unit receiving a diagnostic request message from an external diagnostic device connected to the first port; Receiving a security authentication request message from the external diagnostic apparatus when security authentication is required for the diagnosis request message; Verifies the security authentication request message,

The PHY layer unit may activate a port connected to a target communication node to be diagnosed, out of the ports, under the control of the controller unit when verification of the security authentication request message is completed.

Here, if security authentication is not required for the diagnostic message, the PHY layer unit may transmit the diagnosis request message to the target communication node without transmitting a diagnosis message to the controller unit.

Here, the diagnosis request message includes information on the name or function of the target communication node to be diagnosed,

The controller unit may determine at least one of an Ethernet MAC address and an Ethernet IP address of the target communication node from information on the name or function of the target communication node.

Here, when the verification of the security authentication request message is completed, the controller unit may transmit security authentication information for the external diagnostic device to the target communication node.

Here, the controller unit may receive information on the service time of the external diagnostic device, and when the service time ends, the PHY layer unit may deactivate the port connected to the target communication node under the control of the controller unit have.

According to the present invention, while the external diagnostic apparatus performs the diagnosis for the vehicle network, the gateway manages the connection state of the ports, so that a message exchange can be made between the external diagnostic apparatus and the target communication node. The port mirroring, the forwarding method, etc., the message can be selectively transmitted to the target communication node or the external diagnostic device during the diagnosis process. And, considering the security range and the service time, the gateway can enhance the security in the diagnostic procedure by activating or deactivating the connection of the ports.

1 is a block diagram illustrating a first embodiment of a network topology of a vehicle network.
2 is a block diagram showing a first embodiment of a communication node constituting a vehicle network.
3 is a block diagram showing a second embodiment of a communication node constituting a vehicle network.
4 is a block diagram showing a first embodiment of a protocol structure of a communication node constituting a vehicle network.
5 is a conceptual diagram showing a gateway included in a vehicle network.
6 is a conceptual diagram illustrating a first embodiment of a process in which a diagnosis request message is transmitted from an external diagnostic apparatus to a target communication node.
7 is a conceptual diagram showing a second embodiment of a process in which a diagnosis request message is transmitted from the external diagnostic apparatus 10 to a target communication node.
8 is a flowchart showing a first embodiment of a vehicle diagnostic method.
9 is a flowchart showing a second embodiment of the vehicle diagnostic method.
10 is a flowchart showing a second embodiment of the vehicle diagnostic method.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the relevant art and are to be interpreted in an ideal or overly formal sense unless explicitly defined in the present application Do not.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In order to facilitate the understanding of the present invention, the same reference numerals are used for the same constituent elements in the drawings and redundant explanations for the same constituent elements are omitted.

1 is a block diagram illustrating a first embodiment of a network topology of a vehicle network.

1, a communication node constituting a vehicle network may refer to a gateway, a switch (or a bridge), an end node, or the like. The gateway 100 may be connected to at least one switch 110, 110-1, 110-2, 120, or 130, and may connect different networks. For example, the gateway 100 may include a communication node that supports a controller area network (CAN) (or FlexRay, a media oriented system transport (MOST), a local interconnect network (LIN) ) Protocol can be connected between the switches. Each of the switches 110, 110-1, 110-2, 120 and 130 may be connected to at least one end node 111, 112, 113, 121, 122, 123, 131, 132, Each of the switches 110, 110-1, 110-2, 120 and 130 may interconnect the end nodes 111, 112, 113, 121, 122, 123, 131, 132 and 133, It is possible to control the nodes 111, 112, 113, 121, 122, 123, 131, 132,

The end nodes 111, 112, 113, 121, 122, 123, 131, 132 and 133 may mean an electronic control unit (ECU) for controlling various devices included in the vehicle. For example, end nodes 111, 112, 113, 121, 122, 123, 131, 132 and 133 may be infotainment devices (e.g., display devices, navigation devices, (An around view monitoring device), and the like.

The communication nodes (i.e., gateways, switches, end nodes, etc.) that constitute the vehicle network may be a star topology, a bus topology, a ring topology, a tree topology, Topology, and so on. Further, each of the communication nodes constituting the vehicle network may support the CAN protocol, the FlexRay protocol, the MOST protocol, the LIN protocol, the Ethernet protocol, and the like. Embodiments according to the present invention can be applied to the network topology described above, and the network topology to which the embodiments according to the present invention are applied is not limited to this, and can be variously configured.

2 is a block diagram showing a first embodiment of a communication node constituting a vehicle network.

Referring to FIG. 2, a communication node 200 constituting a network may include a PHY layer unit 210 and a controller unit 220. The controller unit 220 may be implemented with a medium access control (MAC) layer. PHY layer unit 210 may receive signals from other communication nodes or may transmit signals to other communication nodes. The controller unit 220 may control the PHY layer unit 210 and may perform various functions (e.g., infotainment function, etc.). The PHY layer unit 210 and the controller unit 220 may be implemented as one SoC (System on Chip) or a separate chip.

The PHY layer unit 210 and the controller unit 220 may be connected through a media independent interface (MII) 230. The MII 230 may refer to an interface defined in IEEE 802.3, and may be configured as a data interface and a management interface between the PHY layer unit 210 and the controller unit 220. One of the interfaces of RMII (reduced MII), GMII (gigabit MII), RGMII (reduced GMII), SGMII (serial GMII) and XGMII (10 GMII) may be used instead of MII 230. The data interface may include a transmission channel and a reception channel, and each of the channels may have independent clock, data, and control signals. The management interface may be configured as a two-signal interface, one for the clock and the other for the data.

The PHY layer unit 210 may include a PHY layer interface unit 211, a PHY layer processor 212 and a PHY layer memory 213 and the like. The configuration of the PHY layer unit 210 is not limited thereto, and the PHY layer unit 210 may be configured in various ways. The PHY layer interface unit 211 may transmit signals received from the controller unit 220 to the PHY layer processor 212 and may transmit signals received from the PHY layer processor 212 to the controller unit 220. [ PHY layer processor 212 may control the operation of PHY layer interface unit 211 and PHY layer memory 213, respectively. The PHY layer processor 212 may perform modulation of the signal to be transmitted or demodulation of the received signal. The PHY layer processor 212 may control the PHY layer memory 213 to input or output a signal. The PHY layer memory 213 can store the received signal and output the stored signal upon request of the PHY layer processor 212. [

The controller unit 220 may perform monitoring and control for the PHY layer unit 210 via the MII 230. The controller unit 220 may include a controller interface unit 221, a controller processor 222, a main memory 223, an auxiliary memory 224, and the like. The configuration of the controller unit 220 is not limited thereto, and the controller unit 220 can be configured in various ways. The controller interface unit 221 can receive signals from the PHY layer unit 210 (i.e., the PHY layer interface unit 211) or an upper layer (not shown) and send the received signals to the controller processor 222 And may transmit signals received from the controller processor 222 to the PHY layer unit 210 or higher layer. The controller processor 222 may further include independent memory control logic or integrated memory control logic for controlling the controller interface unit 221, the main memory 223 and the auxiliary memory 224. The memory control logic may be included in the main memory 223 and the auxiliary memory 224, or may be included in the controller processor 222 and implemented.

Each of the main memory 223 and the auxiliary memory 224 may store the signal processed by the controller processor 222 and output the stored signal at the request of the controller processor 222. [ The main memory 223 may mean a volatile memory (e.g., random access memory (RAM), etc.) that temporarily stores data necessary for the operation of the controller processor 222. [ The auxiliary memory 224 includes an operating system code (for example, a kernel and a device driver) and an application program code for performing functions of the controller unit 220 May be stored in the nonvolatile memory. A flash memory having a high processing speed can be used as a nonvolatile memory or a hard disk drive (HDD), a compact disc-read only memory (CD-ROM), etc. for storing a large amount of data Can be used. Controller processor 222 may typically be comprised of logic circuitry including at least one processing core. As the controller processor 222, an ARM (Advanced RISC Machines Ltd.) series core, an atom series core, or the like may be used.

Meanwhile, the PHY layer unit 210 (i.e., the PHY layer processor 212) may operate in a sleep mode, a normal mode (e.g., an active mode), and the like. The PHY layer unit 210 can transition from the sleep mode to the normal mode and transit from the normal mode to the sleep mode based on the control of the controller processor 222. [ Controller unit 220 (e.g., controller processor 222) may operate in a power off mode, a sleep mode, a normal mode, and so on. The controller unit 220 can transition from the power off mode to the sleep mode or the normal mode and can transition from the sleep mode to the power off mode or the normal mode and can transition from the normal mode to the power off mode or to the sleep mode .

Here, the power off mode may mean a state in which power is not supplied to a corresponding entity (e.g., the controller unit 220). The sleep mode means a state in which a minimum power is supplied to a corresponding entity (e.g., the PHY layer unit 210, the controller unit 220, etc.) for basic operation (i.e., a power saving state) . The normal mode may mean a state in which power is normally supplied to a corresponding entity (e.g., PHY layer unit 210, controller unit 220, etc.) (e.g., a wake-up state) .

3 is a block diagram showing a second embodiment of a communication node constituting a vehicle network.

3, the communication node 200 may include a controller unit 220 and may further include a regulator (not shown) for supplying power. The controller unit 220 may be connected to the PHY layer unit 210 located outside the communication node 200 and may control the PHY layer unit 210. The functions of the PHY layer unit 210 and the controller unit 220 shown in FIG. 3 may be the same or similar to those of the PHY layer unit 210 and the controller unit 220 shown in FIG.

PHY layer unit 210 may be coupled with controller unit 220 via media independent interface 230. The MII 230 may refer to an interface defined in IEEE 802.3, and may be configured as a data interface and a management interface between the PHY layer unit 210 and the controller unit 220. One of RMII, GMII, RGMII, SGMII, and XGMII may be used instead of MII 230. The data interface may include a transmit channel and a receive channel, each of which may have an independent clock, data, and signal. The management interface may be configured as a two-signal interface, one for the clock and the other for the data.

The protocol structure of the communication node shown in FIG. 1 to FIG. 3 may be as follows.

4 is a block diagram showing a first embodiment of a protocol structure of a communication node constituting a vehicle network.

Referring to FIG. 4, a communication node may include layer 1 through layer 7. Layer 1 of the communication node can support the PHY function and support a transmission rate of 100 Mbps (megabit per second). Layer 2 of the communication node may support IEEE 802.1Q protocol, IEEE 802.1p protocol, IEEE 802.3 protocol, AVB (audio video bridging) protocol (e.g., IEEE 802.1Qav protocol, IEEE 802.1Qat protocol). The layer 3 of the communication node can support IPv4 (internet protocol version 4), ARP (address resolution protocol), ICMPv4 (internet control message protocol version 4), IEEE 802.1AS, IEEE 1722, The layer 4 of the communication node can support transfer control protocol (TCP), user datagram protocol (UDP), IEEE 802.1AS, IEEE 1722, and the like. The layer 5 through layer 7 of the communication node may support diagnostics over internet protocol (DoP), EthCC protocol, dynamic host configuration protocol (DHCP), SD protocol, network management protocol (NM), IEEE 802.1AS, IEEE 1722,

The communication node described above may operate in a sleep mode or a normal mode. In the sleep mode, the PHY layer unit of the communication node may be in an enabled state, and the controller unit of the communication node may be in a disabled state. Alternatively, in the sleep mode, the PHY layer unit and the controller unit of the communication node may be in the disabled state. In the normal mode, the PHY layer unit and the controller unit of the communication node may be enabled. That is, the normal mode may indicate that the communication node has waked up. When a wake up signal is received or when a specific event is detected, the operating mode of the communication node may transition from the sleep mode to the normal mode. In this case, a system booting procedure of the communication node may be performed. The system boot procedure of the communication node can be performed as follows.

5 is a conceptual diagram showing a gateway 500 included in a vehicle network.

Referring to FIG. 5, the gateway 500 may include a controller unit 510 and a PHY layer unit 520. The controller unit 510 may be comprised of logic circuitry including at least one processing core.

The gateway 500 may be coupled to a CAN-based vehicle network. The gateway 500 may include a plurality of CAN communication channels 530. The CAN communication channel 530 may be connected to the controller unit 510. The gateway 500 can exchange signals with a communication node belonging to the CAN-based vehicle network through the CAN communication channel 530.

The gateway 500 may include a plurality of ports P1, P2, P3, P4, and P5. The first port P1 may be connected to the external diagnostic device 10. The second to fifth ports P2, P3, P4 and P5 may be connected to communication nodes belonging to the Ethernet-based vehicle network. The gateway 500 can receive the message transmitted by the external diagnostic device 10 through the first port P1. The PHY layer unit 520 can manage the connection state of the ports P1, P2, P3, P4, and P5. PHY layer unit 520 may enable or disable connection of ports P1, P2, P3, P4, and P5. The signal may not be transmitted through the disabled port.

The gateway 500 may relay the communication between the external diagnostic device 10 and a communication node in the vehicle network. The external diagnostic device 10 can perform diagnostic procedures for the communication node belonging to the vehicle network through the gateway 500. [ The diagnostic procedure can be divided into four sessions. For example, the diagnostic procedure may be performed according to any one of a default session, an extended session, a security session, and a dedicated session. Some of the diagnostic procedures in the base session may not require security. In the basic procedure, the scope of information exchange can be determined by laws and regulations.

When the external diagnostic device 10 intends to diagnose an electrical component in the vehicle, the external diagnostic device 10 can transmit a diagnostic request message to the gateway 500. [ The PHY layer unit 520 may receive a diagnostic request message via the first port P1. The delivery of the diagnostic request message may vary depending on the diagnostic scope required by the diagnostic request message.

6 is a conceptual diagram illustrating a first embodiment of a process in which a diagnosis request message is transmitted from an external diagnostic device 10 to a target communication node 600. FIG.

Referring to FIG. 6, if security verification is not required for the diagnostic request message, the diagnostic request message can be directly transmitted to the target communication node 600 without going through the controller unit 510 of the gateway 500. For example, if the external diagnostic device 10 transmits a diagnostic request message requesting diagnosis within a range not requiring security, the diagnostic request message may not be transmitted to the controller unit 510. [ The PHY layer unit 520 can determine whether or not security is required for the diagnosis request message based on the information included in the preamble of the diagnosis request message.

The target communication node 600 may be a communication node to be diagnosed. The target communication node 600 may belong to the Ethernet-based vehicle network 30. The target communication node 600 may be an automotive electronic control unit (ECU) or an end node of a vehicle network. The target communication node 600 may include a controller layer unit 610 and a PHY layer unit 620. However, the target communication node 600 may not include the controller unit 610 in some cases. The target communication node 600 may communicate with the gateway 500 via the sixth port P6. The PHY layer unit 620 of the target communication node 600 can manage the connection state of the ports included in the target communication node 600. [ For example, when the PHY layer unit 620 deactivates the sixth port P6, communication between the gateway 500 and the target communication node 600 may be restricted.

If security is not required in the diagnostic request message, the PHY layer unit 520 may not deliver the diagnostic request message to the controller unit 510. [ The PHY layer unit 520 may communicate a diagnostic request message to the target communication node 600 via the second port P2 connected to the target communication node 600. [ When there are a plurality of target communication nodes to be diagnosed, the PHY layer unit 620 can transmit a diagnosis request message through a plurality of ports. As another example, the PHY layer unit 620 may communicate a diagnostic request message through all the ports P2, P3, P4, and P5, as well as the second port P2 with which the target communication node 600 is connected.

The embodiment described with reference to Fig. 6 can be applied when the diagnosis of the vehicle proceeds according to the basic session. However, the embodiment is not limited thereto. For example, the embodiment shown in FIG. 6 may be applied to an extended session, a secure session, and a dedicated session.

7 is a conceptual diagram showing a second embodiment of a process in which a diagnosis request message is transmitted from the external diagnostic apparatus 10 to the target communication node 600. FIG.

Referring to FIG. 7, when security verification is required for the diagnostic request message, the PHY layer unit 520 can transmit a diagnostic request message to the controller unit 510. [ The controller unit 510 may proceed with the security verification procedure. The controller unit 510 can receive the security authentication request message from the external diagnostic device 10 and verify the security authentication request message.

8 is a flowchart showing a first embodiment of a vehicle diagnostic method.

The vehicle diagnostic method shown in Fig. 8 can be applied to the basic session. However, the embodiment is not limited thereto. For example, the vehicle diagnostic method shown in FIG. 8 can be applied to an extended session, a secure session, and a dedicated session.

Referring to FIG. 8, in step S810, the external diagnostic device 10 may transmit a diagnosis request message through the first port P1. PHY layer unit 520 may receive a diagnostic request message. If security verification is required for the diagnostic request message, the PHY layer unit 520 may not forward the diagnostic request message to the target communication node 600 immediately. The PHY layer unit 520 may forward the diagnostic request message to the controller unit 510.

In step S812, the controller unit 510 can determine the Ethernet MAC address or the Ethernet IP address of the target communication node to be diagnosed from the diagnosis request message. The external diagnostic device 10 may include the name of the target communication node 600 or the information about the function performed by the target communication node 600 in the diagnosis request message. The controller unit 510 may know in advance the Ethernet MAC address or the Ethernet IP address of the communication node that matches the name or function of the in-vehicle communication node. The controller unit 510 may determine the Ethernet MAC address or the Ethernet IP address of the target communication node 600 using previously stored matching information from the name or function of the target communication node 600 included in the diagnosis request message.

In step S820, the external diagnostic device 10 may transmit a security authentication request message. The external diagnostic device 10 may transmit the security authentication request message and information on the service time together. The service time may be information on the time at which the diagnosis service is performed. The controller unit 510 can receive the security authentication request message and the service time information through the PHY layer unit 520. [

In step S822, the controller unit 510 may perform verification of the security authentication request message. The controller unit 510 can verify the security authentication request message to determine whether the diagnosis performed by the external diagnostic device 10 is within the permitted security range. If the verification of the security authentication request message fails, the controller unit 510 may terminate the diagnostic procedure and may not allow communication between the external diagnostic device 10 and the in-vehicle communication node.

In step S824, when verification of the security authentication request message is completed, the PHY layer unit 520 may transmit security authentication information for the external diagnostic device 10 to the target communication node 600. [ The controller unit 510 can determine which port is connected to the target communication node 600 from the Ethernet MAC address or the Ethernet IP address of the target communication node 600 determined in step S812. The controller unit 510 can inform the PHY layer unit 520 of port information connected to the target communication node 600. [ The PHY layer unit 520 may transmit security authentication information to the target communication node 600 via the second port P2.

In step S830, when the verification of the security authentication request message is completed, the controller unit 510 can transmit a control command to the PHY layer unit 520. [ The PHY layer unit 520 can activate the second port P2 connected to the target communication node 600 under the control of the controller unit 510. [

In step S832, the target communication node 600 may receive the security authentication information from the gateway 500. [ The controller unit 610 of the target communication node 600 may transmit a control command to the PHY layer unit 620. [ The PHY layer unit 620 can activate the sixth port P6 connected to the gateway 500 under the control of the controller unit 610. [ Communication between the external diagnostic device 10 and the target communication node 600 can be allowed by activating the second port P2 and the sixth port P6.

In step S840, the target communication node 600 may perform a diagnostic function. The target communication node 600 may extract diagnostic information requested by the external diagnostic device 10. [ The target communication node 600 may generate a diagnostic response message based on the diagnostic information.

In step 850, the target communication node 600 may send a diagnostic response message. The gateway 500 may receive the diagnostic response message via the second port P2. The controller unit 510 can configure the PHY layer unit 510 such that the diagnostic response message received via the second port P2 is forwarded through the first port P1. When the port forwarding is set, the diagnosis response message can be transmitted to the external diagnostic device 10 without going through the controller layer unit 510. [

In step S860, the PHY layer unit 520 can transmit a diagnostic response message to the external diagnostic apparatus 10 in a port forwarding manner under the control of the controller unit 510. [ The PHY layer unit 520 can forward the diagnostic response message through the first port P1 to which the external diagnostic device 10 is connected.

In step S870, when the service time ends, the controller unit 510 can restrict the diagnostic service by changing the setting of the PHY layer unit 520. [ For example, the controller unit 510 may change the setting of the PHY layer unit 520 such that the second port P2 to which the target communication node 600 is connected is deactivated. The PHY layer unit 520 may deactivate the second port P2 or the second to fifth ports P2, P3, P4, and P5 under the control of the controller unit 510. [ As another example, the controller unit 510 may change the setting of the PHY layer unit 520 such that the first port P1 to which the external diagnostic device 10 is connected is deactivated. The PHY layer unit 520 may deactivate the first port P1 under the control of the controller unit 510. [ As another example, in another example, the controller unit 510 may change the settings of the PHY layer unit 520 such that all ports of the gateway 500 are deactivated. The PHY layer unit 520 can deactivate the first to fifth ports P1, P2, P3, P4, and P5 under the control of the controller unit 510. [ With the above-described operation of the controller unit 510 and the PHY layer unit 520, when the service time is ended, the port forwarding setting can be released. Message exchange between the external diagnostic device 10 and the target communication node 600 may be restricted.

In the above description, the case where the PHY layer unit 520 deactivates at least one of the ports to limit the diagnostic service has been described. However, the embodiment is not limited thereto. For example, the PHY layer unit 520 may block diagnostic services while keeping the pods active. In this case, under the control of the controller unit 510, the PHY layer unit 520 may not transmit a message received from the external diagnostic unit 10 through other ports. Also, it may not transmit the message received from the target communication node 600 to the external diagnostic device 10. [

As another example, in step S870, when the service time ends, the controller unit 510 may partially restrict the diagnosis service. For example, the controller unit 510 may configure the PHY layer unit 520 such that messages other than monitoring for the target communication node 600 are forwarded to the controller unit 510. The PHY layer unit 520 can forward the message to the controller unit 510 without forwarding the message except the monitoring by the port forwarding method. The controller unit 510 can determine whether the message is delivered. The controller unit 510 may not allow the PHY layer unit 520 to forward the message if it determines that message delivery is inappropriate. In this case, communication between the external diagnostic device 10 and the target communication node 600 may be partially restricted. The controller unit 510 can prevent the external diagnostic device 10 from accessing the target communication node 600 unrestrictedly.

9 is a flowchart showing a second embodiment of the vehicle diagnostic method.

The vehicle diagnostic method shown in Fig. 9 can be applied to the remaining sessions except for the basic session. However, the embodiment is not limited thereto. For example, the vehicle diagnostic method shown in Fig. 9 can be applied to the basic session.

Referring to FIG. 9, in step S910, the external diagnostic device 10 may transmit a communication authentication request message for communication with the vehicle network. The PHY layer unit 520 may receive the communication authentication request message through the first port P1. The communication authentication request message may include identification information of the external diagnostic device 10 and information about the diagnosis range of the external diagnostic device 10. [ The PHY layer unit 520 may forward the communication authentication request message to the controller unit 510.

In step S920, the controller unit 510 can verify the communication authentication request message. The controller unit 510 can judge whether or not the diagnostic range of the external diagnostic device 10 belongs to a security allowable range. The controller unit 510 may terminate the diagnostic procedure if it determines that the diagnostic range of the external diagnostic device 10 is not allowed.

In step S930, when the communication authentication for the external diagnostic device 10 is completed, the external diagnostic device 10 can transmit the vehicle network use request message. The PHY layer unit 520 may receive the vehicle network use request message through the first port P1. The PHY layer unit 520 may forward the vehicle network use request message to the controller unit 510.

In step S940, the controller unit 510 may determine whether the vehicle is at a standstill after receiving the vehicle network use request message. The controller unit 510 can determine whether the vehicle is at rest or not based on the vehicle speed, the gear information, the position information of the vehicle, and the like. When the vehicle speed is measured at 0 km / h, the controller unit 510 can determine that the vehicle is in a stopped state. The controller unit 510 can determine that the vehicle is in a stopped state when the gear is parked. The controller unit 510 can determine that the vehicle is in a stopped state when the position of the vehicle identified from the GPS position signal does not change.

In step S950, the controller unit 510 can set the PHY layer unit so that the PHY layer unit performs port mirroring when it determines that the vehicle is in a stopped state. The controller unit 510 may cause a message received from the external diagnostic device 10 to be mirrored to the target communication node 600. The controller unit 510 may receive the diagnostic request message and configure the PHY layer unit 520 such that the message received from the first port P1 is mirrored to the second port P2. The controller unit 510 may set the destination of the message received from the first port P1 to the second port P2.

The controller unit 510 may establish mirroring from the external diagnostic device 10 to the Ethernet based communication nodes connected to the gateway 500. The controller unit 510 may limit the mirroring from the Ethernet based communication nodes connected to the gateway 500 to the external diagnostic device 10. [ Accordingly, the message transmitted by the target communication node 600 may not be mirrored.

The PHY layer unit 520 can transmit the message received through the first port P1 to the target communication node 600 via the second port P2 by the mirroring operation without transmitting the message to the controller unit 510 have.

The case where the destination port of the port mirroring is set to the second port P2 has been described, but the embodiment is not limited thereto. For example, when there are a plurality of target communication nodes, a message received through the first port P1 may be mirrored so as to be transmitted through a plurality of ports.

In step S960, the external diagnostic device 10 can transmit a diagnosis request message. The external diagnostic device 10 can transmit the service time information together. PHY layer unit 520 may communicate service time information to controller unit 510. [

In step S962, the PHY layer unit 520 may transmit a diagnosis request message to the target communication node 600 via the second port P2 by mirroring. PHY layer unit 520 may transmit a diagnostic request message to a plurality of communication nodes through a plurality of ports.

In step S970, the target communication node 600 may perform a diagnostic function. The target communication node 600 may extract diagnostic information requested by the external diagnostic device 10. [ The target communication node 600 may generate a diagnostic response message based on the diagnostic information.

In step S980, the target communication node 600 may transmit a diagnosis response message. The gateway 500 may receive the diagnostic response message via the second port P2. The controller unit 510 may configure the PHY layer unit 520 such that the diagnostic response message received via the second port P2 is forwarded through the first port P1.

In step S982, the PHY layer unit 520 can forward the diagnostic response message to the external diagnostic device 10 via the first port P1.

In step S990, when the service time is terminated, the controller unit 510 may deactivate the second port P2 connected to the target communication node 600 by changing the setting of the PHY layer unit 520. [ As another example, the controller unit 510 may set the PHY layer unit 520 such that the second to fifth ports P2, P3, P4, and P5 are deactivated. The controller unit 510 may set the PHY layer unit 520 such that the first to fifth ports P1, P2, P3, P4, and P5 are deactivated.

By operation of the controller unit 510 and PHY layer unit 520, port mirroring and message forwarding may be interrupted when the service time expires. Message exchange between the external diagnostic device 10 and the target communication node 600 may be restricted.

10 is a flowchart showing a second embodiment of the vehicle diagnostic method.

In the following description of the embodiment of FIG. 10, the description overlapping with FIG. 9 is omitted. The vehicle diagnostic method shown in FIG. 10 can be applied to the remaining sessions except for the basic session. However, the embodiment is not limited thereto. For example, the vehicle diagnostic method shown in FIG. 10 can be applied to a basic session.

Referring to FIG. 10, in step S1040, the controller unit 510 may determine whether the vehicle is stationary or not.

In step S1042, when the vehicle is not in a stopped state, the controller unit 510 can transmit a one side forwarding request message through the PHY layer unit 520. [ The target communication node 600 and the external diagnostic device 10 can receive the one-side forwarding request message. The target communication node 600 and the external diagnostic device 10 may include a unicast address in a message generated after receiving the one-side forwarding request message. The target communication node 600 and the external diagnostic device 10 can set the destination of the message as one communication node. Accordingly, the message transmitted by the external diagnostic device 10 can be delivered to one target communication node 600. The unicast address may include information that can identify the port to which the communication node, the destination of the message, is connected.

In step S1050, the external diagnostic device 10 may transmit a diagnosis request message and service time information. The diagnostic request message may include a unicast address that points to the target communication node 600. PHY layer unit 520 may receive a diagnostic request message and service time information. The PHY layer unit 520 may forward the diagnostic request message and the service time information to the controller unit 510. The controller unit 510 can determine the port ID of the second port P2 to which the target communication node 600, which is the destination of the message, is connected from the unicast address included in the diagnosis request message.

For example, the unicast address may include an Index key that can identify the destination of the message. The controller unit 510 may determine a communication node that matches the index key and determine a port ID from which to forward the message. The controller unit 510 can determine the port ID of the port to which the diagnosis request message is to be transmitted from the unicast address included in the diagnosis request message.

In step S1052, the PHY layer unit 520 can forward the diagnostic request message through the second port P2 under the control of the controller unit 510. [

In step S1060, the target communication node 600 may perform a diagnostic function. The target communication node 600 may extract diagnostic information requested by the external diagnostic device 10. [ The target communication node 600 may generate a diagnostic response message based on the diagnostic information.

In step S1070, the target communication node 600 may send a diagnosis response message. The diagnostic response message may include a unicast address indicating the external diagnostic device 10. The unicast address may include an index key that can identify the external diagnostic device 10. [ The controller unit 510 may determine the port ID of the port to which to send the diagnostic response message from the index key.

In step S1072, the PHY layer unit 520 can forward the diagnostic response message through the first port P1 under the control of the controller unit 510. [

In step S1080, when the service time has expired, the controller unit 510 may deactivate the second port P2 connected to the target communication node 600 by changing the setting of the PHY layer unit 520. [ As another example, the controller unit 510 may set the PHY layer unit 520 such that the second to fifth ports P2, P3, P4, and P5 are deactivated. The controller unit 510 may set the PHY layer unit 520 such that the first to fifth ports P1, P2, P3, P4, and P5 are deactivated.

By the operation of the controller unit 510 and the PHY layer unit 520, when the service time is ended, the one-side forwarding can be stopped. Message exchange between the external diagnostic device 10 and the target communication node 600 may be restricted.

Hereinabove, the diagnostic method of the gateway and the gateway according to the embodiments of the present invention has been described with reference to FIG. 1 through FIG. According to the above-described embodiments, a message exchange between the external diagnostic device and the target communication node can be made by the gateway managing the connection state of the ports while the external diagnostic device performs the diagnosis on the vehicle network. The port mirroring, the forwarding method, etc., the message can be selectively transmitted to the target communication node or the external diagnostic device during the diagnosis process. And, considering the security range and the service time, the gateway can enhance the security in the diagnostic procedure by activating or deactivating the connection of the ports.

The methods according to the present invention can be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer readable medium. The computer readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the computer readable medium may be those specially designed and constructed for the present invention or may be available to those skilled in the computer software.

Examples of computer readable media include hardware devices that are specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate with at least one software module to perform the operations of the present invention, and vice versa.

It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. It will be possible.

Claims (20)

A diagnostic method performed by a gateway in a vehicle network,
The gateway manages the connection state of the controller unit and the ports, and includes a PHY (physical) layer unit connected to the controller unit,
The controller unit receiving a diagnostic request message from an external diagnostic unit connected to the first port;
Receiving a security authentication request message from the external diagnostic unit when the security authentication is required for the diagnosis request message;
Verifying the security authentication request message by the controller unit; And
And activating, when the verification of the security authentication request message is completed, the PHY layer unit, under the control of the controller unit, a port connected to the target communication node to be diagnosed among the ports. The method according to claim 1,
Wherein the PHY layer unit transfers the diagnostic request message to the target communication node without forwarding a diagnostic message to the controller unit if security authentication is not required for the diagnostic request message. The method according to claim 1,
Wherein if the verification of the security authentication request message fails, the controller unit terminates the diagnostic procedure and does not allow communication between the external diagnostic device (10) and the in-vehicle communication node. The method according to claim 1,
Wherein the diagnosis request message includes information on a name or a function of the target communication node to be diagnosed,
The controller unit determining at least one of an Ethernet MAC address and an Ethernet IP address of the target communication node from information on the name or function of the target communication node. The method according to claim 1,
And when the verification of the security authentication request message is completed, the controller unit transmits security authentication information for the external diagnostic device to the target communication node. The method according to claim 1,
Wherein the step of receiving the security authentication request message includes receiving information on a service time of the external diagnostic device. The method of claim 6,
And when the service time expires, deactivating the port connected to the target communication node by control of the controller unit of the PHY layer unit. The method of claim 6,
And when the service time expires, the PHY layer unit transfers a message to the controller unit excluding monitoring for the target communication node. The method according to claim 1,
The PHY layer unit receiving a diagnostic response message from the target communication node; And
And the PHY layer unit transfers the diagnosis response message to the external diagnostic unit in a port forwarding manner under the control of the controller unit. The method according to claim 1,
Wherein the vehicle network comprises an Ethernet based vehicle network and a CAN (Controller Area Network) based vehicle network, wherein the target communication node belongs to the Ethernet based vehicle network. A diagnostic method performed by a gateway in a vehicle network,
Wherein the gateway comprises a controller unit and PHY (physical) layer units connected to the controller unit for managing a connection state of the ports,
Receiving, by the PHY layer unit, a usage request message of the vehicle network from an external diagnostic device connected to the first port;
The controller unit determining whether the vehicle is in a stop state;
Setting the port mirroring of the PHY layer unit such that the controller unit is mirroring a message received from the external diagnostic device to a target communication node when the vehicle is in a stationary state;
The PHY layer unit receiving a diagnostic request message from the external diagnostic unit; And
And the PHY layer unit transfers the diagnosis request message to the target communication node by mirroring. The method of claim 11,
And the PHY layer unit receives the information on the service time together in the step of receiving the diagnosis request message. The method of claim 12,
And when the service time expires, deactivating the port that the PHY layer unit is connected to the target communication node. The method of claim 11,
The PHY layer unit receiving a diagnostic response message from the target communication node; And
And the PHY layer unit transmitting the diagnosis response message to the external diagnostic unit. The method of claim 11,
If the vehicle is not stationary,
The PHY layer unit receiving a diagnostic request message including a Unicast address indicating the target communication node from the external diagnostic unit;
Determining a port ID to which the controller unit forwards the diagnostic request message from a unicast address indicating the target communication node; And
And controlling, by control of the controller unit, the PHY layer unit to forward the diagnostic request message through a port corresponding to the port ID. 16. The method of claim 15,
The PHY layer unit receiving a diagnostic response message including a unicast address indicating the external diagnostic device from the target communication node;
Determining a port ID to which the controller unit will forward the diagnostic request message from a unicast address indicating the external diagnostic unit; And
And controlling, by control of the controller unit, the PHY layer unit to forward the diagnostic response message through the port corresponding to the port ID. As a gateway for a vehicle network,
A controller unit; And
And a PHY (physical) layer unit, connected to the controller unit, for managing a connection state of the ports,
The controller unit receiving a diagnostic request message from an external diagnostic device connected to the first port; Receiving a security authentication request message from the external diagnostic apparatus when security authentication is required for the diagnosis request message; Verifies the security authentication request message,
Wherein the PHY layer unit activates a port connected to a target communication node to be diagnosed, out of the ports, under the control of the controller unit when verification of the security authentication request message is completed. 18. The method of claim 17,
Wherein the PHY layer unit forwards the diagnostic request message to the target communication node without forwarding a diagnostic message to the controller unit if security authentication is not required for the diagnostic message. 18. The method of claim 17,
Wherein the diagnosis request message includes information on a name or a function of the target communication node to be diagnosed,
Wherein the controller unit determines at least one of an Ethernet MAC address and an Ethernet IP address of the target communication node from information about the name or function of the target communication node. 18. The method of claim 17,
Wherein the controller unit receives information on a service time of the external diagnostic device,
And upon termination of the service time, the PHY layer unit deactivates the port connected to the target communication node under the control of the controller unit.

Images