WO2019135039A1 - Method for verifying the conformity of one or more vehicle computers by comparing identifiers, and associated verification system - Google Patents

Method for verifying the conformity of one or more vehicle computers by comparing identifiers, and associated verification system Download PDF

Info

Publication number
WO2019135039A1
WO2019135039A1 PCT/FR2018/053355 FR2018053355W WO2019135039A1 WO 2019135039 A1 WO2019135039 A1 WO 2019135039A1 FR 2018053355 W FR2018053355 W FR 2018053355W WO 2019135039 A1 WO2019135039 A1 WO 2019135039A1
Authority
WO
WIPO (PCT)
Prior art keywords
identifier
vehicle
software module
computer
hardware
Prior art date
Application number
PCT/FR2018/053355
Other languages
French (fr)
Inventor
Thierry Lopez
Original Assignee
Psa Automobiles Sa
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Psa Automobiles Sa filed Critical Psa Automobiles Sa
Publication of WO2019135039A1 publication Critical patent/WO2019135039A1/en

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C5/00—Registering or indicating the working of vehicles
    • G07C5/008—Registering or indicating the working of vehicles communicating information to a remotely located station
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C5/00—Registering or indicating the working of vehicles
    • G07C5/08—Registering or indicating performance data other than driving, working, idle, or waiting time, with or without registering driving, working, idle or waiting time
    • G07C5/0816—Indicating performance data, e.g. occurrence of a malfunction
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Definitions

  • the invention relates to vehicles, possibly of automotive type, and more precisely the control of calculators of such vehicles.
  • Many vehicles include one or more computers including hardware (or “hardware") associated with at least one hardware identifier and at least one software module (or computer or “software”) associated to a software module identifier.
  • hardware or “hardware”
  • software or computer or "software”
  • the same computer can be associated with several versions of software module (s) to offer diversity, because it is easier and cheaper to report diversity on the software rather than the hardware.
  • different versions of software module (s) are adapted respectively to different national or international regulations, such as for example the emission regulations of heat engines that impose the amounts of discharge of pollutants eligible.
  • Such software modules are notably installed in computers that control thermal engines or automatic transmissions.
  • a diagnostic tool can be connected to the centralized diagnostic socket of the vehicle, which allows access to its various computers via a communication medium, such as for example a K-type serial bidirectional line or a communication network.
  • a communication medium such as for example a K-type serial bidirectional line or a communication network.
  • CAN or "Controller Area Network” or Ethernet, and using a standardized protocol, for example of the ISO 14230 or ISO 14229 type.
  • the diagnostic tool transmits a diagnostic request to a particular computer, and the latter provides each required information. within an answer message.
  • the information provided by the computer can then be compared by the diagnostic tool to reference information that is normally stored in a database of the vehicle manufacturer since the output of the latter of an assembly line. It is thus possible to determine whether a computer is consistent with what is expected, and if not to determine whether it is the computer or a software module of the latter has been replaced.
  • the diagnosis can also be made remotely (or "over the air"), via the vehicle communication module, as is particularly described in the patent documents FR 2998237 and FR 3032546.
  • this possibility of controlling the computers embedded in vehicles does not prevent or deter, on the one hand, the disassembly of some computers to be reassembled in other vehicles or replace them with other non-compliant computers and therefore potentially dangerous, and on the other hand the replacement of software module (s) by other (non) compliant and therefore potentially dangerous software module (s).
  • computers are generally not checked during technical inspections whose current purpose is to ensure the ability of vehicles to drive but not to control their compliance.
  • the invention is therefore particularly intended to improve the situation.
  • control method for controlling a vehicle having a vehicle identifier and comprising a communication module adapted to exchange data by wave and at least one computer associated with at least one hardware identifier and comprising at least one software module associated with a software module identifier.
  • This control method is characterized by the fact that it comprises:
  • this control computer compares these with stored hardware identifier (s) and software module identifier (s) and, in case of difference, transmits to a server, via the communication module, this vehicle identifier and these hardware identifier (s) and identifier (s) software module releases, and
  • the server compares the hardware identifier (s) and software module identifier (s) transmitted to hardware identifier (s) and software module identifier (s) stored in correspondence with the vehicle identifier. transmitted and in case of difference transmits to the vehicle information representative of a nonconformity within (a) computer for the storage of this information in its control computer.
  • the vehicle control computer now has a record of each hardware or software nonconformity of each of its controlled computers, which makes it possible to determine each nonconformity during a technical control or in an after-sales service.
  • control method according to the invention may comprise other characteristics that can be taken separately or in combination, and in particular:
  • the (one) computer in its first step, can also communicate to the control computer the configuration parameters of each software module that it understands, then the control computer can compare the latter with stored configuration parameters and in case of difference at least one of the hardware identifier (s), software module identifier (s) and configuration parameters transmits to the server, via the communication module, this vehicle identifier, these hardware identifier (s) and identifier ( s) software module, and these configuration parameters releases.
  • the server in its second step the server can compare these hardware identifier (s), software module identifier (s) and configuration parameters transmitted to hardware identifier (s), software module identifier (s) and parameters. configuration stored in correspondence of the transmitted vehicle identifier and in case of difference can transmit to the vehicle the information for the storage of this information in its control computer;
  • the computer in its first step the computer can communicate to the control computer its hardware identifier (s) and software module identifier (s), as well as the possible configuration parameters, after each of its awakenings;
  • the computer in its first step the computer can communicate to the control computer its hardware identifier (s) and / or its software module identifier (s) and / or its possible configuration parameters as long as the computer of control has not informed him that he has received them all, and the control computer may only perform the comparison once he has received this (these) identifier (s) of material, this (these) identifier (s) software module, and these possible configuration parameters;
  • the server in its second step, can transmit the information once.
  • the server can transmit the information several times to the vehicle so that it is stored each time in the control computer instead of the previous information transmitted and relating to the same computer.
  • the invention also proposes a system in charge of controlling vehicles each having a vehicle identifier and each comprising a communication module capable of exchanging data by means of waves and at least one computer associated with at least one hardware identifier and comprising at least one software module associated with a software module identifier.
  • This system is characterized by the fact:
  • control computers located in each of the vehicles and storing hardware identifiers and software module identifier (s) of each computer of their vehicle, and on the other hand , a server storing hardware identifier (s) and identifier (s) of each computer's software module of each of the vehicles, and - that each computer of a vehicle communicates, after an alarm clock, to the control computer of its vehicle its hardware identifier (s) and software module identifier (s), then this control calculator compares these with the identifier (s) of hardware and software module identifier (s) stored and in case of difference transmits to the server, via the communication module of his vehicle, this vehicle identifier and these identifiers (s).
  • the server compares these hardware identifier (s) and software module identifier (s) transmitted by this vehicle to the hardware identifier (s) and identifier (s) of software module stored in correspondence with this transmitted vehicle identifier and in case of difference transmits to this vehicle information representative of a nonconformity within a calculator that it understands for the storage of this information in its control computer.
  • each computer of a vehicle can also communicate to the control computer of its vehicle configuration parameters of each software module that includes. Then, this control computer can compare the latter with stored configuration parameters, and in case of difference of at least one of the hardware identifier (s), software module identifier (s) and configuration parameters can transmit to the server, via the vehicle communication module, this vehicle identifier, these hardware identifier (s) and software module identifier (s), and these configuration parameters communicated. Then, the server can compare these hardware identifier (s), software module identifier (s) and configuration parameters transmitted to hardware identifier (s), software module identifier (s) and configuration parameters stored in correspondence with each other. the vehicle identifier transmitted, and in case of difference can transmit to the vehicle designated by this vehicle identifier information for the storage of this information in its control computer.
  • the vehicles may be automotive type.
  • the object of the invention is in particular to propose a control method, and an associated control system SY, for controlling the computers Cj of at least one vehicle V, in order to check their respective conformities.
  • the vehicles V are automotive type. This is for example cars. But the invention is not limited to this type of vehicle. It concerns indeed any type of vehicle comprising a communication module adapted to exchange data by wave and at least one computer. Therefore, it concerns land vehicles, river (or maritime) vehicles, and air vehicles.
  • FIG. 1 shows schematically a section of road TR comprising two traffic lanes on one of which a vehicle V having a vehicle identifier (for example a VIN ("Vehicle Identification Number”) code vehicle)) and comprising at least one computer Cj associated with at least one hardware identifier (or “hardware”) and comprising at least one software module (or “software”) associated with a software module identifier.
  • vehicle V having a vehicle identifier (for example a VIN ("Vehicle Identification Number") code vehicle)) and comprising at least one computer Cj associated with at least one hardware identifier (or “hardware") and comprising at least one software module (or “software”) associated with a software module identifier.
  • vehicle identifier for example a VIN (“Vehicle Identification Number") code vehicle
  • these computers Cj are all connected to a communication network embedded in the vehicle V and possibly multiplexed.
  • the invention notably proposes a control method intended to control the computers Cj of at least the vehicle V, in order to check their respective conformities.
  • a control method comprises first and second steps that can be implemented in particular by a control system SY according to the invention.
  • a control system SY comprises at least one control computer CC installed in a vehicle V to control and a server SC.
  • control system SY can be arranged to control several vehicles, and in this case, each vehicle to be controlled comprises a control computer CC.
  • a vehicle V in order for a vehicle V to be controlled by the control system SY, it must also include a first communication module MCN1 able to exchange data via waves via at least one communication network RC at least partially non-wired.
  • This first communication module MCN1 is in particular responsible for exchanging data with a second MCN2 communication module installed in the SC server.
  • the first step of the control method begins after an alarm clock of the computer Cj.
  • the calculator Cj begins by communicating to the control computer DC of his vehicle V his hardware identifier (s) and software module identifier (s). Then, this control computer CC compares these hardware identifier (s) and software module identifier (s) received to hardware identifier (s) and software module identifier (s) stored in first storage means MS1. This comparison is performed by first comparison means MCP1 of the control computer CC.
  • a computer Cj In order for a computer Cj to communicate to the control computer CC of its vehicle V its hardware identifier (s) and software module identifier (s), it must include a dedicated software module for this purpose.
  • the first storage means MS1 are independent of the first comparison means MCP1. But in an alternative embodiment not illustrated they (MS1) could be part of these (MCP1).
  • these first storage means MS1 can be arranged in the form of a memory, possibly of software type, and preferably very protected access.
  • the first comparison means MCP1 can be made in the form of software modules (or computer or software), or a combination of electronic circuits (or hardware) and software modules.
  • the first step continues with the transmission by the control computer CC to the server SC, via the first communication module MCN1, identifiers vehicle, hardware identifier (s) and software module identifier (s) provided by the computer Cj.
  • the SC server begins by comparing the hardware identifier (s) and software module identifier (s) transmitted by the vehicle V to hardware identifiers and software module identifier (s). which are stored in second storage means MS2 in correspondence with the vehicle identifier also transmitted by the vehicle V. This comparison is performed by second comparison means MCP2 of the server SC.
  • All the information relating to a vehicle V and stored in the second storage means MS2 are updated as soon as a calculator Cj of this vehicle V is the subject of a software update and / or a replacement of a calculator Cj.
  • the second storage means MS2 are independent of the second comparison means MCP2. But in an alternative embodiment not illustrated they (MS2) could be part of these (MCP2).
  • these second storage means MS2 can be arranged in the form a database or a memory, possibly of the software type, and preferably very protected access.
  • the second comparison means MCP2 can be made in the form of software modules, or a combination of electronic circuits and software modules.
  • the second storage means MS2 of its server SC store the hardware identifier (s) and software module identifier (s) of each computer Cj of each of these vehicles
  • the second step continues with the transmission by the server SC to the vehicle V considered of information representative of a non-compliance with the within its computer Cj for storing this information in its control computer CC.
  • this information may indicate that it is a hardware identifier of the calculator Cj that is non-compliant and / or that it is a software module identifier of the calculator Cj that is non-compliant.
  • each nonconformity information can be stored in the first storage means MS1 of the relevant control computer CC. But this is not obligatory. It could indeed store each non-compliance information in third dedicated storage means of the CC control computer and whose access is possibly accessible by providing a password.
  • the trace of each non-compliance of each computer Cj hardware or software is stored in the control computer CC the trace of each non-compliance of each computer Cj hardware or software, and during a technical control or in an after-sales service can easily determine each non-compliance by accessing the first storage means MS1 (or any third dedicated storage means), for example by means of a diagnostic tool (and a possible key, for example).
  • a diagnostic tool and a possible key, for example.
  • PKI Public Key Infrastructure
  • the computer Cj can also communicate to the control computer CC of the configuration parameters of each software module that it comprises.
  • the control computer CC compares these configuration parameters with configuration parameters that are stored in the first storage means MS1. Then, in case of difference of at least one of the hardware identifier (s), software module identifier (s) and configuration parameters, the control computer CC transmits to the server SC, via the first communication module MCN1 of its vehicle V, this vehicle identifier, these hardware identifier (s) and software module identifier (s), and these configuration parameters that have been communicated to it by the computer Cj.
  • the server SC compares these hardware identifier (s), software module identifier (s) and configuration parameters transmitted by the vehicle V to hardware identifiers, software module identifier (s). and configuration parameters which are stored in the second storage means MS2 in correspondence with the vehicle identifier also transmitted by the vehicle V. Then, in the event of a difference between these identifiers (received and stored) and configuration parameters (received and stored), the server SC transmits to the vehicle V this information for storage of this information in the control computer CC.
  • the computer Cj can communicate to the control computer CC of its vehicle V each hardware identifier and / or each software module identifier and / or the possible configuration parameters until this CC control calculator has informed him that he has received them all.
  • the control computer CC performs the comparison of identifiers (received and stored) and any configuration parameters (received and stored) once it has received each hardware identifier, each software module identifier , and any configuration parameters of the calculator Cj.
  • a calculator Cj can begin by communicating his hardware identifier to the control computer DC of his vehicle V. If this control computer CC does not indicate that he has received it, he communicates to him new hardware ID after a predefined time interval. On the other hand, if this control computer CC signals to him that it has received it, it communicates to him each identifier of software module. If this control computer CC does not indicate that it has received each software module identifier, it communicates it again each software module identifier after a predefined time interval. On the other hand, if this control computer CC signals him that he has received each software module identifier, he communicates to him any configuration parameters. If this control computer CC does not indicate that it has received any configuration parameters, it communicates again its possible configuration parameters after a predefined time interval. On the other hand, if this DC control computer indicates that it has received any configuration parameters, it stops communicating with it.
  • the SC server can transmit the nonconformity information only once. But this is not obligatory. Indeed, it (SC) could transmit the nonconformity information several times to the vehicle V so that it is stored each time in the control computer concerned CC instead of the previous information transmitted and relating to the same calculator cj.
  • SC could transmit the nonconformity information several times to the vehicle V so that it is stored each time in the control computer concerned CC instead of the previous information transmitted and relating to the same calculator cj.
  • start-up time or "boot" time
  • the confirmation that the identifiers and any configuration parameters transmitted by a computer Cj have been received by the central computer CC can be obtained well after the start of the vehicle V and therefore during its use.
  • a calculator Cj able to communicate its identifiers and possible configuration parameters in milliseconds and another calculator Cj '(j' 1 j) for which this same operation will require several seconds.
  • the control method is thus independent of the constraints of technology (computers and network to which they are connected).
  • a computer Cj may, for example be carried out by means of a diagnostic protocol such as KWP2000 (ISO 14230) or UDS (ISO 14229).
  • the computer Cj communicates each identifier or its possible configuration parameters to the central computer CC by means of a diagnostic request and the central computer CC signals to the computer Cj that it has received the diagnostic request and its contents. by means of a response message.
  • each central computer CC is a computer having significant digital processing capabilities, and for example built on a LINUX type platform, unlike most computers Cj (especially dedicated to the engine or the gearbox or power steering or braking) which usually have only a structure type OSEK / AUTOSAR. It is thus very easy to implement on each central computer CC a high-performance security mechanism with certificate management (PKI type mechanism using a particular token during each transaction) on the information that will be registered in memory (MS1 very protected access) ) while this type of mechanism is not generalizable to all the computers Cj of a vehicle V for problems of technology but also associated cost.
  • PKI type mechanism using a particular token during each transaction
  • MS1 very protected access the information that will be registered in memory

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Small-Scale Networks (AREA)
  • Combined Controls Of Internal Combustion Engines (AREA)

Abstract

A method verifies a vehicle (V) having a vehicle identifier and a calculator (C1) associated with a hardware identifier and a software module identifier, said method involving: - a first step in which the activated computer (C1) communicates its hardware identifier and software module identifier to a verification computer (CC) of the vehicle (V), whereupon said verification computer (CC) compares said identifiers with stored identifiers and, in case of any discrepancy, transmits the communicated vehicle identifier, hardware identifier and software module identifier to a server (SC); and - a second step in which the server (SC) compares said transmitted hardware identifier and software module identifier with stored identifiers corresponding to the transmitted vehicle identifier and, in case of any discrepancy, transmits information representing a non-conformity to the vehicle (V) in order for this information to be stored in the verification computer (CC) of the vehicle.

Description

PROCÉDÉ DE CONTRÔLE DE LA CONFORMITÉ DE CALCULATEUR(S) D’UN VÉHICULE PAR COMPARAISON D’IDENTIFIANTS, ET SYSTÈME DE CONTRÔLE ASSOCIÉ  METHOD FOR MONITORING THE CONFORMITY OF A VEHICLE COMPUTER (S) BY COMPARISON OF IDENTIFIERS, AND A CONTROL SYSTEM THEREOF
L’invention concerne les véhicules, éventuellement de type automobile, et plus précisément le contrôle des calculateurs de tels véhicules. The invention relates to vehicles, possibly of automotive type, and more precisely the control of calculators of such vehicles.
De très nombreux véhicules, et notamment ceux de type automobile, comprennent un ou plusieurs calculateurs comprenant du matériel (ou « hardware ») associé à au moins un identifiant de matériel et au moins un module logiciel (ou informatique ou encore « software ») associé à un identifiant de module logiciel. Souvent un même calculateur peut être associé à plusieurs versions de module(s) logiciel(s) afin d’offrir de la diversité, car il est plus simple et moins coûteux de reporter la diversité sur le logiciel plutôt que sur le matériel. Parfois des versions différentes de module(s) logiciel(s) sont adaptées respectivement à des règlements nationaux ou internationaux différents, comme par exemple les règlements d’émission des moteurs thermiques qui imposent les quantités de rejet de polluants admissibles. De tels modules logiciels sont notamment installés dans des calculateurs assurant le contrôle des moteurs thermiques ou des boîtes de vitesses automatiques. Many vehicles, and especially those of the automotive type, include one or more computers including hardware (or "hardware") associated with at least one hardware identifier and at least one software module (or computer or "software") associated to a software module identifier. Often the same computer can be associated with several versions of software module (s) to offer diversity, because it is easier and cheaper to report diversity on the software rather than the hardware. Sometimes different versions of software module (s) are adapted respectively to different national or international regulations, such as for example the emission regulations of heat engines that impose the amounts of discharge of pollutants eligible. Such software modules are notably installed in computers that control thermal engines or automatic transmissions.
On comprendra que lors d’un contrôle technique ou dans un service après-vente, on peut être contraint de connaître un calculateur d’un véhicule, et plus précisément ses matériel et module(s) logiciel(s) ainsi qu’éventuellement les paramètres de configuration de ce(s) dernier(s), afin de vérifier sa conformité et/ou de contrôler son fonctionnement ou la raison pour laquelle il induit un dysfonctionnement. It will be understood that during a technical control or in an after-sales service, one may be compelled to know a computer of a vehicle, and more precisely its hardware and software module (s) and possibly the parameters configuration of the latter (s), in order to verify its conformity and / or to control its functioning or the reason for which it causes a malfunction.
Pour connaître ces informations, on peut connecter un outil de diagnostic sur la prise de diagnostic centralisée du véhicule qui permet d’accéder à ses différents calculateurs via un média de communication, comme par exemple une ligne bidirectionnelle série de type K ou un réseau de communication de type CAN (ou « Controller Area Network ») ou Ethernet, et en utilisant un protocole normalisé, par exemple de type ISO 14230 ou ISO 14229. Ainsi, lors d’une session de communication l’outil de diagnostic transmet une requête de diagnostic à destination d’un calculateur particulier, et ce dernier fournit chaque information requise au sein d’un message de réponse. Les informations fournies par le calculateur peuvent alors être comparées par l’outil de diagnostic à des informations de référence qui sont normalement stockées dans une base de données du constructeur du véhicule depuis la sortie de ce dernier d’une chaîne de montage. Il est ainsi possible de déterminer si un calculateur est conforme à ce que l’on attend, et dans la négative de déterminer si c’est le calculateur ou un module logiciel de ce dernier qui a été remplacé. To obtain this information, a diagnostic tool can be connected to the centralized diagnostic socket of the vehicle, which allows access to its various computers via a communication medium, such as for example a K-type serial bidirectional line or a communication network. CAN (or "Controller Area Network") or Ethernet, and using a standardized protocol, for example of the ISO 14230 or ISO 14229 type. Thus, during a communication session, the diagnostic tool transmits a diagnostic request to a particular computer, and the latter provides each required information. within an answer message. The information provided by the computer can then be compared by the diagnostic tool to reference information that is normally stored in a database of the vehicle manufacturer since the output of the latter of an assembly line. It is thus possible to determine whether a computer is consistent with what is expected, and if not to determine whether it is the computer or a software module of the latter has been replaced.
On notera que le diagnostic peut être également effectué à distance (ou « over the air »), via le module de communication du véhicule, comme cela est notamment décrit dans les documents brevet FR 2998237 et FR 3032546. Cependant cette possibilité de contrôler les calculateurs embarqués dans les véhicules n’empêche pas et ne dissuade pas, d’une part, le démontage de certains calculateurs en vue de les remonter dans d’autres véhicules ou de les remplacer par d’autres calculateurs non conformes et donc potentiellement dangereux, et, d’autre part le remplacement de module(s) logiciel(s) par d’autre(s) module(s) logiciel(s) non conformes et donc potentiellement dangereux. Cela résulte notamment du fait que les calculateurs ne sont généralement pas vérifiés lors des contrôles techniques dont l’objet actuel est de s’assurer de l’aptitude des véhicules à rouler mais pas de contrôler leur conformité. L’invention a donc notamment pour but d’améliorer la situation. Note that the diagnosis can also be made remotely (or "over the air"), via the vehicle communication module, as is particularly described in the patent documents FR 2998237 and FR 3032546. However, this possibility of controlling the computers embedded in vehicles does not prevent or deter, on the one hand, the disassembly of some computers to be reassembled in other vehicles or replace them with other non-compliant computers and therefore potentially dangerous, and on the other hand the replacement of software module (s) by other (non) compliant and therefore potentially dangerous software module (s). This results in particular from the fact that computers are generally not checked during technical inspections whose current purpose is to ensure the ability of vehicles to drive but not to control their compliance. The invention is therefore particularly intended to improve the situation.
Elle propose notamment à cet effet un procédé de contrôle destiné à contrôler un véhicule ayant un identifiant de véhicule et comprenant un module de communication propre à échanger des données par voie d’ondes et au moins un calculateur associé à au moins un identifiant de matériel et comportant au moins un module logiciel associé à un identifiant de module logiciel. Ce procédé de contrôle se caractérise par le fait qu’il comprend : It proposes for this purpose a control method for controlling a vehicle having a vehicle identifier and comprising a communication module adapted to exchange data by wave and at least one computer associated with at least one hardware identifier and comprising at least one software module associated with a software module identifier. This control method is characterized by the fact that it comprises:
- une première étape dans laquelle, après un réveil de ce (d’un) calculateur, ce dernier communique à un calculateur de contrôle du véhicule ses identifiant(s) de matériel et identifiant(s) de module logiciel, puis ce calculateur de contrôle compare ces derniers à des identifiant(s) de matériel et identifiant(s) de module logiciel stockés et en cas de différence transmet à un serveur, via le module de communication, cet identifiant de véhicule et ces identifiant(s) de matériel et identifiant(s) de module logiciel communiqués, et  a first step in which, after waking up this (one) computer, the latter communicates to a control computer of the vehicle its hardware identifier (s) and software module identifier (s), then this control computer compares these with stored hardware identifier (s) and software module identifier (s) and, in case of difference, transmits to a server, via the communication module, this vehicle identifier and these hardware identifier (s) and identifier (s) software module releases, and
- une seconde étape dans laquelle le serveur compare les identifiant(s) de matériel et identifiant(s) de module logiciel transmis à des identifiant(s) de matériel et identifiant(s) de module logiciel stockés en correspondance de l’identifiant de véhicule transmis et en cas de différence transmet au véhicule une information représentative d’une non-conformité au sein du (d’un) calculateur en vue du stockage de cette information dans son calculateur de contrôle. a second step in which the server compares the hardware identifier (s) and software module identifier (s) transmitted to hardware identifier (s) and software module identifier (s) stored in correspondence with the vehicle identifier. transmitted and in case of difference transmits to the vehicle information representative of a nonconformity within (a) computer for the storage of this information in its control computer.
Grâce à l’invention, on dispose désormais dans le calculateur de contrôle du véhicule de la trace de chaque non-conformité matérielle ou logicielle de chacun de ses calculateurs contrôlés, ce qui permet de déterminer chaque non-conformité lors d’un contrôle technique ou dans un service après- vente.  Thanks to the invention, the vehicle control computer now has a record of each hardware or software nonconformity of each of its controlled computers, which makes it possible to determine each nonconformity during a technical control or in an after-sales service.
Le procédé de contrôle selon l’invention peut comporter d’autres caractéristiques qui peuvent être prises séparément ou en combinaison, et notamment :  The control method according to the invention may comprise other characteristics that can be taken separately or in combination, and in particular:
- dans sa première étape le (un) calculateur peut également communiquer au calculateur de contrôle des paramètres de configuration de chaque module logiciel qu’il comprend, puis le calculateur de contrôle peut comparer ces derniers à des paramètres de configuration stockés et en cas de différence de l’un au moins des identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration transmet au serveur, via le module de communication, cet identifiant de véhicule, ces identifiant(s) de matériel et identifiant(s) de module logiciel, et ces paramètres de configuration communiqués. Dans ce cas, dans sa seconde étape le serveur peut comparer ces identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration transmis à des identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration stockés en correspondance de l’identifiant de véhicule transmis et en cas de différence peut transmettre au véhicule l’information en vue du stockage de cette information dans son calculateur de contrôle ; in its first step, the (one) computer can also communicate to the control computer the configuration parameters of each software module that it understands, then the control computer can compare the latter with stored configuration parameters and in case of difference at least one of the hardware identifier (s), software module identifier (s) and configuration parameters transmits to the server, via the communication module, this vehicle identifier, these hardware identifier (s) and identifier ( s) software module, and these configuration parameters releases. In this case, in its second step the server can compare these hardware identifier (s), software module identifier (s) and configuration parameters transmitted to hardware identifier (s), software module identifier (s) and parameters. configuration stored in correspondence of the transmitted vehicle identifier and in case of difference can transmit to the vehicle the information for the storage of this information in its control computer;
- dans sa première étape le calculateur peut communiquer au calculateur de contrôle ses identifiant(s) de matériel et identifiant(s) de module logiciel, ainsi que les éventuels paramètres de configuration, après chacun de ses réveils ; in its first step the computer can communicate to the control computer its hardware identifier (s) and software module identifier (s), as well as the possible configuration parameters, after each of its awakenings;
- dans sa première étape le calculateur peut communiquer au calculateur de contrôle son (ses) identifiant(s) de matériel et/ou son (ses) identifiant(s) de module logiciel et/ou ses éventuels paramètres de configuration tant que le calculateur de contrôle ne l’a pas informé qu’il les a tous reçus, et le calculateur de contrôle peut ne réaliser la comparaison qu’une fois qu’il a reçu cet (ces) identifiant(s) de matériel, cet (ces) identifiant(s) de module logiciel, et ces éventuels paramètres de configuration ; in its first step the computer can communicate to the control computer its hardware identifier (s) and / or its software module identifier (s) and / or its possible configuration parameters as long as the computer of control has not informed him that he has received them all, and the control computer may only perform the comparison once he has received this (these) identifier (s) of material, this (these) identifier (s) software module, and these possible configuration parameters;
- dans sa seconde étape le serveur peut transmettre l’information une unique fois. En variante, le serveur peut transmettre l’information plusieurs fois au véhicule afin qu’elle soit stockée à chaque fois dans le calculateur de contrôle à la place de la précédente information transmise et relative au même calculateur.  in its second step, the server can transmit the information once. Alternatively, the server can transmit the information several times to the vehicle so that it is stored each time in the control computer instead of the previous information transmitted and relating to the same computer.
L’invention propose également un système chargé de contrôler des véhicules ayant chacun un identifiant de véhicule et comprenant chacun un module de communication propre à échanger des données par voie d’ondes et au moins un calculateur associé à au moins un identifiant de matériel et comportant au moins un module logiciel associé à un identifiant de module logiciel. Ce système se caractérise par le fait :  The invention also proposes a system in charge of controlling vehicles each having a vehicle identifier and each comprising a communication module capable of exchanging data by means of waves and at least one computer associated with at least one hardware identifier and comprising at least one software module associated with a software module identifier. This system is characterized by the fact:
- qu’il comprend, d’une part, des calculateurs de contrôle implantés dans chacun des véhicules et stockant des identifiant(s) de matériel et identifiant(s) de module logiciel de chaque calculateur de leur véhicule, et, d’autre part, un serveur stockant des identifiant(s) de matériel et identifiant(s) de module logiciel de chaque calculateur de chacun des véhicules, et - que chaque calculateur d’un véhicule communique, après un réveil, au calculateur de contrôle de son véhicule ses identifiant(s) de matériel et identifiant(s) de module logiciel, puis ce calculateur de contrôle compare ces derniers aux identifiant(s) de matériel et identifiant(s) de module logiciel stockés et en cas de différence transmet au serveur, via le module de communication de son véhicule, cet identifiant de véhicule et ces identifiant(s) de matériel et identifiant(s) de module logiciel communiqués, puis le serveur compare ces identifiant(s) de matériel et identifiant(s) de module logiciel transmis par ce véhicule à des identifiant(s) de matériel et identifiant(s) de module logiciel stockés en correspondance de cet identifiant de véhicule transmis et en cas de différence transmet à ce véhicule une information représentative d’une non-conformité au sein d’un calculateur qu’il comprend en vue du stockage de cette information dans son calculateur de contrôle. it comprises, on the one hand, control computers located in each of the vehicles and storing hardware identifiers and software module identifier (s) of each computer of their vehicle, and on the other hand , a server storing hardware identifier (s) and identifier (s) of each computer's software module of each of the vehicles, and - that each computer of a vehicle communicates, after an alarm clock, to the control computer of its vehicle its hardware identifier (s) and software module identifier (s), then this control calculator compares these with the identifier (s) of hardware and software module identifier (s) stored and in case of difference transmits to the server, via the communication module of his vehicle, this vehicle identifier and these identifiers (s). ) of hardware and software module identifier (s) communicated, then the server compares these hardware identifier (s) and software module identifier (s) transmitted by this vehicle to the hardware identifier (s) and identifier (s) of software module stored in correspondence with this transmitted vehicle identifier and in case of difference transmits to this vehicle information representative of a nonconformity within a calculator that it understands for the storage of this information in its control computer.
Par exemple, chaque calculateur d’un véhicule peut aussi communiquer au calculateur de contrôle de son véhicule des paramètres de configuration de chaque module logiciel qu’il comprend. Puis, ce calculateur de contrôle peut comparer ces derniers à des paramètres de configuration stockés, et en cas de différence de l’un au moins des identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration peut transmettre au serveur, via le module de communication de son véhicule, cet identifiant de véhicule, ces identifiant(s) de matériel et identifiant(s) de module logiciel, et ces paramètres de configuration communiqués. Puis, le serveur peut comparer ces identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration transmis à des identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration stockés en correspondance de l’identifiant de véhicule transmis, et en cas de différence peut transmettre au véhicule désigné par cet identifiant de véhicule l’information en vue du stockage de cette information dans son calculateur de contrôle.  For example, each computer of a vehicle can also communicate to the control computer of its vehicle configuration parameters of each software module that includes. Then, this control computer can compare the latter with stored configuration parameters, and in case of difference of at least one of the hardware identifier (s), software module identifier (s) and configuration parameters can transmit to the server, via the vehicle communication module, this vehicle identifier, these hardware identifier (s) and software module identifier (s), and these configuration parameters communicated. Then, the server can compare these hardware identifier (s), software module identifier (s) and configuration parameters transmitted to hardware identifier (s), software module identifier (s) and configuration parameters stored in correspondence with each other. the vehicle identifier transmitted, and in case of difference can transmit to the vehicle designated by this vehicle identifier information for the storage of this information in its control computer.
Egalement par exemple, les véhicules peuvent être de type automobile. Also for example, the vehicles may be automotive type.
D’autres caractéristiques et avantages de l’invention apparaîtront à l’examen de la description détaillée ci-après, et du dessin annexé, sur lequel l’unique figure illustre schématiquement et fonctionnellement un véhicule placé sur un tronçon de route et équipé d’un calculateur central d’un système de contrôle selon l’invention et d’un module de communication couplé à un réseau de communication auquel est également couplé un serveur de ce système de contrôle. Other features and advantages of the invention will appear in examining the detailed description below, and the accompanying drawing, in which the single figure schematically and functionally illustrates a vehicle placed on a section of road and equipped with a central computer control system according to the invention and a communication module coupled to a communication network which is also coupled to a server of this control system.
L’invention a notamment pour but de proposer un procédé de contrôle, et un système de contrôle SY associé, destinés à contrôler les calculateurs Cj d’au moins un véhicule V, afin de contrôler leurs conformités respectives  The object of the invention is in particular to propose a control method, and an associated control system SY, for controlling the computers Cj of at least one vehicle V, in order to check their respective conformities.
Dans ce qui suit, on considère, à titre d’exemple non limitatif, que les véhicules V sont de type automobile. Il s’agit par exemple de voitures. Mais l’invention n’est pas limitée à ce type de véhicule. Elle concerne en effet tout type de véhicule comprenant un module de communication propre à échanger des données par voie d’ondes et au moins un calculateur. Par conséquent, elle concerne les véhicules terrestres, les véhicules fluviaux (ou maritimes), et les véhicules aériens.  In what follows, it is considered, by way of non-limiting example, that the vehicles V are automotive type. This is for example cars. But the invention is not limited to this type of vehicle. It concerns indeed any type of vehicle comprising a communication module adapted to exchange data by wave and at least one computer. Therefore, it concerns land vehicles, river (or maritime) vehicles, and air vehicles.
On a schématiquement représenté sur l’unique figure un tronçon de route TR comprenant deux voies de circulation sur l’une desquelles circule un véhicule V ayant un identifiant de véhicule (par exemple un code VIN (« Véhiculé Identication Number » - numéro d’identification de véhicule)) et comprenant au moins un calculateur Cj associé à au moins un identifiant de matériel (ou « hardware ») et comportant au moins un module logiciel (ou « software ») associé à un identifiant de module logiciel.  FIG. 1 shows schematically a section of road TR comprising two traffic lanes on one of which a vehicle V having a vehicle identifier (for example a VIN ("Vehicle Identification Number") code vehicle)) and comprising at least one computer Cj associated with at least one hardware identifier (or "hardware") and comprising at least one software module (or "software") associated with a software module identifier.
Dans l’exemple de réalisation illustré non limitativement sur l’unique figure, le véhicule V comprend trois calculateurs C1 à C3 (j = 1 à 3). Mais il peut comprendre n’importe quel nombre de calculateurs, dès lors que ce nombre est supérieur ou égal à un (1 ). Par exemple, ces calculateurs Cj sont tous connectés à un réseau de communication embarqué dans le véhicule V et éventuellement multiplexé.  In the embodiment shown in non-limiting manner in the single figure, the vehicle V comprises three computers C1 to C3 (j = 1 to 3). But it can include any number of computers, since this number is greater than or equal to one (1). For example, these computers Cj are all connected to a communication network embedded in the vehicle V and possibly multiplexed.
Comme évoqué précédemment, l’invention propose notamment un procédé de contrôle destiné à contrôler les calculateurs Cj d’au moins le véhicule V, afin de contrôler leurs conformités respectives. Un tel procédé de contrôle comprend des première et seconde étapes qui peuvent être mises en œuvre notamment par un système de contrôle SY selon l’invention. As mentioned above, the invention notably proposes a control method intended to control the computers Cj of at least the vehicle V, in order to check their respective conformities. Such a control method comprises first and second steps that can be implemented in particular by a control system SY according to the invention.
Comme illustré sur l’unique figure, un système de contrôle SY, selon l’invention, comprend au moins un calculateur de contrôle CC installé dans un véhicule V à contrôler et un serveur SC.  As illustrated in the single figure, a control system SY, according to the invention, comprises at least one control computer CC installed in a vehicle V to control and a server SC.
On notera que le système de contrôle SY peut être agencé de manière à contrôler plusieurs véhicules, et dans ce cas, chaque véhicule à contrôler comprend un calculateur de contrôle CC.  It should be noted that the control system SY can be arranged to control several vehicles, and in this case, each vehicle to be controlled comprises a control computer CC.
On notera également qu’afin qu’un véhicule V puisse être contrôlé par le système de contrôle SY il faut qu’il comprenne également un premier module de communication MCN1 pouvant échanger des données par voie d’ondes via au moins un réseau de communication RC au moins partiellement non filaire. Ce premier module de communication MCN1 est notamment chargé d’échanger des données avec un second module de communication MCN2 installé dans le serveur SC.  It should also be noted that in order for a vehicle V to be controlled by the control system SY, it must also include a first communication module MCN1 able to exchange data via waves via at least one communication network RC at least partially non-wired. This first communication module MCN1 is in particular responsible for exchanging data with a second MCN2 communication module installed in the SC server.
La première étape du procédé de contrôle débute après un réveil du calculateur Cj. On entend ici par « réveil » le fait d’alimenter électriquement un calculateur Cj. Dans ce cas, ce calculateur Cj commence par communiquer au calculateur de contrôle CC de son véhicule V ses identifiant(s) de matériel et identifiant(s) de module logiciel. Puis, ce calculateur de contrôle CC compare ces identifiant(s) de matériel et identifiant(s) de module logiciel reçus à des identifiant(s) de matériel et identifiant(s) de module logiciel stockés dans des premiers moyens de stockage MS1. Cette comparaison est réalisée par des premiers moyens de comparaison MCP1 du calculateur de contrôle CC.  The first step of the control method begins after an alarm clock of the computer Cj. Here is meant by "awakening" the fact of feeding electrically a calculator Cj. In this case, the calculator Cj begins by communicating to the control computer DC of his vehicle V his hardware identifier (s) and software module identifier (s). Then, this control computer CC compares these hardware identifier (s) and software module identifier (s) received to hardware identifier (s) and software module identifier (s) stored in first storage means MS1. This comparison is performed by first comparison means MCP1 of the control computer CC.
Pour qu’un calculateur Cj puisse communiquer au calculateur de contrôle CC de son véhicule V ses identifiant(s) de matériel et identifiant(s) de module logiciel, il faut qu’il comprenne un module logiciel dédié à cet effet.  In order for a computer Cj to communicate to the control computer CC of its vehicle V its hardware identifier (s) and software module identifier (s), it must include a dedicated software module for this purpose.
Dans l’exemple de réalisation illustré non limitativement sur l’unique figure, les premiers moyens de stockage MS1 sont indépendants des premiers moyens de comparaison MCP1. Mais dans une variante de réalisation non illustrée ils (MS1 ) pourraient faire partie de ces derniers (MCP1 ). Par exemple, ces premiers moyens de stockage MS1 peuvent être agencés sous la forme d’une mémoire, éventuellement de type logiciel, et de préférence à accès très protégé. In the embodiment shown in non-limiting manner in the single figure, the first storage means MS1 are independent of the first comparison means MCP1. But in an alternative embodiment not illustrated they (MS1) could be part of these (MCP1). For example, these first storage means MS1 can be arranged in the form of a memory, possibly of software type, and preferably very protected access.
Les premiers moyens de comparaison MCP1 peuvent être réalisés sous la forme de modules logiciels (ou informatiques ou encore software), ou bien d’une combinaison de circuits électroniques (ou hardware) et de modules logiciels.  The first comparison means MCP1 can be made in the form of software modules (or computer or software), or a combination of electronic circuits (or hardware) and software modules.
Lorsque le résultat de la comparaison signale qu’il n’y a pas de différence entre les identifiants comparés, le procédé de contrôle prend fin pour le calculateur Cj considéré.  When the result of the comparison indicates that there is no difference between the identifiers compared, the control method ends for the calculator Cj considered.
En revanche, lorsque le résultat de la comparaison signale une différence entre l’un au moins des identifiants comparés, la première étape se poursuit par la transmission par le calculateur de contrôle CC au serveur SC, via le premier module de communication MCN1 , des identifiant de véhicule, identifiant(s) de matériel et identifiant(s) de module logiciel communiqués par le calculateur Cj.  On the other hand, when the result of the comparison indicates a difference between at least one of the identifiers compared, the first step continues with the transmission by the control computer CC to the server SC, via the first communication module MCN1, identifiers vehicle, hardware identifier (s) and software module identifier (s) provided by the computer Cj.
Dans la seconde étape du procédé de contrôle le serveur SC commence par comparer les identifiant(s) de matériel et identifiant(s) de module logiciel transmis par le véhicule V à des identifiant(s) de matériel et identifiant(s) de module logiciel qui sont stockés dans des seconds moyens de stockage MS2 en correspondance de l’identifiant de véhicule également transmis par le véhicule V. Cette comparaison est réalisée par des seconds moyens de comparaison MCP2 du serveur SC.  In the second step of the control method the SC server begins by comparing the hardware identifier (s) and software module identifier (s) transmitted by the vehicle V to hardware identifiers and software module identifier (s). which are stored in second storage means MS2 in correspondence with the vehicle identifier also transmitted by the vehicle V. This comparison is performed by second comparison means MCP2 of the server SC.
Toutes les informations, relatives à un véhicule V et stockées dans les seconds moyens de stockage MS2, sont mises à jour dès qu’un calculateur Cj de ce véhicule V fait l’objet d’une mise à jour logicielle et/ou d’un remplacement d’un calculateur Cj.  All the information relating to a vehicle V and stored in the second storage means MS2 are updated as soon as a calculator Cj of this vehicle V is the subject of a software update and / or a replacement of a calculator Cj.
Dans l’exemple de réalisation illustré non limitativement sur l’unique figure, les seconds moyens de stockage MS2 sont indépendants des seconds moyens de comparaison MCP2. Mais dans une variante de réalisation non illustrée ils (MS2) pourraient faire partie de ces derniers (MCP2). Par exemple, ces seconds moyens de stockage MS2 peuvent être agencés sous la forme d’une base de données ou d’une mémoire, éventuellement de type logiciel, et de préférence à accès très protégé. In the exemplary embodiment illustrated in non-limiting manner in the single figure, the second storage means MS2 are independent of the second comparison means MCP2. But in an alternative embodiment not illustrated they (MS2) could be part of these (MCP2). For example, these second storage means MS2 can be arranged in the form a database or a memory, possibly of the software type, and preferably very protected access.
Les seconds moyens de comparaison MCP2 peuvent être réalisés sous la forme de modules logiciels, ou bien d’une combinaison de circuits électroniques et de modules logiciels.  The second comparison means MCP2 can be made in the form of software modules, or a combination of electronic circuits and software modules.
On notera que lorsque le système de contrôle SY est chargé de contrôler plusieurs véhicules, les seconds moyens de stockage MS2 de son serveur SC stockent les identifiant(s) de matériel et identifiant(s) de module logiciel de chaque calculateur Cj de chacun de ces véhicules  It will be noted that when the control system SY is responsible for controlling several vehicles, the second storage means MS2 of its server SC store the hardware identifier (s) and software module identifier (s) of each computer Cj of each of these vehicles
Lorsque le résultat de la comparaison signale qu’il n’y a pas de différence entre les identifiants comparés, cela signifie qu’il n’y a pas d’erreur de stockage d’identifiants dans le calculateur de contrôle CC considéré.  When the result of the comparison indicates that there is no difference between the compared identifiers, this means that there is no identifier storage error in the CC control computer considered.
En revanche, lorsque le résultat de la comparaison signale une différence entre l’un au moins des identifiants comparés, la seconde étape se poursuit par la transmission par le serveur SC au véhicule V considéré d’une information représentative d’une non-conformité au sein de son calculateur Cj en vue du stockage de cette information dans son calculateur de contrôle CC.  On the other hand, when the result of the comparison indicates a difference between at least one of the identifiers compared, the second step continues with the transmission by the server SC to the vehicle V considered of information representative of a non-compliance with the within its computer Cj for storing this information in its control computer CC.
Par exemple, cette information peut signaler que c’est un identifiant de matériel du calculateur Cj qui est non conforme et/ou que c’est un identifiant de module logiciel du calculateur Cj qui est non conforme.  For example, this information may indicate that it is a hardware identifier of the calculator Cj that is non-compliant and / or that it is a software module identifier of the calculator Cj that is non-compliant.
Egalement par exemple, chaque information de non-conformité peut être stockée dans les premiers moyens de stockage MS1 du calculateur de contrôle CC concerné. Mais cela n’est pas obligatoire. On pourrait en effet stocker chaque information de non-conformité dans des troisièmes moyens de stockage dédiés du calculateur de contrôle CC et dont l’accès est éventuellement accessible par fourniture d’un mot de passe.  Also for example, each nonconformity information can be stored in the first storage means MS1 of the relevant control computer CC. But this is not obligatory. It could indeed store each non-compliance information in third dedicated storage means of the CC control computer and whose access is possibly accessible by providing a password.
Ainsi, on stocke dans le calculateur de contrôle CC la trace de chaque non-conformité de chaque calculateur Cj sur le plan matériel ou logiciel, et lors d’un contrôle technique ou dans un service après-vente on peut facilement déterminer chaque non-conformité en accédant aux premiers moyens de stockage MS1 (ou aux éventuels troisièmes moyens de stockage dédiés), par exemple au moyen d’un outil de diagnostic (et d’une éventuelle clef, par exemple de type PKI (« Public Key Infrastructure »)). Thus, it is stored in the control computer CC the trace of each non-compliance of each computer Cj hardware or software, and during a technical control or in an after-sales service can easily determine each non-compliance by accessing the first storage means MS1 (or any third dedicated storage means), for example by means of a diagnostic tool (and a possible key, for example). example of type PKI (Public Key Infrastructure).
On notera que dans la première étape le calculateur Cj peut également communiquer au calculateur de contrôle CC des paramètres de configuration de chaque module logiciel qu’il comprend. Dans ce cas, le calculateur de contrôle CC compare ensuite ces paramètres de configuration à des paramètres de configuration qui sont stockés dans les premiers moyens de stockage MS1 . Puis, en cas de différence de l’un au moins des identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration, le calculateur de contrôle CC transmet au serveur SC, via le premier module de communication MCN1 de son véhicule V, cet identifiant de véhicule, ces identifiant(s) de matériel et identifiant(s) de module logiciel, et ces paramètres de configuration qui lui ont été communiqués par le calculateur Cj. Ensuite, dans la seconde étape le serveur SC compare ces identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration transmis par le véhicule V à des identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration qui sont stockés dans les seconds moyens de stockage MS2 en correspondance de l’identifiant de véhicule également transmis par le véhicule V. Puis, en cas de différence entre ces identifiants (reçus et stockés) et paramètres de configuration (reçus et stockés), le serveur SC transmet au véhicule V cette information en vue du stockage de cette information dans le calculateur de contrôle CC.  It will be noted that in the first step the computer Cj can also communicate to the control computer CC of the configuration parameters of each software module that it comprises. In this case, the control computer CC then compares these configuration parameters with configuration parameters that are stored in the first storage means MS1. Then, in case of difference of at least one of the hardware identifier (s), software module identifier (s) and configuration parameters, the control computer CC transmits to the server SC, via the first communication module MCN1 of its vehicle V, this vehicle identifier, these hardware identifier (s) and software module identifier (s), and these configuration parameters that have been communicated to it by the computer Cj. Then, in the second step, the server SC compares these hardware identifier (s), software module identifier (s) and configuration parameters transmitted by the vehicle V to hardware identifiers, software module identifier (s). and configuration parameters which are stored in the second storage means MS2 in correspondence with the vehicle identifier also transmitted by the vehicle V. Then, in the event of a difference between these identifiers (received and stored) and configuration parameters (received and stored), the server SC transmits to the vehicle V this information for storage of this information in the control computer CC.
On notera également que dans la première étape le calculateur Cj peut communiquer au calculateur de contrôle CC de son véhicule V les identifiant(s) de matériel et identifiant(s) de module logiciel, ainsi que les éventuels paramètres de configuration, après chacun de ses réveils. Mais cela n’est pas obligatoire. En effet, on pourrait envisager que cette communication se fasse tous les N réveils d’un calculateur Cj (avec N > 1 , par exemple N = 10 ou 50) ou bien sur requête du serveur SC après un réveil du véhicule V (et donc des calculateurs Cj), par exemple.  It will also be noted that in the first step the computer Cj can communicate to the control computer CC of its vehicle V the hardware identifier (s) and software module identifier (s), as well as any configuration parameters, after each of its awakenings. But this is not obligatory. Indeed, it could be envisaged that this communication is done all the N awakenings of a calculator Cj (with N> 1, for example N = 10 or 50) or on request of the server SC after a wake up of the vehicle V (and therefore calculators Cj), for example.
On notera également que dans la première étape le calculateur Cj peut communiquer au calculateur de contrôle CC de son véhicule V chaque identifiant de matériel et/ou chaque identifiant de module logiciel et/ou les éventuels paramètres de configuration tant que ce calculateur de contrôle CC ne l’a pas informé qu’il les a tous reçus. Dans ce cas, le calculateur de contrôle CC ne réalise la comparaison d’identifiants (reçus et stockés) et éventuels paramètres de configuration (reçus et stockés) qu’une fois qu’il a reçu chaque identifiant de matériel, chaque identifiant de module logiciel, et les éventuels paramètres de configuration du calculateur Cj. It will also be noted that in the first step the computer Cj can communicate to the control computer CC of its vehicle V each hardware identifier and / or each software module identifier and / or the possible configuration parameters until this CC control calculator has informed him that he has received them all. In this case, the control computer CC performs the comparison of identifiers (received and stored) and any configuration parameters (received and stored) once it has received each hardware identifier, each software module identifier , and any configuration parameters of the calculator Cj.
A titre d’exemple, un calculateur Cj peut commencer par communiquer son identifiant de matériel au calculateur de contrôle CC de son véhicule V. Si ce calculateur de contrôle CC ne lui signale pas qu’il l’a bien reçu, il lui communique de nouveau son identifiant de matériel au bout d’un intervalle de temps prédéfini. En revanche, si ce calculateur de contrôle CC lui signale qu’il l’a bien reçu, il lui communique chaque identifiant de module logiciel. Si ce calculateur de contrôle CC ne lui signale pas qu’il a bien reçu chaque identifiant de module logiciel, il lui communique de nouveau chaque identifiant de module logiciel au bout d’un intervalle de temps prédéfini. En revanche, si ce calculateur de contrôle CC lui signale qu’il a bien reçu chaque identifiant de module logiciel, il lui communique ses éventuels paramètres de configuration. Si ce calculateur de contrôle CC ne lui signale pas qu’il a bien reçu les éventuels paramètres de configuration, il lui communique de nouveau ses éventuels paramètres de configuration au bout d’un intervalle de temps prédéfini. En revanche, si ce calculateur de contrôle CC lui signale qu’il a bien reçu ses éventuels paramètres de configuration, il cesse de communiquer avec lui.  For example, a calculator Cj can begin by communicating his hardware identifier to the control computer DC of his vehicle V. If this control computer CC does not indicate that he has received it, he communicates to him new hardware ID after a predefined time interval. On the other hand, if this control computer CC signals to him that it has received it, it communicates to him each identifier of software module. If this control computer CC does not indicate that it has received each software module identifier, it communicates it again each software module identifier after a predefined time interval. On the other hand, if this control computer CC signals him that he has received each software module identifier, he communicates to him any configuration parameters. If this control computer CC does not indicate that it has received any configuration parameters, it communicates again its possible configuration parameters after a predefined time interval. On the other hand, if this DC control computer indicates that it has received any configuration parameters, it stops communicating with it.
On notera également que dans la seconde étape le serveur SC peut transmettre l’information de non-conformité une unique fois. Mais cela n’est pas obligatoire. En effet, il (SC) pourrait transmettre l’information de non-conformité plusieurs fois au véhicule V afin qu’elle soit stockée à chaque fois dans le calculateur de contrôle CC concerné à la place de la précédente information transmise et relative au même calculateur Cj. Afin de ne pas allonger le temps de démarrage (ou temps de « boot ») d’un calculateur Cj par une communication de ses identifiants et éventuels paramètres de configuration juste après son réveil, on peut envisager de différer cette communication afin que la fonctionnalité qu’il offre soit immédiatement disponible ou exécutée. Par conséquent, la confirmation que les identifiants et éventuels paramètres de configuration transmis par un calculateur Cj ont bien été reçus par le calculateur central CC peut être obtenue bien après le démarrage du véhicule V et donc pendant son utilisation. Cela permet avantageusement de s’adapter à tous les calculateurs Cj, quelles que soient leurs capacités numériques (ou CPUs). Ainsi on peut installer dans un même véhicule V un calculateur Cj capable de communiquer ses identifiants et éventuels paramètres de configuration en quelques millisecondes et un autre calculateur Cj’ (j’ ¹ j) pour lequel cette même opération nécessitera plusieurs secondes. Le procédé de contrôle est ainsi indépendant des contraintes de technologie (calculateurs et réseau auquel ces derniers sont connectés). It will also be noted that in the second step the SC server can transmit the nonconformity information only once. But this is not obligatory. Indeed, it (SC) could transmit the nonconformity information several times to the vehicle V so that it is stored each time in the control computer concerned CC instead of the previous information transmitted and relating to the same calculator cj. In order not to lengthen the start-up time (or "boot" time) of a computer Cj by a communication of its identifiers and possible configuration parameters just after awakening, it is possible to envisage postpone this communication so that the functionality it offers is immediately available or executed. Therefore, the confirmation that the identifiers and any configuration parameters transmitted by a computer Cj have been received by the central computer CC can be obtained well after the start of the vehicle V and therefore during its use. This advantageously allows to adapt to all computers Cj, regardless of their numerical capabilities (or CPUs). Thus one can install in the same vehicle V a calculator Cj able to communicate its identifiers and possible configuration parameters in milliseconds and another calculator Cj '(j' ¹ j) for which this same operation will require several seconds. The control method is thus independent of the constraints of technology (computers and network to which they are connected).
On notera également que la communication entre un calculateur Cj et le calculateur central CC peut, par exemple être réalisée au moyen d’un protocole de diagnostic tel que KWP2000 (ISO 14230) ou UDS (ISO 14229). Dans ce cas, le calculateur Cj communique chaque identifiant ou ses éventuels paramètres de configuration au calculateur central CC au moyen d’une requête de diagnostic et le calculateur central CC signale au calculateur Cj qu’il a bien reçu la requête de diagnostic et son contenu au moyen d’un message de réponse. It will also be noted that the communication between a computer Cj and the central computer CC may, for example be carried out by means of a diagnostic protocol such as KWP2000 (ISO 14230) or UDS (ISO 14229). In this case, the computer Cj communicates each identifier or its possible configuration parameters to the central computer CC by means of a diagnostic request and the central computer CC signals to the computer Cj that it has received the diagnostic request and its contents. by means of a response message.
On notera également que chaque calculateur central CC est un calculateur disposant de capacités de traitement numérique importantes, et par exemple construit sur une plateforme de type LINUX, à la différence de la plupart des calculateurs Cj (notamment dédiés au moteur ou à la boîte de vitesses ou à la direction assistée ou encore au freinage) qui ne disposent généralement que d’une structure de type OSEK / AUTOSAR. On peut ainsi très facilement implémenter sur chaque calculateur central CC un mécanisme sécuritaire performant avec gestion de certificats (mécanisme de type PKI utilisant un jeton particulier lors de chaque transaction) sur les informations que l’on va inscrire en mémoire (MS1 à accès très protégé) alors que ce type de mécanisme n’est pas généralisable à l’ensemble des calculateurs Cj d’un véhicule V pour des problèmes de technologie mais aussi de coût associé. L’invention offre plusieurs avantages parmi lesquels : It will also be noted that each central computer CC is a computer having significant digital processing capabilities, and for example built on a LINUX type platform, unlike most computers Cj (especially dedicated to the engine or the gearbox or power steering or braking) which usually have only a structure type OSEK / AUTOSAR. It is thus very easy to implement on each central computer CC a high-performance security mechanism with certificate management (PKI type mechanism using a particular token during each transaction) on the information that will be registered in memory (MS1 very protected access) ) while this type of mechanism is not generalizable to all the computers Cj of a vehicle V for problems of technology but also associated cost. The invention offers several advantages, among which:
- une grande facilité d’identification au sein d’un véhicule donné de l’échange de calculateur(s) et/ou de module(s) logiciel(s), a great ease of identification within a given vehicle of the exchange of computer (s) and / or software module (s),
- une simplification notable de l’expertise de non-conformité d’un véhicule, par exemple en cas d’accident. - a significant simplification of the non-compliance expertise of a vehicle, for example in the event of an accident.

Claims

REVENDICATIONS
1 . Procédé de contrôle d’un véhicule (V) ayant un identifiant de véhicule et comprenant un module de communication (MCN1 ) propre à échanger des données par voie d’ondes et au moins un calculateur (Cj) associé à au moins un identifiant de matériel et comportant au moins un module logiciel associé à un identifiant de module logiciel, caractérisé en ce qu’il comprend i) une première étape dans laquelle, après un réveil dudit calculateur (Cj), ce dernier (Cj) communique à un calculateur de contrôle (CC) dudit véhicule (V) lesdits identifiant(s) de matériel et identifiant(s) de module logiciel, puis ledit calculateur de contrôle (CC) compare ces derniers à des identifiant(s) de matériel et identifiant(s) de module logiciel stockés et en cas de différence transmet à un serveur (SC), via ledit module de communication (MCN1 ), ledit identifiant de véhicule et lesdits identifiant(s) de matériel et identifiant(s) de module logiciel communiqués, et ii) une seconde étape dans laquelle ledit serveur (SC) compare lesdits identifiant(s) de matériel et identifiant(s) de module logiciel transmis à des identifiant(s) de matériel et identifiant(s) de module logiciel stockés en correspondance dudit identifiant de véhicule transmis et en cas de différence transmet audit véhicule (V) une information représentative d’une non-conformité au sein dudit calculateur (Cj) en vue du stockage de cette information dans ledit calculateur de contrôle (CC). 1. A method of controlling a vehicle (V) having a vehicle identifier and comprising a communication module (MCN1) capable of exchanging data by wave and at least one computer (Cj) associated with at least one hardware identifier and comprising at least one software module associated with a software module identifier, characterized in that it comprises i) a first step in which, after an alarm clock of said computer (Cj), the latter (Cj) communicates with a control computer (CC) of said vehicle (V) said hardware identifier (s) and software module identifier (s), then said control computer (CC) compares the latter with hardware identifier (s) and module identifier (s) stored software and in case of difference transmits to a server (SC), via said communication module (MCN1), said vehicle identifier and said hardware identifier (s) and software module identifier (s) communicated, and ii) a seco a step in which said server (SC) compares said hardware identifier (s) and software module identifier (s) transmitted with hardware identifier (s) and software module identifier (s) stored in correspondence with said transmitted vehicle identifier and in case of difference, transmits to said vehicle (V) information representative of a nonconformity within said computer (Cj) for the storage of this information in said control computer (CC).
2. Procédé selon la revendication 1 , caractérisé en ce que dans ladite première étape ledit calculateur (Cj) communique également audit calculateur de contrôle (CC) des paramètres de configuration de chaque module logiciel, puis ledit calculateur de contrôle (CC) compare ces derniers à des paramètres de configuration stockés et en cas de différence de l’un au moins desdits identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration transmet audit serveur (SC), via ledit module de communication (MCN1 ), ledit identifiant de véhicule, lesdits identifiant(s) de matériel et identifiant(s) de module logiciel, et lesdits paramètres de configuration communiqués, et ii) dans ladite seconde étape ledit serveur (SC) compare lesdits identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration transmis à des identifiant(s) de matériel, identifiant(s) de module logiciel et paramètres de configuration stockés en correspondance dudit identifiant de véhicule transmis et en cas de différence transmet audit véhicule (V) ladite information en vue du stockage de cette information dans ledit calculateur de contrôle (CC). 2. Method according to claim 1, characterized in that in said first step said computer (Cj) also communicates to said control computer (CC) configuration parameters of each software module, then said control computer (CC) compares these to stored configuration parameters and in case of difference of at least one of said hardware identifier (s), software module identifier (s) and configuration parameters transmits to said server (SC) via said communication module (MCN1 ), said vehicle identifier, said hardware identifier (s) and software module identifier (s), and said configuration parameters communicated, and ii) in said second step said server (SC) compares said hardware identifier (s), software module identifier (s) and configuration parameters transmitted to hardware identifier (s), software module identifier (s) and configuration parameters stored in correspondence with said transmitted vehicle identifier and case of difference transmits to said vehicle (V) said information for storage of this information in said control computer (CC).
3. Procédé selon la revendication 1 ou 2, caractérisé en ce que dans ladite première étape ledit calculateur (Cj) communique audit calculateur de contrôle (CC) lesdits identifiant(s) de matériel et identifiant(s) de module logiciel, ainsi que les éventuels paramètres de configuration, après chacun de ses réveils.  3. Method according to claim 1 or 2, characterized in that in said first step said computer (Cj) communicates to said control computer (CC) said hardware identifier (s) and software module identifier (s), as well as the possible configuration parameters, after each of his awakenings.
4. Procédé selon l’une des revendications 1 à 3, caractérisé en ce que dans ladite première étape ledit calculateur (Cj) communique audit calculateur de contrôle (CC) chaque identifiant de matériel et/ou chaque identifiant de module logiciel et/ou lesdits éventuels paramètres de configuration tant que ledit calculateur de contrôle (CC) ne l’a pas informé qu’il les a tous reçus, et ledit calculateur de contrôle (CC) ne réalise ladite comparaison qu’une fois qu’il a reçu chaque identifiant de matériel, chaque identifiant de module logiciel, et les éventuels paramètres de configuration.  4. Method according to one of claims 1 to 3, characterized in that in said first step said computer (Cj) communicates to said control computer (CC) each hardware identifier and / or each software module identifier and / or said possible configuration parameters as long as said control computer (CC) has not informed it that it has received them all, and said control computer (CC) only performs said comparison once it has received each identifier of hardware, each software module identifier, and any configuration parameters.
5. Procédé selon l’une des revendications 1 à 4, caractérisé en ce que dans ladite seconde étape ledit serveur (SC) transmet ladite information une unique fois.  5. Method according to one of claims 1 to 4, characterized in that in said second step said server (SC) transmits said information only once.
6. Procédé selon l’une des revendications 1 à 4, caractérisé en ce que dans ladite seconde étape ledit serveur (SC) transmet ladite information plusieurs fois audit véhicule (V) afin qu’elle soit stockée à chaque fois dans ledit calculateur de contrôle (CC) à la place de la précédente information transmise et relative au même calculateur (Cj).  6. Method according to one of claims 1 to 4, characterized in that in said second step said server (SC) transmits said information several times to said vehicle (V) so that it is stored each time in said control computer (CC) instead of the previous information transmitted and relating to the same calculator (Cj).
7. Système de contrôle (SY) pour contrôler des véhicules (V) ayant chacun un identifiant de véhicule et comprenant chacun un module de communication (MCN1 ) propre à échanger des données par voie d’ondes et au moins un calculateur (Cj) associé à au moins un identifiant de matériel et comportant au moins un module logiciel associé à un identifiant de module logiciel, caractérisé en ce qu’il comprend i) des calculateurs de contrôle (CC) implantés dans chacun desdits véhicules (V) et stockant des identifiant(s) de matériel et identifiant(s) de module logiciel de chaque calculateur (Cj) de leur véhicule (V), et ii) un serveur (SC) stockant des identifiant(s) de matériel et identifiant(s) de module logiciel de chaque calculateur (Cj) de chacun desdits véhicules (V), et en ce que chaque calculateur (Cj) d’un véhicule (V) communique, après un réveil, audit calculateur de contrôle (CC) dudit véhicule (V) ses identifiant(s) de matériel et identifiant(s) de module logiciel, puis ce calculateur de contrôle (CC) compare ces derniers auxdits identifiant(s) de matériel et identifiant(s) de module logiciel stockés et en cas de différence transmet audit serveur (SC), via ledit module de communication (MCN1 ) du véhicule (V), ledit identifiant de véhicule et lesdits identifiant(s) de matériel et identifiant(s) de module logiciel communiqués, puis ledit serveur (SC) compare lesdits identifiant(s) de matériel et identifiant(s) de module logiciel transmis par ledit véhicule (V) à des identifiant(s) de matériel et identifiant(s) de module logiciel stockés en correspondance dudit identifiant de véhicule transmis et en cas de différence transmet audit véhicule (V) une information représentative d’une non-conformité au sein d’un calculateur (Cj) qu’il comprend en vue du stockage de cette information dans son calculateur de contrôle (CC). 7. Control system (SY) for controlling vehicles (V) each having a vehicle identifier and each comprising a communication module (MCN1) capable of exchanging data by means of waves and at least one associated calculator (Cj). at least one hardware identifier and comprising at least one software module associated with a module identifier software, characterized in that it comprises i) control computers (CC) located in each of said vehicles (V) and storing hardware identifier (s) and software module identifier (s) of each computer (Cj) of their vehicle (V), and ii) a server (SC) storing hardware identifier (s) and software module identifier (s) of each computer (Cj) of each of said vehicles (V), and in that each computer (Cj) of a vehicle (V) communicates, after an alarm, to said control computer (CC) of said vehicle (V) its hardware identifier (s) and software module identifier (s), then this control computer ( CC) compares the latter with said stored hardware identifier (s) and software module identifier (s) and, in case of a difference, transmits to said server (SC), via said communication module (MCN1) of the vehicle (V), said identifier of vehicle and said hardware identifier (s) and software module identifier (s) and then said server (SC) compares said hardware identifier (s) and software module identifier (s) transmitted by said vehicle (V) to hardware identifiers and software module identifier (s) stored in correspondence. of said transmitted vehicle identifier and, in the case of a difference, transmits to said vehicle (V) information representative of a nonconformity within a computer (Cj) which it understands with a view to storing this information in its control computer (CC).
8. Système selon la revendication 7, caractérisé en ce que lesdits véhicules (V) sont de type automobile.  8. System according to claim 7, characterized in that said vehicles (V) are of automotive type.
PCT/FR2018/053355 2018-01-08 2018-12-18 Method for verifying the conformity of one or more vehicle computers by comparing identifiers, and associated verification system WO2019135039A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR1850107A FR3076645A1 (en) 2018-01-08 2018-01-08 METHOD FOR MONITORING THE CONFORMITY OF COMPUTER (S) OF A VEHICLE BY COMPARISON OF IDENTIFIERS, AND ASSOCIATED CONTROL SYSTEM
FR1850107 2018-01-08

Publications (1)

Publication Number Publication Date
WO2019135039A1 true WO2019135039A1 (en) 2019-07-11

Family

ID=62749057

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FR2018/053355 WO2019135039A1 (en) 2018-01-08 2018-12-18 Method for verifying the conformity of one or more vehicle computers by comparing identifiers, and associated verification system

Country Status (2)

Country Link
FR (1) FR3076645A1 (en)
WO (1) WO2019135039A1 (en)

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120116633A1 (en) * 2007-02-07 2012-05-10 Hitachi, Ltd. On-vehicle gateway device, method for controlling an on-vehicle gateway device, connection device and connection control method
US20140114497A1 (en) * 2011-07-06 2014-04-24 Hitachi Automotive Systems, Ltd. In-Vehicle Network System
FR2998237A1 (en) 2012-11-16 2014-05-23 Peugeot Citroen Automobiles Sa METHOD FOR ASSISTING REMOTE DIAGNOSTIC OF A VEHICLE
US20140297109A1 (en) * 2013-03-28 2014-10-02 Autonetworks Technologies, Ltd In-vehicle communication system and in-vehicle relay apparatus
FR3032546A1 (en) 2015-02-11 2016-08-12 Peugeot Citroen Automobiles Sa METHOD AND SYSTEM FOR REALIZING SECURE TELEDIAGNOSTICS OF COMMUNICATION ELECTRONIC EQUIPMENT OF VEHICLES
US20170076516A1 (en) * 2014-05-07 2017-03-16 Hitachi Automotive Systems, Ltd. Inspection apparatus, inspection system, and inspection method

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120116633A1 (en) * 2007-02-07 2012-05-10 Hitachi, Ltd. On-vehicle gateway device, method for controlling an on-vehicle gateway device, connection device and connection control method
US20140114497A1 (en) * 2011-07-06 2014-04-24 Hitachi Automotive Systems, Ltd. In-Vehicle Network System
FR2998237A1 (en) 2012-11-16 2014-05-23 Peugeot Citroen Automobiles Sa METHOD FOR ASSISTING REMOTE DIAGNOSTIC OF A VEHICLE
US20140297109A1 (en) * 2013-03-28 2014-10-02 Autonetworks Technologies, Ltd In-vehicle communication system and in-vehicle relay apparatus
US20170076516A1 (en) * 2014-05-07 2017-03-16 Hitachi Automotive Systems, Ltd. Inspection apparatus, inspection system, and inspection method
FR3032546A1 (en) 2015-02-11 2016-08-12 Peugeot Citroen Automobiles Sa METHOD AND SYSTEM FOR REALIZING SECURE TELEDIAGNOSTICS OF COMMUNICATION ELECTRONIC EQUIPMENT OF VEHICLES

Also Published As

Publication number Publication date
FR3076645A1 (en) 2019-07-12

Similar Documents

Publication Publication Date Title
US20190066402A1 (en) Driving management system, vehicle, and information processing method
FR2805365A1 (en) REMOTE REPROGRAMMING SYSTEM FOR AT LEAST ONE COMPUTER OF AN ON-BOARD COMPUTER SYSTEM ON A MOTOR VEHICLE
CN109428716A (en) The encryption key distribution of car group
US11240211B2 (en) System and method to leverage EDR, ECU, CAN and OBD data from vehicles by means of blockchain technology
US10096176B1 (en) System and method for vehicle-reservation reliability prognosis
EP2920768B1 (en) Method for assisting remote vehicle diagnosis
CN112286171A (en) Remote diagnosis method, device, vehicle and storage medium
KR101060681B1 (en) Vehicle information transmission method, vehicle information receiving method and system performing the same
EP3257027B1 (en) Method and system for carrying out a telediagnosis of communicating electronic equipements of vehicles
WO2016066953A1 (en) Diagnostic aid method, device and system
CN105005539A (en) Authenticating data at a microcontroller using message authentication codes
Falco et al. Assuring automotive data and software integrity employing distributed hash tables and blockchain
WO2019135039A1 (en) Method for verifying the conformity of one or more vehicle computers by comparing identifiers, and associated verification system
FR3012243A1 (en) SYSTEM FOR REALIZING TELEDIAGNOSTICS OF VEHICLES REQUIRED BY NON-WIRED COMMUNICATION EQUIPMENTS
EP3935817A1 (en) Module for collecting data relating to a device of a passenger transport vehicle
FR3096153A1 (en) Method and device for returning to a state prior to a software update of a remote vehicle computer
WO2021019138A1 (en) System and method for securing a diagnostic request to a motor vehicle computer
EP2919421B1 (en) Ethernet switch, mobile machine and passenger bus including said Ethernet switch
WO2021136779A1 (en) Method and system for activating access to a vehicle parked in an area not covered by a data network
FR2851660A1 (en) On-board diagnosis process for vehicle system, involves performing diagnosis of vehicle system in decentralized manner, and producing defect diagnosis in control apparatus based on model in specific diagnosis network
FR3041845A1 (en) ELECTRONIC DEVICE CLEAN TO BE CONNECTED TO A VEHICLE NETWORK, AND METHOD OF TRANSMITTING MESSAGES IMPLEMENTED BY SUCH ELECTRONIC DEVICE
FR3136289A1 (en) Method and device for controlling vehicle computers
FR3132671A1 (en) Charging between electric vehicles
CN118282805A (en) Gateway controller, whole vehicle communication system, method and vehicle
FR3140195A1 (en) Method and device for transmitting data for attempting to register hands-free access devices for vehicles

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18833959

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 18833959

Country of ref document: EP

Kind code of ref document: A1