公开(公告)号：US10157050B2

公开(公告)日：2018-12-18

申请号：US14495195

申请日：2014-09-24

申请人： FUJITSU LIMITED ,  TOYOTA JIDOSHA KABUSHIKI KAISHA

发明人： Seigo Kotani ,  Masato Suzuki ,  Hisashi Oguma

IPC分类号： G06F21/57 ,  G06F8/65 ,  G06F8/654

摘要： A method includes receiving first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile, calculating second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information, transmitting the correction program to the control unit, receiving from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit, comparing the received third information with the calculated second information, and judging whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

公开(公告)号：US10484184B2

公开(公告)日：2019-11-19

申请号：US15258576

申请日：2016-09-07

申请人： TOYOTA JIDOSHA KABUSHIKI KAISHA

发明人： Hisashi Oguma ,  Tsuyoshi Toyama

IPC分类号： H04L29/06 ,  H04L9/32 ,  G06F21/57 ,  H04L29/08

摘要： A vehicle system includes a master ECU and a general ECU. The general ECU attaches a digital signature to transmission data including data (for example, a digest value of a program) and transmits the transmission data to the master ECU. The master ECU verifies the digital signature and the data and, when both the digital signature and the data are valid, determines that the general ECU is valid. The master ECU attaches a digital signature to transmission data including data of the master ECU and a session key and transmits the transmission data to the general ECU. The general ECU verifies the digital signature and the data and, when both the digital signature and the data are valid, the general ECU uses the session key included in the transmission data as a common key when performing subsequent communications.

公开(公告)号：US10397244B2

公开(公告)日：2019-08-27

申请号：US15210392

申请日：2016-07-14

申请人： TOYOTA JIDOSHA KABUSHIKI KAISHA ,  National University Corporation YOKOHAMA National University

发明人： Tsuyoshi Toyama ,  Hisashi Oguma ,  Tsutomu Matsumoto ,  Hideki Gotoh ,  Tomokazu Moriya

IPC分类号： H04L29/06 ,  G08G1/0967 ,  H04W12/10 ,  B60W10/00 ,  B60W40/00 ,  G06F21/00 ,  G08G1/01 ,  G08G1/017 ,  G08G1/00 ,  G07C5/00 ,  G06F21/57 ,  G06F21/64 ,  H04L29/08 ,  G06K9/00 ,  H04W84/18 ,  H04W4/04

摘要： Disclosed is a system for detecting an attack, which includes a server and a plurality of vehicles capable of wirelessly communicating with each other. Each of the vehicles has a sensor, a sensor information acquisition unit, a traffic information reception unit, and a transmission unit that transmits the sensor information and the traffic information to the server. The server has a reception unit that receives the sensor information and the traffic information from the vehicles, a verification unit that verifies whether the sensor information and the traffic information are inconsistent with each other, and a notification unit that notifies, when the sensor information and the traffic information are inconsistent with each other, the vehicles of the inconsistency.

公开(公告)号：US20140310530A1

公开(公告)日：2014-10-16

申请号：US14355038

申请日：2012-10-30

申请人： TOYOTA JIDOSHA KABUSHIKI KAISHA ,  National University Corporation YOKOHAMA National University

发明人： Hisashi Oguma ,  Tsutomu Matsumoto ,  Masato Hata ,  Masato Tanabe ,  Katsunari Yoshioka ,  Kazuomi Oishi

IPC分类号： H04L9/32

CPC分类号： H04L9/32 ,  H04L9/12 ,  H04L9/3242 ,  H04L2209/84

摘要： Each of ECUs counts the number of messages transmitted for each of CAN IDs. A transmission node that has transmitted a main message produces an MAC from a data field and the CAN ID in the main message and a counter value corresponding to the CAN ID, and transmits the MAC as an MAC message. A reception node that has received the main message produces an MAC from the data field and the CAN ID contained in the main message and the counter value corresponding to the CAN ID, and determines whether the MAC matches the MAC contained in the MAC message. By so doing, verification whether the main message is valid or not can be made. According to this configuration, message authentication by the MAC can be made without changing a CAN protocol.

摘要翻译： 每个ECU对每个CAN ID发送的消息数进行计数。 发送主消息的发送节点从数据字段产生MAC，主消息中的CAN ID和对应于CAN ID的计数值，并将MAC作为MAC消息发送。 已经接收到主消息的接收节点从数据字段产生MAC，并且包含在主消息中的CAN ID和对应于CAN ID的计数器值，并且确定MAC是否匹配MAC消息中包含的MAC。 通过这样做，可以确认主消息是否有效。 根据该结构，可以在不改变CAN协议的情况下进行MAC的消息认证。

公开(公告)号：US09904531B2

公开(公告)日：2018-02-27

申请号：US14494903

申请日：2014-09-24

申请人： FUJITSU LIMITED ,  TOYOTA JIDOSHA KABUSHIKI KAISHA

发明人： Masato Suzuki ,  Seigo Kotani ,  Hisashi Oguma

IPC分类号： G06F9/445

CPC分类号： G06F8/65 ,  Y02D10/42

摘要： A program stored in a computer-readable medium causes a computer to execute a process includes receiving, from an automobile in which a control program for controlling devices mounted on the automobile operates, an update request concerning the control program, classifying a plurality of correction programs corresponding to the update request into a plurality of groups on the basis of usable electric energy of a battery corresponding to a vehicle type to which the automobile belongs, an amount of the usable electric energy being stored in a memory, and transmitting the classified correction programs to the automobile for each of the groups.

公开(公告)号：US09331854B2

公开(公告)日：2016-05-03

申请号：US14355038

申请日：2012-10-30

申请人： TOYOTA JIDOSHA KABUSHIKI KAISHA ,  National University Corporation YOKOHAMA National University

发明人： Hisashi Oguma ,  Tsutomu Matsumoto ,  Masato Hata ,  Masato Tanabe ,  Katsunari Yoshioka ,  Kazuomi Oishi

IPC分类号： H04L9/32 ,  H04L9/12

CPC分类号： H04L9/32 ,  H04L9/12 ,  H04L9/3242 ,  H04L2209/84

摘要： Each of ECUs counts the number of messages transmitted for each of CAN IDs. A transmission node that has transmitted a main message produces an MAC from a data field and the CAN ID in the main message and a counter value corresponding to the CAN ID, and transmits the MAC as an MAC message. A reception node that has received the main message produces an MAC from the data field and the CAN ID contained in the main message and the counter value corresponding to the CAN ID, and determines whether the MAC matches the MAC contained in the MAC message. By so doing, verification whether the main message is valid or not can be made. According to this configuration, message authentication by the MAC can be made without changing a CAN protocol.

摘要翻译： 每个ECU对每个CAN ID发送的消息数进行计数。 发送主消息的发送节点从数据字段产生MAC，主消息中的CAN ID和对应于CAN ID的计数值，并将MAC作为MAC消息发送。 已经接收到主消息的接收节点从数据字段产生MAC，并且包含在主消息中的CAN ID和对应于CAN ID的计数器值，并且确定MAC是否匹配MAC消息中包含的MAC。 通过这样做，可以确认主消息是否有效。 根据该结构，可以在不改变CAN协议的情况下进行MAC的消息认证。