Rewrite detection system, rewrite detection device and information processing device

Patent metadata

Field	Value
Publication number	US-10049232-B2
Application number	US-201414917352-A
Country	US
Kind code	B2
Filing date	Sep 12, 2014
Priority date	Sep 20, 2013
Publication date	Aug 14, 2018
Grant date	Aug 14, 2018

Abstract

A rewrite detection system, a rewrite detection device and an information processing device can detect unauthorized rewrite to a program or data stored in a storage unit of the information processing device. A rewrite detection device generates a random seed and transmits it to an ECU and a server device. The ECU calculates a hash value using a predetermined hash function on the basis of the received random seed and the storage content of the storage unit, and transmits the hash value to the rewrite detection device. The server device transmits an expectation in response to an inquiry from the rewrite detection device. The rewrite detection device determines whether unauthorized rewrite to a program or data in the ECU has been performed or not in accordance with whether the expectation received from the server device and the hash value received from the ECU coincide with each other or not.

First claim

What is claimed is:

1. A rewrite detection system for preventing an unauthorized rewrite of a program or data stored in a rewritable storage unit of an information processing device, wherein the rewrite detection system has a rewrite detection device comprising:
a network communication interface configured to enable communication with the information processing device; and
a processor programmed to:
cause the network communication interface to transmit a random value as seed information, over the network, to the information processing device;
receive, via the network communication interface, a hash value transmitted from the information processing device in response to the seed information being transmitted to the information processing device by the rewrite detection device;
determine whether the received hash value is valid or not; and
detect whether a rewrite is authorized or unauthorized in accordance with a result of the determination of whether the received hash value is valid or not, wherein the information processing device is configured to: in response to receiving the seed information transmitted by the network communication interface: (i) calculate the hash value based on the seed information transmitted by the network communication interface and the program or data stored in the rewritable storage unit of the information processing device, and (ii) transmit the calculated hash value to the rewrite detection device.

2. The rewrite detection system according to claim 1 , wherein
the processor is further programmed to: cause the network communication interface to transmit storage area specification information, which specifies a storage area in the rewritable storage unit of the information processing device, to the information processing device together with the seed information, and
the information processing device is configured to calculate the hash value on the basis of the seed information and the program or data stored in the storage area in the rewritable storage unit of the information processing device, which is specified by the storage area specification information transmitted together with the seed information.

3. The rewrite detection system according to claim 2 , wherein the processor is further programmed to: cause the network communication interface to transmit storage area specification information including information which specifies a head position and a tail position of the storage area, or a size of the storage area.

4. The rewrite detection system according to claim 2 , wherein a plurality of discontinuous areas are specified as the storage area, and the processor is further programmed to: cause the network communication interface to transmit the storage area specification information including information which specifies the plurality of discontinuous areas.

5. The rewrite detection system according to claim 4 , wherein the storage area specification information is information which specifies an interval between the plurality of discontinuous areas.

6. The rewrite detection system according to claim 2 , wherein the information processing device is configured to not transmit the hash value to the rewrite detection device when the storage area specification information received together with the seed information does not satisfy a predetermined condition.

7. The rewrite detection system according to claim 6 , wherein the information processing device is configured to not transmit the hash value to the rewrite detection device when a size of the storage area specified by the storage area specification information is neither a predetermined size nor a size of a constant multiple of the predetermined size.

8. The rewrite detection system according to claim 1 , wherein
the information processing device is further configured to determine a storage area in the rewritable storage unit to be an object of hash value calculation on the basis of the seed information transmitted by the network communication interface, and
the processor is further programmed to: calculate the hash value on the basis of the program or data stored in the storage area that is determined to be the object of the hash calculation on the basis of the seed information.

9. The rewrite detection system according to claim 1 , wherein the information processing device is configured to not transmit the hash value until a predetermined period of time has elapsed since a previous hash value was transmitted to the rewrite detection device.

10. The rewrite detection system according to claim 1 , wherein the rewritable storage unit stores random data in a surplus area other than a storage area where the program or data is stored.

11. The rewrite detection system according to claim 1 , wherein the rewrite detection device processor is further programmed to:
measure a period of time from transmission of the seed information by the network communication interface to reception of the hash value by the network communication interface,
detect the rewrite in accordance with the measured period of time.

12. The rewrite detection system according to claim 1 , further comprising a server device having another network communication interface, the server device being configured to cause the another network communication interface to: transmit an expectation of the hash value for the seed information, wherein the processor is further programmed to:
cause the network communication interface to transmit, to the server device, an inquiry for the expectation of the hash value for the seed information,
receive the expectation of the hash value transmitted from the server device in response to transmitting the inquiry,
determine whether the hash value received by the network communication interface is valid or not on the basis of the expectation received by the network communication interface.

13. The rewrite detection system according to claim 1 , further comprising a server device having another network communication interface, the server device being configured to cause the another network communication interface to: transmit the seed information and an expectation of the hash value, wherein the processor is further programmed to:
cause the network communication interface to transmit, to the server device, an inquiry for the seed information and the expectation of the hash value,
receive the seed information and the expectation of the hash value in response to transmitting the inquiry,
determine whether the hash value received by the network communication interface is valid or not on the basis of the expectation received by the network communication interface.

14. The rewrite detection system according to claim 11 , wherein
the rewrite detection device is mounted on a mobile body, and
the processor is further programmed to:
when communication with the server device can be made, cause the network communication interface to transmit the inquiry,
when the network communication interface receives the expectation of the hash value, store the received expectation of the hash value, and
determine whether the hash value received by the network communication interface is valid or not on the basis of the stored expectation of the hash value.

15. The rewrite detection system according to claim 12 , wherein
the rewrite detection device is mounted on a mobile body, and
when communication with the server device can be made, cause the network communication interface to transmit the inquiry,
when the network communication interface receives the expectation of the hash value, store the received expectation of the hash value, and
dete

Assignees

• Univ Nagoya Nat Univ Corp
• Autonetworks Technologies Ltd
• Sumitomo Wiring Systems
• Sumitomo Electric Industries
• Autonetworks Technologies Ltd

Inventors

• Takada Hiroaki
• Takakura Hiroki
• Miyashita Yukihiro
• Horihata Satoshi
• Okada Hiroshi
• Adachi Naoki

Classifications

• G06F21/64 Primary

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• H04L2012/40273

  the transportation system being a vehicle · CPC title

• H04L2012/40215

  Controller Area Network CAN · CPC title