Distribution package generation device, distribution package communication system, distribution package transmission method, and storage medium

Patent metadata

Field	Value
Publication number	US-12045599-B2
Application number	US-202117166498-A
Country	US
Kind code	B2
Filing date	Feb 3, 2021
Priority date	Aug 10, 2018
Publication date	Jul 23, 2024
Grant date	Jul 23, 2024

Abstract

A center device includes an update data storage unit in which new data and new difference data for updating to the new data from old data are stored for, among electronic control units mounted on a vehicle, a target device targeted for data update. The center device generates, using the new data, a first verification value for verifying integrity in the vehicle, and generates, using the new difference data, a second verification value for verifying integrity of the new difference data in the vehicle. The center device generates a package including the new difference data, the first verification values and the second verification values for a plurality of the target devices. The center device generates, using the distribution package, a third verification value for verifying integrity of the distribution package in the vehicle, and transmits the distribution package along with the third verification value to the in-vehicle device.

First claim

What is claimed is:

1. A center device comprising:
a processor and memory configured to:
store new data and new difference data for updating to the new data from old data for, among a plurality of electronic control units mounted on a vehicle, a target device targeted for data update;
generate, using the new data, a first verification value for verifying integrity in the vehicle;
generate, using the new difference data, a second verification value for verifying integrity of the new difference data in the vehicle;
generate a package including the new difference data, the first verification values and the second verification values for a plurality of the target devices;
generate, using the distribution package, a third verification value for verifying integrity of the distribution package in the vehicle;
transmit the distribution package along with the third verification value to an in-vehicle device;
generate specification data including: target device related information including device types of the target devices belonging to a certain system of a plurality of systems formed of the plurality of electronic control units; update data related information of the target devices; and update process information designating an update process in the vehicle; and
generate the package including the first verification values, the second verification values and the new difference data for the target devices belonging to the certain system, and add the specification data to the package;
wherein each verification value is a hash value obtained by applying a corresponding hash function to corresponding data;
wherein the new data and the old data are different versions of the data; and
wherein upon updating to the new data from the old data in the target device, the data is updated to a new version of the data.

2. The center device of claim 1 , wherein the processor and memory are further configured to:
store the old data and old difference data for writing back to the old data from the new data;
generate, using the old data, a fourth verification value for verifying integrity in the vehicle;
generate, using the old difference data, a fifth verification value for verifying integrity of the old difference data in the vehicle; and
generate a package including: the specification data; and the new difference data, the first verification values, the second verification values, the old difference data, the fourth verification values, the fifth verification values for a plurality of the target devices.

3. The center device of claim 2 , wherein the processor and memory are further configured to:
generate, by adding an authenticator generated using a key to one or more of the first to fifth verification values, a verification value with the authenticator.

4. The center device of claim 1 , wherein the processor and memory are further configured to:
store the distribution package and the third verification value; and
in response to a request from the in-vehicle device, transmit the distribution package and the third verification value linked to the request.

5. The center device according to claim 1 , wherein:
the target device targeted for the data update is at least one of a body system electronic control unit (ECU), a travel system ECU, a multi-media system ECU, and a power supply management ECU; and
upon completion of the data update in the target device, the target device is capable of executing an improved function compared to the data update.

6. A center device comprising:
a processor and memory configured to:
store new data and new difference data for updating to the new data from old data for, among a plurality of electronic control units mounted on a vehicle, a target device targeted for data update;
generate, using the new data, a first verification value for verifying integrity in the vehicle;
generate, using the new difference data, a second verification value for verifying integrity of the new difference data in the vehicle;
generate, a package including the new difference data, the first verification values and the second verification values for a plurality of the target devices;
generate, using the distribution package, a third verification value for verifying integrity of the distribution package in the vehicle;
transmit the distribution package along with the third verification value to an in-vehicle device;
generate specification data including target device related information including device types of the target devices, update data related information of the target devices, and update process information designating an update process in the vehicle;
generate the package by adding the specification data;
store the old data and rollback data for writing back to the old data;
generate, using the old data, a fourth verification value for verifying integrity in the vehicle;
generate, using the rollback data, a fifth verification value for verifying integrity of the rollback data in the vehicle; and
generate a package including: the specification data; and the new difference data, the first verification values, the second verification values, the rollback data, the fourth verification values, the fifth verification values for a plurality of the target devices;
wherein each verification value is a hash value obtained by applying a corresponding hash function to corresponding data;
wherein the new data and the old data are different versions of the data; and
wherein upon updating to the new data from the old data in the target device, the data is updated to a new version of the data.

7. A vehicle information communication system comprising a center device and an in-vehicle device that, using data downloaded from the center device, performs rewriting of a non-volatile memory of an electronic control unit mounted on a vehicle, wherein
the center device includes a first processor and memory configured to:
store new data and new difference data for updating to the new data from old data for a target device targeted for data update among a plurality of electronic control units mounted on a vehicle;
generate, using the new data, a first verification value for verifying integrity in the vehicle;
generate, using the new difference data, a second verification value for verifying integrity of the new difference data in the vehicle;
generate a package including the new difference data, the first verification values, and the second verification values for a plurality of the target devices;
generate, using the distribution package, a third verification value for verifying integrity of the distribution package in the vehicle;
transmit the distribution package along with the third verification value to the in-vehicle device;
generate specification data including: target device related information including device types of the target devices belonging to a certain system of a plurality of systems formed of the plurality of electronic control units; update data related information of the target devices; and update process information designating an update process in the vehicle; and
generate the package including the first verification values, the second verification values and the new difference data for the target devices belonging to the certain system, and add the specification data to the package, and

the in-vehicle device includes a second processor and memory configured to:
receive the distribution package and the third verification value;
calculate a verification value for the distribution package, compare the calculated verification value with the third verification value, and verify integrity of the distribution package;
calculate a verification value for the new difference data corresponding to the target device included in th

Assignees

• Denso Corp

Inventors

• Ogawa Tomoya
• Sakurai Nao
• Harata Yuzo
• Uehara Kazuhiro
• Hasegawa Takuya
• Kawasaki Takuya
• Hayakawa Kazuaki

Classifications

• G07C5/0808

  Diagnosing performance data (testing of vehicles G01M17/00; testing of electrical installation on vehicles G01R31/005) · CPC title

• G06F3/0673

  Single storage device · CPC title

• G06F3/0659

  Command handling arrangements, e.g. command buffers, queues, command scheduling · CPC title

• G06F3/0604

  Improving or facilitating administration, e.g. storage management · CPC title

• G06F2221/033

  Test or assess software · CPC title