Vehicle control system and vehicle control method

Patent metadata

Field	Value
Publication number	US-12455947-B2
Application number	US-202318228833-A
Country	US
Kind code	B2
Filing date	Aug 1, 2023
Priority date	Feb 12, 2021
Publication date	Oct 28, 2025
Grant date	Oct 28, 2025

Abstract

An integrated ECU is a vehicle control system provided in a vehicle, and includes: an application executor that executes an application program; an environment state determiner that determines whether the application executor is anomalous; a first resource provider that provides a resource to be used for controlling the vehicle; and a first access controller that, upon acceptance of a request for the resource from the application program, (a) prohibits provision of the resource from the resource provider to the application program, when the environment state determiner determines that the application executor is anomalous, and (b) permits the provision of the resource from the resource provider to the application program, when the environment state determiner determines that the application executor is not anomalous.

First claim

The invention claimed is:

1 . A vehicle control system provided in a vehicle, the vehicle control system comprising:
circuitry; and at least one memory connected to the circuitry, wherein using the at least one memory, the circuitry performs operations, the operations including:
receiving a request, from an application program, for a resource that is used for controlling the vehicle;
determining whether an application executor that executes the application program is anomalous;
determining whether the resource is in a providable state;
upon receipt of the request for the resource from the application program; prohibiting provision of the resource to the application program, when the application executor is determined to be anomalous; and permitting the provision of the resource to the application program, when the application executor is determined to not be anomalous; and
providing the resource to the application program, when the provision of the resource is permitted, wherein
the operations determine the prohibiting or the permitting of the provision of the resource to the application program according to an identification result of the application program and executing the application program for which the resource is requested, a first determination result of whether the executing of the application is anomalous, and a second determination result of whether the resource is in the providable state.

2 . The vehicle control system according to claim 1 , wherein
the operations check an authority of the application program, and according to a result of the check of the authority, the request for the resource from the application program is permitted, held, or prohibited.

3 . The vehicle control system according to claim 2 , wherein
the circuitry: determines the prohibiting or the permitting of the provision of the resource to the application program from outside the application executor, when the resource requested by the application program is not providable in the application executor; and does not determine the prohibiting or the permitting of the provision of the resource to the application program from outside the application executor, when the resource requested by the application program is providable in the application executor.

4 . The vehicle control system according to claim 1 , wherein
the circuitry further determines whether the application program or the application executor has authority to use the resource, and upon the receipt of the request for the resource from the application program, the provision of the resource to the application program is permitted, when the circuitry determines that the application executor is not anomalous and that one of the application program or the application executor has the authority.

5 . The vehicle control system according to claim 1 , wherein
upon the receipt of the request for the resource from the application program, the provision of the resource to the application program is permitted, when the circuitry determines that the application executor is not anomalous and that the resource is in the providable state.

6 . The vehicle control system according to claim 1 , wherein
the resource is at least one of information, a function, or a hardware resource to be used for controlling the vehicle.

7 . A vehicle control method performed by a computer provided in a vehicle, the vehicle control method comprising:
receiving a request, from an application program, for a resource that is used for controlling the vehicle; determining whether an application executor that executes the application program is anomalous; determining whether the resource is in a providable state; upon receipt of the request for the resource from the application program; prohibiting provision of the resource to the application program, when the application executor is determined to be anomalous; and permitting the provision of the resource to the application program, when the application executor is determined not to be anomalous; and providing the resource to the application program, when the provision of the resource is permitted, wherein the vehicle control method determines the prohibiting or the permitting of the provision of the resource to the application program according to an identification result of the application program and executing the application program for which the resource is requested, a first determination result of whether the executing the application program is anomalous, and a second determination result of whether the resource is in the providable state.

8 . A vehicle control system provided in a vehicle, the vehicle control system comprising:
a first processor; and a memory including a program that, when executed by the first processor, causes the first processor to perform operations, the operations including:
receiving a request, from an application program, for a resource that is used for controlling the vehicle;
determining whether a second processor that executes the application program is anomalous;
determining whether the resource is in a providable state;
upon receipt of the request for the resource from the application program: prohibiting provision of the resource to the application program, when the second processor is determined to be anomalous; and permitting the provision of the resource to the application program, when the second processor is determined to not be anomalous; and
providing the resource to the application program, when the provision of the resource is permitted, wherein
the operations determine the prohibiting or the permitting of the provision of the resource to the application program according to an identification result of the application program and executing the application program for which the resource is requested, a first determination result of whether executing the application program is anomalous, and a second determination result of whether the resource is in the providable state.

Assignees

• Panasonic Ip Man Co Ltd
• Panasonic Automotive Systems Co Ltd

Inventors

• Anzai Jun
• Nakano Toshihisa

Classifications

• G06F21/70

  Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer · CPC title

• G06F21/52

  during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow} · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• G06F21/53

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• B60R16/02

  electric {constitutive elements} · CPC title