Gateway device, in-vehicle network system, and firmware update method

Patent metadata

Field	Value
Publication number	US-2017192770-A1
Application number	US-201715465653-A
Country	US
Kind code	A1
Filing date	Mar 22, 2017
Priority date	Sep 14, 2015
Publication date	Jul 6, 2017
Grant date	—

Abstract

A gateway device, connected to one or more buses used in communication by a plurality of ECUs on-board a vehicle, is provided with: a receiving unit that receives, from a server that acts as an external device external to the vehicle, firmware update information that includes updated firmware to be applied to one ECU from among the plurality of ECUs; and a control unit that determines, based on certain information about the ECU on which to apply the updated firmware, whether or not the ECU satisfies a certain condition, and if the certain condition is satisfied, causes the ECU to execute a certain process related to updating firmware, whereas if the certain condition is not satisfied, causes equipment other than the ECU to execute the certain process.

First claim

What is claimed is:

1 . A gateway device connected via one or more buses to a plurality of electronic controllers on-board a vehicle, the gateway device comprising:
one or more memories; and circuitry, that in operation,
receives firmware update information from an external device external to the vehicle, the firmware update information including updated firmware to be applied to a first electronic controller from among the plurality of electronic controllers,
determines whether or not the first electronic controller satisfies a first condition, based on first information about the first electronic controller,
causes, if the first condition is determined to be satisfied, the first electronic controller to execute a first process related to updating firmware, and
causes, if the first condition is determined not to be satisfied, a first device other than the first electronic controller to execute the first process.

2 . The gateway device according to claim 1 ,
wherein the first information indicates a processing capability of the first electronic controller.

3 . The gateway device according to claim 1 ,
wherein the first information indicates whether or not the first electronic controller includes a function of executing the first process, and in the determining, the first condition is determined to be satisfied if the first electronic controller includes the function of executing the first process, and the first condition is determined not to be satisfied if the first electronic controller does not include the function of executing the first process.

4 . The gateway device according to claim 1 ,
wherein the firmware update information includes a signature attached to the updated firmware, and the first process is a process of verifying the signature.

5 . The gateway device according to claim 1 ,
wherein the first process is a process of saving pre-update firmware held by the first electronic controller.

6 . The gateway device according to claim 1 ,
wherein if the first condition is determined not to be satisfied, the circuitry selects, as the first device, a second electronic controller other than the first electronic controller from among the plurality of electronic controllers.

7 . The gateway device according to claim 1 , wherein
if the first condition is determined not to be satisfied, the circuitry selects the gateway device as the first device.

8 . The gateway device according to claim 4 ,
wherein if the first condition is determined not to be satisfied, the circuitry selects, as the first device, an electronic controller that is other than the first electronic controller and that includes a key to use for verifying the signature from among the plurality of electronic controllers.

9 . The gateway device according to claim 1 ,
wherein the plurality of electronic controllers communicate over the one or more buses in accordance with a controller area network (CAN) protocol.

10 . An in-vehicle network system provided with a plurality of electronic controllers that communicate over one or more buses, and a gateway device connected to the one or more buses, the gateway device comprising:
one or more memories; and circuitry, that in operation,
receives firmware update information from an external device external to the vehicle in which the gateway device is installed on-board, the firmware update information including updated firmware to be applied to a first electronic controller from among the plurality of electronic controllers,
determines whether or not the first electronic controller satisfies a first condition, based on first information about the first electronic controller,
causes, if the first condition is determined to be satisfied, the first electronic controller to execute a first process related to updating firmware, and
causes, if the first condition is determined not to be satisfied, a first device other than the first electronic controller to execute the first process.

11 . A method used in an in-vehicle network system provided with a plurality of electronic controllers that communicate over one or more buses, the method comprising:
receiving firmware update information from an external device external to the vehicle in which the plurality of electronic controllers is installed on-board, the firmware update information including updated firmware to be applied to a first electronic controller from among the plurality of electronic controllers; determining whether or not the first electronic controller satisfies a first condition, based on first information about the first electronic controller; causing, if the first condition is determined to be satisfied, the first electronic controller to execute a first process related to updating firmware; and causing, if the first condition is determined not to be satisfied, a first device other than the first electronic controller to execute the first process.

Assignees

• Panasonic Ip Corp America

Inventors

• Ujiie Yoshihiro
• Matsushima Hideki
• Anzai Jun
• Nakano Toshihisa
• Haga Tomoyuki
• Maeda Manabu
• Kishikawa Takeshi

Classifications

• G06F2201/83

  the solution involving signatures · CPC title

• H04W4/48

  for in-vehicle communication · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title