System, vehicle, and method

Patent metadata

Field	Value
Publication number	US-2023306101-A1
Application number	US-202318167070-A
Country	US
Kind code	A1
Filing date	Feb 10, 2023
Priority date	Mar 28, 2022
Publication date	Sep 28, 2023
Grant date	—

Abstract

A system includes a plurality of in-vehicle devices and having a function of determining abnormality of communication in the devices by authenticating a message including data, a first counter counted each time a power source is turned on, and a second counter incremented over time. The system includes an authentication unit for performing, when a message including control data to be exchanged between the devices is authenticated, authentication on a message sent and received between the devices and including at least the control data and the first counter by using at least the control data and the first counter, in which when it is confirmed whether synchronization is achieved between the devices, the authentication unit is for performing authentication on a message sent and received between the devices and not including the first counter but including the second counter by using the second counter without using the first counter.

First claim

What is claimed is:

1 . A system comprising a plurality of in-vehicle devices and having a function of determining abnormality of communication in the plurality of in-vehicle devices by authenticating a message including data, a first counter configured to be counted each time a power source is turned on, and a second counter configured to be incremented over time, the system comprising
an authentication unit configured to perform, when a message including control data to be exchanged between the plurality of in-vehicle devices is to be authenticated, authentication on a message which is to be sent and received between the plurality of in-vehicle devices and which includes at least the control data and the first counter by using at least the control data and the first counter, wherein when it is confirmed whether synchronization is achieved between the plurality of in-vehicle devices, the authentication unit is configured to perform authentication on a message which is to be sent and received between the plurality of in-vehicle devices and which does not include the first counter but includes the second counter by using the second counter without using the first counter.

2 . The system according to claim 1 , wherein
when it is confirmed whether synchronization is achieved between the plurality of in-vehicle devices, in a case where a period during which a negative authentication result is obtained as an authentication result with respect to a plurality of messages received in succession exceeds a predetermined time, the authentication unit is configured to determine that synchronization is not achieved between the plurality of in-vehicle devices.

3 . The system according to claim 1 , further comprising:
a control unit configured to perform control of a vehicle without using data of a type which is to be exchanged between the plurality of in-vehicle devices when it has not been confirmed that synchronization is achieved between the plurality of in-vehicle devices.

4 . The system according to claim 3 , wherein
the plurality of in-vehicle devices includes a first in-vehicle device configured to send a message including a yaw rate of the vehicle as data, and a second in-vehicle device configured to receive the message including the yaw rate as the data, and when it has not been confirmed that synchronization is achieved between the plurality of in-vehicle devices, the second in-vehicle device is configured to disable control in which the yaw rate is to be used and continue control in which the yaw rate is not to be used.

5 . The system according to claim 1 , wherein
when control data is to be sent and received between the plurality of in-vehicle devices, the authentication unit is configured to perform authentication on a message which is to be sent and received between the plurality of in-vehicle devices and which includes the control data, the first counter, and the second counter by using the control data, the first counter, and the second counter.

6 . The system according to claim 1 , wherein
when it is confirmed whether synchronization is achieved between the plurality of in-vehicle devices, in a case where a number of at least one time to obtain a negative authentication result as an authentication result with respect to a plurality of messages received in succession exceeds a predetermined number of times, the authentication unit is configured to determine that synchronization is not achieved between the plurality of in-vehicle devices.

7 . The system according to claim 1 , wherein
after it has been confirmed that synchronization is achieved between the plurality of in-vehicle devices, the authentication unit is configured to perform authentication on a message which is to be sent and received between the plurality of in-vehicle devices and which includes the control data, the first counter, and the second counter by using the control data, the first counter, and the second counter.

8 . The system according to claim 2 , further comprising:
a control unit configured to perform control of a vehicle without using data of a type which is to be exchanged between the plurality of in-vehicle devices when it has not been confirmed that synchronization is achieved between the plurality of in-vehicle devices.

9 . The system according to claim 8 , wherein
the plurality of in-vehicle devices includes a first in-vehicle device configured to send a message including a yaw rate of the vehicle as data, and a second in-vehicle device configured to receive the message including the yaw rate as the data, and when it has not been confirmed that synchronization is achieved between the plurality of in-vehicle devices, the second in-vehicle device is configured to disable control in which the yaw rate is to be used and continue control in which the yaw rate is not to be used.

10 . The system according to claim 2 , wherein
when control data is to be sent and received between the plurality of in-vehicle devices, the authentication unit is configured to perform authentication on a message which is to be sent and received between the plurality of in-vehicle devices and which includes the control data, the first counter, and the second counter by using the control data, the first counter, and the second counter.

11 . The system according to claim 3 , wherein
when control data is to be sent and received between the plurality of in-vehicle devices, the authentication unit is configured to perform authentication on a message which is to be sent and received between the plurality of in-vehicle devices and which includes the control data, the first counter, and the second counter by using the control data, the first counter, and the second counter.

12 . The system according to claim 4 , wherein
when control data is to be sent and received between the plurality of in-vehicle devices, the authentication unit is configured to perform authentication on a message which is to be sent and received between the plurality of in-vehicle devices and which includes the control data, the first counter, and the second counter by using the control data, the first counter, and the second counter.

13 . The system according to claim 2 , wherein
when it is confirmed whether synchronization is achieved between the plurality of in-vehicle devices, in a case where a number of at least one time to obtain a negative authentication result as an authentication result with respect to a plurality of messages received in succession exceeds a predetermined number of times, the authentication unit is configured to determine that synchronization is not achieved between the plurality of in-vehicle devices.

14 . The system according to claim 3 , wherein
when it is confirmed whether synchronization is achieved between the plurality of in-vehicle devices, in a case where a number of at least one time to obtain a negative authentication result as an authentication result with respect to a plurality of messages received in succession exceeds a predetermined number of times, the authentication unit is configured to determine that synchronization is not achieved between the plurality of in-vehicle devices.

15 . The system according to claim 4 , wherein
when it is confirmed whether synchronization is achieved between the plurality of in-vehicle devices, in a case where a number of at least one time to obtain a negative authentication result as an authentication result with respect to a plurality of messages received in succession exceeds a predetermined number of times, the authentication unit is configured to determine that synchronizatio

Assignees

• Honda Motor Co Ltd

Inventors

• Sakai Yuki
• Yoshii Yu
• Ito Shoichi
• Horie Ryosuke
• Fukuno Takato

Classifications

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• G06F21/44 Primary

  Program or device authentication · CPC title

• B60R16/0231 Primary

  Circuits relating to the driving or the functioning of the vehicle (monitoring tyres B60C23/00; indicating overspeed B60K31/00; for dash boards B60K37/00, B60Q3/10; for indicating emergencies B60Q1/52; brake control systems B60T; registering or indicating the working of vehicles G07C5/00; measuring distance G01C, e.g. combinations of speed and distance G01C23/00; engine indicators G01L; measuring speed or acceleration G01P) · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L7/0016

  correction of synchronization errors · CPC title