US 12,381,949 B2
Vehicle master device, update data verification method and computer program product
Yuzo Harata, Kariya (JP); Kazuhiro Uehara, Kariya (JP); Mitsuyoshi Natsume, Kariya (JP); and Takuya Kawasaki, Kariya (JP)
Assigned to DENSO CORPORATION, Kariya (JP)
Filed by DENSO CORPORATION, Kariya (JP)
Filed on Mar. 29, 2023, as Appl. No. 18/127,777.
Application 18/127,777 is a continuation of application No. 17/169,075, filed on Feb. 5, 2021, granted, now 11,671,498.
Application 17/169,075 is a continuation of application No. PCT/JP2019/031176, filed on Aug. 7, 2019.
Claims priority of application No. 2018-151425 (JP), filed on Aug. 10, 2018; and application No. 2019-129966 (JP), filed on Jul. 12, 2019.
Prior Publication US 2023/0254374 A1, Aug. 10, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 8/65 (2018.01); G07C 5/00 (2006.01); H04L 67/12 (2022.01)
CPC H04L 67/12 (2013.01) [G07C 5/008 (2013.01)] 18 Claims
OG exemplary drawing
 
1. An electronic control unit connected to a first device to communicate data with the first device, the first device being an electronic control device that distributes, to a rewrite target electronic control unit, update data transmitted from outside, the electronic control unit comprising:
a memory that is configured to store the update data that is previously transmitted, over a network, to the electronic control unit from outside of a vehicle including the rewrite target electronic control unit; and
a controller that is configured to transmit a processing result to the first device that is configured to verify the update data using the processing result, the processing result being a result of executing at least a part of a process related to verification of the update data stored in the memory based on a request from the first device prior to the first device distributing the update data to the rewrite target electronic control unit, the process related to the verification of the update data including at least one or some of a decryption process, a first verification value calculation process, a second verification value calculation process, a comparison process, and a determination process;
wherein, after confirming that the update data is valid based on a comparison of a first data verification value with a second data verification value, the first data verification value being calculated during the first verification value calculation process from a decrypted authenticator associated with the update data, the second data verification value being calculated during the second verification value calculation process from the update data, the rewrite target electronic control unit is configured to rewrite a program stored on a rewrite target memory using the verified update data distributed from the first device after the first device completes verifying the update data by executing a remaining process, among the decryption process, the first verification value calculation process, the second verification value calculation process, the comparison process, and the determination process, that has not been executed by the controller; and
wherein the rewritten program stored on the rewrite target memory of the rewrite target electronic control unit, when executed by the rewrite target electronic control unit, configures the rewrite target electronic control unit to perform at least one of: controlling locking/unlocking of a door of the vehicle; controlling display of a meter display of the vehicle; controlling an air conditioner of the vehicle; controlling opening/closing of a window of the vehicle; controlling a security system to prevent theft of the vehicle; controlling an engine of the vehicle; controlling a brake of the vehicle; controlling a transmission of the vehicle; controlling power steering of the vehicle; controlling a multimedia system of the vehicle; controlling a navigation system of the vehicle; controlling an electronic toll collection system of the vehicle; or controlling a power supply system of the vehicle.