Vehicle

Abstract

This invention provides a vehicle that, in the event of an anomaly in the vehicle communication unit due to unauthorized intrusion, prevents adverse effects on the vehicle's behavior and transmits information related to the anomaly of the vehicle communication unit to an external server. Upon detecting an anomaly in the vehicle communication unit (10a), the monitoring unit (202) cuts off communication between the vehicle communication unit and the monitoring unit and notifies the control unit (206) of the anomaly. When the monitored unit notifies the control unit of the anomaly, the control unit instructs a portable communication terminal (300) to report the anomaly of the vehicle communication unit according to a specific configuration file of a short-range wireless communication standard. Thus, during the communication cut-off caused by the vehicle communication unit, the portable communication terminal reports the anomaly of the vehicle communication unit to the external server (100).

Description

Technical Field

[0001] This invention relates to a vehicle. Background Technology

[0002] In recent years, services called telematics services have emerged as information services that provide information to vehicles. Telematics services facilitate two-way communication between the vehicle and an external server, providing various information to passengers in the vehicle. In telematics services, the vehicle is equipped with an in-vehicle communication unit called a telematics unit. This in-vehicle communication unit, for example, sends information related to the vehicle's driving status to an external server or receives information related to driver assistance from an external server.

[0003] However, in the event of a security incident such as unauthorized intrusion into the vehicle communication unit, it is necessary to isolate the vehicle communication unit from the vehicle system before the security incident affects the vehicle's behavior. For example, Patent Document 1 discloses that in a vehicle equipped with a communication device and an attack detection unit, when the attack detection unit detects a security incident in the communication device, the communication channel between the communication device and the attack detection unit is cut off.

[0004] Existing technical documents

[0005] Patent documents

[0006] Patent Document 1: Japanese Patent Publication No. 2016-502697 Summary of the Invention

[0007] Technical issues

[0008] However, in the event of an anomaly in the vehicle communication unit due to security incidents such as unauthorized intrusion, it is necessary to quickly upload information related to the anomaly to an external server of an organization such as the SIRT (Security Incident Response Team) for incident response. However, in the case of simply isolating the vehicle communication unit from the vehicle system, as in the aforementioned existing technology, the means to transmit information related to the anomaly of the vehicle communication unit to external devices is lost, making it difficult to upload this information to an external server.

[0009] The purpose of this invention is to provide a vehicle that can prevent adverse effects on the vehicle's behavior in the event of an anomaly in the vehicle communication unit due to security incidents such as illegal intrusion, and transmit information related to the anomaly of the vehicle communication unit to an external server.

[0010] Technical solution

[0011] To address the aforementioned problems, a vehicle as one aspect of the present invention comprises: an in-vehicle communication unit mounted in the vehicle and capable of wirelessly communicating information for telematics services with an external server; a monitoring unit that monitors whether an anomaly has occurred in the in-vehicle communication unit due to a security incident; and a control unit that controls the in-vehicle device mounted in the vehicle. When the monitoring unit detects an anomaly in the in-vehicle communication unit, it cuts off communication between the in-vehicle communication unit and the monitoring unit, and notifies the control unit of the anomaly. The control unit can wirelessly communicate with a portable communication terminal according to a specific configuration file corresponding to the function of the in-vehicle device in multiple configuration files of a short-range wireless communication standard. When the monitored unit notifies the portable communication terminal of an anomaly in the in-vehicle communication unit, it instructs the portable communication terminal to report the anomaly in the in-vehicle communication unit according to the specific configuration file of the short-range wireless communication standard. Thus, during the communication interruption caused by the in-vehicle communication unit, the portable communication terminal reports the anomaly of the in-vehicle communication unit to the external server.

[0012] A specific configuration file can be an HFP (Hands-Free Profile) used for the hands-free calling function of the vehicle-mounted device. When the monitored unit notifies the vehicle communication unit of an anomaly, the control unit can, according to the HFP, instruct the portable communication terminal to call a dedicated phone number used to report the anomaly of the vehicle communication unit. By having the portable communication terminal call the dedicated phone number, the anomaly of the vehicle communication unit is reported to an external server via the portable communication terminal during the communication interruption caused by the vehicle communication unit.

[0013] A specific configuration file can be a DUN (Dial-up Networking Profile) used for dial-up connection of the vehicle device. When the monitored unit notifies the vehicle communication unit of an anomaly, the control unit can instruct the portable communication terminal according to the DUN to dial up and connect to the network, and upload the event information indicating the anomaly of the vehicle communication unit to an external server through the portable communication terminal that dials up to the network.

[0014] A specific configuration file can be an FTP (FileTransfer Profile) used for data file transfer of the vehicle-mounted device. When the monitored unit notifies the vehicle communication unit of an anomaly, the control unit can generate a data file containing event information indicating the anomaly of the vehicle communication unit, and instruct the portable communication terminal according to the FTP to upload the data file over the network. By sending the data file to the portable communication terminal, the data file is uploaded from the portable communication terminal to the external server over the network.

[0015] The standard for short-range wireless communication can be Bluetooth (registered trademark).

[0016] Technical effect

[0017] According to the present invention, in the event of an anomaly in the vehicle communication unit due to a security incident such as illegal intrusion, it is possible to prevent adverse effects on the vehicle's behavior and transmit information related to the anomaly of the vehicle communication unit to an external server. Attached Figure Description

[0018] Figure 1 This is an explanatory diagram showing the general structure of a vehicle information provision system.

[0019] Figure 2 It is an explanatory diagram showing the general structure of the vehicle.

[0020] Figure 3 It shows a schematic block diagram illustrating the configuration of the vehicle system.

[0021] Figure 4 It is a schematic block diagram used to illustrate the actions of the vehicle system in the event of a safety incident in the onboard communication unit.

[0022] Figure 5 This is a timing diagram for short-range wireless communication according to the first configuration file.

[0023] Figure 6 This is a timing diagram for short-range wireless communication according to the second configuration file.

[0024] Figure 7 This is a timing diagram for short-range wireless communication according to the third configuration file.

[0025] Figure 8 This is a flowchart illustrating an example of the event information sending process in this embodiment.

[0026] Symbol Explanation

[0027] 1: Vehicle Information Provision System

[0028] 10: Vehicles

[0029] 10a: Vehicle-mounted communication unit

[0030] 50: Communication Network

[0031] 50a: Communication base station

[0032] 100: External Server

[0033] 200: Vehicle System

[0034] 202: Monitoring Unit

[0035] 204: Control Unit

[0036] 206: Control Unit

[0037] 208: Network Bus

[0038] 210: Network Bus

[0039] 300: Portable Communication Terminal Detailed Implementation

[0040] The embodiments of the present invention will now be described in detail with reference to the accompanying drawings. The dimensions, materials, and other specific values ​​shown in these embodiments are merely examples for easy understanding of the invention and are not intended to limit the invention unless otherwise stated. It should be noted that in this specification and the accompanying drawings, elements having substantially the same function or structure are omitted from repeated description by using the same symbols; furthermore, elements not directly related to the present invention are omitted from illustration.

[0041] Figure 1 This is an explanatory diagram showing the general structure of the vehicle information provision system 1. (As shown...) Figure 1 As shown, the vehicle information provision system 1 includes: a vehicle 10 with an on-board communication unit 10a, a communication network 50 with a communication base station 50a, and an external server 100.

[0042] Vehicle 10 is an automobile equipped with a drive source such as an engine and / or motor. It should be noted that... Figure 1 The diagram illustrates an example of a vehicle information providing system 1 including one vehicle 10, but the number of vehicles 10 is not limited to this. For example, the vehicle information providing system 1 may include multiple vehicles 10.

[0043] The vehicle communication unit 10a is mounted on the vehicle 10. The vehicle communication unit 10a is configured to wirelessly communicate with an external server 100 via a communication base station 50a and a communication network 50. Specifically, the vehicle communication unit 10a is a DCM (Data Communication Module).

[0044] The communication network 50 comprises, for example, the Internet, a mobile phone network, or a PHS (Personal Handy-phone System) network, and connects the vehicle-mounted communication unit 10a and the external server 100 via a communication base station 50a. In this embodiment, the case where the Internet is used as the communication network 50 will be described. The vehicle-mounted communication unit 10a communicates with the external server 100, sending information related to the driving status of the vehicle 10 to the external server 100 or receiving information related to driving assistance for the vehicle 10 from the external server 100. Thus, information for sending and receiving telematics services is exchanged between the vehicle-mounted communication unit 10a and the external server 100.

[0045] Communication base station 50a is connected to communication network 50 and transmits and receives information wirelessly with vehicle-mounted communication unit 10a. Furthermore, communication base station 50a transmits information wirelessly from vehicle-mounted communication unit 10a to external server 100 via communication network 50. Additionally, communication base station 50a transmits information generated by external server 100 to vehicle-mounted communication unit 10a.

[0046] External server 100 stores information sent from vehicle communication unit 10a. Furthermore, external server 100 sends information for telematics services based on requests sent from vehicle communication unit 10a. External server 100 is managed by an organization such as SIRT (Security Incident Response Team). SIRT is an organization that implements incident response in the event of a security incident occurring in vehicle 10.

[0047] Figure 2 This is an explanatory diagram showing the general configuration of vehicle 10. (See diagram for example.) Figure 2 As shown, the vehicle 10 is equipped with a vehicle system 200 including an onboard communication unit 10a. Furthermore, a portable communication terminal 300 is provided in the passenger compartment 10b of the vehicle 10. The portable communication terminal 300 is, for example, a portable communication terminal owned by a passenger riding in the passenger compartment 10b. Examples of portable communication terminals 300 include smartphones, mobile phones, and dedicated terminals. In this embodiment, the case where a smartphone is used as the portable communication terminal 300 will be described.

[0048] Figure 3 This is a schematic block diagram showing the configuration of the vehicle system 200. (As shown...) Figure 3 As shown, the vehicle system 200 includes: an on-board communication unit 10a, a monitoring unit 202, and multiple control units 204 and 206.

[0049] The monitoring unit 202 is electrically connected to the in-vehicle communication unit 10a via network bus 208 and to multiple control units 204 and 206 via network bus 210. The in-vehicle communication unit 10a is electrically connected to the multiple control units 204 and 206 via network buses 208 and 210 and the monitoring unit 202. The monitoring unit 202 is connected to all network buses 208 and 210 of the vehicle system 200 and monitors the in-vehicle network. Specifically, the monitoring unit 202 is a CGW (Central Gateway). Based on information output from the in-vehicle communication unit 10a, the monitoring unit 202 monitors whether any anomalies have occurred in the in-vehicle communication unit 10a due to safety events. Details regarding the monitoring unit 202 will be described later.

[0050] Multiple control units 204 and 206 are composed of a microcomputer including a CPU, a ROM storing programs, and RAM as a working area, and control various in-vehicle devices mounted on the vehicle 10. The multiple control units 204 and 206 include, for example, steering ECU, ABS ECU, fuel injection ECU, airbag ECU, air conditioning ECU, interior dimming ECU, dashboard ECU, sunroof ECU, door lock ECU, and car navigation ECU. In this embodiment, the case where the airbag ECU is used as control unit 204 will be described. Control unit 204 controls the airbag devices installed in the driver's and passenger's seats of the vehicle 10. Furthermore, the case where the car navigation ECU is used as control unit 206 will be described. Control unit 206 controls the car navigation device installed in the dashboard of the vehicle 10. It should be noted that control unit 206 can wirelessly communicate with the portable communication terminal 300 according to a specific profile corresponding to the function of the car navigation device in multiple profiles of the short-range wireless communication standard.

[0051] In this embodiment, the monitoring unit 202 continuously monitors whether the vehicle 10 experiences any abnormalities in its various on-board devices due to events such as accidents. For example, in the event of an accident or similar incident involving the vehicle 10, the airbag ECU, i.e., the control unit 204, activates the airbag device of the vehicle 10. At this time, the monitoring unit 202 obtains the activation information of the airbag device from the control unit 204. If the monitoring unit 202 obtains the activation information of the airbag device, it determines that an event has occurred in the vehicle 10. The monitoring unit 202 generates event information indicating that an event has occurred in the vehicle 10. The generated event information is sent to the on-board communication unit 10a via the network bus 208 and uploaded to the external server 100 via the on-board communication unit 10a.

[0052] Back Figure 2 The portable communication terminal 300 is configured to communicate with the communication base station 50a and the communication network 50 (see reference). Figure 1 The portable communication terminal 300 is configured to wirelessly communicate with an external server 100 via a communication base station 50a and a communication network 50. Furthermore, the portable communication terminal 300 is configured to communicate with the vehicle navigation ECU, i.e., control unit 206 (see reference 50a). Figure 3 The portable communication terminal 300 is configured to conduct short-range wireless communication with the control unit 206 according to a specific profile of the short-range wireless communication standard of the car navigation device. The short-range wireless communication standard is, for example, Bluetooth (registered trademark).

[0053] Here, in order to achieve a short-range wireless communication connection between the portable communication terminal 300 and the control unit 206, it is sometimes necessary to launch a dedicated application (hereinafter referred to as the application) on the portable communication terminal 300. As a method for launching the application on the portable communication terminal 300, the following three methods can be considered: The first method is to connect the portable communication terminal 300 and the control unit 206 via the dedicated application on the portable communication terminal 300 during a short-range wireless communication connection. The second method is to use, for example, the screen of a car navigation device to trigger the launch of the dedicated application on the portable communication terminal 300 when the vehicle system 200 malfunctions. The third method is to display a QR code (registered trademark) on, for example, the screen of a car navigation device, and launch the dedicated application when the portable communication terminal 300 reads the QR code.

[0054] However, in the event of a security incident involving the vehicle communication unit 10a, it is necessary to isolate the vehicle communication unit 10a from the vehicle system 200 before the security incident affects the behavior of the vehicle 10. On the other hand, in the event of a security incident, it is necessary to upload information related to the security incident (hereinafter referred to as incident information) to the external server 100 managed by SIRT. However, if the vehicle communication unit 10a is isolated from the vehicle system 200, the means to upload the incident information to the external server 100 is lost, and it becomes difficult to upload the incident information to the external server 100.

[0055] In this embodiment, the monitoring unit 202 continuously monitors whether any abnormality occurs in the vehicle communication unit 10a due to a safety event. Specifically, the monitoring unit 202 stores ID information (not shown) during communication between the vehicle communication unit 10a and the multiple control units 204, 206. Furthermore, the monitoring unit 202 stores information related to the communication interval during communication between the vehicle communication unit 10a and the multiple control units 204, 206 in a ROM (not shown).

[0056] The monitoring unit 202 compares the ID information obtained from the vehicle communication unit 10a via the network bus 208 with the ID information stored in the ROM. If they are the same ID information, it is determined that no abnormality has occurred in the vehicle communication unit 10a due to a security event. Furthermore, the monitoring unit 202 compares the communication interval of the information obtained from the vehicle communication unit 10a via the network bus 208 with the communication interval-related information stored in the ROM. If they are the same communication interval, it is determined that no abnormality has occurred in the vehicle communication unit 10a due to a security event.

[0057] On the other hand, the monitoring unit 202 compares the ID information obtained from the vehicle communication unit 10a via the network bus 208 with the ID information stored in the ROM. If they are different ID information, it is determined that an anomaly has occurred in the vehicle communication unit 10a due to a security event. Furthermore, the monitoring unit 202 compares the communication interval of the information obtained from the vehicle communication unit 10a via the network bus 208 with the communication interval-related information stored in the ROM. If they are different communication intervals, it is determined that an anomaly has occurred in the vehicle communication unit 10a due to a security event.

[0058] If the monitoring unit 202 determines that an anomaly has occurred in the vehicle communication unit 10a due to a safety incident, it cuts off communication with the vehicle communication unit 10a. For example, the monitoring unit 202 cuts off communication with the vehicle communication unit 10a by discarding all information received from the vehicle communication unit 10a. Alternatively, the monitoring unit 202 can also cut off communication with the vehicle communication unit 10a by disconnecting the network bus 208.

[0059] Furthermore, the monitoring unit 202 generates event information indicating that a safety event has occurred in the vehicle communication unit 10a. The event information may include, for example, flag information indicating that the vehicle communication unit 10a is malfunctioning. However, it is not limited to this; the event information may also include information related to the details of the safety event.

[0060] The monitoring unit 202 sends the generated event information to the control unit 206 via the network bus 210. The control unit 206 sends the event information received from the monitoring unit 202 to the portable communication terminal 300 according to a specific configuration file of the short-range wireless communication standard.

[0061] Figure 4 This is a schematic block diagram illustrating the operation of the vehicle system 200 in the event of a safety incident occurring in the onboard communication unit 10a. (Example) Figure 4As shown, in the event of a safety incident in the vehicle communication unit 10a, communication between the vehicle communication unit 10a and the monitoring unit 202 is cut off. During this communication cutoff, the control unit 206 obtains event information from the monitoring unit 202.

[0062] The control unit 206 performs short-range wireless communication with the portable communication terminal 300 according to a specific configuration file corresponding to the function of the car navigation device among multiple configuration files of the short-range wireless communication standard. When the monitored unit 202 notifies the portable communication terminal 300 of an anomaly in the vehicle communication unit 10a, the control unit 206 instructs the portable communication terminal 300 to report the anomaly in the vehicle communication unit 10a. Thus, during the communication interruption caused by the vehicle communication unit 10a, the portable communication terminal 300 reports the anomaly of the vehicle communication unit 10a to the external server 100.

[0063] Here, the configuration file for exchanging information between the short-range wireless communication device installed in the car navigation system mounted in vehicle 10 and the portable communication terminal 300 is one of several existing configuration files of the short-range wireless communication standard. Therefore, in order to achieve short-range wireless communication with the portable communication terminal 300, the control unit 206 of this embodiment uses the three configuration files shown below.

[0064] The first profile is the HFP (Hands-Free Profile), used for making and / or receiving calls using a hands-free device. The HFP is the profile used for hands-free calling functionality in car navigation systems.

[0065] Figure 5 This is a timing diagram for short-range wireless communication according to the first configuration file. For example... Figure 5 As shown, if the vehicle communication unit 10a is illegally accessed, performs abnormal actions, and sends abnormal signals, the monitoring unit 202 detects the abnormality of the vehicle communication unit 10a and isolates the vehicle communication unit 10a from the vehicle system 200. Furthermore, the monitoring unit 202 notifies the control unit 206 of the abnormal situation that has occurred in the vehicle communication unit 10a. For example, the monitoring unit 202 notifies the control unit 206 of the abnormal situation by sending event information to the control unit 206.

[0066] When the monitored unit 202 notifies the vehicle communication unit 10a of an anomaly, the control unit 206, following the HFP instruction, instructs the portable communication terminal 300 to call a dedicated telephone number for reporting the anomaly of the vehicle communication unit 10a. Then, by instructing the portable communication terminal 300 to call the dedicated telephone number, the control unit 206 reports the anomaly of the vehicle communication unit 10a to the external server 100 during a communication interruption caused by the vehicle communication unit 10a. According to the HFP, the anomaly of the vehicle communication unit 10a can be notified to the external server 100 by calling a dedicated telephone number instead of event information. Therefore, the processing load on the control unit 206 and the portable communication terminal 300 can be reduced.

[0067] The second profile is the DUN (Dial-up Networking Profile), used for dialing up to the Internet via a portable communication terminal 300. The DUN is a profile used for dialing up short-range wireless communication installed in a car navigation system.

[0068] Figure 6 This is a timing diagram for short-range wireless communication according to the second configuration file. For example... Figure 6 As shown, if the vehicle communication unit 10a is illegally accessed, performs abnormal actions, and sends abnormal signals, the monitoring unit 202 detects the abnormality of the vehicle communication unit 10a and isolates it. Furthermore, the monitoring unit 202 notifies the control unit 206 of the abnormal situation that has occurred in the vehicle communication unit 10a. For example, the monitoring unit 202 notifies the control unit 206 of the abnormal situation by sending event information to the control unit 206.

[0069] When the monitored unit 202 notifies the portable communication terminal 300 of an anomaly in the vehicle communication unit 10a, the control unit 206 instructs the portable communication terminal 300, according to the DUN, to dial and connect to the Internet. Then, the control unit 206 uploads event information indicating the anomaly of the vehicle communication unit 10a to the external server 100 via the portable communication terminal 300, which is connected to the Internet. Based on the DUN, which has been in use for some time, a short-range wireless communication connection between the car navigation device and the portable communication terminal 300 is possible even when the portable communication terminal 300 is an older model than the latest smartphones, such as a mobile phone.

[0070] The third configuration file is the FTP (File Transfer Profile), used for file transfer / communication. FTP is a configuration file used for data file transfer via short-range wireless communication installed in car navigation systems.

[0071] Figure 7 This is a timing diagram for short-range wireless communication according to the third configuration file. For example... Figure 7 As shown, if the vehicle communication unit 10a is illegally accessed, performs abnormal actions, and sends abnormal signals, the monitoring unit 202 detects the abnormality of the vehicle communication unit 10a and isolates it. Furthermore, the monitoring unit 202 notifies the control unit 206 of the abnormal situation that has occurred in the vehicle communication unit 10a. For example, the monitoring unit 202 notifies the control unit 206 of the abnormal situation by sending event information to the control unit 206.

[0072] When the monitored unit 202 notifies the vehicle communication unit 10a of an anomaly, the control unit 206 generates a data file containing event information indicating the anomaly of the vehicle communication unit 10a. Furthermore, the control unit 206 instructs the portable communication terminal 300 via FTP to upload the data file over the Internet. The control unit 206 sends the data file to the portable communication terminal 300, thereby uploading the data file from the portable communication terminal 300 to the external server 100 via the Internet. According to FTP, the data file can contain event information indicating the specific anomaly of the vehicle communication unit 10a.

[0073] Figure 8 This is a flowchart illustrating an example of the event information transmission process in this embodiment. For example... Figure 8 As shown, the monitoring unit 202 acquires information output from various vehicle-mounted devices (S501). For example, the monitoring unit 202 acquires information output from the vehicle communication unit 10a and multiple control units 204, 206.

[0074] Based on the acquired information, the monitoring unit 202 determines whether an event has occurred in vehicle 10 (S503). If no event has occurred in vehicle 10, the monitoring unit 202 returns the processing to S501 and acquires information output from various vehicle-mounted devices again. On the other hand, if an event has occurred in vehicle 10, it determines whether the event is a safety event (S505). Here, the monitoring unit 202 determines whether an anomaly has occurred in vehicle-mounted communication unit 10a due to a safety event based on the information acquired from vehicle-mounted communication unit 10a.

[0075] If the event is not a safety event, the monitoring unit 202 generates event information indicating that an event has occurred in the vehicle 10 (S507). The monitoring unit 202 uploads the generated event information to the external server 100 via the vehicle communication unit 10a (S509).

[0076] On the other hand, if the event is a safety event, the monitoring unit 202 cuts off communication with the vehicle communication unit 10a (S511). The monitoring unit 202 generates event information indicating that a safety event has occurred in the vehicle communication unit 10a (S513). The monitoring unit 202 sends the generated event information to the control unit 206 (S515).

[0077] Control unit 206 determines whether short-range wireless communication with portable communication terminal 300 is possible (S517). If short-range wireless communication is not possible, control unit 206 terminates the event information transmission process. On the other hand, if short-range wireless communication is possible, control unit 206 uploads the event information to external server 100 via portable communication terminal 300 (S519).

[0078] According to this embodiment, when the monitoring unit 202 detects an anomaly in the vehicle communication unit 10a, it cuts off communication between the vehicle communication unit 10a and the monitoring unit 202. Furthermore, the monitoring unit 202 notifies the control unit 206 of the anomaly in the vehicle communication unit 10a. Upon receiving notification of the anomaly in the vehicle communication unit 10a from the monitoring unit 202, the control unit 206 instructs the portable communication terminal 300 to report the anomaly in the vehicle communication unit 10a according to a specific configuration file of the short-range wireless communication standard. Thus, during the communication interruption caused by the vehicle communication unit 10a, the portable communication terminal 300 reports the anomaly in the vehicle communication unit 10a to the external server 100. As a result, in the event of an anomaly in the vehicle communication unit 10a due to a security incident such as unauthorized intrusion, adverse effects on the behavior of the vehicle 10 can be prevented, and information related to the anomaly in the vehicle communication unit 10a can be transmitted to the external server 100.

[0079] The above description has been made with reference to the accompanying drawings, but it is self-evident that the present invention is not limited to this embodiment. Obviously, those skilled in the art will be able to conceive of various modifications or alterations within the scope of the claims, and understand that these modifications or alterations also fall within the technical scope of the present invention.

[0080] In the above embodiment, the control unit 206 was described as a car navigation ECU that controls a car navigation device. However, it is not limited to this; the control unit 206 may also be a car audio ECU that controls a car audio device that does not have car navigation functionality. In this case, the car audio device has the same protocol as the car navigation device. The control unit 206 can wirelessly communicate with the portable communication terminal 300 according to a specific profile corresponding to the function of the car audio device among multiple profiles of the short-range wireless communication standard.

[0081] Industrial availability

[0082] This invention can be used in vehicles.

Claims

1. A vehicle, characterized in that, have: The vehicle-mounted communication unit is installed in the vehicle and is capable of wirelessly communicating information for telematics services with an external server. A monitoring unit that monitors whether an anomaly has occurred in the vehicle communication unit due to a safety incident; A control unit that controls onboard devices mounted on the vehicle; as well as The storage unit stores information used during communication between the vehicle-mounted communication unit and the monitoring unit. If the monitoring unit determines that an anomaly has occurred in the vehicle communication unit due to a security event when the ID information obtained from the vehicle communication unit via the network bus differs from the ID information stored in the storage unit, or when the communication interval of the information obtained from the vehicle communication unit via the network bus differs from the communication interval-related information stored in the storage unit, the monitoring unit determines that an anomaly has occurred in the vehicle communication unit due to a security event. When the monitoring unit detects an anomaly in the vehicle communication unit, it discards all information received from the vehicle communication unit, thereby cutting off communication between the vehicle communication unit and the monitoring unit, and notifies the control unit of the anomaly in the vehicle communication unit. The control unit can communicate wirelessly with a portable communication terminal according to a specific configuration file corresponding to the function of the vehicle-mounted device from among multiple configuration files of the short-range wireless communication standard. When the control unit is notified of an anomaly in the vehicle communication unit by the monitoring unit, it instructs the portable communication terminal to report the anomaly in the vehicle communication unit according to the specific configuration file of the short-range wireless communication standard. This allows the portable communication terminal to report the anomaly in the vehicle communication unit to the external server during a communication interruption caused by the vehicle communication unit.

2. The vehicle according to claim 1, characterized in that, The specific configuration file is a hands-free configuration file used as the configuration file for the hands-free calling function of the vehicle-mounted device. When the control unit is notified by the monitoring unit of an anomaly in the vehicle communication unit caused by a security event related to the vehicle communication unit, it instructs the portable communication terminal to call a dedicated phone number for reporting the anomaly in the vehicle communication unit according to the hands-free configuration file. By having the portable communication terminal call the dedicated phone number, the anomaly in the vehicle communication unit is reported to the external server via the portable communication terminal during the communication interruption caused by the vehicle communication unit.

3. The vehicle according to claim 1, characterized in that, The specific configuration file is a dial-up network configuration file used for dial-up connection of the vehicle-mounted device. When the control unit is notified by the monitoring unit of an anomaly in the vehicle communication unit, it instructs the portable communication terminal to dial up and connect to the network according to the dial-up network configuration file. The portable communication terminal, which is connected to the network, then uploads the event information indicating the anomaly of the vehicle communication unit to the external server.

4. The vehicle according to claim 1, characterized in that, The specific configuration file is a file transfer configuration file used for data file transfer of the vehicle-mounted device. When the monitoring unit notifies the control unit of an anomaly in the vehicle communication unit, the control unit generates a data file containing event information indicating the anomaly in the vehicle communication unit, and instructs the portable communication terminal to upload the data file over the network according to the file transfer configuration file. By sending the data file to the portable communication terminal, the data file is uploaded from the portable communication terminal to the external server over the network.

5. The vehicle according to any one of claims 1 to 4, characterized in that, The short-range wireless communication standard is Bluetooth.

Images