Detection device, management device, detection method, and detection program

Abstract

A detection device has a switch provided in a transmission path connecting a plurality of functional sections to each other, a measurement section that measures a signal passing through the transmission path at a first node on a first end side of the switch and a second node on a second end side of the switch, and a detection section that compares a measurement result at the first node and a measurement result at the second node obtained by the measurement section with a reference measurement result used for reference, and detects an abnormality related to the transmission path based on a comparison result.

Description

Technical Field

[0001] The present invention relates to a detection device, a management device, a detection method and a detection program.

[0002] This application claims priority based on Japanese Patent Application No. 2020-11285 filed on January 28, 2020, and the entire content of the disclosure thereof is incorporated herein by reference. Background Art

[0003] Patent Document 1 (US Patent Application Publication No. 2008 / 0043629) discloses the following detection method. Specifically, the detection method is for detecting a fault in a faulty network component of a bus network including two or more transmitters, and the detection method comprises the following steps: transmitting a first signal with a predetermined parameter from a first transmitter of the two or more transmitters to the bus network; receiving the first signal by at least one receiver; and determining whether a first tail follows the first signal, wherein the first tail is an echo indicating that the network component has a fault.

[0004] In addition, Non-Patent Document 1 (Yuta Atobe, three others, "A Study on In-vehicle Network Connection Detection of Unauthorized Devices Using TDR", 2019 Symposium on Cryptography and Information Security, The Institute of Electronics, Information and Communication Engineers) discloses the following technology, which uses TDR (Time Domain Reflectometry) technology to observe the impedance of a network and detect the connection of unauthorized devices.

[0005] Patent Document 1: US Patent Application Publication No. 2008 / 0043629 Specification

[0006] Non-Patent Document 1: Yuta Atobe, three others, "A Study on In-vehicle Network Connection Detection of Unauthorized Devices Using TDR", 2019 Symposium on Cryptography and Information Security, The Institute of Electronics, Information and Communication Engineers Summary of the Invention

[0007] The detection device of the present invention comprises: a switch disposed in a transmission path that interconnects multiple functional units; a measuring unit that measures signals passing through the transmission path at a first node on a first end side of the switch and a second node on a second end side of the switch; and a detection unit that compares the measurement results at the first node and the measurement results at the second node obtained by the measuring unit with a reference measurement result, and detects anomalies related to the transmission path based on the comparison results.

[0008] The management device of the present invention includes: an acquisition unit that acquires measurement results of signals passing through the transmission path, measured at a first node on a first end side of a switch and a second node on a second end side of a transmission path that connects multiple functional units to each other; and a detection unit that compares the measurement results at the first node and the second node acquired by the acquisition unit with a reference measurement result, i.e., a reference measurement result, and detects anomalies related to the transmission path based on the comparison results.

[0009] The detection method of the present invention is a detection method for a detection device having a switch provided in a transmission path that connects multiple functional units to each other. The detection method includes the following steps: measuring the signal passing through the transmission path at a first node on the first end side of the switch, a second node on the second end side of the switch, and a second end; and comparing the measurement results at the first node and the measurement results at the second node with a reference measurement result, and detecting anomalies related to the transmission path based on the comparison results.

[0010] The detection method of the present invention is a detection method for a management device, which includes the following steps: obtaining measurement results of signals passing through the transmission path measured at a first node on the first end side of a switch and a second node on the second end side of a transmission path that connects multiple functional units to each other; comparing the obtained measurement results at the first node and the second node with a reference measurement result, and detecting anomalies related to the transmission path based on the comparison results.

[0011] The detection program of the present invention is used in a detection device having a switch provided in a transmission path that connects multiple functional units to each other. The detection program enables a computer to function as a measurement unit that measures the signal passing through the transmission path at a first node on the first end side of the switch and a second node on the second end side of the switch; and a detection unit that compares the measurement results at the first node and the measurement results at the second node obtained by the measurement unit with a reference measurement result, and detects anomalies related to the transmission path based on the comparison results.

[0012] One embodiment of the present invention can be implemented not only as a detection device having a processing unit as described above, but also as a semiconductor integrated circuit implementing part or all of the detection device, or as a detection system having a detection device. Furthermore, one embodiment of the present invention can be implemented not only as a management device having a processing unit as described above, but also as a semiconductor integrated circuit implementing part or all of the management device, or as a detection system having a management device. Attached Figure Description

[0013] Figure 1 This is a diagram illustrating the structure of the communication system according to the first embodiment of the present invention.

[0014] Figure 2 This is a diagram showing the structure of the vehicle-mounted device assembly according to the first embodiment of the present invention.

[0015] Figure 3 This is a diagram showing the structure of the detection device according to the first embodiment of the present invention.

[0016] Figure 4 This is a diagram showing an example of the waveform of a signal measured by the detection device according to the first embodiment of the present invention.

[0017] Figure 5 This is a diagram showing the structure of a vehicle-mounted device assembly according to a variation of the first embodiment of the present invention.

[0018] Figure 6 This is a diagram illustrating the structure of a management device according to a variation of the first embodiment of the present invention.

[0019] Figure 7 This is a flowchart illustrating an example of the operation flow of the detection device according to the first embodiment of the present invention when detecting anomalies related to a transmission line.

[0020] Figure 8This is a flowchart illustrating an example of the operation flow of a management device, as described in a variation of the first embodiment of the present invention, when detecting anomalies related to a transmission line.

[0021] Figure 9 This is a diagram illustrating an example of the timing of anomaly detection processing in the detection system according to the first embodiment of the present invention.

[0022] Figure 10 This is a diagram showing the structure of the vehicle-mounted device assembly according to the second embodiment of the present invention.

[0023] Figure 11 This is a diagram showing the structure of the detection device according to the second embodiment of the present invention. Detailed Implementation

[0024] In the past, technologies have been developed to improve network security.

[0025] [The problem this invention aims to solve]

[0026] The desired technology is one that surpasses the technology described in Patent Document 1 and can achieve superior functions related to network security.

[0027] The present invention was proposed to solve the above-mentioned problems, and its purpose is to provide a detection device, management device, detection method and detection procedure that can realize excellent functions related to network security.

[0028] [Effects of the Invention]

[0029] According to the present invention, excellent functions related to network security can be achieved.

[0030] [Description of Embodiments of the Invention]

[0031] First, the embodiments of the present invention will be described.

[0032] (1) The detection device according to the embodiments of the present invention includes: a switch unit provided in a transmission path that connects multiple functional units to each other; a measurement unit that measures signals passing through the transmission path at a first node on the first end side of the switch and a second node on the second end side of the switch; and a detection unit that compares the measurement results at the first node and the measurement results at the second node obtained by the measurement unit with a reference measurement result, i.e., a reference measurement result, and detects anomalies related to the transmission path based on the comparison results.

[0033] As described above, the structure that detects anomalies related to the transmission path based on the measurement results of the signals at the first node on the first side and the second node on the second side of the switch can, for example, detect the connection of new devices to the transmission path and physical anomalies of the transmission path itself more accurately by using the difference between, for example, the measurement results at the first node and the measurement results at the second node after the network is started by turning on the switch after determining the legality of the functional unit. Therefore, it is possible to achieve excellent functions related to network security.

[0034] (2) Preferably, the reference measurement result is a past measurement result obtained by the measurement unit.

[0035] Based on the above structure, it is possible to take into account changes in measurement results based on the aging of the transmission path and detect anomalies related to the transmission path.

[0036] (3) Preferably, the detection unit further detects anomalies related to the transmission path based on the transmission direction of the signal of the transmission path determined according to the measurement results obtained by the measurement unit.

[0037] Based on the above structure, anomalies in the transmission path can be detected more accurately by using, for example, the transmission direction of the signal determined based on the measurement results at the first and second nodes.

[0038] (4) Preferably, the detection unit further detects anomalies related to the transmission path based on the measurement results of signals passing through the second transmission path at the first node on the first end side of the second switch and the second node on the second end side of the second switch, which are provided in the second transmission path that connects multiple functional units to each other.

[0039] Based on the above structure, it is possible to more accurately estimate abnormal locations in transmission paths that include branch lines, for example.

[0040] (5) Preferably, the detection device has a plurality of the switches and further has a control unit for controlling each of the switches, wherein the control unit disconnects one or more of the switches when the detection unit detects an anomaly related to the transmission path based on the comparison result for any of the switches.

[0041] According to the above structure, it is possible to isolate, for example, illegal functional units from the transmission path, and to bypass, for example, parts that detect abnormalities, to conduct communication between functional units.

[0042] (6) The management device according to the embodiments of the present invention includes: an acquisition unit that acquires measurement results of signals passing through the transmission path, measured at a first node on the first end side of a switch and a second node on the second end side of a transmission path that connects multiple functional units to each other; and a detection unit that compares the measurement results at the first node and the measurement results at the second node acquired by the acquisition unit with a reference measurement result, i.e., a reference measurement result, and detects anomalies related to the transmission path based on the comparison results.

[0043] As described above, the structure that detects anomalies related to the transmission path based on the measurement results of the signals at the first node on the first side and the second node on the second side of the switch can, for example, detect the connection of new devices to the transmission path and physical anomalies of the transmission path itself more accurately by using the difference between, for example, the measurement results at the first node and the measurement results at the second node after the network is started by turning on the switch after determining the legality of the functional unit. Therefore, it is possible to achieve excellent functions related to network security.

[0044] (7) The detection method according to the embodiments of the present invention is a detection method for a detection device having a switch provided in a transmission path that connects multiple functional units to each other. The detection method includes the following steps: measuring the signal passing through the transmission path at a first node on the first end side of the switch and at a second node and a second end on the second end side of the switch; and comparing the measurement results at the first node and the measurement results at the second node with a reference measurement result, i.e., a reference measurement result, and detecting anomalies related to the transmission path based on the comparison results.

[0045] As described above, the method for detecting anomalies related to the transmission path based on the measurement results of signals at the first node on the first side and the second node on the second side of the switch can, for example, detect the connection of new devices to the transmission path and physical anomalies of the transmission path itself more accurately by using the difference between, for example, the measurement results at the first node and the measurement results at the second node after the network is started by turning on the switch after determining the legality of the functional unit. Therefore, excellent functions related to network security can be achieved.

[0046] (8) The detection method of the present invention relates to a detection method for a management device, the detection method comprising the following steps: obtaining measurement results of signals passing through the transmission path measured at a first node on the first end side of a switch and a second node on the second end side of a transmission path that connects multiple functional units to each other; and comparing the obtained measurement results at the first node and the second node with a reference measurement result, i.e., a reference measurement result, and detecting anomalies related to the transmission path based on the comparison results.

[0047] As described above, the method for detecting anomalies related to the transmission path based on the measurement results of signals at the first node on the first side and the second node on the second side of the switch can, for example, detect the connection of new devices to the transmission path and physical anomalies of the transmission path itself more accurately by using the difference between, for example, the measurement results at the first node and the measurement results at the second node after the network is started by turning on the switch after determining the legality of the functional unit. Therefore, excellent functions related to network security can be achieved.

[0048] (9) The detection program according to the embodiments of the present invention is a detection program used in a detection device having a switch provided in a transmission path that connects multiple functional units to each other. The detection program is used to enable a computer to function as a measurement unit that measures the signal passing through the transmission path at a first node on the first end side of the switch and a second node on the second end side of the switch; and a detection unit that compares the measurement results at the first node and the measurement results at the second node obtained by the measurement unit with a reference measurement result, i.e., a reference measurement result, and detects anomalies related to the transmission path based on the comparison results.

[0049] As described above, the structure that detects anomalies related to the transmission path based on the measurement results of the signals at the first node on the first side and the second node on the second side of the switch can, for example, detect the connection of new devices to the transmission path and physical anomalies of the transmission path itself more accurately by using the difference between, for example, the measurement results at the first node and the measurement results at the second node after the network is started by turning on the switch after determining the legality of the functional unit. Therefore, it is possible to achieve excellent functions related to network security.

[0050] Hereinafter, embodiments of the present invention will be described using the accompanying drawings. Furthermore, the same or equivalent parts in the drawings will be labeled with the same reference numerals, and their descriptions will not be repeated. Additionally, at least some of the embodiments described below can be combined in any way.

[0051] <First Embodiment>

[0052] [Structure and Basic Movements]

[0053] Figure 1 This is a diagram illustrating the structure of the communication system according to the first embodiment of the present invention.

[0054] Reference Figure 1 The communication system 501 includes a gateway device 20, multiple vehicle-mounted communication units 30, and multiple vehicle-mounted device groups 40.

[0055] The communication system 501 is, for example, mounted on vehicle 1. Furthermore, the communication system 501 can be used in home networks or factory automation.

[0056] The vehicle network 12 includes a gateway device 20 and transmission lines 13 and 14.

[0057] Multiple vehicle-mounted communication units 30 are connected to the gateway device 20 via corresponding transmission lines 14. The transmission lines 14 are, for example, Ethernet (registered trademark) cables.

[0058] The vehicle-mounted communication unit 30 communicates with devices external to the vehicle 1, for example. Specifically, the vehicle-mounted communication unit 30 is, for example, a TCU (Telematics Communication Unit), a near-field communication terminal device, or an ITS (Intelligent Transport Systems) wireless unit.

[0059] Multiple vehicle-mounted device groups 40 are connected to the gateway device 20 via corresponding transmission lines 13. The transmission lines 13 are, for example, transmission lines conforming to standards such as CAN (Controller Area Network), FlexRay, MOST (MediaOriented Systems Transport), Ethernet, and LIN (Local Interconnect Network).

[0060] Figure 2 This is a diagram showing the structure of the vehicle-mounted device assembly according to the first embodiment of the present invention.

[0061] Reference Figure 2 The vehicle-mounted device group 40 is connected to the gateway device 20 via a bus corresponding to the CAN standard, which is an example of the transmission line 13.

[0062] The on-board unit assembly 40 includes a detection system 401. The detection system 401 includes detection devices 201A, 201B, 201C, 201D, 201E, and 201F connected to conveyor lines 13 and 15, control devices 101A and 101E, actuators 101B and 101F, and sensors 101C and 101D. Hereinafter, detection devices 201A, 201B, 201C, 201D, 201E, and 201F will each be referred to as detection device 201.

[0063] Gateway device 20, vehicle communication unit 30, control devices 101A, 101E, actuators 101B, 101F, and sensors 101C, 101D are examples of vehicle-mounted devices. Additionally, control devices 101A, 101E, actuators 101B, 101F, and sensors 101C, 101D are examples of functional units. Hereinafter, control devices 101A, 101E, actuators 101B, 101F, and sensors 101C, 101D will each be referred to as functional unit 101.

[0064] The first end of transmission lines 13 and 15 is connected to the gateway device 20 via terminating resistor R1. The second end of transmission lines 13 and 15 is connected to terminating resistor R2. Transmission lines 13 and 15 include multiple branch lines, and detection device 201 is connected to each branch line.

[0065] The detection device 201 can be connected to the functional unit 101 via the conveyor line 13. Figure 2 In the example shown, a control device 101A is connected to the detection device 201A, an actuator 101B is connected to the detection device 201B, a sensor 101C is connected to the detection device 201C, a sensor 101D is connected to the detection device 201D, a control device 101E is connected to the detection device 201E, and an actuator 101F is connected to the detection device 201F.

[0066] Furthermore, the detection device 201 is a structure that can be connected to the functional unit 101 via the transmission line 13, but is not limited thereto. The detection device 201 may also be provided in a connector for connecting the transmission line 13 and the functional unit 101. In this case, the detection device 201 and the functional unit 101 are electrically connected by fitting the connector and the functional unit 101 together.

[0067] Functional unit 101, which is connected to detection device 201, communicates with other vehicle-mounted devices via transmission line 13, which are connected to vehicle network 12. For example, functional unit 101 sends signals containing various information to other functional units 101 via transmission line 13.

[0068] The detection device 201 communicates with other detection devices 201 via the transmission line 15. The transmission line 15 is, for example, a power line.

[0069] The control device 101A is, for example, an ECU (Electronic Control Unit). Furthermore, the vehicle-mounted device assembly 40 is not limited to a structure containing multiple functional units 101; it may also contain only one functional unit 101. Additionally, a portion of the functional units 101 of the vehicle-mounted device assembly 40 may be directly connected to the transmission line 13 without being connected to the detection device 201.

[0070] Transmission line 13 may be configured according to the system. Specifically, transmission line 13 may be, for example, a drive system bus, a chassis / safety system bus, a body / electrical system bus, and an AV / information system bus.

[0071] The detection device 201 of the drive system bus is connected to an engine control unit, an AT (Automatic Transmission) control unit, and an HEV (Hybrid Electric Vehicle) control unit, which are examples of functional units 101. The engine control unit, the AT control unit, and the HEV control unit control the switching between the engine, the AT, and the engine and the electric motor, respectively.

[0072] The detection device 201 of the chassis / safety system bus is connected to a brake control device, a chassis control device, and a steering control device, which are examples of functional units 101. The brake control device, chassis control device, and steering control device control the braking, chassis, and steering, respectively.

[0073] The detection device 201 of the vehicle body / electrical system bus is connected to an instrument display control device, an air conditioning control device, an anti-theft control device, an airbag control device, and a smart access control device, which are examples of functional units 101. The instrument display control device, air conditioning control device, anti-theft control device, airbag control device, and smart access control device control the instrument, air conditioning, anti-theft mechanism, airbag mechanism, and smart access control respectively.

[0074] The detection device 201 of the AV / information system bus is connected to a navigation control device, an audio control device, an ETC (Electronic Toll Collection System) (registered trademark) control device, and a telephone control device, which are examples of functional units 101. The navigation control device, audio control device, ETC control device, and telephone control device control the navigation device, audio device, ETC device, and mobile phone, respectively.

[0075] Gateway device 20, for example, is a central gateway (CGW) capable of communicating with other vehicle-mounted devices.

[0076] The gateway device 20, for example, performs relay processing on the vehicle 1 to relay information exchanged between on-board unit groups 40 connected to different transmission lines 13 via corresponding detection devices 201, information exchanged between each on-board communicator 30, and information exchanged between on-board unit groups 40 and on-board communicators 30.

[0077] [Detection device]

[0078] Figure 3 This is a diagram showing the structure of the detection device according to the first embodiment of the present invention.

[0079] Reference Figure 3 The detection device 201 includes a switch 210, a measuring unit 220, a communication unit 230, a control unit 240, a detection unit 250, and a storage unit 260.

[0080] The measurement unit 220, communication unit 230, control unit 240, and detection unit 250 are implemented, for example, by processors such as CPUs (Central Processing Units) and DSPs (Digital Signal Processors). The storage unit 260 is, for example, a non-volatile memory.

[0081] Switch 210 is disposed on a transport path that interconnects multiple functional units 101. More specifically, the first end of switch 210 is connected via transport line 13 to the functional unit 101 corresponding to its own detection device 201. Furthermore, the second end of switch 210 is connected to other functional units 101 via transport line 13 and other detection devices 201. Switch 210 is, for example, an analog switch.

[0082] Switch 210 is installed on transmission line 13 to improve the security of vehicle network 12. For example, a judgment device (not shown) determines the validity of function unit 101 by some method when communication system 501 is started. Switch 210 is turned off when communication system 501 is started, and if the judgment device determines that function unit 101 is valid, it is turned on, for example, according to the control signal from the judgment device to control unit 240.

[0083] [Surveying Department]

[0084] The measuring unit 220 measures the signal passing through the transmission path at a first node on the first end side of the switch 210 and a second node on the second end side of the switch 210. The measuring unit 220 can be implemented by a single measuring device that measures the signal passing through the transmission path at the first node and the second node, or it can be implemented by a first measuring device that measures the signal passing through the transmission path at the first node and a second measuring device that measures the signal passing through the transmission path at the second node.

[0085] More specifically, the measuring unit 220 measures the waveform of the signal passing through node N1 of the transmission line 13 connected to the first terminal of the switch 210, and the waveform of the signal passing through node N2 of the transmission line 13 connected to the second terminal of the switch 210. Node N1 is an example of the first node, and node N2 is an example of the second node.

[0086] For example, the measurement unit 220 measures the waveform of the signal passing through node N1 by sampling the voltage of node N1 according to a predetermined sampling period. Similarly, the measurement unit 220 measures the waveform of the signal passing through node N2 by sampling the voltage of node N2 according to a predetermined sampling period.

[0087] Specifically, for example, the measurement unit 220 includes a sample-and-hold circuit, an amplifier, and an AD converter. The measurement unit 220 removes offsets such as DC components from the analog voltages at nodes N1 and N2, amplifies the analog voltages, and samples the amplified analog voltages.

[0088] The measurement unit 220 stores the voltage sampling data S1 at node N1 and the voltage sampling data S2 at node N2 in the storage unit 260.

[0089] [Testing Department]

[0090] The detection unit 250 compares the measurement results at node N1 and node N2 of the measurement unit 220 with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0091] For example, the detection unit 250 performs calculations using the sampled data S1 and S2 stored in the storage unit 260 via the measurement unit 220, thereby calculating the characteristic quantities of the signal passing through the transmission line 13.

[0092] Figure 4 This is a diagram illustrating an example of the waveform of a signal measured by the detection device according to the first embodiment of the present invention. Figure 4 The waveform of a signal, for example, passing through node N1, is shown.

[0093] Reference Figure 4 For example, the detection unit 250 sets multiple time observation windows with time intervals Tw during a specified target period Tm. Furthermore, the detection unit 250 extracts multiple sampled data S1 and S2 from each time observation window in the sampled data S1 and S2, multiplies the extracted sampled data S1 and S2 by a specified weighting function, and integrates them.

[0094] Here, the detection unit 250 can set the length of the time interval Tw. For example, the detection unit 250 extracts, for example, portions of the waveform of the signal passing through the transmission line 13 that are not logically related to the communication data, based on a time observation window. More specifically, the detection unit 250 sets the length of the time interval Tw in a manner that extracts portions other than the rising and falling edges of the waveform.

[0095] The detection unit 250 calculates the difference D between the calculated value obtained by multiplying the extracted sampled data S1 by a weighting function and integrating it, and the calculated value obtained by multiplying the extracted sampled data S2 by a weighting function and integrating it. The difference D is, for example, a value generated by the impedance of the analog switch, i.e., switch 210.

[0096] The detection unit 250 compares the calculated difference D with the reference difference D based on the measurement results for reference, and detects any abnormalities related to the transmission line 13 based on the comparison results.

[0097] For example, the reference measurement result is a past measurement result obtained by the measurement unit 220.

[0098] More specifically, the detection unit 250 saves the difference D calculated for each object period Tm as a feature quantity of the object period Tm to the storage unit 260. The detection unit 250 detects anomalies related to the transmission line 13 based on the temporal changes of the difference D for each object period Tm.

[0099] Specifically, if the detection unit 250 saves the newly calculated difference D to the storage unit 260, it calculates the change in the difference D per unit time based on the saved difference D and the previously calculated differences D in the storage unit 260, and compares the calculated change with a predetermined threshold Th1. Furthermore, if the change in the difference D per unit time is greater than or equal to the predetermined threshold Th1, the detection unit 250 determines that an abnormality related to the transmission line 13 has occurred. Additionally, for example, the detection unit 250 estimates, based on the change in the difference D per unit time, the distance between the location of the abnormality on the transmission line 13 and the switch 210, and the number of abnormalities occurring on the transmission line 13.

[0100] For example, the detection unit 250 further detects anomalies related to the transmission path based on the transmission direction of the signal of the transmission path determined by the measurement results obtained by the measurement unit 220.

[0101] More specifically, the detection unit 250 detects the voltage changes of nodes N1 and N2 of the transmission line 13 based on the sampling data S1 and S2 from the storage unit 260, and determines the transmission direction of the signal passing through the transmission line 13 based on the detection results.

[0102] Specifically, the detection unit 250 determines whether the signal passing through the transmission line 13 is a signal sent from the functional unit 101 connected to its own detection device 201 to other functional units 101, or a signal sent from other functional units 101 to the functional unit 101 connected to its own detection device 201.

[0103] When the detection unit 250 determines, based on the sampling data S1 and S2, that the signal passing through the transmission line 13 is a signal sent by the functional unit 101 connected to its own detection device 201, it detects the transmission time of the signal from the functional unit 101 based on the sampling timing of the sampling data S1 and S2.

[0104] If the detection unit 250 detects the transmission time, it sets the target period Tm and time observation window based on the detected transmission time. It calculates the difference D by multiplying the sampled data S1 and S2 extracted using the set time observation window by a prescribed weight function and integrating them.

[0105] In addition, the detection unit 250 outputs transmission time information indicating the detected transmission time to the communication unit 230.

[0106] If the communication unit 230 receives transmission time information from the detection unit 250, it generates a frame that stores the transmission time information and the ID of its own detection device 201, such as the MAC address, and sends the generated frame to other detection devices 201 in the vehicle-mounted device group 40 via the transmission line 15.

[0107] For example, the detection unit 250 further detects anomalies related to the transmission path based on measurement results of signals passing through the other transmission path at a first node on the first end side of another switch 210 provided on other transmission paths that connect the multiple functional units 101 to each other. More specifically, the detection unit 250 further detects anomalies related to the transmission line 13 based on measurement results of the switches 210 of other detection devices 201.

[0108] More specifically, if the communication unit 230 receives a frame containing transmission time information and the MAC address of the transmission source from another detection device 201 via the transmission line 15, it obtains the transmission time information and MAC address from the received frame and outputs the obtained transmission time information and MAC address to the detection unit 250.

[0109] If the detection unit 250 receives transmission time information and MAC address from the communication unit 230, it sets the target period Tm and time observation window with the transmission time represented by the received transmission time information as the reference, and multiplies the sampled data S1 and S2 extracted using the set time observation window by a prescribed weight function and integrates them.

[0110] In addition, the detection unit 250 determines the detection device 201 that is the source of the frame transmission and the functional unit 101 that is the source of the signal transmitted through the transmission line 13 based on the MAC address received from the communication unit 230.

[0111] If the detection unit 250 determines the function unit 101 that is the source of the signal, it saves the characteristic quantity of the signal, i.e., the difference value D, in association with the determined function unit 101 to the storage unit 260. Furthermore, the detection unit 250 detects anomalies related to the transmission line 13 based on the timing changes of the difference values ​​D saved for each function unit 101.

[0112] For example, if the change in the difference D corresponding to a certain functional unit 101 exceeds a predetermined threshold Th1 per unit time, it is determined that an abnormality has occurred on the transmission line 13 between the functional unit 101 and the functional unit 101 connected to its own detection device 201.

[0113] More specifically, for example, if the detection unit 250 of the detection device 201F connected to the actuator 101F determines that an anomaly has occurred in the transmission line 13, excluding the common portion of the transmission path between the control device 101A and the actuator 101F, in the transmission path between the control device 101A and the actuator 101F. This is because the change in the difference D corresponding to the control device 101A per unit time exceeds a predetermined threshold Tha, but the change in the difference D corresponding to the control device 101E per unit time does not exceed the predetermined threshold The. The transmission path between the control device 101E and the actuator 101F is an example of a second transmission path.

[0114] If the detection unit 250 determines that an abnormality has occurred in the transmission line 13, it will send the determination information indicating that an abnormality has occurred in the transmission line 13 to a host device inside or outside the vehicle 1 via the communication unit 230 and the transmission line 15. In addition, the detection unit 250 will send the determination information to other detection devices 201 via the communication unit 230 and the transmission line 15.

[0115] For example, the detection unit 250 of the detection device 201F integrates the judgment information received from other detection devices 201 via the transmission line 15 and the communication unit 230, thereby estimating the location where an abnormality occurred on the transmission line 13.

[0116] Additionally, for example, the detection unit 250 outputs a control signal to the control unit 240 based on the judgment result, thereby turning off the switch 210. If the detection unit 250 turns off the switch 210 by outputting a control signal to the control unit 240, it sends the status information indicating that the switch 210 is in the off state to the other detection devices 201 of the vehicle-mounted device group 40 via the communication unit 230 and the transmission line 15.

[0117] In addition, the communication unit 230 may also have the following structure, that is, periodically acquiring one or more sampling data S1, S2 accumulated in the storage unit 260 by the measurement unit 220, generating a frame that stores the acquired sampling data S1, S2 and the ID of its own detection device 201, such as the MAC address, and sending the generated frame to other detection devices 201 of the vehicle-mounted device group 40 via the transmission line 15.

[0118] [Variation Example]

[0119] Figure 5 This is a diagram showing the structure of a vehicle-mounted device assembly according to a variation of the first embodiment of the present invention.

[0120] Reference Figure 5 The on-board unit 40 includes a detection device 201, a functional unit 101, and a management device 301 connected to the transmission line 15.

[0121] Figure 6 This is a diagram illustrating the structure of a management device according to a variation of the first embodiment of the present invention.

[0122] Reference Figure 6 The management device 301 includes a communication unit 310, a detection unit 320, and a storage unit 330. The communication unit 310 and the detection unit 320 are implemented by processors such as CPUs and DSPs. The storage unit 330 is, for example, a non-volatile memory.

[0123] The communication unit 310 is an example of an acquisition unit. The communication unit 310 acquires the measurement results of the signals that have passed through the transmission path, measured at node N1 on the first end and node N2 on the second end of the switch 210 that sets up the transmission path that connects multiple functional units 101 to each other.

[0124] More specifically, the communication unit 230 of each detection device 201 sends a frame containing one or more sampling data S1, S2 to the management device 301 via the transmission line 15.

[0125] If the communication unit 310 of the management device 301 receives a frame containing one or more sample data S1, S2 and the MAC address of the sending source from the detection device 201 via the transmission line 15, it obtains the sample data S1, S2 and the MAC address from the received frame and stores the sample data S1, S2 and the MAC address in the storage unit 330 in association.

[0126] The detection unit 320 compares the measurement results at node N1 and node N2 obtained by the communication unit 310 with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0127] The detection unit 320 detects anomalies related to the transmission line 13 by performing the same processing as the detection unit 250 of the detection device 201. More specifically, if the detection unit 320 receives transmission time information via the transmission line 15 and the communication unit 310, it performs calculations using the sampled data S1 and S2 stored in the storage unit 330, thereby calculating the characteristic quantities of the signal passing through the transmission line 13.

[0128] In addition, based on the measurement results obtained by the communication unit 310, the detection unit 320 determines the transmission direction of the signal in the transmission path in the same way as the detection unit 250, and further detects anomalies related to the transmission path based on the determination results.

[0129] If the detection unit 320 determines that an abnormality has occurred in the transmission line 13, it will send the determination information indicating that an abnormality has occurred in the transmission line 13 to a host device inside or outside the vehicle 1 via the communication unit 310 and the transmission line 15.

[0130] [Action Flow]

[0131] Each device in the communication system according to embodiments of the present invention has a computer including a memory. The computer's CPU or other arithmetic processing unit reads from the memory and executes a program comprising some or all of the steps of the following flowchart and timing sequence. The programs of the aforementioned multiple devices can be installed externally. The programs of the aforementioned multiple devices are circulated in a state where they are respectively stored on a recording medium.

[0132] Figure 7 This is a flowchart illustrating an example of the operation flow of the detection device according to the first embodiment of the present invention when detecting anomalies related to a transmission line.

[0133] Reference Figure 7First, the detection device 201 measures the waveform of the signal passing through node N1 and the waveform of the signal passing through node N2 of the transmission line 13. More specifically, the detection device 201 samples the voltage at nodes N1 and N2 according to a predetermined sampling period, and stores the sampled data S1 of the voltage at node N1 and the sampled data S2 of the voltage at node N2 in the storage unit 260 (step S102).

[0134] Next, the detection device 201 waits for the transmission of a signal from any functional unit 101 of the vehicle-mounted device group 40 (step S104, NO). If a signal is transmitted from the functional unit 101 (step S104, YES), the target period Tm and time observation window are set based on the transmission time of the signal, and an example of the characteristic quantity of the signal passing through the transmission line 13, namely the difference D, is calculated and saved to the storage unit 260 (step S106).

[0135] Next, the detection device 201 compares the calculated difference D with the calculation results of past differences D in the storage unit 260. For example, the detection device 201 calculates the change in the difference D for each unit of time and compares the calculated change with a predetermined threshold Th1 (step S108).

[0136] If the change in the difference D per unit time is less than the threshold (in step S110, NO), the detection device 201 waits for the transmission of a new signal by the functional unit 101 (in step S104, NO).

[0137] On the other hand, if the change in the difference D per unit time is above the threshold (in step S110, YES), the detection device 201 determines that an abnormality related to the transmission line 13 has occurred (in step S112).

[0138] Next, the detection device 201 sends the judgment information indicating that an abnormality has occurred in the transmission line 13 to the host device inside or outside the vehicle 1 via the transmission line 15 (step S114).

[0139] Next, the detection device 201 waits for the transmission of a new signal by the functional unit 101 (in step S104, NO).

[0140] Figure 8 This is a flowchart illustrating an example of the operation flow of a management device, as described in a variation of the first embodiment of the present invention, when detecting anomalies related to a transmission line.

[0141] Reference Figure 8First, the management device 301 periodically receives frames containing sampling data S1 and S2 from the detection device 201, and obtains the sampling data S1 and S2 from the received frames and stores them in the storage unit 330 (step S202).

[0142] Next, the management device 301 waits for the transmission time information from the detection device 201 (step S204, NO). If the transmission time information is received from the detection device 201 (step S204, YES), the target period Tm and time observation window are set based on the transmission time of the signal. An example of the characteristic quantity of the signal passing through the transmission line 13, namely the difference D, is calculated and saved to the storage unit 330 (step S206).

[0143] Next, the management device 301 compares the calculated difference D with the calculation results of the past difference D in the storage unit 330. For example, the management device 301 calculates the change in the difference D for each unit of time and compares the calculated change with a predetermined threshold Th1 (step S208).

[0144] If the change in the difference D in each unit of time is less than the threshold (in step S210, NO), the management device 301 waits for new transmission time information from the detection device 201 (in step S204, NO).

[0145] On the other hand, if the change in the difference D per unit time is above a threshold (in step S210, YES), the management device 301 determines that an abnormality related to the transmission line 13 has occurred (in step S212).

[0146] Next, the management device 301 sends the judgment information indicating that an abnormality has occurred in the transmission line 13 to the host device inside or outside the vehicle 1 via the transmission line 15 (step S214).

[0147] Next, the detection device 201 waits for new transmission time information from the detection device 201 (in step S204, NO).

[0148] Figure 9 This is a diagram illustrating an example of the timing of the anomaly detection processing of the detection system according to the first embodiment of the present invention.

[0149] Reference Figure 9 First, the control device 101A sends a signal containing various information to the actuator 101B via the transmission line 13 (step S302).

[0150] Next, the detection device 201A measures the signal passing through the transmission line 13 at node N1 on the first end side of its own switch 210 and node N2 on the second end side of its own switch 210 (step S304).

[0151] In addition, the detection device 201B measures the signal passing through the transmission line 13 at node N1 on the first end side of its own switch 210 and node N2 on the second end side of its own switch 210 (step S306).

[0152] Next, the detection device 201A determines the transmission direction of the signal through the transmission line 13 based on the measurement results of the signal through the transmission line 13, and detects the transmission time of the signal of the control device 101A (step S308).

[0153] In addition, the detection device 201A sends the transmission time information indicating the detected transmission time to the detection device 201B (step S310).

[0154] Next, the detection device 201B detects anomalies related to the transmission line 13 based on a comparison of the measurement results of the signal passing through the transmission line 13 and past measurement results, as well as the transmission time indicated by the transmission time information received from the detection device 201A (step S312).

[0155] Furthermore, in the detection apparatus 201 according to the first embodiment of the present invention, the detection unit 250 calculates the change in the difference D accumulated in the storage unit 260 for each unit of time, and detects anomalies related to the transmission line 13 based on the comparison result of the calculated change and a predetermined threshold Th1, but is not limited thereto. The detection unit 250 may also be a structure that compares the difference D calculated using the measurement result obtained by the measurement unit 220 with a predetermined threshold Th2 preset, for example, before the vehicle 1 leaves the factory based on the measurement result obtained by the measurement unit 220, and detects anomalies related to the transmission line 13 based on the comparison result.

[0156] Furthermore, in the detection device 201 according to the first embodiment of the present invention, the detection unit 250 is a structure that determines the transmission direction of the signal of the transmission line 13 and further detects abnormalities related to the transmission line 13 based on the determination result, but is not limited to this. The detection unit 250 may also be a structure that does not determine the transmission direction of the signal of the transmission line 13.

[0157] Furthermore, in the detection device 201 according to the first embodiment of the present invention, the detection unit 250 is a structure that further detects abnormalities related to the transmission line 13 based on the measurement results of the switches 210 of other detection devices 201, but is not limited thereto. The detection unit 250 may also be a structure that detects abnormalities related to the transmission line 13 without using the measurement results of the switches 210 of other detection devices 201.

[0158] Furthermore, in the detection device 201 according to the first embodiment of the present invention, the measuring unit 220 is configured to measure the waveform of the signal passing through nodes N1 and N2 by sampling the voltages of nodes N1 and N2 according to a predetermined sampling period, but is not limited to this. The measuring unit 220 may also be configured to measure the waveform of the signal passing through nodes N1 and N2 by sampling the currents of nodes N1 and N2 according to a predetermined sampling period.

[0159] Furthermore, the management device 301 in the modified embodiment of the present invention is connected to the transmission line 15, but is not limited thereto. The management device 301 may also be installed outside the vehicle 1. In this case, the communication unit 310 of the management device 301 obtains the measurement results of the detection device 210, for example, via the gateway device 20 and the vehicle communication unit 30. In addition, some or all of the functions of the management device 301 can be provided through cloud computing. That is, the management device 301 may also be composed of multiple cloud servers, etc.

[0160] However, there is a desire for technologies that can achieve superior functionality related to network security.

[0161] In contrast, in the detection device 201 according to the first embodiment of the present invention, a switch 210 is provided in the transmission path that interconnects multiple functional units 101. A measurement unit 220 measures the signal passing through the transmission path at node N1 on the first end side and node N2 on the second end side of the switch 210. A detection unit 250 compares the measurement results at node N1 and node N2 obtained by the measurement unit 220 with a reference measurement result, and based on the comparison results, detects anomalies related to the transmission path.

[0162] The first embodiment of the present invention relates to a detection method having a detection device 201 in which a switch 210 is provided in a transmission path that interconnects multiple functional units 101. In this detection method, firstly, the detection device 201 measures the signal passing through the transmission path at node N1 on the first end side and node N2 on the second end side of the switch 210. Next, the detection device 201 compares the measurement results at node N1 and node N2 with a reference measurement result, and based on the comparison results, detects any anomalies related to the transmission path.

[0163] In the management device 301 according to the first embodiment of the present invention, the communication unit 310 acquires the measurement results of signals passing through the transmission path measured at node N1 on the first end side of the switch 210, which is provided with a transmission path connecting multiple functional units 101 to each other, and node N2 on the second end side of the switch 210. The detection unit 320 compares the measurement results at node N1 and node N2 acquired by the communication unit 310 with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0164] The detection method according to the first embodiment of the present invention is a detection method of a management device 301. In this detection method, firstly, the management device 301 acquires the measurement results of signals passing through the transmission path measured at node N1 on the first end side of a switch 210, which is provided with a transmission path connecting multiple functional units, and node N2 on the second end side of the switch 210. Next, the management device 301 compares the acquired measurement results of node N1 and node N2 with reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0165] As described above, the structure and method for detecting anomalies related to the transmission path based on the measurement results of the signals at node N1 on the first end side and node N2 on the second end side of the switch 210 can, for example, detect the connection of new devices to the transmission path and physical anomalies of the transmission path itself more accurately by using the difference between the measurement results at node N1 and node N2 after the network is started, for example, after determining the legality of the functional unit 101 and turning on the switch 210.

[0166] Therefore, the detection device, management device, and detection method according to the first embodiment of the present invention can achieve excellent functions related to network security.

[0167] Next, other embodiments of the present invention will be described using the accompanying drawings. Furthermore, the same or equivalent parts in the drawings will be labeled with the same reference numerals and will not be described again.

[0168] <Second Implementation>

[0169] This embodiment relates to a detection system 402 that includes a detection device 201G functioning as a gateway device, compared to the detection system 401 of the first embodiment. Except as described below, it is the same as the detection system 401 of the first embodiment.

[0170] Figure 10 This is a diagram showing the structure of the vehicle-mounted device assembly according to the second embodiment of the present invention.

[0171] The on-board unit assembly 40 includes a detection system 402. The detection system 402 includes: detection devices 201A, 201D, and 201F connected to conveyor lines 13 and 15; a detection device 201G connected to conveyor lines 13, 15, and 16; control devices 101A and 101E; actuators 101B and 101F; and sensors 101C and 101D. In the description of this embodiment, detection devices 201A, 201D, 201F, and 201G will each be referred to as detection device 201.

[0172] Conveyor lines 13 and 15 include multiple branch lines, with detection devices 201A, 201D, and 201F connected to each branch line. Additionally, a detection device 201G is installed on conveyor lines 13 and 15.

[0173] Transmission line 16 is, for example, an Ethernet cable. Alternatively, transmission line 16 can also be a transmission line conforming to standards such as CAN, FlexRay, MOST, or LIN.

[0174] exist Figure 10 In the example shown, a control device 101A is connected to the detection device 201A via a transmission line 13, a sensor 101D is connected to the detection device 201D via a transmission line 13, an actuator 101F is connected to the detection device 201F via a transmission line 13, and an actuator 101B, a sensor 101C, and a control device 101E are connected to the detection device 201G via a transmission line 16.

[0175] [Detection device]

[0176] Figure 11 This is a diagram illustrating the structure of the detection device according to the second embodiment of the present invention. Figure 11 This indicates the structure of the detection device 201G.

[0177] Reference Figure 11The detection device 201G includes switches 210B, 210C, and 210E, measuring units 220B, 220C, and 220E, a communication unit 230, a control unit 240B, 240C, and 240E, a detection unit 250, a storage unit 260, and a communication processing unit 270.

[0178] The measurement units 220B, 220C, 220E, communication unit 230, control unit 240, detection unit 250, and communication processing unit 270 are implemented, for example, by processors such as CPUs and DSPs. The storage unit 260 is, for example, a non-volatile memory.

[0179] The communication processing unit 270 performs relay processing. The communication processing unit 270 is, for example, an L2 switch. More specifically, if the communication processing unit 270 receives a frame from a functional unit 101 via a corresponding transmission line 16, it transmits the received frame to the target functional unit 101 via the corresponding transmission line 16 or via the corresponding transmission line 13 and the corresponding detection device 201. Additionally, if the communication processing unit 270 receives a frame from a functional unit 101 via the corresponding detection device 201 and transmission line 13, it transmits the received frame to the target functional unit 101 via the corresponding transmission line 16 or via the corresponding transmission line 13 and the corresponding detection device 201.

[0180] The first terminal of switch 210B is connected to actuator 101B via transmission line 16, and the second terminal of switch 210B is connected to communication processing unit 270 via transmission line 16. The first terminal of switch 210C is connected to sensor 101C via transmission line 16, and the second terminal of switch 210C is connected to communication processing unit 270 via transmission line 16. The first terminal of switch 210E is connected to control device 101E via transmission line 16, and the second terminal of switch 210E is connected to communication processing unit 270 via transmission line 16.

[0181] [Surveying Department]

[0182] Measurement unit 220B measures the waveform of the signal passing through node N1B on the transmission line 16 connected to the first terminal of switch 210B, and the waveform of the signal passing through node N2B on the transmission line 16 connected to the second terminal of switch 210B. Measurement unit 220C measures the waveform of the signal passing through node N1C on the transmission line 16 connected to the first terminal of switch 210C, and the waveform of the signal passing through node N2C on the transmission line 16 connected to the second terminal of switch 210C. Measurement unit 220E measures the waveform of the signal passing through node N1E on the transmission line 16 connected to the first terminal of switch 210E, and the waveform of the signal passing through node N2E on the transmission line 16 connected to the second terminal of switch 210E.

[0183] Measurement unit 220B stores the voltage sampling data S1B at node N1B and the voltage sampling data S2B at node N2B in storage unit 260. Measurement unit 220C stores the voltage sampling data S1C at node N1C and the voltage sampling data S2C at node N2C in storage unit 260. Measurement unit 220E stores the voltage sampling data S1E at node N1E and the voltage sampling data S2E at node N2E in storage unit 260.

[0184] [Testing Department]

[0185] The detection unit 250 compares the measurement results at node N1B and node N2B obtained by the measurement unit 220B with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results. Additionally, the detection unit 250 compares the measurement results at node N1C and node N2C obtained by the measurement unit 220C with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results. Furthermore, the detection unit 250 compares the measurement results at node N1E and node N2E obtained by the measurement unit 220E with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0186] More specifically, the detection unit 250 extracts multiple sampled data points S1B and S2B at each time observation window in the sampled data S1B and S2B, multiplies the extracted sampled data S1B and S2B by a predetermined weighting function, and integrates them. Additionally, the detection unit 250 extracts multiple sampled data points S1C and S2C at each time observation window in the sampled data S1C and S2C, multiplies the extracted sampled data S1C and S2C by a predetermined weighting function, and integrates them. Furthermore, the detection unit 250 extracts multiple sampled data points S1E and S2E at each time observation window in the sampled data S1E and S2E, multiplies the extracted sampled data S1E and S2E by a predetermined weighting function, and integrates them.

[0187] The detection unit 250 calculates the difference DB between the calculated value obtained by multiplying the extracted sampled data S1B by a weighting function and integrating it, and the calculated value obtained by multiplying the extracted sampled data S2B by a weighting function and integrating it. Additionally, the detection unit 250 calculates the difference DC between the calculated value obtained by multiplying the extracted sampled data S1C by a weighting function and integrating it, and the calculated value obtained by multiplying the extracted sampled data S2C by a weighting function and integrating it. Furthermore, the detection unit 250 calculates the difference DE between the calculated value obtained by multiplying the extracted sampled data S1E by a weighting function and integrating it, and the calculated value obtained by multiplying the extracted sampled data S2E by a weighting function and integrating it.

[0188] The detection unit 250 saves the calculated differences DB, DC, and DE as feature quantities of the object period Tm to the storage unit 260.

[0189] The detection unit 250 detects anomalies related to the transmission line 13 based on the timing changes of the differences DB, DC, and DE during the period Tm of each object.

[0190] If the detection unit 250 detects an anomaly related to the transmission path based on the comparison result of any of the switches 210B, 210C, and 210E, the control units 240B, 240C, and 240E will disconnect one or more of the switches 210B, 210C, and 210E.

[0191] More specifically, the detection unit 250 outputs a control signal to at least one of the control units 240B, 240C, and 240E based on the judgment result, thereby turning off the corresponding switch.

[0192] For example, regardless of the location of the abnormality, the detection unit 250 outputs a control signal to at least one of the control units 240B, 240C, and 240E, thereby disconnecting the corresponding switch. Specifically, when it is necessary to prevent unauthorized access by the functional unit 101 to the control device 101E, for example, when the change in the difference DB per unit time exceeds a predetermined threshold, the detection unit 250 disconnects the switch 210E by outputting a control signal to the control unit 240E. This isolates the control device 101E relative to the transmission path, preventing unauthorized access by the functional unit 101 to the control device 101E.

[0193] Alternatively, the detection unit 250 may output a control signal to at least one of the control units 240B, 240C, and 240E corresponding to the location where an anomaly has occurred, thereby disconnecting the corresponding switch. Specifically, for example, if the change in the difference DB per unit time exceeds a predetermined threshold, the detection unit 250 disconnects the switch 210B by outputting a control signal to the control unit 240B. This allows the actuator 101B of the potentially illegitimate functional unit 101 to be isolated from the transmission path.

[0194] Furthermore, the detection system 402 according to the second embodiment of the present invention is a structure in which the actuator 101B, sensor 101C, and control device 101E are connected to the detection device 201G via the transmission line 16, but it is not limited thereto. The detection system 402 may also be structured such that the actuator 101B is connected to the detection device 201G via the detection device 201B and the transmission line 16, the sensor 101C is connected to the detection device 201G via the detection device 201C and the transmission line 16, and the control device 101E is connected to the detection device 201G via the detection device 201E and the transmission line 16. In addition, the control units 240B, 240C, and 240E of the detection device 201G may also be structures in which control information is received from other detection devices 201 via the communication unit 230 of the detection device 201G, and the corresponding switches 210B, 210C, and 210E are turned off according to the received control information.

[0195] It should be understood that the above description of the embodiments is illustrative in all respects and is not restrictive. The scope of the invention is defined not by the foregoing description but by the claims, including all modifications within the scope and meaning of the claims.

[0196] The above description includes the following additional features.

[0197] [Appendix 1]

[0198] A detection device, comprising:

[0199] A switch, which is located in a transmission path that connects multiple functional units to each other;

[0200] The measuring unit measures the signal passing through the transmission path at a first node on the first end side of the switch and a second node on the second end side of the switch; and

[0201] The detection unit compares the measurement results at the first node and the second node obtained by the measurement unit with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0202] The switch is an analog switch.

[0203] The measurement unit and the detection are implemented by a processor.

[0204] [Appendix 2]

[0205] A detection device, comprising:

[0206] A switch, which is positioned in a transmission path that connects multiple functional parts of the switch to each other;

[0207] The measuring unit measures the signal passing through the transmission path at a first node on the first end side of the switch and a second node on the second end side of the switch; and

[0208] The detection unit compares the measurement results at the first node and the second node obtained by the measurement unit with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0209] The reference measurement result is a past measurement result obtained by the measurement unit.

[0210] The detection unit detects anomalies related to the transmission path based on the change in the difference between the measurement results at the first end and the measurement results at the second end per unit time.

[0211] [Appendix 3]

[0212] A management device comprising:

[0213] The acquisition unit acquires measurement results of signals passing through the transmission path, measured at a first node on the first end side of a switch and a second node on the second end side of the switch, which are provided in the transmission path connecting multiple functional units; and

[0214] The detection unit compares the measurement results at the first node and the second node obtained by the acquisition unit with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0215] The switch is an analog switch.

[0216] The measuring unit and the detection unit are implemented by a processor.

[0217] [Appendix 4]

[0218] A management device comprising:

[0219] The acquisition unit acquires measurement results of signals passing through the transmission path, measured at a first node on the first end side of a switch and a second node on the second end side of the switch, which are provided in the transmission path connecting multiple functional units; and

[0220] The detection unit compares the measurement results at the first node and the second node obtained by the acquisition unit with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results.

[0221] The reference measurement result is a past measurement result obtained by the measurement unit.

[0222] The detection unit detects anomalies related to the transmission path based on the change in the difference between the measurement results at the first end and the measurement results at the second end per unit time.

[0223] Explanation of the label

[0224] 1 vehicle

[0225] 12. In-vehicle network

[0226] 13 Teleportation Lines

[0227] 14. Conveyor Line

[0228] 15 Conveyor Lines

[0229] 20 Gateway devices

[0230] 30 Vehicle-mounted communication devices

[0231] 40 vehicle-mounted device groups

[0232] 101A and 101E control devices

[0233] 101B and 101F actuators

[0234] 101C and 101D sensors

[0235] 201 Detection Device

[0236] 210 switch

[0237] 220 Measurement Department

[0238] 230 Ministry of Communications

[0239] 240 Control Department

[0240] 250 Testing Department

[0241] 260 Storage Department

[0242] 270 Communications Processing Department

[0243] 301 Management Device

[0244] 310 Ministry of Communications

[0245] 320 Testing Department

[0246] 330 Storage Unit

[0247] 401 and 402 detection systems

[0248] 501 Communication System

Claims

1. A vehicle-mounted detection device, comprising: A switch, which is located in a transmission path that connects multiple functional units to each other; The measuring unit measures the signal passing through the transmission path at the first node on the first end side of the switch and the second node on the second end side of the switch. as well as The detection unit compares the measurement results at the first node and the second node obtained by the measurement unit with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results. The detection unit further detects anomalies related to the transmission path based on the transmission direction of the signal determined according to the measurement results at the first node and the measurement results at the second node, such that: When determining that the transmission direction of the signal is from the first node of the switch to the second node of the switch, the detection unit sets the target period and time observation window based on the transmission time of the detected signal, multiplies the measurement results at the first node and the second node extracted using the set time observation window by a predetermined weight function and integrates them, thereby calculating the difference between the integration result at the first node and the integration result at the second node, and detecting anomalies related to the transmission path based on the difference; When determining that the transmission direction of the signal is from the second node of the switch to the first node of the switch, the detection unit uses the transmission time information of the acquired signal as a reference to set the target period and time observation window. The measurement results at the first node and the second node extracted using the set time observation window are multiplied by a predetermined weight function and integrated. The difference between the integral result at the first node and the integral result at the second node is calculated, and anomalies related to the transmission path are detected based on the difference.

2. The vehicle-mounted detection device according to claim 1, wherein, The reference measurement result is a past measurement result obtained by the measurement unit.

3. The vehicle-mounted detection device according to claim 1 or 2, wherein, The detection unit further detects anomalies related to the transmission path based on the measurement results of signals passing through the second transmission path at the first node on the first end side of the second switch and the second node on the second end side of the second switch, which are set up in the second transmission path that connects multiple functional units to each other.

4. The vehicle-mounted detection device according to claim 1 or 2, wherein, The vehicle-mounted detection device has multiple of the aforementioned switches, further... It has a control unit that controls each of the aforementioned switches. If the control unit detects an anomaly related to the transmission path based on the comparison result for any of the switches, the detection unit disconnects one or more of the switches.

5. A vehicle-mounted management device, comprising: The acquisition unit acquires the measurement results of the signal passing through the transmission path, which is measured at the first node on the first end side of the switch and the second node on the second end side of the switch, which are provided in the transmission path that connects multiple functional units to each other. as well as The detection unit compares the measurement results at the first node and the second node obtained by the acquisition unit with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results. in, The detection unit further detects anomalies related to the transmission path based on the transmission direction of the signal determined according to the measurement results at the first node and the measurement results at the second node, such that: When determining that the transmission direction of the signal is from the first node of the switch to the second node of the switch, the detection unit sets the target period and time observation window based on the transmission time of the detected signal, multiplies the measurement results at the first node and the second node extracted using the set time observation window by a predetermined weight function and integrates them, thereby calculating the difference between the integration result at the first node and the integration result at the second node, and detecting anomalies related to the transmission path based on the difference; When determining that the transmission direction of the signal is from the second node of the switch to the first node of the switch, the detection unit uses the transmission time information of the acquired signal as a reference to set the target period and time observation window. The measurement results at the first node and the second node extracted using the set time observation window are multiplied by a predetermined weight function and integrated. The difference between the integral result at the first node and the integral result at the second node is calculated, and anomalies related to the transmission path are detected based on the difference.

6. An on-board testing method, comprising an on-board testing device having a switch arranged in a transmission path connecting multiple functional units to each other. The vehicle-mounted detection method includes the following steps: The signal passing through the transmission path is measured at the first node on the first end side of the switch, the second node on the second end side of the switch, and the second end. as well as The measurement results at the first node, the measurement results at the second node, and the reference measurement results are compared. Based on the comparison results, anomalies related to the transmission path are detected. in, Further, based on the signal transmission direction of the transmission path determined according to the measurement results at the first node and the measurement results at the second node, anomalies related to the transmission path are detected, such that: When determining that the transmission direction of the signal is from the first node of the switch to the second node of the switch, the transmission time of the detected signal is used as a reference to set the target period and time observation window. The measurement results at the first node and the second node extracted using the set time observation window are multiplied by a prescribed weight function and integrated. The difference between the integral result at the first node and the integral result at the second node is calculated, and anomalies related to the transmission path are detected based on the difference. When determining that the transmission direction of the signal is from the second node of the switch to the first node of the switch, the transmission time represented by the obtained transmission time information of the signal is used as a reference to set the target period and time observation window. The measurement results at the first node and the second node extracted using the set time observation window are multiplied by a prescribed weight function and integrated. The difference between the integral result at the first node and the integral result at the second node is calculated, and anomalies related to the transmission path are detected based on the difference.

7. An on-board detection method, which is an on-board detection method for an on-board management device. The vehicle-mounted detection method includes the following steps: The measurement results of the signal passing through the transmission path are obtained at the first node on the first end side of the switch and the second node on the second end side of the switch, which are set at the first node on the first end side of the transmission path that connects multiple functional units to each other. as well as The measurement results obtained at the first node, the measurement results at the second node, and the reference measurement results are compared. Based on the comparison results, anomalies related to the transmission path are detected. in, Further, based on the signal transmission direction of the transmission path determined according to the measurement results at the first node and the measurement results at the second node, anomalies related to the transmission path are detected, such that: When determining that the transmission direction of the signal is from the first node of the switch to the second node of the switch, the transmission time of the detected signal is used as a reference to set the target period and time observation window. The measurement results at the first node and the second node extracted using the set time observation window are multiplied by a prescribed weight function and integrated. The difference between the integral result at the first node and the integral result at the second node is calculated, and anomalies related to the transmission path are detected based on the difference. When determining that the transmission direction of the signal is from the second node of the switch to the first node of the switch, the transmission time represented by the obtained transmission time information of the signal is used as a reference to set the target period and time observation window. The measurement results at the first node and the second node extracted using the set time observation window are multiplied by a prescribed weight function and integrated. The difference between the integral result at the first node and the integral result at the second node is calculated, and anomalies related to the transmission path are detected based on the difference.

8. A computer storage medium storing a detection program for use in an on-board detection device having switches arranged in transmission paths that interconnect multiple functional units. This detection program is used to enable the computer to function as the following: The measuring unit measures the signal passing through the transmission path at the first node on the first end side of the switch and the second node on the second end side of the switch. as well as The detection unit compares the measurement results at the first node and the second node obtained by the measurement unit with the reference measurement results, and detects anomalies related to the transmission path based on the comparison results. in, The detection unit further detects anomalies related to the transmission path based on the transmission direction of the signal determined according to the measurement results at the first node and the measurement results at the second node, such that: When determining that the transmission direction of the signal is from the first node of the switch to the second node of the switch, the detection unit sets the target period and time observation window based on the transmission time of the detected signal, multiplies the measurement results at the first node and the second node extracted using the set time observation window by a predetermined weight function and integrates them, thereby calculating the difference between the integration result at the first node and the integration result at the second node, and detecting anomalies related to the transmission path based on the difference; When determining that the transmission direction of the signal is from the second node of the switch to the first node of the switch, the detection unit uses the transmission time information of the acquired signal as a reference to set the target period and time observation window. The measurement results at the first node and the second node extracted using the set time observation window are multiplied by a predetermined weight function and integrated. The difference between the integral result at the first node and the integral result at the second node is calculated, and anomalies related to the transmission path are detected based on the difference.

Images