Safety system, vehicle, safety device and legality determination method

Abstract

The security system comprises: an information sending device; and a security device, which can connect to an object device, the information sending device and the security device are connected to each other via a network, the information sending device sends generation information used to generate reference identification information to the security device, the security device uses the generation information received from the information sending device via the network to generate the reference identification information, the security device obtains the identification information of the object device connected to itself, the security device compares the obtained identification information with the generated reference identification information, and based on the comparison result, determines the legitimacy of the object device connected to itself.

Description

Technical Field

[0001] The invention relates to a safety system, a vehicle, a safety device and a legality judgment method.

[0002] This application claims priority based on Japanese patent application No. 2020-25009, filed on February 18, 2020, the disclosure of which is incorporated herein by reference in its entirety. Background Art

[0003] Patent document 1 (Japanese Patent Publication No. 2003-191804) discloses a vehicle communication system as follows. That is, the vehicle communication system is a vehicle communication system in which a plurality of electrical devices mounted on a vehicle are provided with communication units for performing data communication via communication lines in vehicle wiring, so that data can be transmitted and received between the electrical devices. In the vehicle communication system, each of the electrical devices is provided with: a plurality of communication units for communicating the same data using different communication lines; and a selection unit for selecting normal received data from a plurality of received data obtained by communication using the plurality of communication units. The vehicle communication system improves the reliability of data communication performed by the low-speed communication unit compared with the other communication units by setting one of the plurality of communication units as a low-speed communication unit for performing data communication at a communication speed slower than that of the other communication units.

[0004] Patent Document 1: Japanese Patent Application Publication No. 2003-191804 Summary of the invention

[0005] The security system of the present invention comprises: an information sending device; and a security device, which can connect to an object device, the information sending device and the security device are connected to each other via a network, the information sending device sends generation information used to generate reference identification information to the security device, the security device uses the generation information received from the information sending device via the network to generate the reference identification information, the security device obtains the identification information of the object device connected to itself, the security device compares the obtained identification information with the generated reference identification information, and based on the comparison result, determines the legitimacy of the object device connected to itself.

[0006] The security device of the present invention is a security device capable of connecting to an object device, and the security device comprises: a receiving unit, which receives generation information from an information sending device connected to the security device via a network; a generating unit, which generates reference identification information using the generation information received by the receiving unit; an acquiring unit, which acquires the identification information of the object device connected to the security device; and a judging unit, which compares the reference identification information generated by the generating unit and the identification information acquired by the acquiring unit, and judges the legitimacy of the object device connected to the security device based on the comparison result.

[0007] The legitimacy judgment method of the present invention is a legitimacy judgment method of a security system having an information sending device and a security device capable of connecting to an object device, wherein the information sending device and the security device are connected to each other via a network, and the legitimacy judgment method includes the following steps: the information sending device sends generation information used to generate reference identification information to the security device; the security device generates the reference identification information using the generation information received from the information sending device via the network; the security device obtains the identification information of the object device connected to itself; and the security device compares the obtained identification information with the generated reference identification information, and based on the comparison result, judges the legitimacy of the object device connected to itself.

[0008] The legitimacy judgment method of the present invention is a legitimacy judgment method for a security device capable of connecting to an object device, and the legitimacy judgment method includes the following steps: receiving generation information from an information sending device connected to the security device via a network; generating reference identification information using the received generation information; obtaining identification information of the object device connected to the security device; and comparing the generated reference identification information with the obtained identification information, and judging the legitimacy of the object device connected to the security device based on the comparison result.

[0009] One embodiment of the present invention can be implemented not only as a security device having a processing unit with the above-mentioned features, but also as a semiconductor integrated circuit that realizes a part or all of the security device, or as a program for causing a computer to execute the processing steps of the security device. In addition, one embodiment of the present invention can be implemented not only as a semiconductor integrated circuit that realizes a part or all of the security system having a security device, or as a program for causing a computer to execute the processing steps of the security system. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 It is a diagram showing the configuration of a communication system according to the first embodiment of the present invention.

[0011] Figure 2 It is a diagram showing the configuration of a bus connection device group according to the first embodiment of the present invention.

[0012] Figure 3 It is a diagram showing the configuration of a safety system according to the first embodiment of the present invention.

[0013] Figure 4 This is a flowchart that defines an example of an operation flow when the safety device of the safety system according to the first embodiment of the present invention performs a legitimacy judgment on a control device connected to the safety device.

[0014] Figure 5 This is a diagram showing an example of a sequence of a legitimacy determination process of the security system according to the first embodiment of the present invention.

[0015] Figure 6 It is a diagram showing the configuration of a safety system according to a second embodiment of the present invention.

[0016] Figure 7 It is a diagram showing the configuration of a safety system according to a third embodiment of the present invention.

[0017] Figure 8 It is a diagram showing the configuration of a safety system according to a fourth embodiment of the present invention. DETAILED DESCRIPTION

[0018] Conventionally, technologies for improving network security have been developed.

[0019] [Problems to be Solved by the Invention]

[0020] A technology that can surpass the technology described in Patent Document 1 and realize excellent functions related to network security is desired.

[0021] The present invention has been made to solve the above-mentioned problems, and an object of the present invention is to provide a security system, a vehicle, a security device, and a legality determination method that can realize excellent functions related to network security.

[0022] [Effects of the Invention]

[0023] According to the present invention, it is possible to realize excellent functions related to network security.

[0024] [Description of Embodiments of the Invention]

[0025] First, the contents of the embodiments of the present invention will be listed and described.

[0026] (1) The security system involved in an embodiment of the present invention comprises: an information sending device; and a security device, which can be connected to an object device, the information sending device and the security device are connected to each other via a network, the information sending device sends generation information used to generate reference identification information to the security device, the security device uses the generation information received from the information sending device via the network to generate the reference identification information, the security device obtains the identification information of the object device connected to itself, the security device compares the obtained identification information with the generated reference identification information, and based on the comparison result, determines the legitimacy of the object device connected to itself.

[0027] As described above, by using the generation information transmitted between the decentralized security device and the information transmission device to generate the reference identification information, and using the generated reference identification information to judge the legitimacy of the target device, for example, even if either the information transmission device or the security device is attacked, it is possible to more reliably detect an illegal target device connected to the security device. Therefore, it is possible to achieve an excellent function related to network security.

[0028] (2) Preferably, the security device controls power supply to the target device according to a result of determining the legitimacy of the target device.

[0029] According to the above configuration, for example, when a target device connected to the security device is an unauthorized device, control can be performed to cut off the power supply to the target device, thereby improving safety.

[0030] (3) More preferably, the security device is capable of separately controlling the power supply to the sending circuit and the power supply to the object circuit, wherein the sending circuit is a circuit for sending the identification information to the security device, and the object circuit is a circuit of the object device and is different from the sending circuit. If the security device receives the generated information from the information sending device, it starts to supply power to the sending circuit, and if it is determined that the object device is legitimate, it starts to supply power to the object circuit.

[0031] According to the above structure, power supply to the sending circuit is started until the legitimacy of the target device is determined, and power supply to the target circuit is stopped, thereby providing identification information of the target device while limiting the action of the illegal target device. Therefore, for example, when the network is started, the legitimacy of the target device can be determined before the target device acts.

[0032] (4) More preferably, the security device stops supplying power to the transmission circuit when determining that the target device is unauthorized.

[0033] According to the above configuration, for example, by cutting off the power supply to an unauthorized device connected to the security device, safety can be improved and power consumption can be reduced.

[0034] (5) More preferably, the safety device does not start supplying power to the target circuit when determining that the target device is not authorized.

[0035] According to the above configuration, for example, by not supplying power to an unauthorized device connected to the security device, safety can be improved and power consumption can be reduced.

[0036] (6) Preferably, the network includes a communication line and an auxiliary line, the target device communicates with other devices connected to the network via the communication line, and the information transmission device transmits the generated information to the security device via the auxiliary line.

[0037] According to the above structure, the generated information can be transmitted from the information transmission device to the safety device via an auxiliary line independent of the communication line, so that the safety can be further improved by redundancy. In addition, by using the power line as an auxiliary line, for example, the cost required for implementing the safety system can be reduced compared with the structure of adding an auxiliary line to the conventional network.

[0038] (7) More preferably, when the security device determines that the target device is unauthorized, the security device performs at least one of a process of disconnecting the communication line, sending an error notification to the communication line, and causing interference to the communication line.

[0039] According to the above configuration, it is possible to suppress the spread of unauthorized access by unauthorized devices.

[0040] (8) More preferably, the auxiliary line is a power line for supplying electric power to the safety device.

[0041] According to the above configuration, the cost required for realizing the safety system can be reduced compared to a configuration in which an auxiliary line is separately added to a conventional network.

[0042] (9) Preferably, the security system further has a connector for the object device in order to connect the object device to the security device, and the connector includes: a storage unit that stores the identification information; and a sending circuit that is a circuit for sending the identification information of the storage unit to the security device.

[0043] According to the above configuration, the security device can obtain identification information from a target device that does not have a transmission circuit or other structure through a connector, so that a security system that can determine the legitimacy of an existing target device that does not have a transmission circuit or other structure can be easily constructed.

[0044] (10) A vehicle according to a first embodiment of the present invention includes the above-mentioned safety system.

[0045] According to the above configuration, in a vehicle having a security system, an excellent function related to network security can be realized.

[0046] (11) An embodiment of the present invention involves a security device that is capable of connecting to an object device, and the security device comprises: a receiving unit that receives generation information from an information sending device connected to the security device via a network; a generating unit that generates reference identification information using the generation information received by the receiving unit; an acquiring unit that acquires identification information of the object device connected to the security device; and a judging unit that compares the reference identification information generated by the generating unit with the identification information acquired by the acquiring unit, and judges the legitimacy of the object device connected to the security device based on the comparison result.

[0047] As described above, the structure of generating reference identification information by using generation information transmitted between the dispersedly configured security device and the information transmission device, and judging the legitimacy of the target device by using the generated reference identification information, for example, even if either the information transmission device or the security device is attacked, it is possible to more reliably detect an illegal target device connected to the security device. Therefore, it is possible to achieve an excellent function related to network security.

[0048] (12) The legitimacy judgment method involved in an embodiment of the present invention is a legitimacy judgment method of a security system having an information sending device and a security device capable of connecting to an object device, wherein the information sending device and the security device are connected to each other via a network, and the legitimacy judgment method includes the following steps: the information sending device sends generation information used to generate reference identification information to the security device; the security device generates the reference identification information using the generation information received from the information sending device via the network; the security device obtains the identification information of the object device connected to itself; and the security device compares the obtained identification information with the generated reference identification information, and based on the comparison result, judges the legitimacy of the object device connected to itself.

[0049] As described above, the method of generating reference identification information using generation information transmitted between a dispersedly configured security device and an information transmission device and judging the legitimacy of an object device using the generated reference identification information can more reliably detect an illegal object device connected to the security device even when either the information transmission device or the security device is attacked. Therefore, an excellent function related to network security can be realized.

[0050] (13) The legitimacy judgment method involved in an embodiment of the present invention is a legitimacy judgment method for a security device that can be connected to an object device, and the legitimacy judgment method includes the following steps: receiving generation information from an information sending device connected to the security device via a network; generating reference identification information using the received generation information; obtaining identification information of the object device connected to the security device; and comparing the generated reference identification information with the obtained identification information, and judging the legitimacy of the object device connected to the security device based on the comparison result.

[0051] As described above, the method of generating reference identification information using generation information transmitted between a dispersedly configured security device and an information transmission device and judging the legitimacy of an object device using the generated reference identification information can more reliably detect an illegal object device connected to the security device even when either the information transmission device or the security device is attacked. Therefore, an excellent function related to network security can be realized.

[0052] Hereinafter, the embodiments of the present invention will be described using the accompanying drawings. In addition, the same or corresponding parts in the figures are marked with the same reference numerals, and their descriptions are not repeated. In addition, at least a part of the embodiments described below can be arbitrarily combined.

[0053] <First embodiment>

[0054] [Structure and basic movements]

[0055] Figure 1 It is a diagram showing the configuration of a communication system according to the first embodiment of the present invention.

[0056] Reference Figure 1 The communication system 501 includes a gateway device 20 , a plurality of vehicle-mounted communication devices 30 , a plurality of bus connection device groups 40 , and a power supply circuit 50 .

[0057] The communication system 501 is mounted on, for example, the vehicle 1. Furthermore, the communication system 501 can be used for a home network or factory automation.

[0058] The plurality of vehicle-mounted communication devices 30 are connected to the gateway device 20 via corresponding cables 14 . The cables 14 are, for example, Ethernet (registered trademark) cables. In addition, the plurality of bus connection device groups 40 are connected to the gateway device 20 via corresponding buses 13 .

[0059] The power circuit 50 is connected to the gateway device 20 via the power line 15A, connected to the vehicle-mounted communication device 30 via the power line 15B, and connected to the bus connection device group 40 via the power line 15C. Hereinafter, the power lines 15A, 15B, and 15C are also referred to as power lines 15. The power circuit 50 supplies power to the gateway device 20, the vehicle-mounted communication device 30, and the bus connection device group 40 via the power line 15.

[0060] The in-vehicle network 12 includes a gateway device 20 , a bus 13 , an Ethernet cable 14 , and a power cable 15 .

[0061] Figure 2 It is a diagram showing the configuration of a bus connection device group according to the first embodiment of the present invention.

[0062] Reference Figure 2 The bus connection device group 40 includes a plurality of safety devices 201 connected to the bus 13 and the power line 15C, and a plurality of control devices 101. The gateway device 20, the vehicle communication device 30, and the control device 101 are examples of vehicle-mounted devices. The power line 15C is a power line for supplying power to the safety device 201.

[0063] The safety device 201 can be connected to the control device 101. Figure 2 In the illustrated example, each of the plurality of safety devices 201 is connected to a corresponding control device 101 .

[0064] The control device 101 connected to the safety device 201 communicates with other control devices 101 and other devices connected to the vehicle network 12 via the bus 13. The bus 13 is an example of a communication line. The control device 101 is an example of a target device.

[0065] The information transmitting device 200 is connected to the power supply line 15C. The information transmitting device 200 will be described in detail later. The power supply line 15C is an example of an auxiliary line.

[0066] The control device 101 is, for example, an ECU (Electronic Control Unit). In addition, the bus connection device group 40 is not limited to a structure including a plurality of control devices 101, but may also be a structure including one control device 101. In addition, some of the control devices 101 of the bus connection device group 40 may be directly connected to the bus 13 and the power line 15C instead of being connected to the safety device 201.

[0067] The communication system 501 may include the vehicle-mounted communication device 30 but not the control device 101 , include the control device 101 but not the vehicle-mounted communication device 30 , or include one vehicle-mounted communication device 30 and one control device 101 .

[0068] The in-vehicle communication device 30 communicates with, for example, a device outside the vehicle 1. Specifically, the in-vehicle communication device 30 is, for example, a TCU (Telematics Control Unit), a short-range wireless terminal device, and an ITS (Intelligent Transport Systems) wireless device.

[0069] The bus 13 is a bus compliant with standards such as CAN (Controller Area Network) (registered trademark), FlexRay (registered trademark), MOST (Media Oriented Systems Transport) (registered trademark), Ethernet, and LIN (Local Interconnect Network), for example.

[0070] In this example, each safety device 201 of the bus-connected device group 40 is connected to the gateway device 20 via a corresponding bus 13 in accordance with the CAN standard.

[0071] The bus 13 is provided for each system, for example. Specifically, the bus 13 is, for example, a drive system bus, a chassis / safety system bus, a body / electrical system bus, and an AV / information system bus.

[0072] An engine control device, an AT (Automatic Transmission) control device, and an HEV (Hybrid Electric Vehicle) control device are connected to the safety device 201 of the drive system bus as examples of the control device 101. The engine control device, the AT control device, and the HEV control device control the engine, the AT, and the switching between the engine and the motor, respectively.

[0073] A brake control device, a chassis control device, and a steering control device are connected to the safety device 201 of the chassis / safety system bus as an example of the control device 101. The brake control device, the chassis control device, and the steering control device control the brake, the chassis, and the steering, respectively.

[0074] The safety device 201 of the vehicle body / electrical system bus is connected to an instrument display control device, an air conditioning control device, an anti-theft control device, an air bag control device, and an intelligent access control device as an example of the control device 101. The instrument display control device, the air conditioning control device, the anti-theft control device, the air bag control device, and the intelligent access control device control the instrument, the air conditioning, the anti-theft mechanism, the air bag mechanism, and the intelligent access control, respectively.

[0075] The safety device 201 of the AV / information system bus is connected to a navigation control device, an audio control device, an ETC (Electronic Toll Collection System) (registered trademark) control device, and a telephone control device as an example of the control device 101. The navigation control device, the audio control device, the ETC control device, and the telephone control device control the navigation device, the audio device, the ETC device, and the mobile phone, respectively.

[0076] The gateway device 20 is, for example, a central gateway (CGW), and can communicate with other in-vehicle devices.

[0077] The gateway device 20 performs relay processing to relay information exchanged between the control device 101 connected to different buses 13 via the corresponding safety device 201 in the vehicle 1, information exchanged between each on-vehicle communication device 30, and information exchanged between the control device 101 and the on-vehicle communication device 30.

[0078] [Security System]

[0079] Figure 3 It is a diagram showing the configuration of a safety system according to the first embodiment of the present invention.

[0080] Reference Figure 3 The security system 401 includes an information transmission device 200, a security device 201, and a connector 301 for the control device 101. For example, the connector 301 is mounted on a substrate of the control device 101.

[0081] The safety device 201 includes a main body 201A and a connection portion 201B to which the connector 301 can be connected. For example, the connection portion 201B is a connector for the safety device 201 and is mounted on a substrate of the main body 201A.

[0082] The main body 201A of the security device 201 includes an interface unit 210, a generation unit 220, a power control unit 250, an authentication unit 260, a bus control unit 270, and a storage unit 280. The connection unit 201B of the security device 201 includes a determination unit 230 and an acquisition unit 240. The interface unit 210, the generation unit 220, the determination unit 230, the acquisition unit 240, the power control unit 250, the authentication unit 260, and the bus control unit 270 are implemented by processors such as a CPU (Central Processing Unit) and a DSP (Digital Signal Processor). The storage unit 280 is, for example, a non-volatile memory.

[0083] The control device 101 includes a communication unit 110, an authentication information transmission unit 120, a power supply circuit 130, an identification information transmission unit 140, a storage unit 150, and a storage unit 160. The communication unit 110 is implemented by, for example, an IC (Integrated Circuit) for communication. The authentication information transmission unit 120 and the identification information transmission unit 140 are implemented by, for example, a processor such as a CPU and a DSP. The storage units 150 and 160 are, for example, non-volatile memories. The identification information transmission unit 140 is an example of a transmission circuit, which is a circuit for transmitting identification information to the security device 201. The power supply circuit 130 is an example of an object circuit.

[0084] The safety device 201 can be connected to the control device 101 via the connector 301. More specifically, the safety device 201 is connected to the control device 101 via the connector 301 by fitting the connection portion 201B and the connector 301 together.

[0085] In more detail, the acquisition unit 240 of the safety device 201 is connected to the identification information transmission unit 140 of the control device 101 via the connector 301. In addition, the power control unit 250 of the safety device 201 is connected to the identification information transmission unit 140 and the power supply circuit 130 of the control device 101 via the connector 301. In addition, the authentication unit 260 of the safety device 201 is connected to the authentication information transmission unit 120 of the control device 101 via the connector 301. In addition, the bus control unit 270 of the safety device 201 is connected to the communication unit 110 of the control device 101 via the connector 301.

[0086] The information transmission device 200 and the safety device 201 are connected to each other via the in-vehicle network 12. More specifically, the information transmission device 200 and the safety device 201 are connected to each other via the power supply line 15C.

[0087] [Information sending device]

[0088] The information transmitting device 200 transmits the generated information used to generate the reference identification information to the security device 201 .

[0089] More specifically, as described later, the security device 201 generates reference identification information, and determines the legitimacy of the control device 101 based on a comparison result between the generated reference identification information and the identification information of the control device 101 .

[0090] The information transmitting device 200 transmits the generated information used for generating the reference identification information to the security device 201 .

[0091] For example, the information transmitting device 200 transmits the generated information including the keyword (Key) used for generating the reference identification information to the security device 201 .

[0092] For example, the information transmitting device 200 transmits the generated information to the safety device 201 via the power line 15C. More specifically, the information transmitting device 200 generates a frame storing the generated information in accordance with the CAN standard, for example, and transmits the generated frame to the safety device 201 via the power line 15C.

[0093] The information transmitting device 200 transmits the generated information to a part or all of the safety devices 201 in the in-vehicle network 12 , for example, every time the ignition power of the vehicle 1 is turned on and the in-vehicle network 12 is activated.

[0094] Furthermore, the information transmitting device 200 may be configured to transmit generation information of different contents to each security device 201 , or may be configured to transmit generation information of the same contents to a plurality of security devices 201 .

[0095] [Safety device]

[0096] (Generation of reference identification information)

[0097] The security device 201 generates reference identification information using the generation information received from the information transmitting device 200 via the in-vehicle network 12 .

[0098] More specifically, the interface unit 210 receives generation information from the information transmitting device 200 connected to the safety device 201 via the in-vehicle network 12. The generation unit 220 generates reference identification information using the generation information received by the interface unit 210. The interface unit 210 is an example of a receiving unit.

[0099] For example, when the interface unit 210 receives a frame storing the generation information from the information transmitting device 200 via the power supply line 15C, the interface unit 210 acquires the generation information from the received frame and outputs the acquired generation information to the generation unit 220 .

[0100] The generator 220 generates reference identification information using the received generation information when receiving the generation information from the interface 210. For example, the generator 220 generates reference identification information including information corresponding to the content of the received generation information.

[0101] For example, the storage unit 280 stores a hash function for generating a hash value from a keyword. Specifically, for example, the storage unit 280 stores a program for data processing performed by the hash function.

[0102] Upon receiving the generation information from the interface unit 210 , the generator 220 reads the above-mentioned program from the storage unit 280 and executes it, inputs the keyword included in the generation information to the hash function, and thereby obtains a hash value as the reference identification information. The generator 220 outputs the obtained hash value to the determination unit 230 .

[0103] (Acquisition of identification information)

[0104] The safety device 201 acquires the identification information of the control device 101 connected to the safety device 201. More specifically, the acquisition unit 240 of the safety device 201 acquires the identification information of the control device 101 connected to the safety device 201.

[0105] For example, the safety device 201 can control the power supply to the identification information transmitter 140 of the control device 101 and the power supply to the power supply circuit 130 of the control device 101 separately. Then, upon receiving the generation information from the information transmitter 200, the safety device 201 starts to supply power to the identification information transmitter 140.

[0106] More specifically, the power control unit 250 performs control to switch whether or not to output the power supply voltage received from the power supply circuit 50 via the power supply line 15C and the interface unit 210 to the power supply circuit 130 .

[0107] When the interface unit 210 acquires the generation information based on the frame received from the information transmitting device 200 , it outputs a supply instruction S1 to the power control unit 250 , indicating that the power supply to the identification information transmitting unit 140 of the control device 101 should be started.

[0108] When receiving the supply instruction S1 from the interface unit 210 , the power control unit 250 starts outputting the power supply voltage to the identification information transmission unit 140 of the control device 101 in accordance with the received supply instruction S1 .

[0109] For example, the storage unit 150 of the control device 101 stores the ID of the control device 101 itself.

[0110] When receiving power supply from the power control unit 250 of the safety device 201 , the identification information transmission unit 140 of the control device 101 acquires the ID from the storage unit 150 , and transmits identification information including the acquired ID to the acquisition unit 240 of the safety device 201 .

[0111] Upon receiving the identification information from the identification information transmitting unit 140 of the control device 101 , the acquiring unit 240 of the security device 201 outputs the received identification information to the determining unit 230 .

[0112] (Judgment of legality)

[0113] The security device 201 compares the acquired identification information with the generated reference identification information, and determines the legitimacy of the control device 101 connected to the security device 201 based on the comparison result.

[0114] More specifically, the determination unit 230 of the safety device 201 compares the reference identification information generated by the generation unit 220 and the identification information acquired by the acquisition unit 240 , and determines the legitimacy of the control device 101 connected to the safety device 201 based on the comparison result.

[0115] For example, upon receiving the identification information from the acquisition unit 240 , the determination unit 230 compares the ID included in the received identification information with the hash value which is the identification information received from the generation unit 220 .

[0116] If the ID and the hash value match, the determination unit 230 determines that the control device 101 connected to its own security device 201 is legitimate. On the other hand, if the ID and the hash value do not match, the determination unit 230 determines that the control device 101 connected to its own security device 201 is not legitimate.

[0117] For example, the safety device 201 controls the power supply to the control device 101 according to the result of the judgment of the legitimacy of the control device 101. Specifically, when the safety device 201 judges that the control device 101 is legitimate, it starts to supply power to the power circuit 130 of the control device 101. On the other hand, when the safety device 201 judges that the control device 101 is not legitimate, it does not start to supply power to the power circuit 130 of the control device 101.

[0118] More specifically, when the determination unit 230 determines that the control device 101 connected to its own safety device 201 is legitimate, it outputs a supply instruction S2 to the power control unit 250 to start supplying power to the power supply circuit 130 of the control device 101 .

[0119] When receiving the supply instruction S2 from the determination unit 230 , the power control 250 starts outputting the power supply voltage to the power supply circuit 130 in accordance with the received supply instruction S2 .

[0120] When receiving power supply from the power control unit 250 of the safety device 201 , the power supply circuit 130 starts supplying power to each circuit of the control device 101 .

[0121] Furthermore, for example, when the security device 201 determines that the control device 101 is not legitimate, the security device 201 stops the power supply to the identification information transmission unit 140 of the control device 101 .

[0122] More specifically, when the determination unit 230 determines that the control device 101 connected to its own safety device 201 is not legitimate, it outputs a stop instruction S3 to the power control unit 250 to stop the power supply to the identification information transmission unit 140 of the control device 101 .

[0123] When receiving the stop instruction S3 from the determination unit 230 , the power control unit 250 stops the output of the power supply voltage to the identification information transmission unit 140 in accordance with the received stop instruction S3 .

[0124] When determining that the control device 101 connected to its own safety device 201 is not legitimate, the determination unit 230 transmits determination information indicating that the control device 101 is not legitimate to the information transmission device 200 via the interface unit 210 and the power line 15C.

[0125] For example, when the judgment unit 230 judges that the control device 101 connected to its own safety device 201 is not legal, the judgment unit 230 performs a process of cutting off the bus 13. In addition, for example, when the judgment unit 230 judges that the control device 101 connected to its own safety device 201 is not legal, the judgment unit 230 sends an error notification to the bus 13 via the interface unit 210. In addition, for example, when the judgment unit 230 judges that the control device 101 connected to its own safety device 201 is not legal, the judgment unit 230 causes interference (jamming) on ​​the bus 13 via the interface unit 210. In addition, the judgment unit 230 may also be a structure in which, when it is judged that the control device 101 connected to its own safety device 201 is not legal, it does not perform a part or all of the process of cutting off the bus 13, sending an error notification to the bus 13, and causing interference on the bus 13.

[0126] (Authentication Process)

[0127] If the determination unit 230 determines that the control device 101 is legitimate, the authentication unit 260 of the security device 201 performs authentication processing on the control device 101 .

[0128] For example, the storage unit 160 of the control device 101 stores authentication information such as a MAC (Media Access Control) address used for authentication of the control device 101 itself.

[0129] When receiving power supply from the power circuit 130 , the authentication information transmission unit 120 of the control device 101 acquires authentication information from the storage unit 160 , and transmits the acquired authentication information to the authentication unit 260 of the security device 201 via the connector 301 .

[0130] Upon receiving the authentication information from the authentication information transmitting unit 120 of the control device 101 , the authentication unit 260 of the security device 201 performs authentication processing of the control device 101 based on the received authentication information.

[0131] When the authentication of the control device 101 is successful, the authentication unit 260 outputs authentication success information indicating that the authentication is successful to the bus control unit 270 .

[0132] For example, the communication unit 110 of the control device 101 receives various information such as control information for other in-vehicle devices connected to the in-vehicle network 12 from a processing unit (not shown), and transmits the received various information to the bus control unit 270 of the safety device 201 via the connector 301 .

[0133] When the bus control unit 270 receives the authentication success information from the authentication unit 260, it permits the control device 101 to transmit various information using the bus 13. More specifically, after receiving the authentication success information from the authentication unit 260, the bus control unit 270 relays various information received from the control device 101 to the target vehicle-mounted device via the bus 13, and relays various information received from the vehicle-mounted device via the bus 13 to the control device 101 via the connector 301.

[0134] On the other hand, when the authentication of the control device 101 fails, the authentication unit 260 transmits authentication failure information indicating the authentication failure to the information transmission device 200 via the interface unit 210 and the power line 15C. In addition, the authentication unit 260 may be configured to transmit the authentication failure information to a higher-level device inside or outside the vehicle 1 via the bus control unit 270 and the bus 13.

[0135] Furthermore, when the authentication of the control device 101 fails, the authentication unit 260 outputs a stop instruction S4 to the power control unit 250 to stop the power supply to the power circuit 130 and the identification information transmission unit 140 of the control device 101 .

[0136] When receiving the stop instruction S4 from the authentication unit 260 , the power control unit 250 stops the output of the power supply voltage to the power supply circuit 130 and the identification information transmission unit 140 in accordance with the received stop instruction S4 .

[0137] [Flow of Action]

[0138] Each device of the communication system involved in the embodiment of the present invention has a computer including a memory, and a CPU or other computing processing unit of the computer reads out and executes a program including a part or all of each step of the following flow and sequence from the memory. The programs of the above-mentioned multiple devices can be installed from the outside respectively. The programs of the above-mentioned multiple devices are circulated in a state of being stored in a recording medium respectively.

[0139] Figure 4 This is a flowchart that defines an example of an operation flow when the safety device of the safety system according to the first embodiment of the present invention performs a legitimacy judgment on a control device connected to the safety device.

[0140] Reference Figure 4 First, the security device 201 receives the generated information from the information transmitting device 200 (step S102).

[0141] Next, the security device 201 generates reference identification information using the received generation information (step S104 ).

[0142] Next, the safety device 201 starts supplying power to the identification information transmitting unit 140 of the control device 101 connected thereto (step S106 ).

[0143] Next, the safety device 201 obtains the identification information of the connected control device 101. More specifically, the safety device 201 receives the identification information from the identification information transmitting unit 140 of the control device 101 (step S108).

[0144] Next, the security device 201 compares the generated reference identification information with the acquired identification information, and determines the legitimacy of the control device 101 connected to the security device 201 based on the comparison result (step S110 ).

[0145] Next, when the safety device 201 determines that the control device 101 connected to the safety device 201 is not legitimate (NO in step S112), the safety device 201 stops supplying power to the identification information transmitting unit 140 of the control device 101 (step S114).

[0146] Next, the security device 201 transmits determination information indicating that the control device 101 is not legitimate to the information transmitting device 200 via the interface unit 210 and the power line 15C (step S116).

[0147] On the other hand, when the safety device 201 determines that the control device 101 connected thereto is legitimate (YES in step S112 ), it starts supplying power to the power supply circuit 130 of the control device 101 (step S118 ).

[0148] Next, the safety device 201 obtains the authentication information of the control device 101 connected thereto. More specifically, the safety device 201 receives the authentication information from the authentication information transmitting unit 120 of the control device 101 (step S120).

[0149] Next, the security device 201 performs authentication processing of the control device 101 based on the authentication information (step S122).

[0150] Next, when the authentication of the control device 101 fails (NO in step S124 ), the security device 201 stops the power supply to the identification information transmission unit 140 and the power supply circuit 130 of the control device 101 (step S126 ).

[0151] Next, the security device 201 transmits authentication failure information indicating that the authentication of the control device 101 has failed to the information transmission device 200 via the interface unit 210 and the power line 15C (step S128).

[0152] On the other hand, when the authentication of the control device 101 is successful (YES in step S124 ), the security device 201 permits the control device 101 to transmit various information using the bus 13 (step S130 ).

[0153] Figure 5 This is a diagram showing an example of a sequence of a legitimacy determination process of the security system according to the first embodiment of the present invention.

[0154] Reference Figure 5 First, when the ignition power of the vehicle 1 is turned on and the in-vehicle network 12 is started, for example, the information transmitting device 200 transmits the generated information to the security device 201 (step S202).

[0155] Next, the security device 201 generates reference identification information using the received generation information (step S204 ).

[0156] Next, the safety device 201 starts outputting the power supply voltage to the identification information transmitting unit 140 of the control device 101 connected thereto (step S206 ).

[0157] Next, the safety device 201 obtains the identification information of the connected control device 101. More specifically, the identification information transmitter 140 of the control device 101 transmits the identification information including the ID of the control device 101 to the safety device 201 (step S208).

[0158] Next, the security device 201 compares the generated reference identification information with the acquired identification information, and determines the legitimacy of the control device 101 connected to the security device 201 based on the comparison result (step S210 ).

[0159] Next, when the safety device 201 determines that the control device 101 connected to the safety device 201 is legitimate, the safety device 201 starts outputting the power supply voltage to the power supply circuit 130 of the control device 101 (step S212 ).

[0160] Next, the security device 201 obtains the authentication information of the control device 101 connected thereto. More specifically, the authentication information transmission unit 120 of the control device 101 transmits the authentication information to the security device 201 (step S214).

[0161] Next, the security device 201 performs authentication processing of the control device 101 based on the authentication information (step S216 ).

[0162] Next, when the authentication of the control device 101 is successful, the security device 201 permits the control device 101 to transmit various information using the bus 13. More specifically, after the authentication of the control device 101 is successful, if the security device 201 receives various information from the control device 101 (step S218), the received information is relayed to the target vehicle-mounted device via the bus 13 (step S220), and if various information is received from the vehicle-mounted device via the bus 13 (step S222), the received information is relayed to the control device 101 (step S224).

[0163] In the safety system 401 according to the first embodiment of the present invention, the safety device 201 is configured to control the power supply to the control device 101 in accordance with the result of the determination of the legitimacy of the control device 101, but the present invention is not limited thereto. The safety device 201 may also be configured to supply power to the control device 101 regardless of the result of the determination of the legitimacy of the control device 101.

[0164] In the safety system 401 according to the first embodiment of the present invention, the safety device 201 is configured to control the power supply to the identification information transmission unit 140 of the control device 101 and the power supply to the power circuit 130 of the control device 101 separately, but the present invention is not limited thereto. The safety device 201 may be configured to be unable to control the power supply to the identification information transmission unit 140 and the power supply to the power circuit 130 separately. More specifically, the safety device 201 may be configured to start the power supply to the identification information transmission unit 140 and the power circuit 130 when receiving the generation information from the information transmission device 200.

[0165] In the security system 401 according to the first embodiment of the present invention, the information transmitting device 200 transmits the generated information to the security device 201 via the power line 15C, but the present invention is not limited thereto. The information transmitting device 200 may transmit the generated information to the security device 201 via the bus 13.

[0166] In addition, a technology capable of realizing excellent functions related to network security is desired.

[0167] In contrast, in the safety system 401 according to the first embodiment of the present invention, the information transmission device 200 and the safety device 201 are connected to each other via the in-vehicle network 12. The information transmission device 200 transmits generation information used to generate reference identification information to the safety device 201. The safety device 201 generates reference identification information using the generation information received from the information transmission device 200 via the in-vehicle network 12. The safety device 201 obtains the identification information of the control device 101 connected to itself. The safety device 201 compares the obtained identification information with the generated reference identification information, and based on the comparison result, determines the legitimacy of the control device 101 connected to itself.

[0168] The legitimacy determination method according to the first embodiment of the present invention is a legitimacy determination method for a safety system 401 having an information transmission device 200 and a safety device 201 that can be connected to a control device 101. In the legitimacy determination method, first, the information transmission device 200 transmits generation information used to generate reference identification information to the safety device 201. Next, the safety device 201 generates reference identification information using the generation information received from the information transmission device 200 via the in-vehicle network 12. Next, the safety device 201 obtains the identification information of the control device 101 connected to itself. Next, the safety device 201 compares the obtained identification information with the generated reference identification information, and determines the legitimacy of the control device 101 connected to itself based on the comparison result.

[0169] As described above, the structure and method for generating reference identification information based on generation information transmitted between the distributed security device 201 and the information sending device 200, and judging the legitimacy of the control device 101 using the generated reference identification information, can more reliably detect an illegal control device connected to the security device 201 even when either the information sending device 200 or the security device 201 is attacked.

[0170] Therefore, the security system and the legitimacy determination method according to the first embodiment of the present invention can realize excellent functions related to network security.

[0171] In the safety device 201 according to the first embodiment of the present invention, the interface unit 210 receives generation information from the information transmission device 200 connected to the safety device 201 via the in-vehicle network 12. The generation unit 220 generates reference identification information using the generation information received by the interface unit 210. The acquisition unit 240 acquires the identification information of the control device 101 connected to the safety device 201. The determination unit 230 compares the reference identification information generated by the generation unit 220 and the identification information acquired by the acquisition unit 240, and determines the legitimacy of the control device 101 connected to the safety device 201 based on the comparison result.

[0172] The legitimacy determination method according to the first embodiment of the present invention is a legitimacy determination method for a safety device 201 that can be connected to a control device 101. In the legitimacy determination method, first, the safety device 201 receives generation information from an information transmission device 200 that is connected to the safety device 201 via an in-vehicle network 12. Next, the safety device 201 generates reference identification information using the received generation information. Next, the safety device 201 acquires the identification information of the control device 101 connected to the safety device 201. Next, the safety device 201 compares the generated reference identification information with the acquired identification information, and determines the legitimacy of the control device 101 connected to the safety device 201 based on the comparison result.

[0173] As described above, a structure and method for generating reference identification information based on generation information transmitted between a dispersedly configured security device 201 and an information sending device 200, and using the generated reference identification information to judge the legitimacy of the control device 101, can more reliably detect an illegal control device connected to the security device 201 even when, for example, either the information sending device 200 or the security device 201 is attacked.

[0174] Therefore, the security device and the legitimacy determination method according to the first embodiment of the present invention can realize excellent functions related to network security.

[0175] Next, other embodiments of the present invention will be described using the drawings. In addition, the same or corresponding parts in the drawings are denoted by the same reference numerals, and their description will not be repeated.

[0176] <Second embodiment>

[0177] Compared with the security system 401 according to the first embodiment, the present embodiment relates to a security system 402 in which the identification information transmission unit 140 and the storage unit 150 are provided in the connector 301. Except for the contents described below, the security system 402 is the same as the security system 401 according to the first embodiment.

[0178] Figure 6 It is a diagram showing the configuration of a safety system according to a second embodiment of the present invention.

[0179] Reference Figure 6 The control device 101 includes a communication unit 110 , an authentication information sending unit 120 , a power circuit 130 , and a storage unit 160 .

[0180] In addition, the connector 301 includes an identification information transmitting unit 140 and a storage unit 150 .

[0181] For example, the storage unit 150 of the connector 301 stores the ID of the control device 101 to be connected to the connector 301 thereof.

[0182] When receiving the supply instruction S1 from the interface unit 210 , the power control unit 250 of the safety device 201 starts outputting the power supply voltage to the identification information transmission unit 140 of the connector 301 in accordance with the received supply instruction S1 .

[0183] When receiving power supply from the power control unit 250 of the safety device 201, the identification information transmission unit 140 of the connector 301 obtains the ID from the storage unit 150 and transmits the identification information including the obtained ID to the acquisition unit 240 of the safety device 201. The identification information transmission unit 140 is an example of a transmission circuit for transmitting the identification information of the storage unit 150 to the safety device 201.

[0184] Next, other embodiments of the present invention will be described using the drawings. In addition, the same or corresponding parts in the drawings are denoted by the same reference numerals, and their description will not be repeated.

[0185] <Third embodiment>

[0186] Compared with the safety system 401 according to the first embodiment, this embodiment relates to a safety system 403 in which a bus control unit 270 and a power control unit 250 are provided in a connector 301. Except for the contents described below, the safety system 401 and 402 according to the first and second embodiments are the same.

[0187] Figure 7 It is a diagram showing the configuration of a safety system according to a third embodiment of the present invention.

[0188] Reference Figure 7 The main body 201A of the security device 201 includes an interface unit 210 , a generation unit 220 , an authentication unit 260 , and a storage unit 280 . The connection unit 201B of the security device 201 includes a determination unit 230 and an acquisition unit 240 .

[0189] In addition, the connector 301 includes a bus control unit 270 and a power control unit 250 .

[0190] The power control unit 250 of the connector 301 performs control to switch whether or not to output the power supply voltage received from the power supply circuit 50 via the power supply line 15C and the interface unit 210 to the power supply circuit 130 of the control device 101 .

[0191] When the interface unit 210 of the security device 201 acquires the generation information based on the frame received from the information transmitting device 200 , it outputs a supply instruction S1 to the power control unit 250 of the connector 301 to start supplying power to the identification information transmitting unit 140 of the control device 101 .

[0192] When receiving the supply instruction S1 from the interface unit 210 of the safety device 201 , the power control unit 250 of the connector 301 starts outputting the power supply voltage to the identification information transmission unit 140 of the control device 101 in accordance with the received supply instruction S1 .

[0193] For example, when the determination unit 230 of the safety device 201 determines that the control device 101 connected to its own safety device 201 is legitimate, it outputs a supply instruction S2 to the power control unit 250 of the connector 301 to start supplying power to the power supply circuit 130 of the control device 101.

[0194] When receiving the supply instruction S2 from the determination unit 230 of the safety device 201 , the power control unit 250 of the connector 301 starts outputting the power supply voltage to the power supply circuit 130 of the control device 101 in accordance with the received supply instruction S2 .

[0195] On the other hand, when the judgment unit 230 of the safety device 201 judges that the control device 101 connected to its own safety device 201 is illegal, it outputs a stop instruction S3 to the power control unit 250 of the connector 301, indicating that the power supply to the identification information sending unit 140 of the control device 101 should be stopped.

[0196] When receiving the stop instruction S3 from the determination unit 230 of the safety device 201 , the power control unit 250 of the connector 301 stops outputting the power supply voltage to the identification information transmission unit 140 of the control device 101 in accordance with the received stop instruction S3 .

[0197] The authentication unit 260 of the security device 201 performs authentication processing on the control device 101 based on the authentication information received from the authentication information sending unit 120 of the control device 101. When the authentication of the control device 101 is successful, the authentication success information indicating the authentication success is output to the bus control unit 270 of the connector 301.

[0198] After receiving the authentication success information from the authentication unit 260 of the security device 201 , the bus control unit 270 of the connector 301 relays various information received from the control device 101 to the target vehicle-mounted device via the bus 13 .

[0199] On the other hand, when the authentication of the control device 101 fails, the authentication unit 260 outputs a stop instruction S4 to the power control unit 250 of the connector 301 to stop the power supply to the power circuit 130 and the identification information transmission unit 140 of the control device 101 .

[0200] When receiving the stop instruction S4 from the authentication unit 260 of the security device 201 , the power control unit 250 of the connector 301 stops outputting the power supply voltage to the power circuit 130 and the identification information transmission unit 140 of the control device 101 in accordance with the received stop instruction S4 .

[0201] As described above, in the safety system 403 according to the third embodiment of the present invention, the connector 301 includes the bus control unit 270 and the power control unit 250. Compared with a configuration in which the safety device 201 includes the bus control unit 270 and the power control unit 250, the cost of the safety device 201 can be reduced.

[0202] Next, other embodiments of the present invention will be described using the drawings. In addition, the same or corresponding parts in the drawings are denoted by the same reference numerals, and their description will not be repeated.

[0203] <Fourth embodiment>

[0204] Compared with the safety system 402 according to the second embodiment, this embodiment relates to a safety system 404 in which the bus control unit 270 and the power control unit 250 are provided in the connector 301. Except for the contents described below, the safety systems 401 to 403 according to the first to third embodiments are the same.

[0205] Figure 8It is a diagram showing the configuration of a safety system according to a fourth embodiment of the present invention.

[0206] Reference Figure 8 The main body 201A of the security device 201 includes an interface unit 210 , a generation unit 220 , an authentication unit 260 , and a storage unit 280 . The connection unit 201B of the security device 201 includes a determination unit 230 and an acquisition unit 240 .

[0207] In addition, the control device 101 includes a communication unit 110 , an authentication information transmission unit 120 , a power supply circuit 130 , and a storage unit 160 .

[0208] In addition, the connector 301 includes a bus control unit 270 , a power control unit 250 , an identification information transmission unit 140 , and a storage unit 150 .

[0209] The actions and functions of the safety device 201, connector 301 and each unit of the control device 101 of the safety system 404 are the same as the actions and functions of the safety device 201, connector 301 and each unit of the control device 101 of the safety systems 401, 402, 403, so the detailed description is not repeated.

[0210] As described above, in the safety system 404 according to the fourth embodiment of the present invention, the connector 301 includes the bus control unit 270, the power control unit 250, the identification information transmission unit 140, and the storage unit 150. According to the above structure, the cost of the safety device 201 can be reduced compared with the structure in which the safety device 201 includes the bus control unit 270 and the power control unit 250. In addition, the safety device 201 can obtain the identification information from the control device 101 that does not have a structure such as a transmission circuit through the connector 301, so that it is possible to easily construct a safety system that can judge the legitimacy of the existing control device 101 that does not have a structure such as a transmission circuit.

[0211] It should be understood that the above description of the embodiment is illustrative in all aspects and is not restrictive. The scope of the present invention is indicated by the claims rather than the above description, and includes all modifications within the meaning and scope equivalent to the claims.

[0212] The above description includes the following additional features.

[0213] [Appendix 1]

[0214] A safety system having:

[0215] Information sending device; and

[0216] A security device capable of connecting to an object device,

[0217] The information transmission device and the security device are connected to each other via a network.

[0218] The information transmitting device transmits generation information used to generate reference identification information to the security device,

[0219] the security device generates the reference identification information using the generation information received from the information transmitting device via the network,

[0220] The security device obtains identification information of the target device connected to the security device.

[0221] The security device compares the acquired identification information with the generated reference identification information, and based on the comparison result, determines the legitimacy of the target device connected to the security device.

[0222] If the network is activated, the information transmitting device transmits the generated information to the security device via a power line.

[0223] [Appendix 2]

[0224] A safety system having:

[0225] Information sending device; and

[0226] A security device capable of connecting to an object device,

[0227] The information transmission device and the security device are connected to each other via a network.

[0228] The information transmitting device transmits generation information used to generate reference identification information to the security device,

[0229] the security device generates the reference identification information using the generation information received from the information transmitting device via the network,

[0230] The security device obtains identification information of the target device connected to the security device.

[0231] The security device compares the acquired identification information with the generated reference identification information, and based on the comparison result, determines the legitimacy of the target device connected to the security device.

[0232] The network is an in-vehicle network,

[0233] The target device is an ECU.

[0234] [Appendix 3]

[0235] A security device capable of connecting to an object device,

[0236] The safety device has:

[0237] a receiving unit that receives generation information from an information transmitting device connected to the security device via a network;

[0238] a generating unit that generates reference identification information using the generating information received by the receiving unit;

[0239] an acquisition unit that acquires identification information of the target device connected to the security device; and

[0240] a judgment unit that compares the reference identification information generated by the generation unit with the identification information acquired by the acquisition unit, and judges the legitimacy of the target device connected to the security device based on the comparison result,

[0241] If the network is activated, the receiving unit receives the generation information from the information transmitting device via a power line.

[0242] [Appendix 4]

[0243] A security device capable of connecting to an object device,

[0244] The safety device has:

[0245] a receiving unit that receives generation information from an information transmitting device connected to the security device via a network;

[0246] a generating unit that generates reference identification information using the generating information received by the receiving unit;

[0247] an acquisition unit that acquires identification information of the target device connected to the security device; and

[0248] a judgment unit that compares the reference identification information generated by the generation unit with the identification information acquired by the acquisition unit, and judges the legitimacy of the target device connected to the security device based on the comparison result,

[0249] The receiving unit, the generating unit, the acquiring unit, and the determining unit are implemented by a processor.

[0250] Description of the label

[0251] 1 Vehicle

[0252] 12 In-vehicle Network

[0253] 13 Bus

[0254] 14 Ethernet cable

[0255] 15 Power cord

[0256] 20 Gateway Device

[0257] 30 Car communication device

[0258] 40 Bus connection device group

[0259] 50 Power Circuit

[0260] 101 Control Device

[0261] 110 Ministry of Communications

[0262] 120 Authentication information sending unit

[0263] 130 Power circuit

[0264] 140 Identification information sending unit

[0265] 150 Storage

[0266] 160 Storage

[0267] 200 Information sending device

[0268] 201 Safety Devices

[0269] 201A Main body

[0270] 201B Connection

[0271] 210 Interface

[0272] 220 Generation Department

[0273] 230 Judgment Department

[0274] 240 Acquisition Department

[0275] 250 Power Control Department

[0276] 260 Certification Department

[0277] 270 Bus Control Unit

[0278] 280 Storage

[0279] 301 Connector

[0280] 401, 402, 403, 404 Security System

[0281] 501 Communication System

Claims

1. A safety system comprising: Information sending device; and A security device capable of connecting to an object device, The information transmission device and the security device are connected to each other via a network. The information transmitting device transmits generation information used to generate reference identification information to the security device, The security device generates the reference identification information as a hash value by inputting a keyword included in the generation information received from the information transmitting device via the network into a hash function, The security device obtains identification information of the target device connected to the security device. The security device compares the acquired identification information with the generated reference identification information, and based on the comparison result, determines the legitimacy of the target device connected to the security device. The safety device is capable of separately controlling the power supply to a transmitting circuit and the power supply to a target circuit, wherein the transmitting circuit is a circuit for transmitting the identification information to the safety device, and the target circuit is a circuit of the target device and is different from the transmitting circuit. The security device starts supplying power to the transmission circuit when receiving the generated information from the information transmission device, and starts supplying power to the target circuit when determining that the target device is legitimate.

2. The security system according to claim 1, wherein: The security device stops the power supply to the transmission circuit when determining that the target device is not authorized.

3. The safety system according to claim 1 or 2, wherein: The safety device does not start supplying power to the target circuit when it is determined that the target device is not authorized.

4. The safety system according to claim 1 or 2, wherein: The network includes communication lines and auxiliary lines, The target device communicates with other devices connected to the network via the communication line. The information transmitting device transmits the generated information to the security device via the auxiliary line.

5. The security system according to claim 4, wherein: When the security device determines that the target device is unauthorized, the security device performs at least one of a process of cutting off the communication line, sending an error notification to the communication line, and causing interference to the communication line.

6. The security system according to claim 4, wherein: The auxiliary line is a power line for supplying electric power to the safety device.

7. The safety system according to claim 1 or 2, wherein: The safety system further includes a connector for the target device in order to connect the target device to the safety device. The connector comprises: a storage unit that stores the identification information; and A transmitting circuit is a circuit for transmitting the identification information of the storage unit to the security device.

8. A vehicle comprising the safety system according to any one of claims 1 to 7.

9. A security device capable of connecting to a target device, The safety device has: a receiving unit that receives generation information from an information transmitting device connected to the security device via a network; a generating unit that inputs a keyword included in the generated information received by the receiving unit into a hash function to generate reference identification information as a hash value; an acquisition unit that acquires identification information of the target device connected to the security device; a determination unit that compares the reference identification information generated by the generation unit with the identification information acquired by the acquisition unit, and determines the legitimacy of the target device connected to the security device based on the comparison result; as well as a power control unit capable of separately controlling power supply to a transmission circuit and power supply to a target circuit, wherein the transmission circuit is a circuit for transmitting the identification information to the safety device, and the target circuit is a circuit of the target device and is different from the transmission circuit, The power control unit starts supplying power to the transmission circuit when receiving the generation information from the information transmission device, and starts supplying power to the target circuit when determining that the target device is legitimate.

10. A method for determining legitimacy of a security system comprising an information transmitting device and a security device capable of connecting to an object device, The information transmission device and the security device are connected to each other via a network. The legality determination method includes the following steps: The information transmitting device transmits generation information used to generate reference identification information to the security device; The security device inputs a keyword included in the generation information received from the information transmitting device via the network into a hash function to generate the reference identification information as a hash value; The security device acquires identification information of the target device connected to the security device; and The security device compares the acquired identification information with the generated reference identification information, and based on the comparison result, determines the legitimacy of the target device connected to the security device. The safety device is capable of separately controlling the power supply to a transmitting circuit and the power supply to a target circuit, wherein the transmitting circuit is a circuit for transmitting the identification information to the safety device, and the target circuit is a circuit of the target device and is different from the transmitting circuit. The security device starts supplying power to the transmission circuit when receiving the generated information from the information transmission device, and starts supplying power to the target circuit when determining that the target device is legitimate.

11. A method for determining the legitimacy of a security device that can be connected to an object device, The legality determination method includes the following steps: receiving generation information from an information transmitting device connected to the security device via a network; inputting a keyword included in the received generation information into a hash function to generate reference identification information as a hash value; acquiring identification information of the target device connected to the security device; and comparing the generated reference identification information with the acquired identification information, and judging the legitimacy of the target device connected to the security device based on the comparison result, capable of separately controlling power supply to a transmission circuit for transmitting the identification information to the safety device and power supply to an object circuit which is a circuit of the object device and different from the transmission circuit, When the generation information is received from the information transmitting device, the power supply to the transmitting circuit is started, and when it is determined that the target device is legitimate, the power supply to the target circuit is started.

Images