Vehicle-mounted devices and servers

Abstract

The present invention provides an on-vehicle device capable of switching whether to perform diagnosis when the vehicle identification code is not registered in the server. The on-vehicle device (1) comprises: an OTA center communication unit (2) (first communication circuit) which performs wireless communication with the OTA center (300) (server); a memory (1b) (first memory) which stores diagnostic permission information (4) (first information) indicating whether diagnosis is permitted or not; and a CPU (1a) (first processor). The CPU (1a) performs diagnosis on the on-vehicle device (1) and saves the result when the VIN (identification code) of the vehicle (11) on which the on-vehicle device (1) is mounted is not registered in the OTA center (300) and the diagnostic permission information (4) indicates that diagnosis is permitted. When the VIN of the vehicle 11 on which the on-vehicle device (1) is mounted is not registered in the OTA center (300) and the diagnostic permission information (4) indicates that diagnosis is not permitted, the on-vehicle device (1) is not diagnosed.

Description

Technical Field

[0001] The present invention relates to a vehicle-mounted device and a server. Background Art

[0002] In recent years, there has been an increasing trend in automobile accidents caused by security attacks, and security measures within vehicles are being sought. Examples of security measures include detection of data fraud.

[0003] For example, consider a scenario where someone illegally accesses the in-vehicle network and overwrites the vehicle identification number (VIN) stored in the vehicle's ECU. This represents an attack that illegally rewrites the VIN information. In this case, as a safety measure, an in-vehicle device might detect the unauthorized rewriting of the VIN, store abnormal information (hereinafter referred to as a DTC) in the device, and output a warning.

[0004] Its purpose is to urge the user to go to the dealership by notifying the user of a warning. In addition, various methods have been proposed as a technology for storing abnormality information in an onboard device (for example, refer to Patent Document 1).

[0005] Prior art literature

[0006] Patent Literature

[0007] Patent Document 1: Japanese Patent Application Laid-Open No. 2010-139514. Summary of the Invention

[0008] Problems to be solved by the invention

[0009] In recent years, the adoption of wireless remote software updates in automobiles has led to a growing demand for automotive-specific remote software update technology (hereinafter referred to as "OTA"), which allows remote updates of vehicle ECU software. OTA systems employ a method in which the OTA center is notified of the latest information on the vehicle's ECU, such as the part number, software version, and VIN, and the center's stored information is regularly updated. This synchronization of the OTA center's stored information with the vehicle's information prevents erroneous software updates.

[0010] Furthermore, by synchronizing the information of both parties, if any discrepancy occurs in the data, the discrepancy can be detected. In other words, such information synchronization can also be used as a diagnostic function to determine whether the data is correct.

[0011] Here, when this diagnostic function is applied in the detection of illegal rewriting of the VIN as described above, the correct VIN held by the OTA center and the VIN stored in the vehicle-mounted device are synchronized. In the event of data inconsistency, it is deemed that there has been illegal rewriting of the VIN on the vehicle-mounted device side, and the DTC can be stored in the vehicle-mounted device to output a warning.

[0012] However, in practical applications, the following misdiagnosis scenarios are possible: One is when a vehicle is powered on before the VIN is written to the vehicle at a vehicle assembly factory. When communication with the OTA center is established, a VIN mismatch is detected, leading to DTC storage.

[0013] Another problem is that even after the VIN is written to the vehicle, if the vehicle is powered on before the OTA center registers the VIN in the VIN information management, non-registration of the VIN may be detected, resulting in erroneous diagnosis of DTC storage.

[0014] An object of the present invention is to provide an in-vehicle device capable of detecting illegal rewriting of a VIN without erroneous diagnosis even when the VIN is not written into the vehicle or the VIN of the vehicle is not registered in the server as described above.

[0015] Technical means to solve the problem

[0016] In order to achieve the above-mentioned purpose, an example of the present invention is a vehicle-mounted device, which has a first communication circuit for wireless communication with a server, a first memory for storing first information indicating permission or disapproval of diagnosis, and a first processor. In the first processor, when the identification code of the vehicle on which the vehicle-mounted device is installed is not registered in the server and the first information indicates permission for diagnosis, the vehicle-mounted device is diagnosed and the result is saved. When the identification code of the vehicle on which the vehicle-mounted device is installed is not registered in the server and the first information indicates disapproval of diagnosis, the vehicle-mounted device is not diagnosed.

[0017] Effects of the Invention

[0018] According to the present invention, it is possible to switch whether or not to perform a diagnosis when the vehicle identification code is not registered in the server. Other problems, configurations, and effects than those described above will become apparent from the following description of the embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 It is a schematic diagram of an in-vehicle device and an in-vehicle system according to one embodiment of the present invention.

[0020] Figure 2This is a flowchart from OTA synchronization information to diagnosis permission determination of the in-vehicle device according to one embodiment of the present invention.

[0021] Figure 3 This is a flow chart of the OTA center from OTA synchronization information to diagnostic permission response.

[0022] Figure 4 This is a flowchart from the start to the end of diagnosis of the vehicle-mounted device according to one embodiment of the present invention.

[0023] Figure 5 This is a diagram of the hardware configuration of the vehicle-mounted device.

[0024] Figure 6 This is a diagram of the hardware configuration of the OTA center (server). DETAILED DESCRIPTION

[0025] With reference to the accompanying drawings Figures 1 to 4 An in-vehicle device and an OTA system according to an embodiment of the present invention will be described.

[0026] use Figure 1 A schematic configuration of an in-vehicle device and an in-vehicle system according to an embodiment of the present invention will be described.

[0027] (Abstract structure)

[0028] The on-vehicle device 1 is a device capable of communicating with a VIN storage ECU 12, a navigation VIN screen display 13, a diagnostic device 14, and an OTA center 300, and is composed of, for example, an OTA center communication unit 2, a diagnostic processing unit 3, a diagnostic permission information unit 4, and a DTC area 5. The on-vehicle device 1 sends OTA synchronization information 200 to the OTA center 300 and receives an OTA synchronization response 201 from the OTA center 300. The on-vehicle device 1 is installed in a vehicle 11 in a vehicle assembly factory (100) and a market (400).

[0029] The vehicle assembly plant (100) is composed of a vehicle 11 and a diagnostic machine 14. The diagnostic machine 14 is, for example, a notebook computer and is installed with tools (software) for displaying the diagnostic results of the vehicle-mounted device 1. The diagnostic machine 14 is also installed at a car dealer 420 in the market (400).

[0030] The OTA center (300) can communicate with the vehicle-mounted device 1, and is composed of, for example, OTA information 301, regular VIN registration information 302, diagnostic permission information 303, and external illegal monitoring 304. The OTA center (300) receives OTA synchronization information 200 from the vehicle-mounted device 1 and sends an OTA synchronization response 201 to the vehicle-mounted device 1.

[0031] The market (400) is composed of, for example, vehicles 11, car dealers 420, and illegal inputs 410 from the outside world.

[0032] (Hardware composition)

[0033] The vehicle-mounted device 1 is, for example, an ECU (Electronic Control Unit). Figure 5 As shown, the vehicle-mounted device 1 is composed of a CPU 1a (first processor), a memory 1b (first memory), a communication circuit 1c (first communication circuit), an I / F 1d (input and output circuit), etc. Figure 5 The CPU1a shown as Figure 1 The diagnostic processing unit 3 shown in FIG. Figure 5 The communication circuit 1c shown is used as Figure 1 The OTA center communication unit 2 shown functions.

[0034] The OTA center 300 is, for example, a server. Figure 6 As shown, the OTA center 300 is composed of a CPU 300a (second processor), a memory 300b (second memory), a communication circuit 300c (second communication circuit), an I / F 300d (second input and output circuit), an HDD (hard disk drive), etc. Figure 5 The CPU1a shown as Figure 1 The diagnostic processing unit 3 shown in FIG. Figure 5 The communication circuit 1c shown is used as Figure 1 The external illegal monitoring 304 shown is functioning.

[0035] (Synchronization between the vehicle assembly factory and the OTA center)

[0036] In a vehicle assembly plant (100), as a process of assembling a vehicle 11, an onboard device 1, a VIN storage ECU 12, and a navigation VIN screen display 13 are connected. When the vehicle 11 is powered on after assembly, the onboard device 1 receives a "No VIN 202" from the VIN storage ECU 12, and transmits the "No VIN 202" to the OTA synchronization information 200 from the OTA center communication unit 2 to the OTA center 300. Here, "No VIN 202" is data indicating that the VIN is empty or blank, for example.

[0037] like Figure 3 As shown, the OTA center 300 receives the OTA synchronization information 200 of no VIN 202 (S210), and determines whether it complies with the regular VIN registration information 302 (S220). Since it is not regular VIN information (S220: No), the diagnosis permission information 303 is not allowed diagnosis (initial value) (S250: No), so the OTA synchronization response is equipped with VIN not registered 203 indicating abnormality to respond (S270).

[0038] like Figure 2As shown, the vehicle-mounted device 1 of the vehicle assembly factory (100) receives the VIN not registered 203 response (S110), the OTA synchronization response is an abnormal response (VIN not registered) (S120), and the diagnosis permission information 4 is diagnosis not permitted (initial value) (S130: No), so the VIN diagnosis is not implemented (S130: No).

[0039] like Figure 4 As shown, when the diagnosis permission information 4 indicates that diagnosis is not permitted (S310: No), the vehicle-mounted device 1 of the vehicle assembly factory (100) does not perform VIN diagnosis, but responds to the navigation VIN screen display 13 and the diagnostic machine 14 that the diagnosis result is normal (S320).

[0040] In other words, the in-vehicle device 1 includes an OTA center communication unit 2 (first communication circuit) for wirelessly communicating with an OTA center 300 (server), a memory 1b (first memory) for storing diagnostic permission information 4 (first information) indicating whether diagnostics are permitted or not, and a CPU 1a (first processor). If the VIN (identification number) of the vehicle 11 on which the in-vehicle device 1 is mounted is not registered with the OTA center 300 (server) and the diagnostic permission information 4 indicates that diagnostics are not permitted, the in-vehicle device 1 is not diagnosed.

[0041] In this embodiment, the memory 1b (first memory) stores diagnostic permission information 4 (first information) indicating that diagnostics are not permitted as an initial value. Therefore, when the vehicle-mounted device 1 is powered on, for example at a factory, diagnostics are not performed even if the vehicle 11's VIN (identification number) is not registered with the OTA center 300 (server).

[0042] (Synchronization between the market and OTA center)

[0043] like Figure 1 As shown, the vehicle-mounted device 1 in the market 400 receives the legitimate VIN (010) 204 from the VIN holding ECU 12 , mounts the legitimate VIN (010) 204 on the OTA synchronization information 200 , and transmits it from the OTA center communication unit 2 to the OTA center 300 .

[0044] like Figure 3 As shown, the OTA center 300 receives the regular VIN (010) 204 of the OTA synchronization information 200 (S210), determines whether it complies with the regular VIN registration information 302 (S220), and because it is regular VIN information (S220: Yes), the diagnostic permission information 303 is rewritten to permission diagnosis (S230), the OTA synchronization response 201 is set to normal, and the diagnostic permission 205 carrying the diagnostic permission information 303 is responded (S240).

[0045] In other words, the OTA center 300 (server) includes a communication circuit 300c (second communication circuit) and a CPU 300a (second processor) for wirelessly communicating with the onboard device 1. The CPU 300a (second processor) receives the vehicle identification number (VIN) of the vehicle 11 from the onboard device 1 via the communication circuit 300c (second communication circuit), determines whether the VIN of the vehicle 11 has been registered in the HDD 300 of the OTA center 300 (server), and, if it determines that the VIN of the vehicle 11 has been registered in the OTA center 300 (server), transmits diagnostic permission information 303 (second information) indicating permission for the diagnostic to the onboard device 1 via the communication circuit 300c (second communication circuit).

[0046] Thus, when it is determined that the VIN (identification code) of the vehicle 11 has been registered in the OTA center 300 (server), the OTA center 300 can set the diagnosis permission information 4 (initial value of the first information) indicating that diagnosis is not permitted to indicate that diagnosis is permitted through the diagnosis permission information 303 (second information).

[0047] In this embodiment, the CPU 300a (second processor) sends diagnostic permission information 303 (second information) indicating permission for diagnosis to the vehicle-mounted device 1 via the communication circuit 300c (second communication circuit) only when it initially determines that the VIN (identification code) of the vehicle 11 has been registered in the OTA center 300 (server).

[0048] Thus, only when it is determined for the first time that the vehicle VIN is registered in the OTA center 300 , the OTA center 300 can set the diagnosis permission information 4 (initial value of the first information) indicating that diagnosis is not permitted to indicate that diagnosis is permitted through the diagnosis permission information 303 (second information).

[0049] Specifically, the OTA center 300 (server) includes a memory 300b (second memory) that stores, as an initial value, diagnostic permission information 303 (second information) indicating that diagnostics are not permitted. When the CPU 300a (second processor) determines that the vehicle 11's VIN (identification number) is registered in the OTA center 300 (server) and that the diagnostic permission information 303 (second information) in the memory 300b (second memory) indicates that diagnostics are not permitted, it rewrites the diagnostic permission information 303 in the memory 300b to indicate that diagnostics are permitted, and transmits the diagnostic permission information 303 indicating that diagnostics are permitted to the in-vehicle device 1 via the communication circuit 300c (second communication circuit).

[0050] Thus, only when the OTA center 300 (server) initially determines that the VIN (identification number) of the vehicle 11 is registered, the OTA center 300 (server) can set the diagnosis permission information 4 (the initial value of the first information), which indicated that diagnosis was not permitted, to indicate that diagnosis was permitted, through the diagnosis permission information 303 (the second information). Furthermore, the diagnosis permission information 4 (the first information) in the memory 1b (the first memory) can be synchronized with the diagnosis permission information 303 (the second information) in the memory 300b (the second memory).

[0051] In addition, CPU300a (second processor) can also count the number of times that the VIN (identification code) of vehicle 11 has been registered in the OTA center 300 (server), and when the counted number changes from 0 to 1, it sends diagnostic permission information 303 (second information) indicating diagnostic permission to the vehicle-mounted device 1 via the communication circuit 300c (second communication circuit).

[0052] Thus, only when it is initially determined that the VIN (identification code) of the vehicle 11 has been registered in the OTA center 300 (server), the OTA center 300 (server) can set the diagnosis permission information 4 (the initial value of the first information) indicating that diagnosis is not permitted to indicate that diagnosis is permitted via the diagnosis permission information 303 (second information).

[0053] like Figure 2 As shown, the vehicle-mounted device 1 of the market 400 receives the diagnostic permission 205 (S110) of the OTA synchronization response 201. The OTA synchronization response 201 is a normal response (the center has performed VIN registration) (S120), so the diagnostic permission information 4 is set to permitted diagnosis (S140) in the diagnostic processing unit 3, and the diagnosis of the VIN is set to the permitted state.

[0054] In this embodiment, the CPU 1a (first processor) of the vehicle-mounted device 1 sends the VIN (identification code) of the vehicle 11 to the OTA center 300 (server) via the OTA center communication unit 2 (first communication circuit). When it is determined that the VIN of the vehicle 11 has been registered in the OTA center 300, the CPU 1a receives diagnostic permission information 303 (second information) indicating permission for diagnosis from the OTA center 300 via the OTA center communication unit 2, and rewrites the diagnostic permission information 4 (first information) of the memory 1b (first memory) to be consistent with the diagnostic permission information 303 (second information).

[0055] Thus, if it is determined that the VIN (identification number) of vehicle 11 is registered in OTA center 300 (server), diagnosis permission information 4 (first information) can be set to indicate that diagnosis is permitted using diagnosis permission information 303 (second information). As a result, for example, if a VIN is assigned to vehicle 11 and the VIN of vehicle 11 is registered in OTA center 300, diagnosis can be performed.

[0056] like Figure 1 As shown, when the VIN holding ECU 12 of the market 400 rewrites the VIN due to illegal input 410 from the outside after the diagnosis is permitted, the vehicle-mounted device 1 receives the illegal VIN (444) 411 from the VIN holding ECU 12 after the vehicle power is turned on, and mounts the illegal VIN (444) 411 on the OTA synchronization information 200, and transmits it from the OTA center communication unit 2 to the OTA center 300.

[0057] like Figure 3 As shown, the OTA center 300 receives the illegal VIN (444) 411 of the OTA synchronization information 200 (S210), determines whether it complies with the regular VIN registration information 302 (S220), and because the diagnosis permission information 303 is permission diagnosis (S250: Yes), it is detected as illegal VIN information (S260), and responds with VIN not registered 203 indicating abnormality on the OTA synchronization response 201 (S270).

[0058] In other words, if the CPU 300a (second processor) determines that the VIN (identification code) of the vehicle 11 is not registered in the OTA center 300 (server) and the diagnostic permission information 303 (second information) in the memory 300b (second memory) indicates that the diagnostic is permitted, it determines that the VIN of the vehicle 11 has been illegally rewritten. This allows the OTA center 300 (server) to detect that the VIN (identification code) of the vehicle 11 has been illegally rewritten.

[0059] like Figure 2 As shown, the vehicle-mounted device 1 of the market 400 receives the VIN not registered 203 of the OTA synchronization response 201 (S110), and the OTA synchronization response 201 is an abnormal response (VIN not registered) (S120). The diagnosis permission information 4 in the diagnosis processing unit 3 is in the diagnosis permission state (S130: Yes), so the DTC is stored as an illegal VIN detection (S150). Figure 4 As shown, since the diagnosis permission information 4 is in the diagnosis permission state ( S310 : YES), the VIN diagnosis is performed ( S330 ), and the vehicle-mounted device 1 of the market 400 outputs the abnormality diagnosis result to the navigation VIN screen display 13 and the diagnostic machine 14 .

[0060] In other words, when the VIN (identification code) of the vehicle 11 equipped with the vehicle-mounted device 1 is not registered in the OTA center 300 (server) and the diagnostic permission information 4 (first information) indicates that diagnosis is permitted, the CPU1a (first processor) performs diagnosis on the vehicle-mounted device 1 and saves the results in a memory, etc.

[0061] Thus, if the VIN (identification number) of vehicle 11 is not registered with OTA center 300 (server), whether or not to perform a diagnosis can be switched based on diagnostic permission information 4 (first information). For example, if diagnostic permission information 4 is previously set to indicate that diagnosis is not permitted, then diagnosis will not be performed if the VIN of vehicle 11 is not registered with OTA center 300 because a VIN has not been assigned to vehicle 11. On the other hand, if diagnostic permission information 4 is previously set to indicate that diagnosis is permitted, diagnosis will be performed if the VIN of vehicle 11 is not registered with OTA center 300 because the VIN has been overwritten.

[0062] In this embodiment, when the VIN (identification code) of the vehicle 11 is not registered in the OTA center 300 (server) and the diagnostic permission information 4 (first information) indicates that the diagnosis is permitted, the CPU1a (first processor) performs a diagnosis based on the specifications of the vehicle-mounted device 1 (for example, OBD2: On Board Diagnosis second generation) and saves the fault code corresponding to the result (for example, DTC: Diagnostics Trouble Code) in a memory, etc.

[0063] Therefore, if the diagnostic permission information 4 (first information) is set in advance to indicate permission for diagnosis, then in a case where the VIN (identification code) of the vehicle 11 is not registered in the OTA center 300 (server) due to the VIN (identification code) of the vehicle 11 being rewritten, a diagnosis based on the specifications of the vehicle-mounted device 1 is performed and the fault code corresponding to the result is saved.

[0064] Furthermore, if the VIN (identification number) of the vehicle 11 is not registered in the OTA center 300 (server) and the diagnostic permission information 4 (first information) indicates that the diagnostic is permitted, the CPU 1a (first processor) determines that the VIN of the vehicle 11 has been illegally rewritten. This allows the in-vehicle device 1 to detect that the vehicle's VIN has been illegally rewritten.

[0065] As described above, according to the present embodiment, when the VIN (identification number) of the vehicle is not registered in the OTA center 300 (server), it is possible to switch whether or not to perform the diagnosis.

[0066] Furthermore, the present invention is not limited to the above-described embodiments and includes various variations. For example, the above-described embodiments are described in detail to facilitate understanding of the present invention and are not necessarily limited to embodiments having all of the described configurations. Furthermore, portions of the configurations of some embodiments may be replaced by configurations of other embodiments, and the configurations of some embodiments may be combined with configurations of other embodiments. Furthermore, portions of the configurations of each embodiment may be supplemented, deleted, or replaced with other configurations.

[0067] In the above embodiment, the VIN holding ECU 12 and the in-vehicle device 1 are separate, but they may be integrated.

[0068] Furthermore, the above-mentioned components and functions may be partially or entirely implemented in hardware by designing them using integrated circuits. Furthermore, the above-mentioned components and functions may be implemented in software by having a processor interpret and execute programs that implement the respective functions. Information such as programs, tables, and files that implement the respective functions may be stored in a storage device such as a memory, a hard disk, or an SSD (Solid State Drive), or a recording medium such as an IC card, SD card, or DVD.

[0069] Furthermore, the present invention may be implemented in the following aspects.

[0070] (1) An in-vehicle device having an OTA (Over the Air) center for handling vehicle identification number information (VIN) and synchronization information with the OTA center, wherein the appropriateness of diagnosis of the VIN is determined based on diagnosis permission information based on the synchronization information.

[0071] (2) In the vehicle-mounted device of (1), if synchronization with the OTA center is unsuccessful, the diagnostic permission information is set to not permitted based on the judgment of the OTA center, and the diagnosis is not performed. The diagnostic permission information is read by the diagnostic machine to confirm the VIN operation of the OTA center.

[0072] (3) In the vehicle-mounted device of (1), when synchronization with the OTA center is successful, the diagnostic permission information is set to permission based on the judgment of the OTA center, and after synchronization with the OTA center, the diagnosis of the VIN is implemented based on the diagnostic permission information and the judgment of the OTA center.

[0073] (4) In (1), it is possible to detect an attack from the outside based on the diagnosis permission information simultaneously with the OTA center.

[0074] (5) In (1), the diagnosis permission information may use a synchronous counter to further improve accuracy.

[0075] (6) In (1), the diagnostic machine can confirm attack detection from the outside and confirm and rewrite the diagnostic permission information.

[0076] (7) The OTA center can operate the diagnostic information permission of the vehicle-mounted device through the synchronization information.

[0077] (8) The OTA center can detect attacks from outside the vehicle-mounted device based on the synchronization information.

[0078] The vehicle-mounted device according to any one of (1) to (8) does not perform diagnosis before the legitimate VIN is registered at the OTA center in the vehicle assembly factory. Since the vehicle-mounted device does not perform diagnosis, DTCs for illegal VINs are not stored.

[0079] Meanwhile, in the market, by registering legitimate VIN information with the OTA center, the onboard device can diagnose whether the VIN is legitimate or illegal. Furthermore, by regularly communicating with the OTA center, fault diagnosis can be performed to detect legitimate VINs even in the event of an external cyberattack.

[0080] The OTA center can detect external attacks at the same time as the onboard devices of the managed vehicles and can remotely control the onboard diagnostic permission information.

[0081] Explanation of symbols

[0082] 1…In-vehicle device, 2…OTA center communication unit, 3…Diagnostic processing unit, 4…Diagnostic permission information, 5…DTC area, 11…Vehicle, 12…VIN holding ECU, 13…Navigation VIN screen display, 14…Diagnostic machine, 100…Vehicle assembly factory, 200…OTA synchronization information, 201…OTA synchronization response, 202…No VIN, 203…Unregistered VIN, 204…Regular VIN (010), 205…Diagnostic permission, 300…OTA center, 301…OTA information, 302…Regular VIN registration information, 303…Diagnostic permission information, 304…External illegal monitoring, 400…Market, 410…Illegal input from the outside, 411…Illegal VIN (444), 420…Auto dealer

Claims

1. A vehicle-mounted device comprising: a first communication circuit for wirelessly communicating with a server; a first memory storing first information indicating permission or non-permission of diagnosis; and First processor, The vehicle-mounted device is characterized in that If the identification code of the vehicle on which the in-vehicle device is mounted is not registered in the server and the first information indicates that diagnosis is permitted, the first processor performs a diagnosis on the in-vehicle device and stores the result. If the identification code of the vehicle on which the in-vehicle device is mounted is not registered in the server and the first information indicates that diagnosis is not permitted, the first processor does not perform diagnosis on the in-vehicle device. The first processor sends the vehicle identification code to the server via the first communication circuit, When it is determined that the vehicle identification code is registered in the server, the first processor receives second information indicating permission for diagnosis from the server via the first communication circuit, and rewrites the first information in the first memory to match the second information. The first memory stores first information indicating that diagnosis is not permitted as an initial value, If the vehicle identification code is not registered in the server and the first information indicates that diagnosis is permitted, the first processor determines that the vehicle identification code has been illegally rewritten.

2. The vehicle-mounted device according to claim 1, wherein: When the vehicle identification code is not registered in the server and the first information indicates that diagnosis is permitted, the first processor performs diagnosis based on the specifications of the in-vehicle device and stores a fault code corresponding to the result.

3. A server for communicating with the vehicle-mounted device according to claim 1, characterized in that: have: a second communication circuit for wirelessly communicating with the vehicle-mounted device; and Second processor, The second processor receives the vehicle identification code from the vehicle-mounted device via the second communication circuit, and determining whether the identification code of the vehicle has been registered in the server, If it is determined that the vehicle identification code is registered in the server, the second processor transmits the second information indicating permission of diagnosis to the in-vehicle device via the second communication circuit.

4. The server according to claim 3, wherein: The second processor transmits the second information indicating permission of diagnosis to the in-vehicle device via the second communication circuit only when it is determined for the first time that the identification code of the vehicle is registered in the server.

5. The server according to claim 3, wherein: A second memory is provided, the second memory storing second information indicating that diagnosis is not permitted as an initial value, When it is determined that the identification code of the vehicle has been registered in the server and the second information in the second memory indicates that diagnosis is not permitted, the second processor rewrites the second information in the second memory to indicate that diagnosis is permitted, and sends the second information indicating that diagnosis is permitted to the vehicle-mounted device via the second communication circuit.

6. The server according to claim 3, wherein: The second processor counts the number of times the vehicle identification code is determined to be registered in the server, and when the counted number changes from 0 to 1, transmits the second information indicating permission of diagnosis to the in-vehicle device via the second communication circuit.

7. The server according to claim 5, wherein: The second processor determines that the vehicle identification code has been illegally rewritten when it is determined that the vehicle identification code is not registered in the server and the second information in the second memory indicates that diagnosis is permitted.

Images