Unauthorized connection detection device

Abstract

An unauthorized connection detection device is provided that detects unauthorized device connection at a connection portion where an electric control unit and an input / output unit mounted on a vehicle are connected to each other. The unauthorized connection detection device includes: a pair of connectors, one of which is mounted on the electric control unit and the other is mounted on the input / output unit, the pair of connectors being configured to engage with each other; a protrusion or a conductor pattern formed on the other connector; a switch unit arranged on the one connector and detecting the protrusion or detecting that a conductor connection detection unit arranged on the one connector is electrically connected to the conductor pattern; and an unauthorized connection identification unit that detects an unauthorized connection based on a state detected by the switch unit or the conductor connection detection unit.

Description

Technical Field

[0001] The presently disclosed subject matter relates to an unauthorized connection detection device configured to detect unauthorized device connection on a vehicle. Background Art

[0002] Vehicle users, dealers, and the like can retrofit various pre-prepared optional devices to their vehicles, or they can replace various devices based on their preferences. Therefore, wiring harnesses and various electronic control units (ECUs) are often pre-equipped with connectors for connecting these retrofit devices, allowing users, dealers, and the like to retrofit various devices to their vehicles.

[0003] However, unauthorized devices can be connected to the vehicle's connector. Such unauthorized devices can cause operational failures, increase the risk of vehicle theft, or leak various vehicle-related information. Therefore, it is necessary to detect unauthorized connected devices on the vehicle side.

[0004] The prior art unauthorized connection detection method and unauthorized connection detection system appropriately determine whether a tool is connected while sharing a communication line for determining whether a tool is connected with a standard communication line (see, for example, JP2014-143631A). Specifically, the monitoring system for performing differential communication between a window electric control unit and a monitoring tool via a pair of communication lines includes: a first step of supplying a predetermined voltage to at least one of the pair of communication lines when the window electric control unit and a legitimate monitoring tool are connected to each other via the pair of communication lines; a second step of detecting a voltage generated in at least one of the pair of communication lines; and a third step of determining whether a legitimate monitoring tool is connected to the window electric control unit via the pair of communication lines based on the voltage generated in at least one of the pair of communication lines detected in the second step.

[0005] Another prior art discloses a technology that provides a pair of connectors that can be fitted into each other and can identify each other and be managed separately, thereby realizing a highly secure vehicle anti-theft system using the connector (see, for example, JP2004-152543A). Specifically, a connector for electrically connecting a plurality of components is formed with a built-in tag chip. The tag chip is constructed to include a storage unit for storing information and an antenna for wirelessly transmitting information so that information can be exchanged with the outside regardless of the electrical connection through the connector. The range of wireless information transmission is limited to a range of about a few millimeters to prevent information leakage.

[0006] However, since a communication line must be used to detect unauthorized device connection, the former prior art cannot be used when connecting a device that does not include a communication line to the connector on the vehicle side.

[0007] When the latter prior art is used, a tag chip having a radio frequency identifier (RFID) is used, and thus an RFID reader that reads information from the tag chip of the connector is required, and the configuration of the ECU on the vehicle side is complicated and the cost increases. Summary of the Invention

[0008] Illustrative aspects of the presently disclosed subject matter provide an unauthorized connection detection device capable of detecting unauthorized device connection at low cost when a device including no communication line is connected to an ECU or the like on a vehicle side.

[0009] An illustrative aspect of the subject matter of the present disclosure includes an unauthorized connection detection device configured to detect an unauthorized device connection at a connection portion where an electronic control unit mounted on a vehicle and an input-output unit are connected to each other, the unauthorized connection detection device comprising: a first connector mounted on the electronic control unit and a second connector mounted on the input-output unit, the first connector and the second connector being configured to engage with each other; a protrusion formed on the second connector; a switch unit arranged on the first connector and configured to detect the protrusion when the first connector and the second connector are engaged with each other; and an unauthorized connection identification unit configured to detect an unauthorized connection based on a state detected by the switch unit. Another illustrative aspect of the subject matter of the present disclosure provides an unauthorized connection detection device configured to detect an unauthorized device connection at a connection portion where an electronic control unit mounted on a vehicle and an input-output unit are connected to each other, the unauthorized connection detection device comprising: a third connector mounted on the electronic control unit and a fourth connector mounted on the input-output unit, the third connector and the fourth connector being configured to engage with each other; a conductor pattern formed on the fourth connector; a conductor connection detection unit disposed on the third connector and configured to be electrically connected to the conductor pattern; and an unauthorized connection identification unit configured to detect an unauthorized connection based on a state detected by the conductor connection detection unit.

[0010] Other aspects and advantages of the disclosed subject matter will be set forth in the following description, drawings, and claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 is a circuit diagram showing a configuration example of an unauthorized connection detection device according to an embodiment of the presently disclosed subject matter;

[0012] Figure 2 is a flowchart showing an example of the main operations of the zone ECU;

[0013] Figure 3 is a perspective view showing the appearance of a male-side connector;

[0014] Figure 4 is a front view showing the male side connector;

[0015] Figure 5 It is along Figure 4 Cross-section taken along line AA;

[0016] Figure 6 is a front view showing the female side connector;

[0017] Figure 7 is a side view showing a female side connector;

[0018] Figure 8 is a front view showing a male-side connector in a modified example;

[0019] Figure 9 is a bottom view showing a female-side connector in a modified example;

[0020] Figure 10 is a front view showing a female-side connector in a modification; and

[0021] Figure 11 is a side view showing a female-side connector in a modified example. DETAILED DESCRIPTION

[0022] Specific embodiments according to the presently disclosed subject matter will be described below with reference to the accompanying drawings.

[0023] Figure 1 is a circuit diagram illustrating a configuration example of the unauthorized connection detection device 100 according to an embodiment of the presently disclosed subject matter. Figure 1 The unauthorized connection detection device 100 shown is mounted on a vehicle and has a function of preventing certain unauthorized units from connecting to legitimate vehicle-mounted units.

[0024] The area ECU 10 is a legitimate unit used to manage predetermined areas within the vehicle. It is equipped with a microcomputer (CPU) 11 and communication functions, typical of any ECU. The area ECU 10 supplies vehicle-side power to devices within the managed area, as well as input and output of predetermined signals. Areas can be assigned based on the division of the vehicle's interior into individual areas or by functional classification.

[0025] The I / O interface unit 20 is a pre-prepared, authorized unit and is an in-vehicle device capable of inputting and outputting signals to and from the regional ECU 10. However, in this embodiment, since the I / O interface unit 20 is not equipped with a computer or communication function, the regional ECU 10 cannot obtain the status of the I / O interface unit 20 via the communication function. Therefore, the regional ECU 10 of this embodiment detects that some unauthorized unit (other than the I / O interface unit 20) is connected to the regional ECU 10 at the unit connection portion 30 without using any communication function.

[0026] The regional ECU 10 and the input / output interface unit 20 are physically and electrically connected via a unit connection portion 30. The unit connection portion 30 includes a connector 31 mounted on the regional ECU 10 side and a connector 32 mounted on the input / output interface unit 20 side. In this embodiment, the connector 31 is a male type and the connector 32 is a female type, and the two connectors can be mated with each other and combined or separated by inserting and removing them from each other.

[0027] The area ECU 10 includes one or more control lines 15. The control lines 15 are used to output predetermined control signals from the microcomputer 11 to the input / output interface unit 20 side and to input signals from the input / output interface unit 20 side to the microcomputer 11.

[0028] In addition to the connection function of control line 15, unit connection portion 30 also has a power line and ground line connection function. In regional ECU 10, the power line of connector 31 is connected to power line 12 via power control switch 16. The ground line of connector 31 is connected to ground 13 in regional ECU 10.

[0029] The switch unit 14 is connected to the ground 13 of the zone ECU 10. The switch unit 14 includes a plurality of independent electrical contacts disposed within a connector 31, which will be described later. Multiple input ports of the microcomputer 11 are connected to the switch unit 14. The microcomputer 11 uses the electrical contact status of the switch unit 14 to determine whether the paired input / output interface unit 20, etc., is a legitimate unit.

[0030] Connector 32 on the input / output interface unit 20 side includes terminals for a power line 21, a ground line 22, and a control line 23. A power control switch 16 is a switch that can be turned on and off by the microcomputer 11 and is used to switch on and off the supply of power from the area ECU 10 side to the input / output interface unit 20 side.

[0031] Figure 2 : is a flowchart showing a main operation example of the zone ECU 10 . Figure 2 The control in the area ECU 10 is executed by the microcomputer 11 . Figure 2 The operations in will be described below.

[0032] When the ignition (IG) of the vehicle is turned on, the microcomputer 11 executes Figure 2 The operation shown in step S11 is as follows. In S12, the microcomputer 11 reads the open or closed state of each contact of the switch unit 14. The regional ECU 10 previously stores unique information about the input / output interface unit 20 and other devices that may be connected to the regional ECU 10 in its internal nonvolatile memory as predetermined registration information. In S13, the microcomputer 11 compares the registration information of the input / output interface unit 20 stored in the nonvolatile memory with the open or closed state of the switch unit 14 read in S12.

[0033] If there is registration information matching the on or off state of the switch unit 14, the microcomputer 11 recognizes the counterpart unit as a legitimate device and proceeds from S13 to S14. Then, the power control switch 16 is switched on to supply power to the input / output interface unit 20 (S14).

[0034] If there is no registration information that matches the on or off state of the switch unit 14, the microcomputer 11 identifies the partner unit as an unauthorized device and proceeds from S13 to S15. Then, the power control switch 16 remains in the off state. Therefore, in this case, power is not supplied to the partner unit connected to the connector 31 (S15).

[0035] Regarding the registered information on the regional ECU 10 , it is assumed that the latest information is added or updated and registered in the regional ECU 10 as needed using, for example, a vehicle diagnostic tester installed at a vehicle dealer or over-the-air (OTA) technology.

[0036] Figure 3 3 is a perspective view showing the appearance of the male-side connector 31 . Figure 4 3 is a front view showing the male-side connector 31 . Figure 5 It is along Figure 4 The cross-sectional view taken along line AA in the figure. Figure 3 In the figure, terminal 31e is omitted to make it easier to see the characteristic parts.

[0037] like Figures 3 to 5 As shown, the connector shell 31a of the connector 31 is formed with an opening 31b for inserting the mating connector 32. Figure 4 As shown, ten pin terminals 31e are arranged in the opening 31b.

[0038] like Figures 3 to 5As shown, on the bottom inner wall of the connector shell 31a, five rows of grooves 31c are formed parallel to each other, extending from the opening 31b and extending in the insertion and extraction direction Az (the direction of movement of the connector when they are fitted with each other). A plurality of tact switches 31d are arranged in each groove 31c. A button that can move along the height direction Ay is formed on the top of each tact switch 31d. The internal electrical contacts of each tact switch 31d are disconnected in the released state, and the electrical contacts are only connected when the button is pressed. Each button is arranged inside the groove 31c, and its top is formed into a curved surface shape so as not to hinder the movement of the mating protrusion.

[0039] although Figures 3 to 5 31d, but a plurality of wires for connecting each terminal 31e and the electrical contacts in each tact switch 31d are arranged on the back of the connector 31. These wires are connected to Figure 1 The circuit in the area ECU 10 is shown.

[0040] The grooves 31c are formed at predetermined positions at predetermined intervals. The plurality of tact switches 31d are arranged at predetermined positions in the grooves 31c at predetermined intervals. Figure 1 The switch unit 14 in.

[0041] Figure 6 3 is a front view showing the female-side connector 32 . Figure 7 3 is a side view showing the female-side connector 32 .

[0042] Figure 6 and Figure 7 The connector shell 32a of the illustrated connector 32 is formed in an outer shape and size to match the Figures 3 to 5 The opening 31 b of the connector 31 is shown to substantially match. Therefore, the connector shell 32 a of the connector 32 can be inserted into and fitted into the opening 31 b of the connector 31 .

[0043] like Figure 6 As shown, the connector housing 32a includes ten terminals 32d therein. Each terminal 32d includes a recess that can receive a male pin terminal 31e, and is arranged at a position facing each terminal 31e on the male side.

[0044] like Figure 7 As shown, electric wires 32e are connected to each terminal 32d in the connector housing 32a. These electric wires 32e are connected to the terminals 32d as shown in FIG. Figure 1 The circuit in the input and output interface unit 20 is shown.

[0045] A plurality of downward projections 32c are formed on the bottom surface 32b of the connector housing 32a. These projections 32c are arranged at positions that match the positions of the grooves 31c of the male connector 31 and the arrangement of the tact switches 31d. In other words, when the connectors 31 and 32 are engaged with each other, each projection 32c is arranged to press one or more buttons of the tact switches 31d. When the connector housings 31a and 32a move relative to each other in the insertion and removal direction Az, each projection 32c passes through the grooves 31c, preventing interference with the movement of the projections 32c.

[0046] The total number of the plurality of protrusions 32c actually provided in the connector case 32a, the position at which each protrusion 32c is arranged, and the length of each protrusion 32c are appropriately determined according to the design specifications of the input-output interface unit 20. For example, by setting the total number and arrangement positions of the protrusions 32c to predetermined states for each type of input-output interface unit 20, the type of the input-output interface unit 20 can be represented by the difference in the arrangement state of the protrusions 32c.

[0047] As mentioned above, in Figure 1 In the area ECU 10 shown in FIG. Figure 2 By reading the status of the switch unit 14 in S12, the microcomputer 11 can detect the arrangement of the protrusions 32c in the connector 32 on the I / O interface unit 20 side. For legitimate I / O interface units 20, the arrangement of the protrusions 32c is predetermined and stored in the zone ECU 10 as registration information. Therefore, by comparing the information read by the microcomputer 11 in S12 with the registration information in S13, it is possible to determine whether the actually connected I / O interface unit 20 is an unauthorized unit, and also to identify the type of legitimate unit.

[0048] When construct Figure 1 As a modified example, the unauthorized connection detection device 100 shown in FIG. Figure 8 The connector 31A and Figures 9 to 11 A connector 32A is shown in place of the connectors 31 and 32. The configuration and overall operation of the unauthorized connection detection apparatus 100 other than the connectors 31A and 32A are the same as those of the above-described embodiment.

[0049] Figure 8 31A is a front view of the male side connector in the modified example. As in the case of the connector 31, Figure 8 The illustrated connector 31A includes a connector case 31 a , an opening 31 b , a recess 31 c , and terminals 31 e .

[0050] In the recess 31c of the connector 31A, a plurality of switch terminals 31f are arranged instead of the tact switches 31d described above. Each switch terminal 31f is a conductive terminal capable of forming an electrical contact by facing and contacting a conductor pattern 32f described later.

[0051] In this modified example, each switch terminal 31f is constructed using a resilient metal such as a spring to achieve stable contact pressure with the opposing conductor pattern 32f. Consequently, each switch terminal 31f is deformable, and the position of the top portion of the switch terminal 31f can be moved along the height direction Ay. The switch terminals 31f are arranged so as not to hinder relative movement of the connector housings 31a and 32a along the insertion and removal direction Az. Specifically, the top portion of the switch terminal 31f is shaped so as not to significantly protrude from the recess 31c.

[0052] Figure 9 32A is a bottom view of the female-side connector in the modification. Figure 10 32A is a front view of a female-side connector in a modification. Figure 11 32A is a side view of the female-side connector in the modification.

[0053] As in the case of connector 32, Figures 9 to 11 The illustrated connector 32A includes a connector housing 32a, a bottom surface 32b, and terminals 32d.

[0054] For example, Figure 9 The shown planar conductor pattern 32f is mounted on a portion of the bottom surface 32b of the connector case 32a. The conductor pattern 32f is made of a thin metal such as copper foil, and its surface contacts each switch terminal 31f on the opposite connector 31A side to form an electrical contact.

[0055] In practice, electrical contacts are formed at Figure 9 That is, since each switch terminal 31f on the connector 31A side exists facing Figure 9 At the position of each contact portion Psw in the connector 32A, the top of the switch terminal 31f and the surface of the conductor pattern 32f are in contact with each other to form an electrical contact.

[0056] The plurality of electrical contacts formed by the switch terminals 31f and the conductor pattern 32f can be like Figure 1 For example, if the conductor pattern 32f is connected to the ground 22, when the electrical contacts formed by the switch terminal 31f and the conductor pattern 32f are closed, the potential of an input port of the microcomputer 11 can be lowered to the potential of the ground 13.

[0057] Even if the conductor pattern 32f is open on the connector 32A side, if the switch terminal 31f of one or more common components is always connected to the ground 13, the potential of the input port of the microcomputer 11 can be reduced to the potential of the ground 13 via the electrical contact formed by the multiple switch terminals 31f and the conductor pattern 32f.

[0058] As mentioned above, according to Figure 1 The unauthorized connection detection device 100 shown can reliably identify whether a paired device connected to the connector 31 is an unauthorized device, even if the input / output interface unit 20 does not include a CPU or communication lines. Furthermore, since the electrical signal output from the switch unit 14 can be directly read by the microcomputer 11, unauthorized connection can be detected at low cost without requiring a dedicated reader device.

[0059] Executed by the microcomputer 11 Figure 2 The operation shown here does not supply power to unauthorized devices, thereby preventing the area ECU 10 from being affected by unauthorized devices.

[0060] Although the subject matter of the present disclosure has been described with reference to certain exemplary embodiments thereof, the scope of the subject matter of the present disclosure is not limited to the exemplary embodiments described above, and various improvements and modifications may be made therein by those skilled in the art without departing from the scope of the subject matter of the present disclosure as defined in the appended claims.

[0061] According to an aspect of the above embodiment, an unauthorized connection detection device (100) is configured to detect unauthorized device connection at a connection portion (30) where an electric control unit (10) mounted on a vehicle and an input / output unit (20) are connected to each other. The unauthorized connection detection device (100) includes: a first connector (31) mounted on the electric control unit (10); and a second connector (32) mounted on the input / output unit (20), the first connector and the second connector being configured to engage with each other; a protrusion (32c) formed on the second connector (32); a switch unit (31d) arranged on the first connector (31) and configured to detect the protrusion (32c) when the first connector and the second connector are engaged with each other; and an unauthorized connection identification unit (11) configured to detect an unauthorized connection based on a state detected by the switch unit (31d).

[0062] According to the unauthorized connection detection device having the above configuration, when a legitimate device is connected to a pair of mating connectors, the switch unit can detect the mating protrusion in a predetermined state. However, when an unauthorized device is connected, the switch unit cannot detect the mating protrusion in its normal state. Therefore, the unauthorized connection identification unit can detect the unauthorized connection based on the detection status of the switch unit. Furthermore, since the mating protrusion status can be detected solely by the switch unit without the need for a dedicated reader, it is possible to prevent an increase in ECU costs and to handle unauthorized connections from devices without communication capabilities.

[0063] The first connector (31) may include a plurality of rows of grooves (31c) extending in a moving direction (Az) of the first and second connectors (31, 32) when the first and second connectors (31, 32) are fitted with each other. The switch unit (31d) may be arranged in one of the grooves. The protrusion (32c) may be formed at a position on the second connector (32) so that the protrusion (32c) passes through the one of the grooves (31c) when the first and second connectors (31, 32) are fitted with each other.

[0064] With this configuration, since the protrusion is formed at a position capable of passing through the groove, it is possible to prevent the protrusion from obstructing insertion and removal of a pair of connectors, and to prevent malfunction from occurring due to deformation of the protrusion or the like.

[0065] According to another aspect of the above embodiment, an unauthorized connection detection device is configured to detect an unauthorized device connection at a connection portion (30) where an electric control unit (10) mounted on a vehicle and an input / output unit (20) are connected to each other, the unauthorized connection detection device comprising: a third connector (31A) mounted on the electric control unit (10); and a fourth connector (32A) mounted on the input / output unit (20), the third connector and the fourth connector being configured to engage with each other; a conductor pattern (32f) formed on the fourth connector (32A); a conductor connection detection unit (31f) arranged on the third connector (31A) and configured to be electrically connected to the conductor pattern (32f); and an unauthorized connection identification unit (11) configured to detect an unauthorized connection based on a state detected by the conductor connection detection unit (31f).

[0066] According to the unauthorized connection detection device having the above-described structure, when a legitimate device is connected to a pair of mating connectors, the conductor connection detection unit can detect the conduction of the circuit through the mating conductor pattern in a predetermined state. However, when an unauthorized device is connected, the conductor connection detection unit cannot detect the conduction of the circuit through the mating conductor pattern under normal conditions. Therefore, the unauthorized connection identification unit can detect the unauthorized connection based on the detection status of the conductor connection detection unit. Furthermore, since the status of the mating conductor pattern can be detected solely by the conductor connection detection unit without the need for a dedicated reader, it is possible to prevent an increase in ECU costs and to handle unauthorized connections from devices without communication capabilities.

[0067] The third connector (31A) may include a plurality of rows of grooves (31c) extending in a moving direction (Az) of the third and fourth connectors (31A, 32A) when the third and fourth connectors (31A, 32A) are fitted with each other. The conductor connection detection unit (31f) may be arranged in one of the grooves. The conductor pattern (32f) may be formed on the fourth connector (32A) at a position (Psw) where the conductor pattern (32f) faces at least a portion of the one of the grooves when the third and fourth connectors (31A, 32A) are fitted with each other.

[0068] With this configuration, since the conductor connection detection unit is arranged in the groove, it can be configured to be deformable, for example, by using a conductive spring or the like. That is, since the position of the electrical contact can be moved along the depth direction of the groove, a good electrical connection can be achieved at the contact point. This also prevents the conductor pattern and the conductor connection detection unit from obstructing the insertion and removal of the pair of connectors.

[0069] The electronic control unit may be an area management unit (10) configured to manage a predetermined area in the vehicle. The electronic control unit may also be configured to supply power to the input / output unit (20) connected to the area management unit (10) only when the unauthorized connection identification unit does not detect an unauthorized connection (S13 to S15).

[0070] With this configuration, since power is not supplied to unauthorized devices, it is possible to reliably prevent the circuits of unauthorized connected devices from adversely affecting the vehicle side. The area managed by the area management unit can also be reliably protected from the effects of unauthorized device connections.

Claims

1. An unauthorized connection detection device configured to detect unauthorized device connection at a connection portion where an electronic control unit and an input / output unit mounted on a vehicle are connected to each other, the unauthorized connection detection device comprising: a first connector mounted on the electronic control unit and a second connector mounted on the input / output unit, the first connector and the second connector being configured to engage with each other; a plurality of protrusions formed on the second connector; a plurality of switch units arranged on the first connector and configured to detect the plurality of protrusions when the first connector and the second connector are fitted with each other; as well as an unauthorized connection identifying unit configured to detect an unauthorized connection based on states detected by the plurality of the switching units; The input / output unit is not equipped with a computer or a communication function, and the electronic control unit cannot obtain the status of the input / output unit via the communication function; The first connector includes a plurality of rows of grooves extending in a direction in which the first connector and the second connector move when the first connector and the second connector are fitted with each other, At predetermined positions in each of the grooves, a plurality of the switch units are arranged at predetermined intervals, and The arrangement positions of the multiple protrusions on the second connector match the arrangement positions of the multiple switch units in each of the grooves on the first connector, so that when the first connector and the second connector are engaged with each other, the multiple protrusions pass through the multiple grooves and each protrusion turns on one or more of the switch units.

2. An unauthorized connection detection device configured to detect unauthorized device connection at a connection portion where an electronic control unit and an input / output unit mounted on a vehicle are connected to each other, the unauthorized connection detection device comprising: a third connector mounted on the electronic control unit and a fourth connector mounted on the input / output unit, the third connector and the fourth connector being configured to engage with each other; a plurality of conductor patterns formed on the fourth connector; a plurality of conductor connection detection units provided on the third connector and configured to be electrically connected to the plurality of the conductor patterns; as well as an unauthorized connection identifying unit configured to detect an unauthorized connection based on states detected by the plurality of conductor connection detecting units; The input / output unit is not equipped with a computer or a communication function, and the electronic control unit cannot obtain the status of the input / output unit via the communication function; The third connector includes a plurality of rows of grooves extending along a moving direction of the third connector and the fourth connector when the third connector and the fourth connector are fitted with each other, At predetermined positions in each of the grooves, a plurality of the conductor connection detection units are arranged at predetermined intervals, and The arrangement positions of the multiple conductor patterns on the fourth connector match the arrangement positions of the multiple conductor connection detection units in each of the grooves on the third connector, so that when the third connector and the fourth connector are engaged with each other, each conductor pattern conducts one or more of the conductor connection detection units.

3. The unauthorized connection detection device according to claim 1 or 2, wherein The electronic control unit is an area management unit configured to manage a predetermined area in the vehicle, and The electric control unit is configured to supply power to the input-output unit connected to the area management unit only when the unauthorized connection identifying unit does not detect an unauthorized connection.

Images