Driving assist device, decryption device, encryption system, encryption processing method and decryption processing method

Abstract

To enable providing information of specific classification without requiring complicated processing.SOLUTION: A driving assist device 100 that is mounted on a vehicle 10 comprises: a sensor 120 that senses sensing information which is information associated with the vehicle; an encryption unit 115 that encrypts the sensing information; and a communication unit 112 that transmits information encrypted by the encryption unit. The encryption unit respectively encrypts the sensing information for each classification that is previously determined, using a public key which is different for each classification, and integrates the sensing information for each encrypted classification to encrypt using an encryption method having homomorphism.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present disclosure relates to a driving assistance device, a decoding device, a cryptographic system, a cryptographic processing method, and a decoding processing method.

Background Art

[0002] In the automatic driving of vehicles and the driving assistance using an ADAS (Advanced Driving Assistant System), a technique of transmitting information detected by various sensors to an external data center is known. When transmitting information, the driving assistance device performs encryption using, for example, multiple types of secret keys as described in Patent Document 1.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In recent years, the demand for information detected by various vehicle sensors has been increasing. When the information desired by the data center is only a part of the information detected by various sensors, there is a problem that only the desired information is desired to be provided. In addition, when there are multiple data centers, there is a problem that it is necessary to provide the desired information for each data center, and the processing becomes complicated.

Means for Solving the Problems

[0005] The present disclosure has been made to solve the above-described problems and can be realized in the following forms.

[0006] According to one embodiment of the present disclosure, a driving assistance device (100) mounted on a vehicle (10) is provided. The driving assistance device includes a sensor (120) that detects detection information which is information related to the vehicle, an encryption unit (115) that encrypts the detection information, and a communication unit (112) that transmits the information encrypted by the encryption unit. The encryption unit encrypts the detection information for each predetermined classification using a different public key for each classification, integrates the encrypted detection information for each classification, and encrypts it using a cryptosystem having homomorphic properties.

[0007] According to the driving assistance device of this embodiment, information encrypted with different public keys for each classification is integrated and encrypted with a homomorphic cipher. Therefore, it is possible to provide the information of a specific classification in a decryptable manner without requiring a process of decrypting all the detection information to obtain all the information in a specific field or a process of transmitting only the detection information of a specific classification.

Brief Description of the Drawings

[0008]

Figure 1

Figure 2

Figure 3

Figure 4

Embodiments for Carrying Out the Invention

[0009] A. First Embodiment: As shown in FIG. 1, the encryption system 500 in the first embodiment includes a vehicle 10 equipped with a driving assistance device 100 having an encryption device 110, and a server 20 having a decryption device 200.

[0010] The driving assistance device 100 is a device that supports the driving of the vehicle 10 by ADAS. The driving assistance device 100 includes an encryption device 110, a sensor 120, and a control device 130.

[0011] Sensor 120 detects detection information regarding vehicle 10. The detection information is information including, for example, information regarding an object located around vehicle 10, information regarding the travel of vehicle 10, and information regarding the driver of vehicle 10. In the present embodiment, sensor 120 includes an external sensor 121 and an internal sensor 122.

[0012] External sensor 121 acquires information regarding an object located around vehicle 10. In the present embodiment, external sensor 121 includes a camera 123 and an object sensor 124. Camera 123 images the surroundings of vehicle 10 and inside vehicle 10 to acquire an image. Object sensor 124 measures the distance to an object around vehicle 10. Examples of object sensor 124 include Lidar (Light Detection and Ranging) that uses reflected waves and a millimeter-wave radar.

[0013] Internal sensor 122 acquires information regarding the travel of vehicle 10. In the present embodiment, internal sensor 122 includes a vehicle position sensor 125, a vehicle speed sensor 126, and a yaw rate sensor 127. Vehicle position sensor 125 detects the current coordinate position of vehicle 10. Examples of vehicle position sensor 125 include a global navigation satellite system (GNSS) such as GPS (Global Positioning System). Vehicle speed sensor 126 measures the current travel speed of vehicle 10. Yaw rate sensor 127 is a detector that detects the yaw rate (rotational angular velocity) around the vertical axis of the center of gravity of vehicle 10. For example, a gyro sensor can be used as yaw rate sensor 127.

[0014] The encryption device 110 includes a storage unit 111, a communication unit 112, and a CPU 113. The CPU 113 realizes the functions of the classification unit 114 and the encryption unit 115 by executing a program pre-installed in the storage unit 111. However, part or all of the functions of these units may be realized by a hardware circuit. The encryption device 110 encrypts the detection information including the information about the target detected by the sensor 120 and transmits it to the decryption device 200.

[0015] The communication unit 112 transmits the information encrypted by the encryption unit 115 to the decryption device 200.

[0016] The classification unit 114 classifies the detection information about the vehicle 10 detected by the sensor 120 for each predetermined classification. The classification includes, for example, classification by the type of the sensor 120 that detected the detection information, and classification by the type of the object recognized from the image captured by the camera 123. When the classification unit 114 adopts the classification for each type of the object recognized from the image captured by the camera 123, the information acquired by the in-vehicle sensor 122 when the camera 123 captured the object is also classified into the information classified for the classification of the object.

[0017] The encryption unit 115 encrypts the detection information about the vehicle 10 detected by the sensor 120. Details of the encryption will be described later.

[0018] The control device 130 is a computer composed of a CPU, a RAM, and a ROM. The control device 130 realizes the driving support function by the CPU executing a program pre-installed in a storage area such as the RAM and ROM of the control device 130. More specifically, the control device 130 controls a driving force control device, a braking force control device, and a steering control device (not shown) mounted on the vehicle 10 based on the information detected by the sensor 120 and the information indicating the classification classified by the classification unit 114, thereby controlling the steering and the traveling speed of the vehicle 10. However, part or all of the functions of these units may be realized by a hardware circuit.

[0019] The server 20 is installed in the data center. The decoding device 200 includes a storage unit 201, a communication unit 202, and a CPU 203. The CPU 203 realizes the function of the decoding unit 204 by executing a program pre-installed in the storage unit 201. However, part or all of the functions of these respective units may be realized by a hardware circuit. The decoding device 200 decodes the information encrypted by the encryption device 110.

[0020] The decoding unit 204 decodes only the desired information among the detection information encrypted by the encryption device 110. Details of the decoding will be described later.

[0021] The encryption process shown in FIG. 2 is a process in which the encryption device 110 encrypts the detection information. This process is, for example, a process repeatedly executed by the encryption device 110 while the vehicle 10 is running, and is, for example, a process repeatedly executed every 100 ms.

[0022] In step S100, the encryption unit 115 acquires detection information from the sensor 120. This step is also referred to as the "acquisition step".

[0023] In step S110, the classification unit 114 classifies the detection information acquired in step S100 for each predetermined classification. This step is also referred to as the "classification step".

[0024] In step S120, the encryption unit 115 prepares a public key for each classification. This step is also referred to as the "public key preparation step". The encryption unit 115 may generate a public key, or may acquire a previously generated public key from the outside. In the present embodiment, the encryption unit 115 selects, from among a plurality of previously generated public keys stored in the storage unit 111, the public keys to be used for encryption of each classification. Further, the encryption unit 115 generates a table associating the classification with the selected public key. Note that steps S100 to S120 are not limited to this order as long as step S110 is performed after step S100, and may be performed in any order or in parallel.

[0025] In step S130, the encryption unit 115 encrypts the detection information obtained in step S100 using different public keys for each classification prepared in step S120. This process is also referred to as the "first encryption process". In the first encryption process, for example, encryption using the RSA algorithm is performed.

[0026] In step S140, the encryption unit 115 integrates the detection information for each classification encrypted in step S130 and encrypts it using a cryptosystem with homomorphic property. This process is also referred to as the "second encryption process". A cryptosystem with homomorphic property is, for example, a fully homomorphic encryption. The information encrypted in the second encryption process is also referred to as "encrypted information".

[0027] In step S150, the encryption device 110 transmits the encrypted information encrypted in step S140 to the decryption device 200. This process is also referred to as the "transmission process". In the present embodiment, the encryption device 110 transmits, together with the encrypted information encrypted in step S140, a table created in step S120 that associates classifications with public keys. Note that the encryption device 110 may execute the process of step S150 to transmit the encrypted information to the server 20 as soon as the process of step S140 is completed, or may execute the process of step S150 when it is received that the server 20 is in a state capable of receiving the encrypted information.

[0028] The decryption process shown in FIG. 3 is a process in which the decryption device 200 decrypts the information encrypted by the encryption device 110. This process is, for example, a process executed each time information is received from the encryption device 110.

[0029] In step S200, the decryption unit 204 obtains the encrypted information from the encryption device 110. This process is also referred to as the "encrypted information acquisition process". In the present embodiment, the encryption unit 115 receives, together with the encrypted information, a table created in step S120 that associates classifications with public keys from the encryption device 110.

[0030] In step S210, the decryption unit 204 prepares a secret key for decrypting the information encrypted by the encryption device 110 in the first encryption process described above. This step is also referred to as the "secret key preparation step". The secret key may be obtained from the encryption device 110 or may be stored in the storage unit 201 in advance. In the present embodiment, the decryption unit 204 uses a table associating classification and public key received together with the encrypted information from the encryption device 110 to select, from the secret keys stored in the storage unit 201 in advance, the secret key corresponding to the public key associated with the classification of the information desired by the decryption device 200. Note that steps S200 and S210 are not limited to this order and can be performed in any order or in parallel.

[0031] In step S220, the decryption unit 204 searches for and extracts desired information, which is detection information of a desired classification, from the encrypted information received from the encryption device 110 in step S200. The decryption unit 204 extracts the desired information encrypted by an encryption method having homomorphic properties from the encrypted information. This step is also referred to as the "extraction step".

[0032] In step S230, the decryption unit 204 decrypts the desired information extracted in step S220 using the secret key prepared in step S210. This step is also referred to as the "decryption step". Note that steps S220 and S230 may be performed in parallel.

[0033] According to the driving support device 100 in the first embodiment described above, information encrypted with different public keys for each classification is integrated and encrypted with homomorphic encryption. The decryption device 200 extracts desired information, which is detection information of a desired classification, from the encrypted information encrypted with homomorphic encryption, and decrypts it using the secret key corresponding to the public key associated with the classification of the desired information. Therefore, it is possible to provide the information of a specific classification in a decryptable manner without requiring a process of decrypting all the detection information to obtain all the information in a specific field or a process of transmitting only the detection information of a specific classification.

[0034] Also, if the decoding device 200 stores the integrated information received in the past, when the decoding device 200 desires to additionally obtain information in a field different from the desired field, the information can be obtained by decrypting using the secret key corresponding to the desired field. Therefore, the encryption device 110 does not need to continuously hold the past detection information, and can provide the information in the desired field included in the past detection information to the decoding device 200.

[0035] Also, in the present embodiment, the encryption device 110 creates a table associating classifications with public keys and transmits it to the decoding device 200. Therefore, the decoding device 200 can more reliably prepare the secret key corresponding to the public key used for encryption.

[0036] B. Second Embodiment: The encryption system 500B of the second embodiment shown in FIG. 4 is different from the first embodiment in that it includes a server 30 having an encryption device 300 and the encryption device 110 does not perform an encryption process, and other configurations are the same.

[0037] In the second embodiment, the driving support device 100 transmits detection information including information about the target detected by the sensor 120 to the encryption device 300.

[0038] The server 30 is installed in a data center. The encryption device 300 has the same configuration as the encryption device 110. The encryption device 300 includes a storage unit 301, a communication unit 302, and a CPU 303. The CPU 303 realizes the functions of a classification unit 304 and an encryption unit 305 by executing a program pre-installed in the storage unit 301. However, part or all of the functions of these units may be realized by a hardware circuit. The encryption device 300 performs the above-described encryption process on the detection information acquired from the driving support device 100 and transmits the encrypted detection information to the decoding device 200.

[0039] According to the encryption system 500B in the second embodiment described above, since the encryption device 300 outside the vehicle 10 performs the encryption process, the processing load on the driving support device 100 can be reduced.

[0040] C. Other Embodiments: (C1) In the above-described embodiment, the driving assistance device 100 includes a plurality of sensors including an external sensor 121 and an internal sensor 122. However, the driving assistance device 100 may include only the external sensor 121 or only the internal sensor 122. Further, as the internal sensor 122, for example, an in-vehicle camera that monitors the state of the driver or a tactile sensor that senses whether the driver is gripping the steering wheel of the vehicle 10 may be provided.

[0041] (C2) In the above-described embodiment, the encryption device 110 includes a classification unit 114. The encryption device 110 only needs to include an encryption unit 115 and may not include the classification unit 114. In this case, the classification unit 114 is realized by, for example, a microcomputer or the like configured by a CPU, a RAM, and a ROM different from the encryption device 110 included in the driving assistance device 100. In the above-described acquisition step, the encryption device 110 acquires information indicating to which classification the detection information is classified together with the detection information.

[0042] (C3) In the above-described embodiment, different public keys may be different keys using the same algorithm or keys with different algorithms themselves. For the public key, for example, the key length of the public key of the data of the classification for which high confidentiality such as the face information of the driver of the vehicle 10 is desired may be set to 2048 bits, and the key length of the public key of the data of other classifications may be set to 1024 bits.

[0043] (C4) In the above-described embodiment, the decryption device 200 acquires information encrypted using a homomorphic encryption method. However, the decryption device 200 may acquire only the desired encrypted information. For example, in the above-described second embodiment, the decryption device 200 searches for and acquires the detection information of the desired classification from the information encrypted using a homomorphic encryption method from the encryption device 300.

[0044] (C5) In the first embodiment described above, the driving assistance device 100 includes the encryption device 110. However, the driving assistance device 100 does not necessarily have to include the encryption device 110. In this case, the encryption device 110 is mounted on the vehicle 10 separately from the driving assistance device 100.

[0045] (C6) In the second embodiment described above, the encryption device 110 included in the vehicle 10 may perform the classification process and the first encryption process, and the encryption device 300 included in the server 30 may perform the second encryption process. Alternatively, the encryption device 110 may perform the classification process, and the encryption device 300 may perform the first and second encryption processes. In this case, the encryption device 300 acquires information indicating to which classification the detection information is classified, together with the detection information.

[0046] The present disclosure is not limited to the above-described embodiments, and can be realized in various configurations without departing from the gist thereof. For example, the technical features in the embodiments corresponding to the technical features in each of the forms described in the summary of the invention can be appropriately replaced or combined in order to solve the above-described problems or to achieve some or all of the above-described effects. Further, if the technical feature is not described as essential in this specification, it can be appropriately deleted.

[0047] The encryption device 110 and its method described in the present disclosure may be implemented by a dedicated computer configured by a processor and a memory programmed to execute one or more functions embodied by a computer program. Alternatively, the control unit and its method described in the present disclosure may be implemented by a dedicated computer provided by configuring a processor with one or more dedicated hardware logic circuits. Or, the limiting unit and its method described in the present disclosure may be implemented by one or more dedicated computers configured by a combination of a processor and a memory programmed to execute one or more functions and a processor configured by one or more hardware logic circuits. Further, the computer program may be stored in a computer-readable non-transitory tangible recording medium as instructions executable by a computer.

Explanation of Signs

[0048] 10…Vehicle, 20…Server, 30…Server, 100…Driving support device, 110…Encryption device, 111…Storage unit, 112…Communication unit, 113…CPU, 114…Classification unit, 115…Encryption unit, 120…Sensor, 121…External sensor, 122…Internal sensor, 123…Camera, 124…Object sensor, 125…Vehicle position sensor, 126…Vehicle speed sensor, 127…Yaw rate sensor, 200…Decryption device, 201…Storage unit, 202…Communication unit, 203…CPU, 204…Decryption unit, 300…Encryption device, 301…Storage unit, 302…Communication unit, 303…CPU, 304…Classification unit, 305…Encryption unit, 500, 500B…Encryption system

Claims

1. An operation support device (100) mounted on a vehicle (10), comprising: a sensor (120) for detecting detection information which is information about the vehicle; an encryption unit (115) for encrypting the detection information; a communication unit (112) for transmitting the information encrypted by the encryption unit, wherein the encryption unit: encrypts the detection information for each predetermined classification using a different public key for each classification, integrates the encrypted detection information for each classification, and encrypts the integrated information using a homomorphic encryption method. An operation support device.

2. The operation support device according to claim 1, wherein the encryption unit creates a table associating the classification with the public key used for encrypting the detection information of the classification, and the communication unit transmits the table together with the encrypted information. An operation support device.

3. A decryption device (200) for decrypting the detection information encrypted by the operation support device according to claim 1 or claim 2, comprising a decryption unit (204) for decrypting only the desired information among the encrypted detection information using a secret key corresponding to the classification of the desired information which is the detection information of the desired classification. A decryption device.

4. An encryption system (500, 500B), comprising: an encryption device (110, 30) for encrypting detection information including information detected by a sensor mounted on a vehicle, and a decryption device for decrypting the information encrypted by the encryption device, wherein the encryption device: encrypts the detection information for each predetermined classification using a different public key for each classification, integrates the encrypted detection information for each classification, and transmits encrypted information encrypted using a homomorphic encryption method to the decryption device, and the decryption device decrypts only the desired information among the encrypted information using a secret key corresponding to the classification of the desired information which is the detection information of the desired classification. An encryption system.

5. An encryption processing method, comprising: an acquisition step of acquiring the detection information from a sensor for detecting detection information about a vehicle; a first encryption step of encrypting the detection information for each predetermined classification using a different public key for each classification; a second encryption step of integrating the encrypted detection information for each classification and encrypting the integrated information using a homomorphic encryption method. An encryption processing method.

6. A decryption processing method for decrypting the information encrypted by the encryption processing method according to claim 5, A decryption processing method including a decryption step of decrypting only the desired information among the information encrypted in the second encryption step by using a secret key corresponding to the classification of the desired information, which is the detection information of the desired classification.

Images