vehicle

Abstract

To prevent the behavior of a vehicle from being adversely affected and to transmit information on an abnormality in an in-vehicle communication unit to an external server when the abnormality occurs in the in-vehicle communication unit due to hacking.SOLUTION: When a monitoring unit 202 detects that an abnormality has occurred in a vehicle-mounted communication unit 10a, the monitoring unit 202 blocks communication between the vehicle-mounted communication unit 10a and the monitoring unit 202, and notifies a control unit 206 of the abnormality of the vehicle-mounted communication unit 10a, and when the monitoring unit 202 notifies the vehicle-mounted communication unit 10a of the abnormality, the control unit 206 notifies an external server 100 of the abnormality of the vehicle-mounted communication unit 10a through a mobile communication terminal 300 while the communication by the vehicle-mounted communication unit 10a is blocked, by instructing the mobile communication terminal 300 to operate to report the abnormality of the vehicle-mounted communication unit 10a according to a specific profile of the short-range wireless communication standard.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to a vehicle. [Background technology]

[0002] In recent years, there is a service called a telematics service that provides information to vehicles. The telematics service provides various information to passengers in the vehicle through two-way communication between the vehicle and an external server. In the telematics service, the vehicle is equipped with an in-vehicle communication unit called a telematics unit. The in-vehicle communication unit transmits information about the driving state of the vehicle to the external server and receives information about driving assistance for the vehicle from the external server, for example.

[0003] However, if the in-vehicle communication unit is hacked or otherwise compromised and a security incident occurs, it is necessary to isolate the in-vehicle communication unit from the vehicle system before the security incident affects the behavior of the vehicle.For example, Patent Document 1 discloses that in a vehicle equipped with a communication device and an attack detection unit, when the attack detection unit detects that a security incident has occurred in the communication device, the communication channel between the communication device and the attack detection unit is disconnected. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Special Publication No. 2016-502697 Summary of the Invention [Problem to be solved by the invention]

[0005] Incidentally, when an abnormality occurs in an in-vehicle communication unit due to a security incident such as hacking, information about the abnormality needs to be quickly uploaded to an external server of an organization that handles incidents such as a Security Incident Response Team (SIRT). However, when the in-vehicle communication unit is simply isolated from the vehicle system as in the above-mentioned conventional technology, a means for transmitting information about the abnormality of the in-vehicle communication unit to an external device is lost, making it difficult to upload the information to an external server.

[0006] The present invention aims to provide a vehicle that can prevent adverse effects on the vehicle's behavior when an abnormality occurs in the on-board communication unit due to a security incident such as hacking, and that can transmit information regarding the abnormality in the on-board communication unit to an external server. [Means for solving the problem]

[0007] In order to solve the above problems, a vehicle according to one aspect of the present invention provides a vehicle having an on-board communication unit that is mounted on the vehicle and capable of wirelessly communicating information for a telematics service with an external server, the on-board communication unit comprising: Regarding in-vehicle communication units The present invention includes a monitoring unit that monitors whether an abnormality has occurred in an in-vehicle communication unit due to a security incident, and a control unit that controls an in-vehicle device mounted in the vehicle, and the monitoring unit performs the following steps based on ID information of the in-vehicle communication unit and information regarding a communication interval when communicating with the in-vehicle communication unit: Due to a security incident regarding the in-vehicle communication unit Determine whether an abnormality has occurred in the vehicle-mounted communication unit; Due to a security incident regarding the in-vehicle communication unitWhen an abnormality is detected in the in-vehicle communication unit, the communication between the in-vehicle communication unit and the monitoring unit is cut off, and the abnormality in the in-vehicle communication unit is notified to the control unit. The control unit is capable of wireless communication with the mobile communication terminal according to a specific profile among a plurality of profiles of a short-range wireless communication standard according to the function of the in-vehicle device, and when the abnormality in the in-vehicle communication unit is notified from the monitoring unit, the control unit instructs the mobile communication terminal to perform an operation to notify the abnormality in the in-vehicle communication unit according to the specific profile of the short-range wireless communication standard, thereby notifying the external server of the abnormality in the in-vehicle communication unit via the mobile communication terminal while communication by the in-vehicle communication unit is cut off. The communication cutoff is performed by discarding all information received from the in-vehicle communication unit when an abnormality is detected in the in-vehicle communication unit due to a security incident related to the in-vehicle communication unit. do.

[0008] The specific profile is a Hands Free Profile (HFP), which is a profile for a hands-free calling function of the in-vehicle device. Due to a security incident regarding the in-vehicle communication unit When an abnormality in the in-vehicle communication unit is notified, the mobile communication terminal may be instructed to call a dedicated telephone number for reporting the abnormality in the in-vehicle communication unit in accordance with the HFP, and the mobile communication terminal may be caused to call the dedicated telephone number, thereby reporting the abnormality in the in-vehicle communication unit to an external server via the mobile communication terminal while communication by the in-vehicle communication unit is cut off.

[0009] The specific profile is a DUN (Dial-up Networking Profile), which is a profile for dial-up connection of an in-vehicle device, and when the control unit is notified of an abnormality in the in-vehicle communication unit by the monitoring unit, the control unit may instruct the mobile communication terminal to make a dial-up connection to the network in accordance with the DUN, and upload incident information indicating the abnormality in the in-vehicle communication unit to an external server via the mobile communication terminal that is dial-up connected to the network.

[0010] The specific profile is a File Transfer Profile (FTP), which is a profile for transferring data files of an in-vehicle device, and when the control unit is notified of an abnormality in the in-vehicle communication unit by the monitoring unit, the control unit generates a data file including incident information indicating the abnormality in the in-vehicle communication unit, instructs the mobile communication terminal to upload the data file via the network in accordance with FTP, and may also send the data file to the mobile communication terminal, thereby causing the data file to be uploaded from the mobile communication terminal to an external server via the network.

[0011] The short-range wireless communication standard may be Bluetooth (registered trademark). 。 Effect of the Invention

[0012] According to the present invention, when an abnormality occurs in an in-vehicle communication unit due to a security incident such as hacking, it is possible to prevent adverse effects on the vehicle's behavior and to transmit information regarding the abnormality in the in-vehicle communication unit to an external server. [Brief description of the drawings]

[0013] [Figure 1] FIG. 1 is an explanatory diagram showing a schematic configuration of a vehicle information providing system. [Diagram 2] FIG. 2 is an explanatory diagram showing a schematic configuration of a vehicle. [Diagram 3] FIG. 3 is a schematic block diagram showing the configuration of the vehicle system. [Figure 4] FIG. 4 is a schematic block diagram for explaining the operation of the vehicle system when a security incident occurs in the vehicle-mounted communication unit. [Diagram 5] FIG. 5 is a timing chart when short-distance wireless communication is performed according to the first profile. [Figure 6] FIG. 6 is a timing chart when short-distance wireless communication is performed according to the second profile. [Figure 7] FIG. 7 is a timing chart when short-distance wireless communication is performed according to the third profile. [Figure 8] FIG. 8 is a flowchart illustrating an example of the incident information transmission process of the present embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] Hereinafter, an embodiment of the present invention will be described in detail with reference to the accompanying drawings. The dimensions, materials, and other specific numerical values ​​shown in the embodiment are merely examples for facilitating understanding of the invention, and do not limit the present invention unless otherwise specified. In this specification and drawings, elements having substantially the same functions and configurations are given the same reference numerals to avoid repeated explanations, and elements not directly related to the present invention are not shown.

[0015] Fig. 1 is an explanatory diagram showing a schematic configuration of a vehicle information provision system 1. As shown in Fig. 1, the vehicle information provision system 1 includes a vehicle 10 having an in-vehicle communication unit 10a, a communication network 50 having a communication base station 50a, and an external server 100.

[0016] The vehicle 10 is, for example, an automobile equipped with a driving source such as an engine or a motor. Note that, although Fig. 1 shows an example in which the vehicle information provision system 1 includes one vehicle 10, the number of vehicles 10 is not limited to this. For example, the vehicle information provision system 1 may include multiple vehicles 10.

[0017] The in-vehicle communication unit 10a is mounted on the vehicle 10. The in-vehicle communication unit 10a is configured to be capable of wireless communication with an external server 100 via a communication base station 50a and a communication network 50. Specifically, the in-vehicle communication unit 10a is a DCM (Data Communication Module).

[0018] The communication network 50 is configured by, for example, the Internet, a mobile phone network, a PHS (Personal Handy-phone System) network, etc., and connects the communication between the in-vehicle communication unit 10a and the external server 100 via a communication base station 50a. In this embodiment, a case where the Internet is used as the communication network 50 will be described. The in-vehicle communication unit 10a communicates with the external server 100, transmits information related to the driving state of the vehicle 10 to the external server 100, and receives information related to driving assistance for the vehicle 10 from the external server 100. In this way, the in-vehicle communication unit 10a transmits and receives information for telematics services between the external server 100 and the external server 100.

[0019] The communication base station 50a is connected to the communication network 50 and transmits and receives information wirelessly to and from the in-vehicle communication unit 10a. The communication base station 50a also transmits information wirelessly transmitted from the in-vehicle communication unit 10a to the external server 100 via the communication network 50. The communication base station 50a also transmits information generated by the external server 100 to the in-vehicle communication unit 10a.

[0020] The external server 100 accumulates information transmitted from the in-vehicle communication unit 10a. In addition, the external server 100 transmits information for telematics services in response to a request transmitted from the in-vehicle communication unit 10a. The external server 100 is managed by an organization such as a Security Incident Response Team (SIRT). The SIRT is an organization that responds to a security incident when the security incident occurs in the vehicle 10.

[0021] FIG. 2 is an explanatory diagram showing a schematic configuration of a vehicle 10. As shown in FIG. 2, the vehicle 10 is equipped with a vehicle system 200 including an in-vehicle communication unit 10a. Furthermore, a mobile communication terminal 300 is arranged in a cabin 10b of the vehicle 10. The mobile communication terminal 300 is, for example, a mobile communication terminal owned by a passenger who boards the cabin 10b. Examples of the mobile communication terminal 300 include a smartphone, a mobile phone, and a dedicated terminal. In this embodiment, a case where a smartphone is used as the mobile communication terminal 300 will be described.

[0022] 3 is a schematic block diagram showing the configuration of a vehicle system 200. As shown in FIG. 3, the vehicle system 200 includes an in-vehicle communication unit 10a, a monitoring unit 202, and a plurality of control units 204 and 206.

[0023] The monitoring unit 202 is electrically connected to the in-vehicle communication unit 10a via a network bus 208, and is electrically connected to the multiple control units 204 and 206 via a network bus 210. The in-vehicle communication unit 10a is electrically connected to the multiple control units 204 and 206 via the network buses 208 and 210 and the monitoring unit 202. The monitoring unit 202 is connected to all the network buses 208 and 210 of the vehicle system 200, and monitors the in-vehicle network. Specifically, the monitoring unit 202 is a CGW (Central Gate Way). The monitoring unit 202 monitors whether or not an abnormality has occurred in the in-vehicle communication unit 10a due to a security incident, based on information output from the in-vehicle communication unit 10a. The monitoring unit 202 will be described in detail later.

[0024] The control units 204 and 206 are configured with microcomputers including a CPU, a ROM in which programs and the like are stored, and a RAM as a work area, and control various in-vehicle devices mounted on the vehicle 10. The control units 204 and 206 include, for example, a steering ECU, an ABSECU, a fuel injection ECU, an airbag ECU, an air conditioner ECU, an interior light control ECU, a meter panel ECU, a sunroof ECU, a door lock ECU, and a car navigation ECU. In this embodiment, a case where an airbag ECU is used as the control unit 204 will be described. The control unit 204 controls airbag devices provided in the driver's seat and the passenger's seat of the vehicle 10. Also, a case where a car navigation ECU is used as the control unit 206 will be described. The control unit 206 controls a car navigation device provided on the dashboard of the vehicle 10. The control unit 206 is capable of wireless communication with the mobile communication terminal 300 according to a specific profile according to the function of the car navigation device among multiple profiles of the short-range wireless communication standard.

[0025] In this embodiment, the monitoring unit 202 constantly monitors whether or not an abnormality has occurred in various in-vehicle devices due to an incident such as an accident in the vehicle 10. For example, when an incident such as an accident occurs in the vehicle 10, the control unit 204, which is an airbag ECU, activates the airbag device of the vehicle 10. At this time, the monitoring unit 202 acquires activation information of the airbag device from the control unit 204. When the monitoring unit 202 acquires the activation information of the airbag device, it determines that an incident has occurred in the vehicle 10. The monitoring unit 202 generates incident information indicating that an incident has occurred in the vehicle 10. The generated incident information is transmitted to the in-vehicle communication unit 10a via the network bus 208, and is uploaded to the external server 100 via the in-vehicle communication unit 10a.

[0026] Returning to FIG. 2, mobile communication terminal 300 is configured to be capable of wireless communication with communication base station 50a and communication network 50 (see FIG. 1). Mobile communication terminal 300 is also configured to be capable of wireless communication with external server 100 via communication base station 50a and communication network 50. Mobile communication terminal 300 is also configured to be capable of short-range wireless communication with control unit 206 (see FIG. 3), which is a car navigation ECU. Mobile communication terminal 300 is configured to be capable of short-range wireless communication with control unit 206 in accordance with a specific profile of a short-range wireless communication standard of the car navigation device. The short-range wireless communication standard is, for example, Bluetooth (registered trademark).

[0027] Here, in order to realize a short-distance wireless communication connection between mobile communication terminal 300 and control unit 206, it may be necessary to start a dedicated application (hereinafter, simply referred to as an app) in mobile communication terminal 300. As a method for starting the app of mobile communication terminal 300, for example, the following three methods are conceivable. The first method is a method for connecting mobile communication terminal 300 and control unit 206 via a dedicated app of mobile communication terminal 300 when short-distance wireless communication connection is established between them. The second method is a method for urging, for example, on the screen of a car navigation device, to start a dedicated app of mobile communication terminal 300 when an abnormality occurs in vehicle system 200. The third method is a method for displaying a two-dimensional code such as a QR code (registered trademark) on the screen of a car navigation device, and starting a dedicated app when the two-dimensional code is read by mobile communication terminal 300.

[0028] Incidentally, when a security incident occurs in the in-vehicle communication unit 10a, it is necessary to isolate the in-vehicle communication unit 10a from the vehicle system 200 before the security incident affects the behavior of the vehicle 10. On the other hand, when a security incident occurs, it is necessary to upload information related to the security incident (hereinafter simply referred to as incident information) to the external server 100 managed by the SIRT. However, when the in-vehicle communication unit 10a is isolated from the vehicle system 200, the means for uploading the incident information to the external server 100 is lost, making it difficult to upload the incident information to the external server 100.

[0029] In this embodiment, the monitoring unit 202 constantly monitors whether or not an abnormality has occurred in the in-vehicle communication unit 10a due to a security incident. Specifically, the monitoring unit 202 stores ID information in a ROM (not shown) for communication between the in-vehicle communication unit 10a and the multiple control units 204, 206. The monitoring unit 202 also stores information about communication intervals for communication between the in-vehicle communication unit 10a and the multiple control units 204, 206 in a ROM (not shown).

[0030] The monitoring unit 202 compares the ID information acquired from the in-vehicle communication unit 10a via the network bus 208 with the ID information stored in the ROM, and if the ID information is the same, determines that no abnormality has occurred in the in-vehicle communication unit 10a due to a security incident. The monitoring unit 202 also compares the communication interval of the information acquired from the in-vehicle communication unit 10a via the network bus 208 with the information on the communication interval stored in the ROM, and if the communication intervals are the same, determines that no abnormality has occurred in the in-vehicle communication unit 10a due to a security incident.

[0031] On the other hand, the monitoring unit 202 compares the ID information acquired from the in-vehicle communication unit 10a via the network bus 208 with the ID information stored in the ROM, and if the ID information differs, determines that an abnormality has occurred in the in-vehicle communication unit 10a due to a security incident. Also, the monitoring unit 202 compares the communication interval of the information acquired from the in-vehicle communication unit 10a via the network bus 208 with the information on the communication interval stored in the ROM, and if the communication intervals differ, determines that an abnormality has occurred in the in-vehicle communication unit 10a due to a security incident.

[0032] When it is determined that an abnormality has occurred in the in-vehicle communication unit 10a due to a security incident, the monitoring unit 202 cuts off communication with the in-vehicle communication unit 10a. For example, the monitoring unit 202 cuts off communication with the in-vehicle communication unit 10a by discarding all information received from the in-vehicle communication unit 10a. The monitoring unit 202 may also cut off communication with the in-vehicle communication unit 10a by cutting off the network bus 208.

[0033] Furthermore, the monitoring unit 202 generates incident information indicating that a security incident has occurred in the in-vehicle communication unit 10a. The incident information is, for example, flag information indicating that the in-vehicle communication unit 10a is abnormal. However, the incident information is not limited to this, and may include information regarding the detailed contents of the security incident.

[0034] The monitoring unit 202 transmits the generated incident information to the control unit 206 via the network bus 210. The control unit 206 transmits the incident information received from the monitoring unit 202 to the mobile communication terminal 300 in accordance with a specific profile of the short-range wireless communication standard.

[0035] 4 is a schematic block diagram for explaining the operation of the vehicle system 200 when a security incident occurs in the in-vehicle communication unit 10a. As shown in FIG. 4, when a security incident occurs in the in-vehicle communication unit 10a, communication between the in-vehicle communication unit 10a and the monitoring unit 202 is interrupted. During this communication interruption, the control unit 206 acquires incident information from the monitoring unit 202.

[0036] The control unit 206 performs short-distance wireless communication with the mobile communication terminal 300 according to a specific profile corresponding to the function of the car navigation device, among multiple profiles of short-distance wireless communication standards. When the control unit 206 is notified of an abnormality in the in-vehicle communication unit 10a from the monitoring unit 202, the control unit 206 instructs the mobile communication terminal 300 to perform an operation to notify the abnormality of the in-vehicle communication unit 10a. As a result, the abnormality of the in-vehicle communication unit 10a is notified to the external server 100 via the mobile communication terminal 300 while communication by the in-vehicle communication unit 10a is cut off.

[0037] Here, the profiles that can be exchanged between the short-range wireless communication implemented in the car navigation device mounted on the vehicle 10 and the mobile communication terminal 300 are only a part of the multiple profiles that exist for the short-range wireless communication standard. Therefore, the control unit 206 of this embodiment uses the following three profiles to realize short-range wireless communication with the mobile communication terminal 300.

[0038] The first profile is the Hands Free Profile (HFP) for making and receiving calls using a hands-free device. HFP is a profile for the hands-free calling function of a car navigation device.

[0039] Fig. 5 is a timing chart diagram when short-distance wireless communication is performed according to the first profile. As shown in Fig. 5, when the in-vehicle communication unit 10a is hacked, performs an abnormal operation, and transmits an abnormal signal, the monitoring unit 202 detects the abnormality of the in-vehicle communication unit 10a and isolates the in-vehicle communication unit 10a from the vehicle system 200. The monitoring unit 202 also notifies the control unit 206 that an abnormality has occurred in the in-vehicle communication unit 10a. For example, the monitoring unit 202 notifies the control unit 206 that an abnormality has occurred in the in-vehicle communication unit 10a by transmitting incident information to the control unit 206.

[0040] When the control unit 206 is notified of an abnormality in the in-vehicle communication unit 10a by the monitoring unit 202, the control unit 206 instructs the mobile communication terminal 300 to call a dedicated telephone number for reporting the abnormality in the in-vehicle communication unit 10a according to the HFP. Then, the control unit 206 notifies the external server 100 of the abnormality in the in-vehicle communication unit 10a via the mobile communication terminal 300 while communication by the in-vehicle communication unit 10a is cut off by making a call to the dedicated telephone number instead of incident information. According to the HFP, it is possible to notify the external server 100 of the abnormality in the in-vehicle communication unit 10a by calling the dedicated telephone number instead of incident information. Therefore, the processing load of the control unit 204 and the mobile communication terminal 300 can be reduced.

[0041] The second profile is a dial-up networking profile (DUN) for dialing up to the Internet via the mobile communication terminal 300. DUN is a profile for dialing up in short-distance wireless communication implemented in a car navigation device.

[0042] 6 is a timing chart diagram when short-distance wireless communication is performed according to the second profile. As shown in FIG. 6, when the in-vehicle communication unit 10a is hacked, performs an abnormal operation, and transmits an abnormal signal, the monitoring unit 202 detects the abnormality of the in-vehicle communication unit 10a and isolates the in-vehicle communication unit 10a. The monitoring unit 202 also notifies the control unit 206 that an abnormality has occurred in the in-vehicle communication unit 10a. For example, the monitoring unit 202 notifies the control unit 206 that an abnormality has occurred in the in-vehicle communication unit 10a by transmitting incident information to the control unit 206.

[0043] When the control unit 206 is notified of an abnormality in the in-vehicle communication unit 10a by the monitoring unit 202, the control unit 206 instructs the mobile communication terminal 300 to make a dial-up connection to the Internet according to the DUN. Then, the control unit 204 uploads incident information indicating the abnormality in the in-vehicle communication unit 10a to the external server 100 via the mobile communication terminal 300 that is dial-up connected to the Internet. According to the DUN, which has been used for a relatively long time, when the mobile communication terminal 300 is, for example, a mobile phone of an older model than the latest smartphone, a short-range wireless communication connection can be established between the car navigation device and the mobile communication terminal 300.

[0044] The third profile is FTP (File Transfer Profile) for transferring and communicating files. FTP is a profile for transferring data files via short-distance wireless communication implemented in car navigation devices.

[0045] 7 is a timing chart diagram when short-distance wireless communication is performed according to the third profile. As shown in FIG. 7, when the in-vehicle communication unit 10a is hacked, performs an abnormal operation, and transmits an abnormal signal, the monitoring unit 202 detects the abnormality of the in-vehicle communication unit 10a and isolates the in-vehicle communication unit 10a. The monitoring unit 202 also notifies the control unit 206 that an abnormality has occurred in the in-vehicle communication unit 10a. For example, the monitoring unit 202 notifies the control unit 206 that an abnormality has occurred in the in-vehicle communication unit 10a by transmitting incident information to the control unit 206.

[0046] When the control unit 206 is notified of an abnormality in the in-vehicle communication unit 10a by the monitoring unit 202, the control unit 206 generates a data file including incident information indicating the abnormality in the in-vehicle communication unit 10a. The control unit 206 also instructs the mobile communication terminal 300 to perform an operation of uploading the data file via the Internet according to FTP. The control unit 206 transmits the data file to the mobile communication terminal 300, thereby causing the mobile communication terminal 300 to upload the data file to the external server 100 via the Internet. According to FTP, the data file can include incident information indicating the specific abnormality content of the in-vehicle communication unit 10a.

[0047] 8 is a flow chart showing an example of the incident information transmission process of the present embodiment. As shown in FIG. 8, the monitoring unit 202 acquires information output from various in-vehicle devices (S501). For example, the monitoring unit 202 acquires information output from the in-vehicle communication unit 10a and the multiple control units 204 and 206.

[0048] The monitoring unit 202 determines whether or not an incident has occurred in the vehicle 10 based on the acquired information (S503). If no incident has occurred in the vehicle 10, the monitoring unit 202 returns to the process of S501 and again acquires information output from the various in-vehicle devices. On the other hand, if an incident has occurred in the vehicle 10, the monitoring unit 202 determines whether or not the incident is a security incident (S505). Here, the monitoring unit 202 determines whether or not an abnormality has occurred in the in-vehicle communication unit 10a due to a security incident based on the information acquired from the in-vehicle communication unit 10a.

[0049] If the incident is not a security incident, the monitoring unit 202 generates incident information indicating that an incident has occurred in the vehicle 10 (S507). The monitoring unit 202 uploads the generated incident information to the external server 100 via the in-vehicle communication unit 10a (S509).

[0050] On the other hand, if the incident is a security incident, the monitoring unit 202 cuts off communication with the in-vehicle communication unit 10a (S511). The monitoring unit 202 generates incident information indicating that a security incident has occurred in the in-vehicle communication unit 10a (S513). The monitoring unit 202 transmits the generated incident information to the control unit 206 (S515).

[0051] The control unit 206 determines whether short-distance wireless communication with the mobile communication terminal 300 is possible (S517). If short-distance wireless communication is not possible, the control unit 206 ends the incident information transmission process. On the other hand, if short-distance wireless communication is possible, the control unit 206 uploads the incident information to the external server 100 via the mobile communication terminal 300 (S519).

[0052] As described above, according to the present embodiment, when the monitoring unit 202 detects that an abnormality has occurred in the in-vehicle communication unit 10a, the monitoring unit 202 cuts off communication between the in-vehicle communication unit 10a and the control unit 206. The monitoring unit 202 also notifies the control unit 206 of the abnormality in the in-vehicle communication unit 10a. When the control unit 206 is notified of the abnormality in the in-vehicle communication unit 10a from the monitoring unit 202, the control unit 206 instructs the mobile communication terminal 300 to perform an operation to notify the abnormality in the in-vehicle communication unit 10a according to a specific profile of the short-range wireless communication standard. As a result, while the communication by the in-vehicle communication unit 10a is cut off, the abnormality in the in-vehicle communication unit 10a is notified to the external server 100 via the mobile communication terminal 300. As a result, when an abnormality has occurred in the in-vehicle communication unit 10a due to a security incident such as hacking, it is possible to prevent adverse effects on the behavior of the vehicle 10 and to transmit information regarding the abnormality in the in-vehicle communication unit 10a to the external server 100.

[0053] Although the present invention has been described above with reference to the accompanying drawings, it goes without saying that the present invention is not limited to such embodiments. It is clear that a person skilled in the art can think of various modified or altered examples within the scope of the claims, and it is understood that such examples also naturally belong to the technical scope of the present invention.

[0054] In the above embodiment, the case where the control unit 206 is a car navigation ECU that controls a car navigation device has been described. However, the present invention is not limited to this, and the control unit 206 may be a car audio ECU that controls a car audio device that does not have a car navigation function. In this case, the car audio device has the same protocol as the car navigation device. The control unit 206 is capable of wireless communication with the mobile communication terminal 300 according to a specific profile according to the function of the car audio device among multiple profiles of the short-range wireless communication standard. [Industrial Applicability]

[0055] The present invention can be used in vehicles. [Explanation of symbols]

[0056] 1 Vehicle information system 10 Vehicles 10a Vehicle communication unit 50 Communication Network 50a Telecommunications base station 100 External Servers 200 Vehicle Systems 202 Surveillance Unit 204 Control Unit 206 Control Unit 208 Network Bus 210 Network Bus 300 Mobile communication terminals

Claims

1. an in-vehicle communication unit that is mounted in the vehicle and is capable of wirelessly transmitting information for telematics services to an external server; a monitoring unit that monitors whether or not an abnormality has occurred in the in-vehicle communication unit due to a security incident related to the in-vehicle communication unit; A control unit for controlling an on-board device mounted on the vehicle; Equipped with The monitoring unit includes: determining whether or not an abnormality has occurred in the in-vehicle communication unit due to a security incident related to the in-vehicle communication unit based on ID information of the in-vehicle communication unit and information related to a communication interval when communicating with the in-vehicle communication unit; when detecting that an abnormality has occurred in the in-vehicle communication unit due to a security incident related to the in-vehicle communication unit, cutting off communication between the in-vehicle communication unit and the monitoring unit, and notifying the control unit of the abnormality in the in-vehicle communication unit; The control unit The in-vehicle device is capable of wirelessly communicating with a mobile communication terminal in accordance with a specific profile corresponding to a function of the in-vehicle device, among a plurality of profiles of a short-range wireless communication standard; when the monitoring unit notifies the external server of the abnormality of the in-vehicle communication unit, the abnormality of the in-vehicle communication unit is notified to the external server via the mobile communication terminal while communication by the in-vehicle communication unit is cut off by instructing the mobile communication terminal to perform an operation of notifying the external server of the abnormality of the in-vehicle communication unit in accordance with the specific profile of the short-range wireless communication standard; The communication cutoff is performed by discarding all information received from the in-vehicle communication unit when it is detected that an abnormality has occurred in the in-vehicle communication unit due to a security incident related to the in-vehicle communication unit. vehicle.

2. the specific profile is a Hands Free Profile (HFP), which is a profile for a hands-free calling function of the in-vehicle device, The control unit when the monitoring unit notifies the user of an abnormality in the in-vehicle communication unit due to a security incident related to the in-vehicle communication unit, the monitoring unit instructs the mobile communication terminal to make a call to a dedicated telephone number for reporting the abnormality in the in-vehicle communication unit according to the HFP, and by having the mobile communication terminal call the dedicated telephone number, the abnormality in the in-vehicle communication unit is reported to the external server via the mobile communication terminal while communication by the in-vehicle communication unit is cut off.

2. The vehicle of claim 1.

3. the specific profile is a dial-up networking profile (DUN) for dial-up connection of the in-vehicle device, The control unit when the monitoring unit notifies the user of an abnormality in the in-vehicle communication unit, the monitoring unit instructs the mobile communication terminal to make a dial-up connection to a network in accordance with the DUN, and uploads incident information indicating the abnormality in the in-vehicle communication unit to the external server via the mobile communication terminal that is dial-up connected to the network.

2. The vehicle of claim 1.

4. the specific profile is a file transfer profile (FTP) for transferring data files of the in-vehicle device, The control unit when an abnormality in the in-vehicle communication unit is notified from the monitoring unit, a data file including incident information indicating the abnormality in the in-vehicle communication unit is generated, and instructs the mobile communication terminal to perform an operation of uploading the data file via a network in accordance with the FTP, and transmits the data file to the mobile communication terminal, thereby causing the data file to be uploaded from the mobile communication terminal to the external server via the network; 2. The vehicle of claim 1.

5. The vehicle according to any one of claims 1 to 4, wherein the short-range wireless communication standard is Bluetooth (registered trademark).

Images