Vehicle-mounted relay device, vehicle-mounted system, information processing method, and program

Abstract

To provide an on-vehicle relay device and the like, capable of quickly starting communication through an in-vehicle network when authentication to an on-vehicle device is required.SOLUTION: An on-vehicle relay device is connected to a plurality of on-vehicle devices mounted on a vehicle and an authentication device for authenticating the on-vehicle devices to relay communication between the plurality of on-vehicle devices. The on-vehicle relay device includes a control part for controlling relay of the communication. The control part relays authentication communication data for authentication between an on-vehicle device and the authentication device before completing authentication of the on-vehicle device connected to the on-vehicle relay device, transmits and receives setting data for setting an in-vehicle network to / from the authentication device and the on-vehicle device in parallel with the rely of the authentication communication data, acquires the setting information of the in-vehicle network corresponding to the transmitted setting data, and starts to relay based on the acquired setting information after completing the authentication.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present disclosure relates to an in-vehicle relay device, an in-vehicle system, an information processing method, and a program. [Background technology]

[0002] A vehicle is equipped with a plurality of on-board devices, including on-board devices including a power train system such as an engine control system, a body system such as an air conditioner control system, and a plurality of on-board ECUs (Electronic Control Units) for controlling the devices, and a relay device that relays communication between the on-board devices. By connecting the on-board devices, an in-vehicle network is formed in the vehicle with the on-board devices as nodes (for example, Patent Document 1). The on-board devices communicate via the in-vehicle network. The relay device of Patent Document 1 authenticates the connected on-board devices, and relays the communication of the on-board devices after the authentication is completed. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2020-47992 A Summary of the Invention [Problem to be solved by the invention]

[0004] The relay device of Patent Document 1 does not take into consideration the early start of communication via the in-vehicle network when authentication of the in-vehicle device is required.

[0005] The present disclosure has been made in consideration of the above circumstances, and aims to provide an in-vehicle relay device, etc. that can start communication via an in-vehicle network early when authentication of in-vehicle equipment is required. [Means for solving the problem]

[0006] An in-vehicle relay device according to one embodiment of the present disclosure is connected to a plurality of in-vehicle devices mounted in a vehicle and an authentication device that authenticates the in-vehicle devices, and relays communications between the plurality of in-vehicle devices, and is provided with a control unit that controls the relaying of communications, and the control unit relays authentication communication data for the authentication between the in-vehicle devices and the authentication device before authentication of the in-vehicle devices connected to the in-vehicle relay device is completed, and in parallel with relaying the authentication communication data, transmits and receives setting data for setting an in-vehicle network between the in-vehicle devices and the authentication device, obtains setting information of the in-vehicle network corresponding to the transmitted setting data from the authentication device, and starts relaying based on the obtained setting information after the authentication is completed. Effect of the Invention

[0007] According to one aspect of the present disclosure, when authentication of an in-vehicle device is required, communication via an in-vehicle network can be started early. [Brief description of the drawings]

[0008] [Figure 1] 1 is a schematic diagram illustrating a configuration of an in-vehicle system according to a first embodiment. [Diagram 2] FIG. 2 is a block diagram illustrating a configuration of an in-vehicle ECU. [Diagram 3] FIG. 11 is a conceptual diagram showing an example of the contents of a destination information group. [Figure 4] FIG. 11 is a sequence diagram showing one mode of authentication of an in-vehicle device and setting of an in-vehicle network. [Diagram 5] 10 is a flowchart of a main routine illustrating a process related to authentication of an in-vehicle device and setting of an in-vehicle network, which is performed by a control unit of the second relay device. [Figure 6] 13 is a flowchart illustrating a processing procedure of a control unit of the second relay device relating to a subroutine of a setting change process. [Figure 7] 11 is a flowchart illustrating a processing procedure of a control unit of the second relay device relating to a subroutine of a reception process and a relay process. [Figure 8]6 is a flowchart illustrating a process related to setting of an in-vehicle network performed by a control unit of a first relay device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] [Description of the embodiments of the present disclosure] First, embodiments of the present disclosure will be listed and described. In addition, at least some of the embodiments described below may be arbitrarily combined.

[0010] (1) An in-vehicle relay device according to one embodiment of the present disclosure is connected to a plurality of in-vehicle devices mounted in a vehicle and an authentication device that authenticates the in-vehicle devices, and relays communications between the plurality of in-vehicle devices, and is provided with a control unit that controls the relaying of communications, and the control unit relays authentication communication data for the authentication between the in-vehicle devices and the authentication device before authentication of the in-vehicle devices connected to the in-vehicle relay device is completed, and in parallel with relaying the authentication communication data, transmits and receives setting data for setting an in-vehicle network between the in-vehicle devices and the authentication device, obtains setting information of the in-vehicle network corresponding to the transmitted setting data from the authentication device, and starts relaying based on the obtained setting information after the authentication is completed.

[0011] In this aspect, the in-vehicle relay device is connected to the in-vehicle device and the authentication device. The in-vehicle relay device relays communication between the in-vehicle devices. The in-vehicle relay device also relays communication between the in-vehicle device and the authentication device. The authentication device authenticates the in-vehicle device. Before the authentication of the in-vehicle device is completed, a control unit provided in the in-vehicle relay device relays authentication communication data. Furthermore, the control unit transmits and receives setting data to and from the in-vehicle device and the authentication device in parallel with relaying the authentication communication data. In relaying the authentication communication data, the control unit relays the authentication communication data from the in-vehicle device to the authentication device. Furthermore, the control unit relays the authentication communication data from the authentication device to the in-vehicle device. In other words, the control unit transmits and receives authentication communication data to and from the in-vehicle device and the authentication device. For example, in transmitting and receiving the setting data, the control unit receives the setting data transmitted from the in-vehicle device connected to the in-vehicle relay device. Furthermore, the control unit transmits the setting data to the authentication device. The control unit may relay the setting data transmitted from one of the in-vehicle device and the authentication device to the other of the in-vehicle device and the authentication device. In other words, the transmission and reception of the authentication communication data may include relaying of the setting data. The authentication device acquires the setting data transmitted from the vehicle-mounted relay device, and transmits the setting information of the in-vehicle network according to the acquired setting data to the vehicle-mounted relay device. The control unit included in the vehicle-mounted relay device acquires the setting information transmitted from the authentication device. After the authentication of the in-vehicle device is completed, the control unit starts relaying based on the acquired setting information. In other words, the control unit applies the acquired setting information to the vehicle-mounted relay device (the device itself). In this way, communication via the in-vehicle network based on the setting information is started. The control unit included in the vehicle-mounted relay device relays the authentication communication data and transmits and receives the setting data in parallel before the authentication of the in-vehicle device is completed, so that the control unit can acquire the setting information from the authentication device earlier than when the setting data is transmitted to the authentication device after the authentication is completed. Therefore, the vehicle-mounted relay device can start communication via the in-vehicle network earlier than when the setting data is transmitted to the authentication device after the authentication is completed. The relaying of the authentication communication data includes a plurality of sequences in which the control unit included in the vehicle-mounted relay device transmits and receives the authentication communication data.The control unit transmitting and receiving the setting data in parallel with relaying the authentication communication data means that the period during which the above-mentioned multiple sequences are executed overlaps with the period during which the sending and receiving of the setting data is executed.

[0012] (2) In one embodiment of the present disclosure, the configuration data includes at least one of destination information for communication and service resolution information for the vehicle-mounted equipment to start providing a function, and the control unit outputs to the authentication device the acquired destination information of the vehicle-mounted equipment and / or the service resolution information, as well as the destination information of the vehicle-mounted relay device, before the authentication is completed.

[0013] In this embodiment, the control unit of the in-vehicle relay device acquires at least one of destination information of the in-vehicle device and service solution information from the in-vehicle device connected to the in-vehicle relay device before the authentication of the in-vehicle device is completed. For example, the destination information includes an address such as an IP address and a MAC address. The destination information also includes a port number of a connection port to which the in-vehicle device is connected, among connection ports provided in the in-vehicle relay device for connecting with the in-vehicle device. The service solution information is information for the in-vehicle device to start providing a function (service). For example, the service solution information includes a device driver for controlling the in-vehicle device. The service solution information is transmitted from the in-vehicle device. The control unit outputs at least one of the acquired destination information of the in-vehicle device and the service solution information, and the destination information of the in-vehicle relay device to the authentication device before the authentication of the in-vehicle device is completed. For example, the control unit outputs a destination information group including the destination information of the in-vehicle device and the destination information of the in-vehicle relay device, and the service solution information acquired from the in-vehicle device to the authentication device. The service solution information is relayed from the in-vehicle device to the authentication device by the in-vehicle relay device. The frequency of communication between the authentication device and the vehicle-mounted relay device can be reduced compared to when the control unit outputs to the authentication device individually the destination information of the vehicle-mounted relay device, the destination information of the vehicle-mounted equipment connected to the vehicle-mounted relay device, and at least one of the service resolution information.

[0014] (3) In one embodiment of the in-vehicle relay device of the present disclosure, the in-vehicle equipment includes existing in-vehicle equipment that is pre-installed in the vehicle and additional in-vehicle equipment that is installed in the vehicle at a time later than the time the existing in-vehicle equipment is installed in the vehicle, and the authentication is performed on the additional in-vehicle equipment.

[0015] In this embodiment, an existing on-board device is mounted on the vehicle. The existing on-board device is connected to the on-board relay device. When an additional on-board device is mounted on the vehicle, the additional on-board device is connected to the on-board relay device. For example, when an additional on-board device is connected to the on-board relay device (own device), the control unit of the on-board relay device communicates with the authentication device and causes the authentication device to authenticate the additional on-board device. Before the authentication of the on-board device is completed, the control unit of the on-board relay device relays the authentication communication data as described above. In addition, in parallel with relaying the authentication communication data, the control unit of the on-board relay device outputs setting data related to the additional on-board device and the existing on-board device, and setting data related to the on-board relay device to the authentication device. The control unit of the on-board relay device acquires setting information of an in-vehicle network including the additional on-board device as a node from the authentication device. When the additional on-board device is mounted on the vehicle, an in-vehicle network including the additional on-board device as a node can be configured. When an additional in-vehicle device is connected to the in-vehicle relay device, the in-vehicle relay device can start communication via an in-vehicle network that includes the additional in-vehicle device as a node more quickly than if the setting data was output to the authentication device after authentication was completed.

[0016] (4) An in-vehicle relay device according to one embodiment of the present disclosure is provided between the authentication device and the in-vehicle equipment.

[0017] In this aspect, since the in-vehicle relay device is provided between the authentication device and the in-vehicle device, it is possible to configure an in-vehicle network that forms a star-shaped network topology with the authentication device at the center, or to configure an in-vehicle network that forms a cascade-shaped network topology with the authentication device at the top.

[0018] (5) An in-vehicle system according to one embodiment of the present disclosure is an in-vehicle system including the authentication device and the in-vehicle relay device, wherein the in-vehicle relay device outputs the setting data to the authentication device before the authentication of the in-vehicle equipment is completed, and the authentication device receives the setting data output from the in-vehicle relay device and outputs the setting information corresponding to the received setting data to the in-vehicle relay device.

[0019] In this aspect, the authentication device and the in-vehicle relay device are connected. For example, a plurality of in-vehicle devices are connected to the in-vehicle relay device. The in-vehicle relay device relays communication between the plurality of in-vehicle devices. The in-vehicle relay device also relays communication between the in-vehicle devices and the authentication device. The authentication device authenticates the in-vehicle devices. The in-vehicle relay device outputs setting data to the authentication device before the authentication of the in-vehicle devices is completed. The authentication device receives the setting data output from the in-vehicle relay device. The authentication device outputs setting information corresponding to the received setting data to the in-vehicle relay device. In detail, the authentication device generates setting information of an in-vehicle network including the authentication device, the in-vehicle relay device, and the in-vehicle devices as nodes based on the received setting data. The authentication device outputs the generated setting information to the in-vehicle relay device. The in-vehicle relay device acquires the output setting information. The authentication device and the in-vehicle relay device relay communication via the in-vehicle network based on the generated setting information. The authentication device can generate setting information faster than when the in-vehicle relay device transmits setting data to the authentication device after the authentication is completed. Therefore, the authentication device and the vehicle relay device can start communication via the in-vehicle network sooner than in the case where the setting data is transmitted to the authentication device after the authentication is completed.

[0020] (6) An information processing method according to one embodiment of the present disclosure is an information processing method performed by an in-vehicle relay device that is connected to a plurality of in-vehicle devices mounted in a vehicle and an authentication device that authenticates the in-vehicle devices and relays communications between the plurality of in-vehicle devices, wherein before authentication of the in-vehicle devices connected to the in-vehicle relay device is completed, authentication communication data for the authentication is relayed between the in-vehicle devices and the authentication device, and in parallel with relaying the authentication communication data, setting data for setting an in-vehicle network is transmitted and received between the in-vehicle devices and the authentication device, setting information for the in-vehicle network corresponding to the transmitted setting data is obtained from the authentication device, and after the authentication is completed, relaying based on the obtained setting information is started.

[0021] In this embodiment, similarly to the embodiment (1), communication via the in-vehicle network can be started earlier than in the case where the setting data is transmitted to the authentication device after the authentication is completed.

[0022] (7) A program according to one embodiment of the present disclosure is a program that causes a computer connected to a plurality of on-board devices mounted in a vehicle and an authentication device that authenticates the on-board devices to execute processing to relay communications between the plurality of on-board devices, and causes the computer to execute processing to relay authentication communication data for the authentication between the on-board devices and the authentication device before authentication of the on-board devices connected to the computer is completed, and in parallel with relaying the authentication communication data, transmit and receive setting data for setting an in-vehicle network between the on-board devices and the authentication device, obtain setting information for the in-vehicle network from the authentication device according to the transmitted setting data, and, after the authentication is completed, start relaying based on the obtained setting information.

[0023] In this aspect, a computer can function as the vehicle-mounted relay device of one aspect of the present disclosure.

[0024] [Details of the embodiment of the present disclosure] The present disclosure will be specifically described based on the drawings showing the embodiments. An in-vehicle relay device according to the embodiment of the present disclosure will be described below with reference to the drawings. Note that the present disclosure is not limited to these examples, but is indicated by the claims, and is intended to include all modifications within the meaning and scope equivalent to the claims.

[0025] (Embodiment 1) Hereinafter, an embodiment will be described with reference to the drawings. Fig. 1 is a schematic diagram illustrating a configuration of an in-vehicle system S according to the first embodiment. The in-vehicle system S includes a plurality of in-vehicle ECUs 2 mounted on a vehicle C. At least some of the in-vehicle ECUs 2 are connected to in-vehicle devices 3. In Fig. 1, three in-vehicle ECUs 2 are mounted on the vehicle C, but the number of in-vehicle ECUs 2 mounted on the vehicle C is not limited to three.

[0026] For example, the multiple on-vehicle ECUs 2 may include an integrated on-vehicle ECU 2 (integrated ECU) that controls the entire vehicle C, and individual on-vehicle ECUs 2 (individual ECUs) that are communicatively connected to the integrated on-vehicle ECU 2 and directly connected to the on-vehicle devices 3. The integrated on-vehicle ECU 2 may be communicatively connected to an external server (not shown) that is connected to an external network such as the Internet, via an external communication device (not shown).

[0027] In FIG. 1, an integrated in-vehicle ECU 2 and a plurality of individual in-vehicle ECUs 2 are communicatively connected by an in-vehicle network 4 forming a star-shaped network topology. The integrated in-vehicle ECU 2 is provided at the center of the star-shaped network topology. The network topology may be a cascade network topology. For example, the integrated in-vehicle ECU 2 is provided at the apex of the cascade network topology. The network topology in the in-vehicle system S is not limited to the above example. The in-vehicle system S may be configured such that adjacent individual in-vehicle ECUs 2 are connected to each other to form a loop-shaped network topology, enabling bidirectional communication and achieving redundancy.

[0028] The in-vehicle ECU 2 also functions as a relay device such as a gateway or an Ethernet switch that relays communication. The relay device includes a first relay device 21 that authenticates the in-vehicle devices 3 and relays communication between the multiple in-vehicle devices 3. The relay device also includes a second relay device 22 that is connected to the in-vehicle devices 3 and the first relay device 21 and relays communication between the multiple in-vehicle devices 3. In this embodiment, the integrated in-vehicle ECU 2 functions as the first relay device 21. The first relay device 21 corresponds to an authentication device. The individual in-vehicle ECU 2 functions as the second relay device 22. The second relay device 22 corresponds to an in-vehicle relay device.

[0029] The individual in-vehicle ECU 2 is disposed in each area of ​​the vehicle C and is connected to a plurality of in-vehicle devices 3. The individual in-vehicle ECU 2 transmits and receives signals or data to and from the in-vehicle devices 3 connected thereto. The individual in-vehicle ECU 2 also communicates with the integrated in-vehicle ECU 2. As described above, the individual in-vehicle ECU 2 functions as the second relay device 22 and relays communication between the plurality of in-vehicle devices 3 connected to the individual in-vehicle ECU 2, or communication between the in-vehicle device 3 and other in-vehicle ECUs 2 including the integrated in-vehicle ECU 2. In addition to relaying communication, the individual in-vehicle ECU 2 may also function as a power distribution device that distributes and relays power output from a power storage device (not shown) and supplies the power to the in-vehicle devices 3 connected to the individual in-vehicle ECU.

[0030] The in-vehicle device 3 includes, for example, an actuator 30 such as a door opening / closing device and a motor device, and various sensors 31 such as a LiDAR (Light Detection and Ranging), a light sensor, a CMOS camera, and an infrared sensor. The in-vehicle device 3 is not limited to the above example, and may be a switch such as a door SW (switch) and a lamp SW, or may be a lamp. The in-vehicle device 3 includes an existing in-vehicle device 3 that is pre-installed in the vehicle C, and an additional in-vehicle device 3 that is installed in the vehicle C at a time later than the time when the existing in-vehicle device 3 is installed in the vehicle C. For example, the additional in-vehicle device 3 supports plug and play. The time when the existing in-vehicle device 3 is installed in the vehicle C is, for example, the time when the vehicle C is manufactured.

[0031] The integrated in-vehicle ECU 2 is a central control device such as a vehicle computer. The integrated in-vehicle ECU 2 generates and outputs control signals to the individual in-vehicle devices 3 based on data from the in-vehicle devices 3 relayed via other in-vehicle ECUs 2 such as individual in-vehicle ECUs 2. The integrated in-vehicle ECU 2 generates a control signal for controlling the actuator 30 that is the target of the request signal based on information or data such as a request signal output from the other in-vehicle ECUs 2, and outputs the generated control signal to the other in-vehicle ECUs 2.

[0032] As described above, the integrated vehicle-mounted ECU 2 also functions as the first relay device 21. In FIG. 1, two vehicle-mounted ECUs 2 functioning as the second relay devices 22 are connected to the first relay device 21. The first relay device 21 relays communication between two second relay devices 22. The first relay device 21 also relays communication between vehicle-mounted devices 3 connected to different second relay devices 22. In detail, the first relay device 21 relays communication between a vehicle-mounted device 3 connected to one second relay device 22 and a vehicle-mounted device 3 connected to the other second relay device 22. The number of second relay devices 22 connected to the first relay device 21 is not limited to two. For example, three or more second relay devices 22 may be connected to the first relay device 21.

[0033] In this embodiment, the in-vehicle system S is configured by an integrated in-vehicle ECU 2 and individual in-vehicle ECUs 2, but the in-vehicle system S is not limited to a configuration including an integrated in-vehicle ECU 2 and individual in-vehicle ECUs 2. For example, the in-vehicle system S may be configured by a plurality of in-vehicle ECUs 2 connected in a peer-to-peer manner by a relay device such as a CAN (Controller Area Network) gateway or an Ethernet switch provided separately from the in-vehicle ECU 2.

[0034] FIG. 2 is a block diagram illustrating the configuration of the in-vehicle ECU 2. The in-vehicle ECU 2 includes a control unit 200, a storage unit 201, and an in-vehicle communication unit 202. The control unit 200 includes an arithmetic processing unit such as a central processing unit (CPU) or a micro processing unit (MPU), a combination of a CPU or an MPU and an Ethernet switch IC (Integrated Circuit) that performs relay processing, or an Ethernet switch IC that has an arithmetic processing function. The control unit 200 reads out and executes a control program P and data that are pre-stored in the storage unit 201, thereby performing various control processes and arithmetic processes. For example, the control unit 200 includes a single-core single CPU, a single-core multiple CPU, a multi-core single CPU, and a multi-core multiple CPU. The control unit 200 is not limited to a software processing unit that performs software processing such as a CPU, but may include a hardware processing unit that performs various control processes and arithmetic processes by hardware processing such as a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), or a system on a chip (SoC).

[0035] The storage unit 201 is configured with a volatile memory element such as a RAM (Random Access Memory) or a non-volatile memory element such as a ROM (Read Only Memory), an EEPROM (Electrically Erasable Programmable ROM) or a flash memory. The storage unit 201 may be configured with a combination of storage devices such as the above-mentioned volatile memory element and non-volatile memory element. The storage unit 201 stores in advance a control program P and data to be referenced during processing. The control program P corresponds to a program.

[0036] The control program P stored in the storage unit 201 may be a control program P read from a recording medium 1 readable by the in-vehicle ECU 2. The control program P stored in the storage unit 201 may be a control program P downloaded by the in-vehicle ECU 2 from an external computer (not shown) connected to a communication network (not shown) and stored in the storage unit 201.

[0037] The in-vehicle communication unit 202 is an input / output interface using a communication protocol such as CAN (Controller Area Network) or Ethernet (registered trademark). The control unit 200 communicates with other in-vehicle ECUs 2 connected to the in-vehicle network 4 via the in-vehicle communication unit 202. For example, the in-vehicle ECU 2 may include a plurality of in-vehicle communication units 202. Each of the plurality of in-vehicle communication units 202 is connected to the other in-vehicle ECUs 2 via the in-vehicle network 4.

[0038] Hereinafter, the control unit 200, the memory unit 201, and the in-vehicle communication unit 202 of the in-vehicle ECU 2 functioning as the first relay 21 will also be referred to as the control unit 200 of the first relay 21, the memory unit 201 of the first relay 21, and the in-vehicle communication unit 202 of the first relay 21. Hereinafter, the control unit 200, the memory unit 201, and the in-vehicle communication unit 202 of the in-vehicle ECU 2 functioning as the second relay 22 will also be referred to as the control unit 200 of the second relay 22, the memory unit 201 of the second relay 22, and the in-vehicle communication unit 202 of the second relay 22.

[0039] For example, the in-vehicle ECU 2 functioning as the second relay device 22 includes an input / output interface (not shown) for communicating with the in-vehicle device 3. The in-vehicle device 3 is connected to the input / output interface for communicating with the in-vehicle device 3 via, for example, a serial cable.

[0040] For example, the in-vehicle ECU 2 includes a connection port (not shown) for connection with another in-vehicle ECU 2 or an in-vehicle device 3. The connection port may be included in the in-vehicle communication unit 202, or may be included in an input / output interface for communicating with the in-vehicle device 3. For example, the connection port includes an existing connection port for connection with an existing in-vehicle device 3, and an additional connection port for connection with an additional in-vehicle device 3. The additional connection port is compatible with, for example, the USB (Universal Serial Bus) standard. The existing connection port may be compatible with the USB standard. Note that the connection port may be compatible with a standard other than the USB. In other words, the standard compatible with the connection port is not limited to the USB standard.

[0041] In the in-vehicle network 4, in-vehicle devices including the in-vehicle ECU 2 and the in-vehicle equipment 3 are connected via communication lines such as an Ethernet cable, a CAN bus, or a serial cable. In the present embodiment, an example in which an Ethernet communication protocol is used for communication via the in-vehicle network 4 will be described, but the communication protocol used for communication via the in-vehicle network 4 is not limited to Ethernet and may be, for example, CAN or LIN (Local Interconnect Network).

[0042] For example, when an additional in-vehicle device 3 is mounted on the vehicle C, the additional in-vehicle device 3 is connected to an additional connection port of the second relay device 22. When the additional in-vehicle device 3 is connected, the control unit 200 of the second relay device 22 communicates with the first relay device 21 and causes the control unit 200 of the first relay device 21 to authenticate the additional in-vehicle device 3. In other words, the control unit 200 of the first relay device 21 authenticates the in-vehicle device 3 newly mounted on the vehicle C. For example, the authentication of the in-vehicle device 3 includes storing information of the in-vehicle device 3, such as a MAC address and a serial number, in the storage unit 201 of the first relay device 21. Hereinafter, an example in which the additional in-vehicle device 3 is connected to one of the two second relay devices 22 will be described. In this example, the existing in-vehicle device 3 is connected to the other second relay device 22.

[0043] For example, when an in-vehicle device 3 is connected to an additional connection port of the second relay device 22 (own device), the control unit 200 of the second relay device 22 determines that authentication of the connected in-vehicle device 3 is necessary. The method of determining whether authentication is necessary is not limited to the determination based on the connection to the additional connection port. For example, information on the in-vehicle device 3 that does not require authentication may be stored in advance in the storage unit 201 of at least one in-vehicle ECU 2 mounted on the vehicle C. The control unit 200 of the second relay device 22 may determine that authentication of the connected in-vehicle device 3 is necessary when the information on the in-vehicle device 3 connected to the second relay device 22 is not included in the information on the in-vehicle device 3 that does not require authentication. The in-vehicle device 3 that does not require authentication includes, for example, an in-vehicle device 3 that has been inspected and / or authenticated in advance by the manufacturer that manufactures the vehicle C. In this embodiment, the in-vehicle device 3 that does not require authentication is an existing in-vehicle device 3. The in-vehicle device 3 that requires authentication is an additional in-vehicle device 3.

[0044] In authenticating the in-vehicle device 3, the control unit 200 of the second relay device 22 relays authentication communication data, which is communication data for authentication, between the first relay device 21 and the in-vehicle device 3. In detail, the control unit 200 of the second relay device 22 receives (acquires) authentication communication data from the additional in-vehicle device 3 connected to the second relay device 22, and relays (transmits) the received authentication communication data to the first relay device 21. The control unit 200 of the second relay device 22 also receives authentication communication data from the first relay device 21, and relays the received authentication communication data to the connected additional in-vehicle device 3. The authentication communication data is authentication information, which is information for authentication, and includes, for example, an authentication frame, which is a communication frame for authentication.

[0045] The control unit 200 of the first relay device 21 receives the authentication communication data relayed from the second relay device 22. The control unit 200 of the first relay device 21 also transmits the authentication communication data to the additional in-vehicle device 3 via the second relay device 22. The first relay device 21 functions as an authentication server that manages the authentication of the in-vehicle device 3 mounted on the vehicle C. For example, after completing the authentication of the in-vehicle device 3, the control unit 200 of the first relay device 21 outputs information indicating that the authentication of the in-vehicle device 3 has been completed to the second relay device 22, and notifies the second relay device 22 that the authentication of the in-vehicle device 3 has been completed.

[0046] The transmission and reception of authentication communication data between the first relay device 21 and the additional in-vehicle device 3 via the second relay device 22 is repeated until the authentication of the additional in-vehicle device 3 by the first relay device 21 is completed. In other words, the relaying of authentication communication data by the second relay device 22 is repeated until the authentication is completed. Therefore, the relaying of authentication communication data by the second relay device 22 includes multiple sequences in which the second relay device transmits and receives authentication communication data. Note that the relaying of authentication communication data is performed before the authentication is completed. Before the authentication is completed includes, for example, the period from the time authentication is started to the time authentication is completed.

[0047] For example, a pre-authentication flag indicating that authentication of the connected in-vehicle device 3 has not yet been completed is stored in the memory unit 201 of the second relay device 22. The pre-authentication flag includes an on state and an off state. When the pre-authentication flag is on, authentication has not been completed. That is, authentication has not yet been completed. A pre-authentication flag in the on state indicates that authentication of the connected in-vehicle device 3 has not been completed. When the pre-authentication flag is off, authentication has been completed. A pre-authentication flag in the off state indicates that authentication of the connected in-vehicle device 3 has been completed. When multiple in-vehicle devices 3 are connected to the second relay device 22, a pre-authentication flag may be provided for each of the multiple in-vehicle devices 3 connected to the second relay device 22.

[0048] In the in-vehicle network 4, for example, a mechanism is introduced for setting the in-vehicle network 4 to at least one of the first relay device 21 and the second relay device 22 so that any in-vehicle device 3 constituting the in-vehicle network 4 can transmit and receive service communication data between at least one of the other in-vehicle devices 3 and the in-vehicle ECU 2. In detail, before the authentication is completed, the control unit 200 of the second relay device 22 transmits and receives communication data related to the setting of the in-vehicle network 4 described later with the first relay device 21 and the additional in-vehicle device 3 in parallel with relaying the above-mentioned authentication communication data. For example, the control unit 200 of the second relay device 22 receives communication data related to the setting of the in-vehicle network 4 transmitted from the first relay device 21 or the additional in-vehicle device 3. In addition, the control unit 200 of the second relay device 22 transmits communication data related to the setting of the in-vehicle network 4 to the first relay device 21 or the additional in-vehicle device 3. In addition, the control unit 200 of the second relay device 22 transmits and receives communication data related to the setting of the in-vehicle network 4 in parallel with relaying the authentication communication data, which means that the period during which the above-mentioned multiple sequences related to the relaying of the authentication communication data are executed overlaps with the period during which the transmission and reception of communication data related to the setting of the in-vehicle network 4 is executed.

[0049] Before the authentication is completed, the control unit 200 of the second relay device 22 does not relay or transmit / receive communication data other than the authentication communication data and the communication data related to the setting of the in-vehicle network 4 to / from the in-vehicle device 3 requiring authentication. That is, before the authentication is completed, the control unit 200 of the second relay device 22 restricts communication with the in-vehicle device 3 requiring authentication. The in-vehicle device 3 requiring authentication is an additional in-vehicle device 3. For example, the control unit 200 of the second relay device 22 restricts communication with the in-vehicle device 3 requiring authentication that is connected to the second relay device 22 by setting a filter for the additional connection port among the connection ports provided in the second relay device 22 (own device). For example, an access control list (ACL) or the like is used to set the filter for the connection port.

[0050] By setting the above filter, the second relay device 22 passes authentication communication data whose source or destination is the additional in-vehicle device 3 connected to the second relay device 22, and communication data related to the setting of the in-vehicle network 4. By setting the above filter, the second relay device 22 does not pass communication data whose source or destination is the additional in-vehicle device 3 connected to the second relay device 22, other than the authentication communication data and communication data related to the setting of the in-vehicle network 4. Note that passing communication data includes sending, receiving, and relaying communication data.

[0051] When an in-vehicle device 3 that does not require authentication, for example an existing in-vehicle device 3, is connected to the second relay device 22, the control unit 200 of the second relay device 22 does not restrict communication with the existing in-vehicle device 3. The second relay device 22 passes communication data whose source or destination is the existing in-vehicle device 3 connected to the second relay device 22. That is, the second relay device 22 relays, transmits, and receives communication data whose source or destination is the existing in-vehicle device 3 connected to the second relay device 22.

[0052] The communication data related to the setting of the in-vehicle network 4 is communication data for setting the in-vehicle network 4. The communication data related to the setting of the in-vehicle network 4 corresponds to setting data. The communication data related to the setting of the in-vehicle network 4 includes address resolution information, which is information related to address resolution. Address resolution includes identifying the MAC address of the first relay device 21, the second relay device 22, or the in-vehicle device 3. Address resolution also includes assigning an address, such as an IP address, to the additional in-vehicle device 3. Assigning an address is also referred to as address allocation.

[0053] For example, consider a case where the second relay device 22 functions as a DHCP (Dynamic Host Configuration Protocol) server that issues and assigns addresses. After the additional in-vehicle device 3 is connected to the second relay device 22, it outputs an address request indicating a request for assignment of an address to the second relay device 22. The control unit 200 of the second relay device 22 acquires the address request output from the additional in-vehicle device 3 and issues an address to be assigned to the additional in-vehicle device 3. The control unit 200 of the second relay device 22 transmits the issued address to the additional in-vehicle device 3. An IP address is assigned to the additional in-vehicle device 3. In other words, address resolution is completed. At this time, the address request and the issued address are included in the address resolution information. Also, when the MAC addresses of the second relay device 22 and the in-vehicle device 3 are unknown when they communicate with each other, MAC address resolution may be performed by ARP (Address Resolution Protocol) or the like. In this way, the address resolution information may include information for identifying the MAC address of the in-vehicle device 3. The first relay device 21 may function as a DHCP server.

[0054] The communication data related to the setting of the in-vehicle network 4 includes destination information, destination information groups, and service resolution information in addition to address resolution information. A service is a function provided by the in-vehicle device 3, and includes, for example, driving of the actuator 30 and detection by the sensor 31. Service resolution includes preparation for the in-vehicle device 3 to start providing a function. Service resolution information is information for the in-vehicle device 3 to start providing a function (service). The service resolution information is transmitted from the in-vehicle device 3. The service resolution information includes, for example, a device driver for controlling the in-vehicle device 3. When service resolution is completed, the in-vehicle device 3 is ready to start providing the function.

[0055] The nodes include each in-vehicle device constituting the in-vehicle network 4. In this embodiment, the nodes include the first relay device 21, the second relay device 22, and the in-vehicle device 3. The destination information is information for communicating with each node. For example, the destination information includes an Ethernet switch number, a physical port number of a connection port to which the node is connected, a MAC address of the node, an IP address of the node, and a serial number of the node. The destination information is so-called node information.

[0056] The control unit 200 of the second relay device 22 acquires destination information of an in-vehicle device 3 from the in-vehicle device 3 connected to the second relay device 22. In detail, when an existing in-vehicle device 3 is connected to the second relay device 22, the control unit 200 of the second relay device 22 acquires destination information of the existing in-vehicle device 3 connected. When an additional in-vehicle device 3 is connected to the second relay device 22, the control unit 200 of the second relay device 22 acquires destination information of the additional in-vehicle device 3 connected. When an existing in-vehicle device 3 and an additional in-vehicle device 3 are connected to the second relay device 22, the control unit 200 of the second relay device 22 acquires destination information of the existing in-vehicle device 3 and the additional in-vehicle device 3 connected.

[0057] The control unit 200 of the second relay device 22 generates a destination information group including the acquired destination information of the in-vehicle device 3 and the destination information of the second relay device 22 (its own device). The destination information group is information for configuring the in-vehicle network 4, and is generated based on the destination information. For example, the destination information group includes multiple pieces of destination information.

[0058] FIG. 3 is a conceptual diagram showing an example of the contents of the destination information group. For example, the destination information group stores destination information for each node. In the destination information group in FIG. 3, the device name of the node (the in-vehicle ECU 2 and the in-vehicle device 3), the Ethernet switch number to be connected, the physical port number of the Ethernet switch, the MAC address, the IP address, and the serial number of the node are stored in association with each other. In detail, the destination information group in FIG. 3 includes a device name column, an Ethernet switch number column, a physical port number column, a MAC address column, an IP address column, and a serial number column. The above-mentioned Ethernet switch IC corresponds to the Ethernet switch. In this embodiment, the Ethernet switch IC is included in the control unit 200, but the Ethernet switch IC does not have to be included in the control unit 200. For example, the CPU or MPU constituting the control unit 200 and the Ethernet switch IC (Ethernet switch) may be provided separately. In this case, the control unit 200 causes the Ethernet switch IC (Ethernet switch) to perform relay processing.

[0059] 3, the device name column stores the device names of the three on-board devices, namely, the second relay device 22, the actuator 30, and the sensor 31. The Ethernet switch number column stores the Ethernet switch numbers to which the second relay device 22 (controller 200 of the second relay device 22), the actuator 30, and the sensor 31 are respectively connected. The physical port number column stores the physical port numbers of the connection port of the Ethernet switch to which the second relay device 22 (controller 200 of the second relay device 22) is connected, the connection port of the Ethernet switch to which the actuator 30 is connected, and the connection port of the Ethernet switch to which the sensor 31 is connected.

[0060] The MAC address column stores the MAC addresses assigned to the second relay device 22 (control unit 200 of the second relay device 22), the actuator 30, and the sensor 31. The IP address column stores the IP addresses assigned to the second relay device 22, the actuator 30, and the sensor 31. The serial number column stores the serial numbers of the second relay device 22, the actuator 30, and the sensor 31.

[0061] The control unit 200 of the second relay device 22 outputs a destination information group generated based on the acquired destination information of the in-vehicle device 3 and the destination information of the second relay device 22 to the first relay device 21. Note that the acquisition of the destination information of the in-vehicle device 3 and the generation and output of the destination information group are performed before the above-mentioned authentication is completed. In addition, the control unit 200 of the second relay device 22 relays the service solution information transmitted from the in-vehicle device 3 to the first relay device 21. The relaying of the service solution information is performed before the above-mentioned authentication is completed.

[0062] The control unit 200 of the first relay device 21 acquires the destination information group and the service solution information output from the second relay device 22. The control unit 200 of the first relay device 21 generates setting information indicating the setting of the in-vehicle network 4 based on the acquired destination information group and the service solution information. The generated setting information indicates the setting of the in-vehicle network 4 including the first relay device 21, the second relay device 22, the existing in-vehicle device 3, and the additional in-vehicle device as nodes. For example, the setting information includes at least one of route information used in the first relay device 21 and the second relay device 22 to communicate via the in-vehicle network 4 and relay the communication, and information regarding priority control of the communication. The route information is a so-called routing table.

[0063] A plurality of second relays 22 are connected to the first relay 21. The control unit 200 of the first relay 21 acquires each of the destination information groups output from each of the plurality of second relays 22. The destination information group includes information on the association between the in-vehicle communication unit 202 of each second relay 22 and the in-vehicle device 3 connected to the in-vehicle communication unit 202. The control unit 200 of the first relay 21 generates a destination information group including information on the association between the in-vehicle communication unit 202 of the first relay 21 and each of the second relays 22 connected to the in-vehicle communication unit 202. The destination information group generated by the control unit 200 of the first relay 21 includes, for example, the destination information of the first relay 21 and the destination information of the second relay 22 connected to the first relay 21. In the following description, the description of the generation of the destination information group by the control unit 200 of the first relay 21 is omitted.

[0064] The control unit 200 of the first relay device 21 extracts which in-vehicle communication unit 202 of the second relay device 22 each in-vehicle device 3 is connected to, based on the Ethernet switch number and physical port number of the information on association included in the generated destination information group and the information on association included in the destination information group acquired from the second relay device 22. The control unit 200 of the first relay device 21 specifies the number of in-vehicle devices 3 corresponding to nodes in the in-vehicle network 4 and the communication unit of the second relay device 22 to which the in-vehicle devices 3 are directly connected, and derives route information based on the connection relationship between the second relay device 22 and the in-vehicle devices 3. The control unit 200 of the first relay device 21 derives setting values ​​related to the required route of the in-vehicle network 4 and the communication priority according to the required bandwidth or required throughput amount of each route, based on attribute information related to the specification type of the in-vehicle device 3, such as the serial number of the in-vehicle device 3, and the service solution information of the in-vehicle device 3. The control unit 200 of the first relay 21 generates setting information indicating the setting of the in-vehicle network 4, based on the derived route information and setting values. The control unit 200 of the first relay 21 stores the generated setting information in the storage unit 201 of the first relay 21.

[0065] The control unit 200 of the first relay device 21 may generate the setting information to be used this time by updating the setting information used last time or the setting information prepared as an initial value based on the currently acquired destination information group and the service solution information of the in-vehicle device 3. For example, a plurality of pieces of setting information according to the usage mode of the in-vehicle network 4 may be prepared in advance, and the control unit 200 may generate the setting information to be used this time by selecting any one of the plurality of pieces of setting information according to the currently acquired destination information group. That is, the generation of the setting information includes generating the setting information from scratch based on the destination information group and the service solution information of the in-vehicle device 3, updating the existing setting information, and selecting any one of the plurality of pieces of setting information prepared in advance.

[0066] For example, in generating the setting information, the control unit 200 of the first relay device 21 may transmit the acquired destination information group to an external server (not shown) that is communicatively connected to the first relay device 21. The external server transmits setting information corresponding to the destination information group transmitted from the first relay device 21 to the first relay device 21. The control unit 200 of the first relay device 21 acquires the setting information transmitted from the external server.

[0067] The control unit 200 of the first relay device 21 outputs the generated setting information to the second relay device 22. The generation and output of the setting information by the control unit 200 of the first relay device 21 is performed, for example, before the authentication is completed. The control unit 200 of the second relay device 22 acquires the setting information output from the first relay device 21 before the authentication is completed. After acquiring the setting information, the control unit 200 of the second relay device 22 waits until the authentication is completed. After the authentication is completed, the control unit 200 of the second relay device 22 applies the acquired setting information to the second relay device 22. For example, the control unit 200 of the second relay device 22 changes the above filter setting in the connection port of the second relay device 22 based on the acquired setting information because the setting information acquired from the first relay device 21 includes a filter setting for lifting the restriction on communication with the additional in-vehicle device 3, but also includes settings related to the path and communication priority control in addition to the filter setting for lifting the restriction on communication. In other words, the control unit 200 of the second relay device 22 sets the filter based on the acquired setting information. For example, by changing the filter setting in the second relay device 22, the control unit 200 of the second relay device 22 lifts the restriction on communication with the additional in-vehicle device 3. Note that the control unit 200 of the second relay device 22 may set a filter to lift the restriction on communication with the in-vehicle device 3 according to a condition previously set in the control unit 200 of the second relay device 22 after the authentication is completed.

[0068] The control unit 200 of the second relay device 22 applies the setting information to the second relay device 22, thereby setting up an in-vehicle network 4 based on the setting information in the vehicle C. More specifically, an in-vehicle network 4 including the first relay device 21, the second relay device 22, the existing in-vehicle device 3, and the additional in-vehicle device 3 as nodes is set up in the vehicle C. The setting information is reflected in the in-vehicle network 4. After completing the setting of the in-vehicle network 4, the control unit 200 of the second relay device 22 outputs setting completion information indicating that the setting of the in-vehicle network 4 has been completed to the first relay device 21.

[0069] After the authentication is completed, the control unit 200 of the second relay device 22 starts relaying based on the acquired setting information. In other words, after the authentication is completed, the control unit 200 of the second relay device 22 performs communication based on the acquired setting information. For example, after the above-mentioned in-vehicle network 4 is set, the restriction on communication with the additional in-vehicle device 3 in the second relay device 22 is lifted as described above, so that communication data originating from or destined for the additional in-vehicle device 3 connected to the second relay device 22 passes through the second relay device 22 without restriction.

[0070] For example, after the authentication is completed, the control unit 200 of the second relay device 22 receives the service communication data transmitted from the in-vehicle device 3. After the authentication is completed, the control unit 200 of the second relay device 22 transmits the service communication data to the in-vehicle device 3. The service communication data is communication data for the in-vehicle device 3 to provide a function, and includes information related to the service, such as a drive signal for driving the actuator 30 and a detection value of the sensor 31.

[0071] For example, when an existing in-vehicle device 3 and an additional in-vehicle device 3 are connected to the second relay device 22, after setting up the above-mentioned in-vehicle network 4, the second relay device 22 passes communication data whose source or destination is the existing in-vehicle device 3 and communication data whose source or destination is the additional in-vehicle device 3.

[0072] The control unit 200 of the second relay device 22 may obtain the destination information of the in-vehicle device 3 even after the authentication is completed, and output the destination information group generated based on the obtained destination information of the in-vehicle device 3 to the first relay device 21. The control unit 200 of the first relay device 21 obtains the destination information group output from the second relay device 22. If the obtained destination information group is updated, the control unit 200 of the first relay device 21 generates new setting information based on the obtained destination information group. The control unit 200 of the first relay device 21 outputs the generated new setting information to the second relay device 22. The control unit 200 of the second relay device 22 obtains the new setting information output from the first relay device 21, and performs communication based on the new setting information. Even if the destination information is changed after the authentication is completed, the in-vehicle network 4 can be set according to the changed destination information.

[0073] 4 is a sequence diagram showing one embodiment of authentication of the in-vehicle device 3 and setting of the in-vehicle network 4. The process related to authentication of the in-vehicle device 3 and the process related to setting of the in-vehicle network 4 in FIG. 4 will be described with reference to the sequence diagram including the first relay device 21, the second relay device 22, and the in-vehicle device 3.

[0074] In the example of FIG. 4, an additional in-vehicle device 3 is connected to one of the two second relay devices 22. An existing in-vehicle device 3 is connected to the other of the two second relay devices 22. In FIG. 4, one of the second relay devices 22 is shown as the second relay device 22. The other second relay device 22 is shown as the second relay device 22 that does not authenticate the in-vehicle device 3. In FIG. 4, for ease of explanation, the additional in-vehicle devices 3 are shown together as one. The existing in-vehicle device 3 is not shown. Hereinafter, step will be abbreviated as S.

[0075] For example, when an ignition (IG) switch (not shown) provided in the vehicle C is in a stopped state, the additional in-vehicle device 3 is connected to the second relay 22. When the IG switch transitions from a stopped state to an activated state, the first relay 21, the second relay 22, and the in-vehicle device 3 are activated.

[0076] Since the additional in-vehicle device 3 is connected to the second relay device 22, the second relay device 22 determines that it is connected to an in-vehicle device 3 that requires authentication, as described above. Authentication of the additional in-vehicle device 3 is started. The second relay device 22 sets a filter for authentication of the additional in-vehicle device 3 on the connection port (S11). In detail, the second relay device 22 sets a filter on the connection port so as to pass two types of communication data, namely, authentication communication data whose source or destination is the additional in-vehicle device 3, and communication data related to the setting of the in-vehicle network 4, and not to pass communication data other than the two types of communication data. Communication with the additional in-vehicle device 3 is restricted as described above.

[0077] The additional in-vehicle device 3 outputs authentication communication data to the second relay device 22 for authentication of the additional in-vehicle device 3 (S12). The second relay device 22 acquires the authentication communication data output from the additional in-vehicle device 3 and relays the acquired authentication communication data to the first relay device 21 (S13). The first relay device 21 acquires the relayed authentication communication data and performs various processes for authentication based on the acquired authentication communication data. The first relay device 21 also outputs the authentication communication data to the second relay device 22 (S14). For example, the authentication communication data output by the first relay device 21 includes communication data for a response to the authentication communication data output from the additional in-vehicle device 3. The second relay device 22 acquires the authentication communication data output from the first relay device 21 and relays the acquired authentication communication data to the additional in-vehicle device 3 (S15).

[0078] Until the authentication is completed, the transmission and reception of authentication communication data is repeated between the first relay 21 and the additional in-vehicle device 3 via the second relay 22. In other words, the second relay 22 relays the authentication communication data between the first relay 21 and the additional in-vehicle device 3 until the authentication is completed.

[0079] The second relay 22 that does not authenticate the in-vehicle device 3 outputs a destination information group including the destination information of the second relay 22 that does not authenticate the in-vehicle device 3 and the destination information of the existing in-vehicle device 3 connected to the second relay 22 that does not authenticate the in-vehicle device 3 to the first relay 21 (S16). The second relay 22 that does not authenticate the in-vehicle device 3 also outputs service solution information transmitted from the existing in-vehicle device 3 connected to the second relay 22 that does not authenticate the in-vehicle device 3 to the first relay 21 (S17). The first relay 21 acquires the destination information group and the service solution information output from the second relay 22 that does not authenticate the in-vehicle device 3.

[0080] After completing authentication of the additional in-vehicle device 3, the additional in-vehicle device 3 outputs address resolution information to the second relay device 22 (S18). For example, the additional in-vehicle device 3 outputs an address request to the second relay device 22. The second relay device 22 acquires the address resolution information output from the additional in-vehicle device 3. The second relay device 22 outputs the address resolution information to the additional in-vehicle device 3 (S19). For example, the address resolution information output by the second relay device 22 includes communication data for a response to the address resolution information output from the additional in-vehicle device 3. For example, the second relay device 22 outputs an address to be issued to the additional in-vehicle device 3 to the additional in-vehicle device 3.

[0081] The additional in-vehicle device 3 outputs destination information of the additional in-vehicle device 3, so-called local node information, to the second relay device 22 (S20). The additional in-vehicle device 3 also outputs service solution information to the second relay device 22 (S21).

[0082] The second relay device 22 acquires the destination information of the additional in-vehicle device 3 and the service solution information output from the additional in-vehicle device 3. The second relay device 22 relays the acquired service solution information to the first relay device 21 (S22). The second relay device 22 also generates a destination information group including the acquired destination information of the additional in-vehicle device 3 and the destination information of the second relay device 22 (S23). In other words, the second relay device 22 generates the destination information group based on the acquired destination information of the additional in-vehicle device 3 and the destination information of the second relay device 22. The second relay device 22 outputs the generated destination information group to the first relay device 21 (S24).

[0083] The first relay 21 acquires the destination information group output from the second relay 22. The first relay 21 generates setting information based on the acquired destination information group (S25). In detail, the first relay 21 generates setting information based on the destination information group and the service solution information acquired from the second relay 22 and the destination information group and the service solution information acquired from the second relay 22 that does not authenticate the in-vehicle device 3. In other words, the first relay 21 considers the setting of the in-vehicle network 4 based on the two destination information groups and the service solution information. For example, the first relay 21 selects setting information corresponding to the acquired destination information group and the service solution information from among a plurality of setting information pre-stored in the storage unit 201 of the first relay 21. The first relay 21 outputs the generated setting information to the second relay 22 connected to the additional in-vehicle device 3 (S26). The first relay 21 may output the generated setting information to the second relay 22 connected to the additional in-vehicle device 3 and to the second relay 22 that does not authenticate the in-vehicle device 3.

[0084] The second relay device 22 acquires the setting information output from the first relay device 21 and waits for the completion of the authentication. More specifically, the second relay device 22 waits for the completion of the authentication in all the additional in-vehicle devices 3 connected to the second relay device 22. The second relay device 22 relays the authentication communication data until the authentication is completed. For example, the additional in-vehicle device 3 outputs the authentication communication data to the second relay device 22 (S27). The second relay device 22 acquires the authentication communication data output from the additional in-vehicle device 3 and relays the acquired authentication communication data to the first relay device 21 (S28). The first relay device 21 outputs the authentication communication data to the second relay device 22 (S29). The second relay device 22 acquires the authentication communication data output from the first relay device 21 and relays the acquired authentication communication data to the additional in-vehicle device 3 (S30).

[0085] Authentication of the additional in-vehicle device 3 is completed by transmitting and receiving authentication communication data between the first relay device 21 and the additional in-vehicle device 3 via the second relay device. After the authentication is completed, the second relay device 22 applies the setting information acquired from the first relay device 21 to the second relay device (own device) to set up an in-vehicle network 4 in the vehicle C to which the additional in-vehicle device 3 has been added as a node (S31). The application of the setting information by the second relay device 22 includes the second relay device changing the filter setting in the connection port of the second relay device to a setting according to the setting information, so that the restriction on communication with the additional in-vehicle device 3 is lifted. In FIG. 4, the in-vehicle network 4 is described as an in-vehicle NW (Network).

[0086] The second relay outputs a setting completion signal indicating that the setting of the in-vehicle network 4 has been completed to the first relay 21 (S32), and notifies the first relay 21 that the setting of the in-vehicle network 4 has been completed.

[0087] Since the restriction on communication with the additional in-vehicle device 3 has been lifted, the second relay device outputs the service communication data to the additional in-vehicle device 3 (S33). The second relay device also receives the service communication data output from the additional in-vehicle device 3. The second relay device may relay the service communication data output from the first relay device 21 to the additional in-vehicle device 3, or may relay the service communication data output from the additional in-vehicle device 3 to the first relay device 21.

[0088] As described above, after the authentication is completed, the second relay performs communication via the in-vehicle network 4 based on the setting information acquired from the first relay 21. That is, after the authentication is completed, the second relay performs communication based on the setting information acquired from the first relay 21. In addition to the authentication communication data and the communication data related to the setting of the in-vehicle network 4, the second relay relays, transmits, and receives communication data other than the authentication communication data and the communication data related to the setting of the in-vehicle network 4, such as service communication data, with the additional in-vehicle device 3 as the source or destination.

[0089] Between the time authentication is started and the time authentication is completed, authentication communication data is transmitted and received a plurality of times. Between the time authentication is started and the time authentication is completed, address resolution information may be transmitted and received a plurality of times before address resolution is completed. For example, address resolution is completed between the time authentication is started and the time authentication is completed. Between the time authentication is started and the time authentication is completed, at least one of destination information, destination information group, and service resolution information may be transmitted and received a plurality of times. For example, between the time authentication is started and the time authentication is completed, service resolution information may be transmitted and received a plurality of times before service resolution is completed. For example, service resolution is completed between the time authentication is started and the time authentication is completed.

[0090] For example, after the authentication is completed, the in-vehicle device 3 outputs the destination information periodically, for example, at a fixed cycle. After the authentication is completed, the second relay device 22 outputs a destination information group including the acquired destination information and the destination information of the second relay device 22 to the first relay device 21 every time it acquires the destination information that is periodically output. In other words, the second relay device 22 periodically outputs the destination information group to the first relay device 21. The second relay device 22 may acquire the destination information that is periodically output, and when the acquired destination information has changed from the destination information acquired last time, output the destination information group including the acquired destination information and the destination information of the second relay device 22 to the first relay device 21. Note that the in-vehicle device 3 may periodically output the destination information before the authentication is completed. The second relay device 22 may periodically output the destination information group before the authentication is completed.

[0091] The first relay device 21 acquires the destination information group output from the second relay device 22 even after the authentication is completed, and generates setting information based on the acquired destination information group. The first relay device 21 outputs the generated setting information to the second relay device 22. The second relay device 22 applies the setting information output from the first relay device 21. Even if the destination information changes after the authentication is completed, the in-vehicle network 4 can be set according to the changed destination information.

[0092] Fig. 5 is a flowchart of a main routine illustrating the process of authenticating the in-vehicle device 3 and setting the in-vehicle network 4 performed by the control unit 200 of the second relay device 22. Fig. 6 is a flowchart illustrating the process procedure of the control unit 200 of the second relay device 22 related to a subroutine of a setting change process. Fig. 7 is a flowchart illustrating the process procedure of the control unit 200 of the second relay device 22 related to a subroutine of a reception process and a relay process. For example, the control unit 200 of the second relay device 22 performs the following process when the IG switch of the vehicle C transitions from a stopped state to an activated state.

[0093] FIG. 5 shows the process related to the authentication of the in-vehicle device 3 and the setting of the in-vehicle network 4 performed by the control unit 200 of the second relay device 22. First, the process related to the subroutine of the setting change process performed by the control unit 200 of the second relay device 22 will be described with reference to FIG. 5 and FIG. 6. As shown in FIG. 5, the control unit 200 of the second relay device 22 calls and executes the subroutine of the setting change process (S41). As shown in FIG. 6, the control unit 200 of the second relay device 22 judges whether the second relay device 22 (its own device) is activated or not (S411). For example, the control unit 200 of the second relay device 22 judges whether the second relay device 22 is activated or not as a confirmation before executing the subroutine of the setting change process. If the second relay device 22 is not activated (S411: NO), the control unit 200 of the second relay device 22 performs the loop process to perform the process of S411 again. When performing the loop process, the control unit 200 of the second relay device 22 may perform a standby process for a predetermined time.

[0094] When the second relay device 22 is activated (S411: YES), the control unit 200 of the second relay device 22 receives (S412) communication data destined for the second relay device 22. For example, the control unit 200 of the second relay device 22 does not receive or discards communication data destined for a device other than the second relay device 22.

[0095] The control unit 200 of the second relay device 22 determines whether authentication is required for the in-vehicle device 3 connected to the second relay device 22 (S413). In other words, the control unit 200 of the second relay device 22 determines whether authentication is required for the in-vehicle device 3 connected to the second relay device 22. For example, the control unit 200 of the second relay device 22 determines whether authentication is required for the in-vehicle device 3 based on a simple communication transaction executed between the second relay device 22 and the in-vehicle device 3 connected to the second relay device 22. The above-mentioned simple communication transaction is defined in advance.

[0096] The control unit 200 of the second relay device 22 may acquire (receive) registration information of the in-vehicle device 3 output from the in-vehicle device 3 connected to the second relay device 22, and determine whether authentication of the in-vehicle device 3 is required based on the acquired registration information of the in-vehicle device 3. The registration information is information registered in the second relay device 22, and includes, for example, an identifier such as an ID number of the in-vehicle device 3, a MAC address, and an IP address. For example, when authentication of the in-vehicle device 3 is completed, the registration information of the in-vehicle device 3 is registered. For example, the registration information is stored in the storage unit 201 of the second relay device 22. The control unit 200 of the second relay device 22 determines that authentication is not required when the same registration information as the registration information acquired from the in-vehicle device 3 connected to the second relay device 22 is registered in the second relay device 22. The control unit 200 of the second relay device 22 determines that authentication is required when the same registration information as the registration information acquired from the in-vehicle device 3 connected to the second relay device 22 is not registered in the second relay device 22.

[0097] The control unit 200 of the second relay device 22 determines whether authentication of the in-vehicle device 3 connected to the second relay device 22 is necessary (S414). If authentication of the in-vehicle device 3 is necessary (S414: YES), the control unit 200 of the second relay device 22 sets a filter for the connection port of the second relay device 22 to pass authentication communication data and communication data related to the setting of the in-vehicle network 4 (S415). In other words, the control unit 200 of the second relay device 22 sets a filter for restricting communication with the in-vehicle device 3 that requires authentication for the connection port of the second relay device 22. The case where authentication of the in-vehicle device 3 is necessary includes the case where authentication of the in-vehicle device 3 has not been completed. The control unit 200 of the second relay device 22 returns to the main routine. In FIG. 6, the in-vehicle network 4 is described as in-vehicle NW. The same applies to FIG. 7.

[0098] When authentication of the in-vehicle device 3 is not required (S414: NO), the control unit 200 of the second relay device 22 determines whether or not the latest setting information that is not applied to the in-vehicle network 4 has been acquired from the first relay device 21 (S416). In detail, the control unit 200 of the second relay device 22 determines whether or not the most recently acquired setting information among the setting information acquired from the first relay device 21 has not been applied to the in-vehicle network 4. For example, when the latest setting information that is not applied to the in-vehicle network 4 is transmitted from the first relay device 21 to the second relay device 22, a setting change request that requests a change of the setting is transmitted from the first relay device 21 to the second relay device 22. When the control unit 200 of the second relay device 22 acquires the setting change request transmitted from the first relay device 21, it determines that the latest setting information that is not applied to the in-vehicle network 4 has been acquired. Note that the case where authentication of the in-vehicle device 3 is not required includes the case where authentication of the in-vehicle device 3 has been completed.

[0099] When the control unit 200 of the second relay device 22 has not acquired the latest setting information that has not been applied (S416: NO), that is, when the most recently acquired setting information has been applied to the in-vehicle network 4, the control unit 200 of the second relay device 22 performs a loop process to perform the process of S416 again. When performing the loop process, the control unit 200 of the second relay device 22 may execute a standby process for a predetermined time.

[0100] When the control unit 200 of the second relay device 22 has acquired the latest setting information that has not been applied (S416: YES), that is, when the most recently acquired setting information has not been applied to the in-vehicle network 4, the control unit 200 of the second relay device 22 performs the following process. The control unit 200 of the second relay device 22 sets a filter that passes the authentication communication data, the communication data related to the setting of the in-vehicle network 4, and the service communication data for the connection port of the second relay device 22 (S417). Specifically, this may be realized by the control unit 200 of the second relay device 22 applying (setting) the latest setting information that has not been applied. In other words, the control unit 200 of the second relay device 22 may implement the acquired latest setting information. The above setting information includes the setting of a filter that passes the communication data related to the setting of the in-vehicle network 4 and the service communication data, so that the control unit 200 of the second relay device 22 sets a filter that does not restrict communication with the in-vehicle device 3 for the connection port of the second relay device 22. The control unit 200 of the second relay device 22 returns to the main routine.

[0101] 5, the control unit 200 of the second relay device 22 ends the process. Instead of ending the process, the control unit 200 of the second relay device 22 may perform the process of S41 again. The control unit 200 of the second relay device 22 may perform the process of S41 again after performing a standby process for a predetermined time.

[0102] The process related to the destination information performed by the control unit 200 of the second relay device 22 will be described with reference to FIG. 5. When the control unit 200 of the second relay device 22 acquires the destination information of the in-vehicle device 3 from the in-vehicle device 3 connected to the second relay device 22 (S51), the control unit 200 of the second relay device 22 generates a destination information group including the acquired destination information and the destination information of the second relay device 22 (S52). Next, the control unit 200 of the second relay device 22 outputs the generated destination information group to the first relay device 21 (S53) and ends the process. Instead of ending the process, the control unit 200 of the second relay device 22 may perform the process of S51 again. The control unit 200 of the second relay device 22 may perform the process of S51 again after performing a standby process for a predetermined time. For example, the control unit 200 of the second relay device 22 periodically acquires the destination information and generates and outputs the destination information group by performing the process of S51 again.

[0103] 5 and 7, the process related to the subroutine of the reception process and relay process performed by the control unit 200 of the second relay device 22 will be described. As shown in FIG. 5, the control unit 200 of the second relay device 22 calls and executes the subroutine of the reception process and relay process (S61). As shown in FIG. 7, the control unit 200 of the second relay device 22 determines whether or not communication data has been received (S611). The communication data includes communication frames such as Ethernet frames. If the control unit 200 of the second relay device 22 has not received communication data (S611: NO), the control unit 200 of the second relay device 22 performs a loop process to perform the process of S611 again. When performing the loop process, the control unit 200 of the second relay device 22 may perform a standby process for a predetermined time.

[0104] When communication data is received (S611: YES), the control unit 200 of the second relay device 22 identifies the type of the received communication data (S612). In other words, the control unit 200 of the second relay device 22 checks the type of the received communication data. For example, the control unit 200 of the second relay device 22 identifies the Ethertype of the received communication frame. The control unit 200 of the second relay device 22 determines whether the type of the received communication data is authentication communication data (S613).

[0105] If the type of the communication data is authentication communication data (S613: YES), the control unit 200 of the second relay device 22 determines whether or not authentication of the in-vehicle device 3 connected to the second relay device 22 has been completed (S614). For example, the control unit 200 of the second relay device 22 determines that authentication has been completed when it acquires information indicating that authentication of the in-vehicle device 3 has been completed, which is output from the first relay device 21. The control unit 200 of the second relay device 22 determines that authentication has not been completed when it does not acquire information indicating that authentication has been completed. For example, the control unit 200 of the second relay device 22 may determine that authentication has been completed when the above-mentioned registration information of the in-vehicle device 3 connected to the second relay device 22 is stored in the storage unit 201 of the second relay device 22. The control unit 200 of the second relay device 22 may also determine that authentication has not been completed when the above-mentioned registration information is not stored in the storage unit 201 of the second relay device 22.

[0106] If authentication is not completed (S614: NO), the control unit 200 of the second relay device 22 performs the process of S616 described below. If authentication is completed (S614: YES), the control unit 200 of the second relay device 22 sets the pre-authentication flag to an OFF state (S615). The control unit 200 of the second relay device 22 specifies whether the received communication data can be relayed (S616) by referring to the MAC address table, for example, and determines whether the received communication data can be relayed (S617). In other words, the control unit 200 of the second relay device 22 checks whether the communication data can be relayed and determines whether the communication data can be relayed.

[0107] For example, the MAC address table is stored in the storage unit 201 of the second relay device 22. The MAC address table stores MAC addresses of at least some of the on-board devices, including the first relay device 21, the second relay device 22, and the on-board device 3, mounted on the vehicle C. The MAC address table also stores port numbers of connection ports in the second relay device 22 that are connected to other on-board devices.

[0108] For example, when information for relaying the received communication data is stored in the MAC address table, the control unit 200 of the second relay device 22 determines that the received communication data can be relayed. Also, when information for relaying is not stored in the MAC address table, the control unit 200 of the second relay device 22 determines that the received communication data cannot be relayed. For example, the information for relaying the communication data includes destination information and source information. For example, the destination information includes the MAC address of the in-vehicle device that is the destination or relay destination of the communication data, and the port number of the connection port connected to the in-vehicle device of the destination or relay destination. For example, the source information includes the MAC address of the in-vehicle device that is the source of the communication data, and the port number of the connection port connected to the in-vehicle device of the source.

[0109] If the control unit 200 of the second relay device 22 can relay the received communication data (S617: YES), that is, if both the destination information and the source information of the received communication data are stored in the MAC address table, the control unit 200 of the second relay device 22 relays the received communication data (S618). In other words, the control unit 200 of the second relay device 22 transfers the received communication data. The control unit 200 of the second relay device 22 returns to the main routine.

[0110] If the control unit 200 of the second relay device 22 is unable to relay the received communication data (S617: NO), that is, if both the destination information and the source information of the received communication data are not stored in the MAC address table, the control unit 200 of the second relay device 22 discards the received communication data (S619). The control unit 200 of the second relay device 22 returns to the main routine.

[0111] If the type of communication data is not authentication communication data (S613: NO), the control unit 200 of the second relay device 22 determines whether or not the type of the received communication data is communication data related to the setting of the in-vehicle network 4 (S620). If the type of the communication data is communication data related to the setting of the in-vehicle network 4 (S620: YES), the control unit 200 of the second relay device 22 sets the pre-authentication flag to an ON state (S621) and performs the process of S616.

[0112] If the type of communication data is not communication data related to the setting of the in-vehicle network 4 (S620: NO), the control unit 200 of the second relay device 22 performs the process of S619. If the type of communication data is not communication data related to the setting of the in-vehicle network 4, the control unit 200 of the second relay device 22 may determine whether or not authentication of the in-vehicle device 3 connected to the second relay device 22 has been completed. If authentication has been completed, the control unit 200 of the second relay device 22 performs the process of S616. If authentication has not been completed, the control unit 200 of the second relay device 22 performs the process of S619.

[0113] 5, the control unit 200 of the second relay device 22, which has returned to the main routine, ends the process. Instead of ending the process, the control unit 200 of the second relay device 22 may perform the process of S61 again. The control unit 200 of the second relay device 22 may perform the process of S61 again after performing a standby process for a predetermined time.

[0114] The process related to the service communication data performed by the control unit 200 of the second relay device 22 will be described with reference to Fig. 5. The control unit 200 of the second relay device 22 outputs the service communication data to the in-vehicle device 3 connected to the second relay device 22 (S71). In detail, before the authentication is completed, communication with the in-vehicle device 3 is restricted by the filter setting as described above, so that the service communication data is not output before the authentication is completed. After the authentication is completed, the service communication data is output.

[0115] The control unit 200 of the second relay device 22 may determine whether or not authentication of the in-vehicle device 3 connected to the second relay device 22 has been completed, and may perform the process of S71 according to the determination result. When authentication has not been completed, the control unit 200 of the second relay device 22 performs a loop process to perform the above determination again. When authentication has been completed, the control unit 200 of the second relay device 22 performs the process of S71. The determination of whether or not authentication of the in-vehicle device 3 has been completed may be performed based on, for example, a pre-authentication flag. For example, when multiple in-vehicle devices 3 are connected to the second relay device 22, the control unit 200 of the second relay device 22 performs the above determination and the process of S71 for each of the multiple connected in-vehicle devices 3.

[0116] The control unit 200 of the second relay device 22 ends the process. Instead of ending the process, the control unit 200 of the second relay device 22 may perform the process of S71 again. The control unit 200 of the second relay device 22 may perform the process of S71 again after performing a standby process for a predetermined time.

[0117] The control unit 200 of the second relay device 22 performs the process of S41, the processes of S51, S52 and S53, the process of S61, and the process of S71 in parallel.

[0118] 8 is a flowchart illustrating a process related to setting of the in-vehicle network 4 performed by the control unit 200 of the first relay device 21. For example, the control unit 200 of the first relay device 21 performs the following process when the IG switch of the vehicle C transitions from a stopped state to an activated state.

[0119] The control unit 200 of the first relay device 21 acquires (receives) the destination information group or the service solution information output from the second relay device 22 (S91). In detail, the control unit 200 of the first relay device 21 acquires at least one of the destination information group and the service solution information output from the second relay device 22. Therefore, the control unit 200 of the first relay device 21 may acquire both the destination information group and the service solution information. The control unit 200 of the first relay device 21 may acquire communication data related to the setting of the in-vehicle network 4 other than the destination information group and the service solution information, in addition to these information.

[0120] The control unit 200 of the first relay device 21 determines whether the acquired destination information group or service resolution information has been updated (S92). For example, the control unit 200 of the first relay device 21 acquires the destination information group and the service resolution information periodically output from the second relay device 22. The control unit 200 of the first relay device 21 compares the most recently acquired destination information group and the service resolution information with the destination information group and the service resolution information acquired immediately before the destination information group and the service resolution information. When the most recently acquired destination information group or the service resolution information has been changed from the destination information group or the service resolution information acquired immediately before, the control unit 200 of the first relay device 21 determines that the destination information group or the service resolution information has been updated.

[0121] If the destination information group or the service resolution information has not been updated (S92: NO), the control unit 200 of the first relay device 21 performs the process of S91. If the destination information group or the service resolution information has been updated (S92: YES), the control unit 200 of the first relay device 21 generates setting information based on the acquired destination information group and service resolution information (S93). Note that, when the first relay device 21 is started, the control unit 200 of the first relay device 21 may omit the process of S92 and perform S93. In other words, when the first relay device 21 is started, the control unit 200 of the first relay device 21 may perform the process of S93 regardless of whether the destination information group or the service resolution information has been updated.

[0122] For example, in generating the setting information, the control unit 200 of the first relay device 21 selects one piece of setting information based on a destination information group from among a plurality of pieces of setting information pre-stored in the storage unit 201 of the first relay device 21. In generating the setting information, the control unit 200 of the first relay device 21 may transmit the destination information group to an external server (not shown) communicatively connected to the first relay device 21, and obtain the setting information based on the transmitted destination information group from the external server.

[0123] The control unit 200 of the first relay 21 stores the generated setting information in the storage unit 201 of the first relay 21 as the latest setting information (S94). In other words, the control unit 200 of the first relay 21 holds the latest setting information. The latest setting information is setting information to be applied to the in-vehicle network 4.

[0124] The control unit 200 of the first relay device 21 outputs the setting information stored in the storage unit 201 of the first relay device 21 as the latest setting information to the second relay device 22 (S95). The control unit 200 of the first relay device 21 also outputs a setting change request to the second relay device 22 (S96). For example, the control unit 200 of the first relay device 21 may output the setting information with the setting change request to the second relay device 22. The control unit 200 of the first relay device 21 ends the process. Instead of ending the process, the control unit 200 of the first relay device 21 may perform the process of S91 again. The control unit 200 of the first relay device 21 may perform a standby process for a predetermined time and then perform the process of S91 again.

[0125] In this embodiment, the second relay device 22 relays communication between a plurality of in-vehicle devices 3, or communication between the in-vehicle device 3 and the first relay device 21. The first relay device 21 relays communication between a plurality of in-vehicle devices 3. The first relay device 21 also authenticates the in-vehicle devices 3. Before the authentication of the in-vehicle devices 3 is completed, the control unit 200 of the second relay device 22 relays authentication communication data and transmits and receives communication data related to the setting of the in-vehicle network 4 in parallel. The control unit 200 of the first relay device 21 acquires communication data related to the setting of the in-vehicle network 4 transmitted from the second relay device 22, and generates setting information based on the acquired communication data related to the setting of the in-vehicle network 4. The control unit 200 of the first relay device 21 transmits the generated setting information to the second relay device 22. The control unit 200 of the second relay device 22 acquires the setting information transmitted from the first relay device 21. After the authentication of the in-vehicle device 3 is completed, the control unit 200 of the second relay device 22 starts relaying based on the acquired setting information. In other words, the control unit 200 of the second relay device 22 applies the acquired setting information to the second relay device 22. Communication via the in-vehicle network 4 based on the setting information is started. The control unit 200 of the second relay device 22 relays the authentication communication data and transmits and receives communication data related to the setting of the in-vehicle network 4 in parallel before the authentication of the in-vehicle device 3 is completed, so that the setting information can be acquired earlier than when the communication data related to the setting of the in-vehicle network 4 is transmitted to the first relay device 21 after the authentication is completed. Therefore, when the authentication of the in-vehicle device 3 is required, the second relay device 22 can start communication via the in-vehicle network 4 earlier than when the communication data related to the setting of the in-vehicle network 4 is transmitted to the first relay device 21 after the authentication is completed.

[0126] The control unit 200 of the first relay 21 relays communication via the in-vehicle network 4 based on the generated setting information, similar to the second relay 22. The first relay 21 can generate setting information faster than when the second relay 22 transmits communication data related to the setting of the in-vehicle network 4 to the first relay 21 after the completion of authentication. Therefore, in the in-vehicle system S, the first relay 21 can start communication via the in-vehicle network 4 faster than when the communication data related to the setting of the in-vehicle network 4 is transmitted to the first relay 21 after the completion of authentication.

[0127] The control unit 200 of the second relay device 22 acquires at least one of the destination information and the service solution information of the in-vehicle device 3 from the in-vehicle device 3 connected to the second relay device 22 before the authentication of the in-vehicle device 3 is completed. The control unit 200 of the second relay device 22 outputs at least one of the acquired destination information and the service solution information, and the destination information of the second relay device 22 to the first relay device 21 before the authentication of the in-vehicle device 3 is completed. For example, the control unit 200 of the second relay device 22 outputs a destination information group including the acquired destination information and the destination information of the second relay device 22, and the acquired service solution information to the first relay device 21 before the authentication of the in-vehicle device 3 is completed. For example, when a plurality of in-vehicle devices 3 are connected to the second relay device, the destination information group includes the destination information of the second relay device and the destination information of each of the plurality of in-vehicle devices 3 connected to the second relay device. The frequency of communication between the first relay device 21 and the second relay device 22 can be reduced compared to when the control unit 200 of the second relay device 22 individually outputs to the first relay device 21 the destination information of the second relay device 22 and at least one of the destination information and service resolution information of the in-vehicle device 3 connected to the second relay device 22.

[0128] An existing in-vehicle device 3 is mounted on the vehicle C. The existing in-vehicle device 3 is connected to the second relay device 22. When an additional in-vehicle device 3 is mounted on the vehicle C, the additional in-vehicle device 3 is connected to the second relay device 22. For example, when the additional in-vehicle device 3 is connected to the second relay device 22, the control unit 200 of the second relay device 22 communicates with the first relay device 21 and causes the first relay device 21 to authenticate the additional in-vehicle device 3. Before the authentication is completed, the control unit 200 of the second relay device 22 outputs communication data related to the settings of the in-vehicle network 4 of the connected additional in-vehicle device 3 and the existing in-vehicle device 3, and communication data related to the settings of the in-vehicle network 4 of the second relay device 22 to the first relay device 21. The control unit 200 of the second relay device 22 acquires setting information of the in-vehicle network 4 including the additional in-vehicle device 3 as a node from the first relay device 21. When an additional in-vehicle device 3 is mounted in the vehicle C, an in-vehicle network 4 including the additional in-vehicle device 3 as a node can be configured. When the additional in-vehicle device 3 is connected to the second relay device 22, the second relay device 22 can start communication via the in-vehicle network 4 including the additional in-vehicle device 3 as a node faster than when the second relay device 22 outputs communication data related to the setting of the in-vehicle network 4 to the first relay device 21 after the authentication is completed.

[0129] For example, when a predetermined time has elapsed since the first relay device 21 started the authentication of the in-vehicle device 3 and the authentication of the in-vehicle device 3 has not been completed, the control unit 200 of the second relay device 22 may request the first relay device 21 to authenticate the in-vehicle device 3 again. In the above case, the control unit 200 of the second relay device 22 may set a filter to a connection port connected to an in-vehicle device 3 whose authentication has not been completed when the predetermined time has elapsed so as not to communicate with the in-vehicle device 3, and may set a filter based on the setting information to a connection port other than the connection port to which the in-vehicle device 3 is connected. For example, the predetermined time is stored in advance in the storage unit 201 of the second relay device 22.

[0130] Since the second relay device 22 is provided between the first relay device 21 and the in-vehicle device 3, it is possible to configure an in-vehicle network 4 that forms a star-shaped network topology with the first relay device 21 at the center in the vehicle C. It is also possible to configure an in-vehicle network 4 that forms a cascade-shaped network topology with the first relay device 21 at the apex.

[0131] In this embodiment, the additional vehicle-mounted device 3 is connected to the second relay device 22 when the IG switch is in a stopped state, but the additional vehicle-mounted device 3 may also be connected to the second relay device 22 when the IG switch is in an activated state.

[0132] In this embodiment, authentication is performed for the additional in-vehicle device 3, but authentication may be performed for the existing in-vehicle device 3. In this embodiment, the first relay device 21 authenticates the in-vehicle device 3, but the in-vehicle system S may be configured such that the first relay device 21 and the second relay device 22 cooperate to authenticate the in-vehicle device 3.

[0133] An in-vehicle ECU 2 that does not function as the first relay device 21 or the second relay device 22 may authenticate the in-vehicle device 3 instead of the first relay device 21. That is, an in-vehicle device 3 that authenticates the in-vehicle device 3 but does not relay communication may be included in the in-vehicle system S. For example, when an in-vehicle ECU 2 that functions as the second relay device 22 and an in-vehicle ECU 2 that performs authentication are mounted on a vehicle C, the second relay device 22 is communicatively connected to the in-vehicle ECU 2 that authenticates the in-vehicle device 3. The second relay devices 22 are communicatively connected to each other. The second relay device 22 relays communication between the in-vehicle device 3 connected to the second relay device 22 and the in-vehicle device 3 connected to the other second relay device 22 via the other second relay device 22 connected to it. In this case, the in-vehicle ECU 2 that performs authentication corresponds to an authentication device.

[0134] The second relay device 22 may function as the first relay device 21. In other words, the second relay device 22 may authenticate the in-vehicle device 3. The first relay device 21 may function as the second relay device 22. In this case, for example, a plurality of in-vehicle devices 3 are directly connected to the first relay device 21 without going through the second relay device 22. The first relay device 21 relays communication between the plurality of in-vehicle devices 3 directly connected to the first relay device 21. Also, the first relay device 21 relays communication between the in-vehicle device 3 directly connected to the first relay device 21 and the in-vehicle device 3 connected to the second relay device 22 via the second relay device 22.

[0135] An in-vehicle ECU 2 other than the in-vehicle ECU 2 functioning as the first relay 21 and the in-vehicle ECU 2 functioning as the second relay 22 may be connected to the first relay 21 or the second relay 22. In this case, the in-vehicle ECU 2 functioning as the first relay 21 and the in-vehicle ECU 2 other than the in-vehicle ECU 2 functioning as the second relay 22 are included in the in-vehicle equipment 3.

[0136] In this embodiment, the in-vehicle system S includes a plurality of in-vehicle ECUs 2 including an in-vehicle ECU 2 functioning as the first relay device 21 and an in-vehicle ECU 2 functioning as the second relay device 22, and an in-vehicle device 3, but the configuration of the in-vehicle system S is not limited to the above example. In addition to the plurality of in-vehicle ECUs 2 and the in-vehicle devices 3, the in-vehicle system S may include a relay device that connects the in-vehicle ECUs 2 to each other or the in-vehicle ECUs 2 and the in-vehicle devices 3 and relays communication between the in-vehicle ECUs 2 to each other or between the in-vehicle ECUs 2 and the in-vehicle devices 3. In this case, the relay device includes the first relay device 21 and the second relay device 22. An in-vehicle network 4 is configured with the in-vehicle ECUs 2, the in-vehicle devices 3, and the relay devices as nodes. In the above case, the in-vehicle ECU 2 is included in the in-vehicle devices 3 connected to the relay device.

[0137] The embodiments disclosed herein are illustrative in all respects and should not be considered as limiting. The scope of the present disclosure is defined by the claims, not by the above meaning, and is intended to include all modifications within the scope and meaning equivalent to the claims. [Explanation of symbols]

[0138] C Vehicle P Control Program S In-vehicle system 1 Recording medium 2 In-vehicle ECU 21 First relay device (authentication device) 22 Second relay device (vehicle-mounted relay device) 200 Control section 201 Storage section 202 In-vehicle communication unit 3 In-vehicle equipment 30 Actuator 31 Sensors 4. In-vehicle network

Claims

1. An in-vehicle relay device that is connected to a plurality of in-vehicle devices mounted in a vehicle and an authentication device that authenticates the in-vehicle devices, and relays communications between the plurality of in-vehicle devices, A control unit that controls relay of communication, The control unit is relaying authentication communication data for the authentication between the in-vehicle device and the authentication device before the authentication of the in-vehicle device connected to the in-vehicle relay device is completed; In parallel with relaying the authentication communication data, transmitting and receiving setting data for setting an in-vehicle network between the in-vehicle device and the authentication device; acquiring setting information of the in-vehicle network from the authentication device according to the transmitted setting data; After the authentication is completed, relaying based on the acquired setting information is started; the setting data includes at least one of destination information for performing communication and service solution information for the in-vehicle device to start providing a function, The control unit is Before the authentication is completed, at least one of the acquired destination information of the in-vehicle device and the service solution information and the destination information of the in-vehicle relay device are output to the authentication device. Vehicle-mounted relay device.

2. the on-board devices include existing on-board devices that are mounted in advance on the vehicle, and additional on-board devices that are mounted on the vehicle at a time later than the time when the existing on-board devices are mounted on the vehicle, The authentication is performed on the additional in-vehicle device. The vehicle-mounted relay device according to claim 1 .

3. A device is provided between the authentication device and the in-vehicle device.

3. The vehicle-mounted relay device according to claim 1 or 2.

4. An in-vehicle system including the authentication device and the in-vehicle relay device according to any one of claims 1 to 3, the in-vehicle relay device outputs the setting data to the authentication device before the authentication of the in-vehicle device is completed; The authentication device includes: receiving the setting data output from the vehicle-mounted relay device; The setting information corresponding to the received setting data is output to the vehicle-mounted relay device. In-vehicle systems.

5. 1. An information processing method performed by an in-vehicle relay device that is connected to a plurality of in-vehicle devices mounted in a vehicle and an authentication device that authenticates the in-vehicle devices and relays communications between the plurality of in-vehicle devices, comprising: relaying authentication communication data for the authentication between the in-vehicle device and the authentication device before the authentication of the in-vehicle device connected to the in-vehicle relay device is completed; In parallel with relaying the authentication communication data, transmitting and receiving setting data for setting an in-vehicle network between the in-vehicle device and the authentication device; acquiring setting information of the in-vehicle network from the authentication device according to the transmitted setting data; After the authentication is completed, relaying based on the acquired setting information is started; the setting data includes at least one of destination information for performing communication and service solution information for the in-vehicle device to start providing a function, Before the authentication is completed, at least one of the acquired destination information of the in-vehicle device and the service solution information and the destination information of the in-vehicle relay device are output to the authentication device. Information processing methods.

6. A program for causing a computer to execute a process, the computer being connected to a plurality of in-vehicle devices mounted in a vehicle and an authentication device that authenticates the in-vehicle devices and relaying communications between the plurality of in-vehicle devices, the program comprising: relaying authentication communication data for the authentication between the in-vehicle device and the authentication device before the authentication of the in-vehicle device connected to the computer is completed; In parallel with relaying the authentication communication data, transmitting and receiving setting data for setting an in-vehicle network between the in-vehicle device and the authentication device; acquiring setting information of the in-vehicle network from the authentication device according to the transmitted setting data; After the authentication is completed, relaying based on the acquired setting information is started; the setting data includes at least one of destination information for performing communication and service solution information for the in-vehicle device to start providing a function, Before the authentication is completed, at least one of the acquired destination information of the in-vehicle device and the service solution information and the destination information of the computer are output to the authentication device. A program that causes a computer to carry out processing.

Images