Monitoring device, vehicle monitoring system, and vehicle monitoring method

Abstract

To provide a monitoring device, a monitoring method, and a monitoring system for more accurately grasping the state of a vehicle and accurately determining abnormalities in the vehicle.SOLUTION: In an in-vehicle communication system, a gateway device 101 which is a monitoring device mounted on a vehicle includes a monitoring unit 2 that monitors vehicle-related information transmitted over an in-vehicle network in the vehicle, a pattern information generation unit 3 that generates pattern information indicating changes in a plurality of types of vehicle-related information on the basis of the monitoring result of the monitoring unit, an abnormality detection unit 6 that compares the pattern information generated by the pattern information generation unit with reference information which is pattern information for reference, and detects an abnormality in the in-vehicle network on the basis of the comparison result, and a communication processing unit 1 that transmits the pattern information and the reference information to an external device outside the vehicle when the abnormality detection unit detects an abnormality.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present disclosure relates to a monitoring device, a vehicle monitoring system, and a vehicle monitoring method. [Background technology]

[0002] Conventionally, technologies for improving security in in-vehicle networks have been developed. For example, JP 2021-167985 A (Patent Document 1) discloses the following technology. That is, an in-vehicle security system includes a first electronic control unit and a second electronic control unit capable of communicating with the first electronic control unit, and the second electronic control unit executes a first process in response to an input from the first electronic control unit and returns a response to the first electronic control unit indicating that a second process different from the first process has been executed in response to the input.

[0003] Also, JP 2019-128934 A (Patent Document 2) discloses the following technology. That is, an abnormality determination device including a processor included in a first node that is a monitoring target in a V2X network, the processor executes a log information acquisition step of acquiring log information including a time and state information of the first node at the time indicated by at least one of sensor data or control data on the first node, a first abnormality determination step of executing a first abnormality determination regarding the occurrence of an abnormality on the first node at the time, a second abnormality determination step of executing a second abnormality determination regarding the occurrence of an abnormality on the second node at the time based on second node information regarding the abnormality of the second node acquired from a second node that is another node that is a monitoring target in the V2X network and is in the vicinity of the first node, an abnormality information addition step of adding abnormality information indicating the occurrence of an abnormality on the second node to the log information when the result of the second abnormality determination indicates the occurrence of an abnormality on the second node, and a log information transmission step of transmitting the log information to which the abnormality information has been added to at least a part of the nodes constituting the V2X network.

[0004] Furthermore, JP 2018-152745 A (Patent Document 3) discloses the following technology: That is, a recording device includes a storage unit that stores a plurality of patterns of the order in which a plurality of types of packets to which an ID is assigned are transmitted over an in-vehicle network in a predetermined period, a receiving unit that receives the plurality of types of packets from the in-vehicle network, a first recording unit that records, as test data, a pattern for each period in which the reception order of the plurality of types of packets received by the receiving unit matches, among the plurality of patterns stored in the storage unit, and a second recording unit that records data of the plurality of types of packets received by the receiving unit as the test data. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent Publication No. 2021-167985 [Patent Document 2] JP 2019-128934 A [Patent Document 3] JP 2018-152745 A Summary of the Invention [Problem to be solved by the invention]

[0006] There is a need for a technique that goes beyond the techniques described in Patent Documents 1 to 3 and that allows for a more accurate understanding of the vehicle state and for an accurate determination of vehicle abnormalities.

[0007] The present invention has been made to solve the above-mentioned problems, and its object is to provide a monitoring device, a vehicle monitoring system, and a vehicle monitoring method that are capable of more accurately grasping the condition of a vehicle and accurately determining abnormalities in the vehicle. [Means for solving the problem]

[0008] The monitoring device of the present disclosure is a monitoring device mounted on a vehicle and includes a monitoring unit that monitors vehicle-related information regarding the vehicle transmitted over an in-vehicle network in the vehicle, a pattern information generation unit that generates pattern information indicating changes in multiple types of the vehicle-related information based on the monitoring results of the monitoring unit, an anomaly detection unit that compares the pattern information generated by the pattern information generation unit with reference information, which is the pattern information for reference, and detects an anomaly in the in-vehicle network based on the comparison result, and a transmission unit that transmits the pattern information and the reference information to an external device outside the vehicle when the anomaly detection unit detects the anomaly.

[0009] The vehicle monitoring system disclosed herein includes a monitoring device mounted on a vehicle and an external device outside the vehicle, and the monitoring device includes a monitoring unit that monitors vehicle-related information related to the vehicle transmitted over an in-vehicle network in the vehicle, a pattern information generation unit that generates pattern information indicating changes in multiple types of the vehicle-related information based on the monitoring results of the monitoring unit, an anomaly detection unit that compares the pattern information generated by the pattern information generation unit with reference information, which is the pattern information for reference, and detects an anomaly in the in-vehicle network based on the comparison result, and a transmission unit that transmits the pattern information and the reference information to an external device outside the vehicle when the anomaly detection unit detects the anomaly, and the external device analyzes the pattern information and the reference information received from the monitoring device.

[0010] The vehicle monitoring method disclosed herein is a vehicle monitoring method in a monitoring device mounted on a vehicle, and includes the steps of monitoring vehicle-related information related to the vehicle transmitted over an in-vehicle network in the vehicle, generating pattern information indicating changes in multiple types of the vehicle-related information based on the monitoring results, comparing the generated pattern information with reference information which is the pattern information for reference, and detecting an abnormality in the in-vehicle network based on the comparison result, and if the abnormality is detected, transmitting the pattern information and the reference information to an external device outside the vehicle.

[0011] One aspect of the present disclosure may be realized not only as a monitoring device having such a characteristic processing unit, but also as a program for causing a computer to execute such characteristic processing, or as a semiconductor integrated circuit that realizes part or all of the monitoring device. Effect of the Invention

[0012] According to the present disclosure, the state of the vehicle can be grasped more accurately, and abnormalities in the vehicle can be accurately determined. [Brief description of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram showing a configuration of a vehicle monitoring system according to an embodiment of the present disclosure. [Diagram 2] FIG. 2 is a diagram showing a configuration of an in-vehicle communication system according to an embodiment of the present disclosure. [Diagram 3] FIG. 3 is a diagram illustrating a configuration of a gateway device in an in-vehicle communication system according to an embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram illustrating an example of a vehicle running state determined by a gateway device according to an embodiment of the present disclosure. [Diagram 5] FIG. 5 is a diagram illustrating an example of time-series data of signal values ​​obtained in the in-vehicle communication system according to the embodiment of the present disclosure. [Figure 6]FIG. 6 is a diagram illustrating an example of pattern information generated by the gateway device according to the embodiment of the present disclosure. [Figure 7] FIG. 7 is a diagram illustrating an example of a comparison process between reference information and pattern information performed by the gateway device according to the embodiment of the present disclosure. [Figure 8] FIG. 8 is a flowchart defining an example of an operation procedure when the gateway device according to the embodiment of the present disclosure detects an abnormality in the in-vehicle network. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] First, the contents of the embodiments of the present disclosure will be listed and described. (1) A monitoring device according to an embodiment of the present disclosure is mounted on a vehicle and includes a monitoring unit that monitors vehicle-related information related to the vehicle transmitted over an in-vehicle network in the vehicle, a pattern information generation unit that generates pattern information indicating changes in multiple types of the vehicle-related information based on a monitoring result of the monitoring unit, an anomaly detection unit that compares the pattern information generated by the pattern information generation unit with reference information, which is the pattern information for reference, and detects an anomaly in the in-vehicle network based on the comparison result, and a transmission unit that transmits the pattern information and the reference information to an external device outside the vehicle when the anomaly detection unit detects the anomaly.

[0015] In this way, by using data showing changes in a plurality of types of vehicle-related information to detect abnormalities, it is possible to grasp the state of the vehicle in more detail, and to capture more minute changes in the vehicle and improve the detection accuracy, compared to a configuration using a specific type of information at a specific timing, etc., by transmitting the compared pattern information and reference information to an external device, the abnormality can be analyzed in an external device capable of grasping a wider range of information, so that a more advanced analysis of the state of the vehicle can be performed and appropriate measures can be taken. For example, it is possible to prevent a user from continuing to use the vehicle in a state where the user is unaware of unauthorized access to the vehicle and data tampering, etc., and the vehicle is not aware of some malfunctions. In addition, the communication pattern of the vehicle-related information in the vehicle is not necessarily the same even for the same model of vehicle, and various patterns exist depending on the habits of the user. By transmitting the compared pattern information and reference information to an external device, it is possible to perform a more accurate analysis for each user. Therefore, the state of the vehicle can be grasped more accurately, and the abnormality of the vehicle can be accurately determined.

[0016] (2) The monitoring device may further include a driving condition determination unit that determines the driving condition of the vehicle based on the monitoring results of the monitoring unit, and the abnormality detection unit may select the reference information corresponding to the driving condition and compare the selected reference information with the pattern information.

[0017] With this configuration, a comparison can be made according to the different driving conditions of the vehicle, so that an abnormality can be detected more accurately.

[0018] (3) The monitoring device may further include a reference information acquisition unit that acquires and stores the reference information based on a monitoring result of the monitoring unit.

[0019] With this configuration, vehicle-related information that was actually transmitted from the same vehicle can be used, so that more appropriate reference information can be used for anomaly detection.

[0020] (4) The monitoring device may further include a driving condition determination unit that determines the driving condition of the vehicle based on the monitoring results of the monitoring unit, and the reference information acquisition unit may acquire and store the reference information for each driving condition.

[0021] With this configuration, it is possible to perform a comparison using reference information that is generated using vehicle-related information actually transmitted from the same vehicle and that corresponds to the vehicle's driving condition, thereby making it possible to detect abnormalities more accurately.

[0022] (5) The reference information acquisition unit may update the reference information to the newly generated pattern information based on a comparison result between the pattern information newly generated by the pattern information generation unit and the reference information.

[0023] With this configuration, appropriate reference information can be used in response to a change in the driver or owner of the vehicle after the vehicle is shipped, allowing for more accurate abnormality detection.

[0024] (6) The reference information acquisition unit may update the reference information to the pattern information newly generated by the pattern information generation unit, based on an operation history of the vehicle.

[0025] With this configuration, the reference information can be updated regularly or irregularly, so that appropriate reference information can be used in response to changes that occur after the vehicle is shipped, enabling more accurate abnormality detection.

[0026] (7) The pattern information may include data indicating a change in the vehicle-related information regarding an operation on the vehicle.

[0027] With this configuration, abnormalities can be detected using information that more accurately grasps the behavior of the vehicle, thereby enabling more accurate abnormality detection.

[0028] (8) The abnormality detection unit may compare a change in the vehicle-related information indicated by the pattern information with a change in the vehicle-related information indicated by the reference information, and determine that an abnormality has occurred if a condition is met in which the number of mismatches is greater than or equal to a predetermined threshold.

[0029] With this configuration, abnormality detection can be performed using data indicating changes in vehicle-related information through simple processing, thereby reducing the processing load.

[0030] (9) The monitoring device may further include a driving condition judgment unit that judges the driving condition of the vehicle based on the monitoring results of the monitoring unit, and the abnormality detection unit may determine that an abnormality has occurred when the condition is satisfied in a plurality of the driving conditions.

[0031] In this manner, by configuring the system to determine that an abnormality has occurred when there is a mismatch in a plurality of driving conditions, it is possible to prevent erroneous detection of an abnormality that occurs when only a single driving condition is used.

[0032] (10) A vehicle monitoring system according to an embodiment of the present disclosure includes a monitoring device mounted on a vehicle and an external device outside the vehicle, the monitoring device including a monitoring unit that monitors vehicle-related information related to the vehicle transmitted over an in-vehicle network in the vehicle, a pattern information generation unit that generates pattern information indicating changes in multiple types of the vehicle-related information based on a monitoring result of the monitoring unit, an anomaly detection unit that compares the pattern information generated by the pattern information generation unit with reference information, which is the pattern information for reference, and detects an anomaly in the in-vehicle network based on the comparison result, and a transmission unit that transmits the pattern information and the reference information to an external device outside the vehicle when the anomaly detection unit detects the anomaly, and the external device analyzes the pattern information and the reference information received from the monitoring device.

[0033] In this way, by using data showing changes in a plurality of types of vehicle-related information to detect abnormalities, it is possible to grasp the state of the vehicle in more detail, and to capture more minute changes in the vehicle and improve the detection accuracy, compared to a configuration using a specific type of information at a specific timing, etc., by transmitting the compared pattern information and reference information to an external device, the abnormality can be analyzed in an external device that can grasp a wider range of information, so that a more advanced analysis of the state of the vehicle can be performed and appropriate measures can be taken. For example, it is possible to prevent a user from continuing to use the vehicle in a state where the user does not notice that there has been unauthorized access to the vehicle and data tampering, etc., and the vehicle is not aware of some malfunctions. In addition, the communication pattern of the vehicle-related information inside the vehicle is not necessarily the same even for the same model of vehicle, and various patterns exist depending on the habits of the user. By transmitting the compared pattern information and reference information to an external device, it is possible to perform a more accurate analysis for each user. Therefore, the state of the vehicle can be grasped more accurately, and the abnormality of the vehicle can be accurately determined.

[0034] (11) A vehicle monitoring method according to an embodiment of the present disclosure is a vehicle monitoring method in a monitoring device mounted on a vehicle, and includes the steps of monitoring vehicle-related information related to the vehicle transmitted over an in-vehicle network in the vehicle, generating pattern information indicating changes in multiple types of the vehicle-related information based on the monitoring results, comparing the generated pattern information with reference information which is the pattern information for reference, and detecting an abnormality in the in-vehicle network based on the comparison result, and if the abnormality is detected, transmitting the pattern information and the reference information to an external device outside the vehicle.

[0035] In this way, by using data showing changes in a plurality of types of vehicle-related information to detect abnormalities, it is possible to grasp the state of the vehicle in more detail, and to capture more minute changes in the vehicle and improve the detection accuracy, compared to a configuration using a specific type of information at a specific timing, etc., by transmitting the compared pattern information and reference information to an external device, the abnormality can be analyzed in an external device capable of grasping a wider range of information, so that a more advanced analysis of the state of the vehicle can be performed and appropriate measures can be taken. For example, it is possible to prevent a user from continuing to use the vehicle in a state where the user is unaware of unauthorized access to the vehicle and data tampering, etc., and the vehicle is not aware of some malfunctions. In addition, the communication pattern of the vehicle-related information in the vehicle is not necessarily the same even for the same model of vehicle, and various patterns exist depending on the habits of the user. By transmitting the compared pattern information and reference information to an external device, it is possible to perform a more accurate analysis for each user. Therefore, the state of the vehicle can be grasped more accurately, and the abnormality of the vehicle can be accurately determined.

[0036] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In the drawings, the same or corresponding parts are denoted by the same reference numerals, and the description thereof will not be repeated. In addition, at least some of the embodiments described below may be arbitrarily combined.

[0037] [Configuration and Operation] Fig. 1 is a diagram showing a configuration of a vehicle monitoring system according to an embodiment of the present disclosure. Referring to Fig. 1, a vehicle monitoring system 401 includes one or more in-vehicle communication systems 201 and a management server 301, which is an example of an external device. The in-vehicle communication system 201 is mounted on a vehicle 90.

[0038] The in-vehicle communication system 201 acquires vehicle-related information related to the vehicle 90, and detects an abnormality in the in-vehicle network of the vehicle 90 based on the vehicle-related information. When the in-vehicle communication system 201 detects an abnormality, the in-vehicle communication system 201 transmits information generated based on the vehicle-related information to the management server 301 via the external network 501.

[0039] The management server 301 receives information transmitted from the in-vehicle communication system 201, analyzes the information, and based on the analysis results, performs processing such as notifying the user that unauthorized access to the vehicle 90 and data tampering have occurred.

[0040] Fig. 2 is a diagram showing a configuration of an in-vehicle communication system according to an embodiment of the present disclosure. Referring to Fig. 2, an in-vehicle communication system 201 includes a gateway device 101, which is an example of a monitoring device, one or more in-vehicle devices 202, and an external communication device 151. For example, an in-vehicle network 251 includes the gateway device 101 and one or more in-vehicle devices 202. Fig. 2 shows an example in which the in-vehicle network 251 includes one gateway device 101 and three in-vehicle devices 202.

[0041] The gateway device 101 is connected to the in-vehicle device via, for example, a bus 81. Specifically, the bus 81 is a bus conforming to standards such as CAN (Controller Area Network) (registered trademark), FlexRay (registered trademark), MOST (Media Oriented Systems Transport) (registered trademark), Ethernet (registered trademark), and LIN (Local Interconnect Network) standards.

[0042] The in-vehicle device 202 includes a sensor, an actuator, a camera, a Global Positioning System (GPS) receiver, a navigation device, an autonomous driving processing ECU (Electronic Control Unit), an Advanced Driving Assistant System (ADAS) ECU, a wiper control device, an engine control device, an Automatic Transmission (AT) control device, a Hybrid Electric Vehicle (HEV) control device, a brake control device, a chassis control device, a steering control device, an instrument display control device, and a maintenance device.

[0043] The gateway device 101 is connected to a plurality of in-vehicle devices 202 and an external communication device 151, and is capable of communicating with each of the in-vehicle devices 202 and the external communication device 151. Note that, instead of the gateway device 101, for example, an integrated ECU that controls the operation of each of the in-vehicle devices 202 may be provided as an example of a monitoring device in the in-vehicle network 251.

[0044] For example, the in-vehicle device 202 periodically or irregularly stores vehicle-related information indicating measurement results related to the vehicle 90 and its own ID in a frame and transmits the frame to another in-vehicle device 202 connected to the bus 81. The in-vehicle device 202 may be configured to transmit a frame to the gateway device 101, or to another in-vehicle device (not shown) via the gateway device 101 and a cable or bus (not shown). The in-vehicle device 202 may also be configured to transmit a plurality of types of vehicle-related information stored in one frame.

[0045] Fig. 3 is a diagram showing a configuration of a gateway device in an in-vehicle communication system according to an embodiment of the present disclosure. Referring to Fig. 3, the gateway device 101 includes a communication processing unit 1, which is an example of a transmission unit, a monitoring unit 2, a pattern information generating unit 3, a reference information acquiring unit 4, a driving state determining unit 5, an abnormality detecting unit 6, and a storage unit 7. The communication processing unit 1, the monitoring unit 2, the pattern information generating unit 3, the reference information acquiring unit 4, the driving state determining unit 5, and the abnormality detecting unit 6 are realized by a processor such as a CPU (Central Processing Unit) and a DSP (Digital Signal Processor). The storage unit 7 is, for example, a non-volatile memory.

[0046] When frames are directly transmitted and received between in-vehicle devices 202 via the bus 81, the communication processing unit 1 receives in parallel a frame transmitted from an in-vehicle device 202 to another in-vehicle device 202 via the bus 81. Note that the communication processing unit 1 may be configured to receive a frame in order to perform a relay process for relaying the frame transmitted between an in-vehicle device 202 and an in-vehicle device such as the external communication device 151.

[0047] For example, when the communication processing unit 1 receives a frame from the in-vehicle device 202 via the bus 81, it outputs the received frame to the monitoring unit 2 with a timestamp indicating the time when the frame was received.

[0048] The monitoring unit 2 monitors vehicle-related information regarding the vehicle 90 that is transmitted through the in-vehicle network 251 in the vehicle 90 .

[0049] More specifically, the monitoring unit 2 acquires the vehicle-related information and ID stored in the frame received from the communication processing unit 1, and stores the vehicle-related information and a timestamp in association with each ID in the storage unit 7. In this way, a communication log of the vehicle-related information in the in-vehicle network 251 is collected and stored in the storage unit 7.

[0050] The driving condition determination unit 5 determines the driving condition of the vehicle 90 based on the monitoring result of the monitoring unit 2. More specifically, the driving condition determination unit 5 refers to the communication log stored in the memory unit 7, and determines, for example, whether the driving condition of the vehicle 90 corresponds to any one of a plurality of specific driving conditions based on the value (hereinafter also referred to as a signal) of the vehicle-related information (hereinafter also referred to as a signal). If the driving condition corresponds to any one of a plurality of specific driving conditions, the driving condition determination unit 5 outputs driving condition information indicating the corresponding specific driving condition to the pattern information generation unit 3 and the reference information acquisition unit 4.

[0051] The specific driving state may be, for example, any combination of the following: when starting the engine, when releasing parking, when turning right or left, when stopping, when starting off, when switching lanes, when merging, and when branching.

[0052] FIG. 4 is a diagram illustrating an example of a vehicle running state determined by a gateway device according to an embodiment of the present disclosure.

[0053] Referring to Figure 4, for example, when vehicle 90 departs from the user's home H and travels the route shown in Figure 4, the driving condition determination unit 5 determines, based on the communication log, that the vehicle 90 transitions through driving conditions RC1 to RC4 in this order.

[0054] Referring back to FIG. 3, the pattern information generating unit 3 generates, based on the monitoring result of the monitoring unit 2, pattern information which is data indicating changes in multiple types of vehicle-related information, for example, time-series data of multiple types of vehicle-related information.

[0055] More specifically, when a specified condition for generating pattern information is met, for example when driving condition information is received from driving condition judgment unit 5, pattern information generation unit 3 generates pattern information and outputs it to reference information acquisition unit 4 and abnormality detection unit 6.

[0056] For example, the pattern information includes data indicating changes in vehicle-related information related to operations on the vehicle 90, such as time-series data of the vehicle-related information.

[0057] Specifically, for example, the vehicle-related information indicates the states of the accelerator, brake, shift lever, steering wheel, power windows, turn signals, audio, wipers, doors, hood, ignition switch, etc. Also, for example, the vehicle-related information indicates the vehicle speed, acceleration, tire rotation speed, etc.

[0058] 5 is a diagram showing an example of time-series data of signal values ​​obtained in an in-vehicle communication system according to an embodiment of the present disclosure, in which the horizontal axis indicates time and the vertical axis indicates signal values.

[0059] 5, the pattern information generating unit 3 generates pattern information indicating time-series changes in a plurality of signals SG1 to SG6 for each of the periods T1 to T4 corresponding to the running conditions RC1 to RC4 shown in FIG.

[0060] 4, when the vehicle 90 turns left from the home H and travels upward in the plane of the drawing, the traveling condition determination unit 5 determines that the traveling condition of the vehicle 90 does not correspond to the specific traveling condition. In this case, the pattern information generation unit 3 does not generate pattern information.

[0061] FIG. 6 is a diagram illustrating an example of pattern information generated by the gateway device according to the embodiment of the present disclosure.

[0062] 6, the pattern information generating unit 3 refers to the communication log in the storage unit 7, and generates pattern information in which a value corresponding to the increase or decrease in the signal value from the previous time is set for each of the signals A to F during a period from time t1 to t6 corresponding to a certain driving state. In the example shown in FIG 6, if the signal value increases, "1" is set, if the signal value remains the same, "0" is set, and if the signal value decreases, "-1" is set.

[0063] The pattern information generating unit 3 generates such pattern information for each type of driving condition. The number and types of signals constituting the pattern information may be different for each driving condition, or may be the same for some or all of the driving conditions.

[0064] The pattern information generating unit 3 may be configured to generate the above-described pattern information by using a learning model based on a deep learning technique as an example of machine learning.

[0065] Referring again to FIG. 3, for example, the abnormality detection unit 6 selects reference information corresponding to the traveling state of the vehicle 90, and compares the selected reference information with the pattern information.

[0066] More specifically, the abnormality detection unit 6 acquires reference information corresponding to the driving state indicated by the driving state information received from the driving state judgment unit 5 from the memory unit 7, and compares the acquired reference information with the pattern information received from the pattern information generation unit 3.

[0067] FIG. 7 is a diagram illustrating an example of a comparison process between reference information and pattern information performed by the gateway device according to the embodiment of the present disclosure.

[0068] With reference to FIG. 7, anomaly detection unit 6 compares each element of the reference information with each element of the newly generated pattern information, and counts the number of times when they do not match.

[0069] In this example, the anomaly detection unit 6 calculates the difference number 3 because the signal A at time t1, the signal C at time t4, and the signals E and F at time t5 are different.

[0070] If the number of differences is equal to or greater than a predetermined threshold, the anomaly detection unit 6 determines that the reference information and the pattern information are “different,” and if the number of differences is less than the predetermined threshold, the anomaly detection unit 6 determines that the reference information and the pattern information are “matching.” If the anomaly detection unit 6 determines that the reference information and the pattern information are “matching,” it notifies the reference information acquisition unit 4 of that effect.

[0071] For example, the reference information acquisition unit 4 acquires and stores reference information based on the monitoring result of the monitoring unit 2. More specifically, for example, the reference information acquisition unit 4 acquires reference information for each driving state, and stores it in the storage unit 7 as reference information corresponding to the driving state indicated by the driving state information received from the driving state determination unit 5.

[0072] For example, based on a comparison result between the pattern information newly generated by the pattern information generating unit 3 and the reference information, the reference information acquiring unit 4 updates the reference information to the newly generated pattern information.

[0073] More specifically, when the reference information acquisition unit 4 receives notification from the abnormality detection unit 6 that the two “match”, it updates the reference information in the memory unit 7 corresponding to the driving condition to the pattern information received from the pattern information generation unit 3.

[0074] In addition, the reference information acquisition unit 4 may be configured to update the reference information to the pattern information newly generated by the pattern information generation unit 3 based on the operation history of the vehicle 90, regardless of the above comparison result by the abnormality detection unit 6.

[0075] Specifically, for example, each time the number of times the engine of the vehicle 90 is started reaches a predetermined value, the reference information acquisition unit 4 updates the reference information in the memory unit 7 corresponding to the driving state to newly generated pattern information.

[0076] The abnormality detection unit 6 compares the pattern information generated by the pattern information generation unit 3 with reference information that is pattern information for reference, and detects an abnormality in the in-vehicle network 251 based on the comparison result.

[0077] For example, the detection unit 6 compares a change in the vehicle-related information indicated by the pattern information with a change in the vehicle-related information indicated by the reference information, and determines that an abnormality has occurred if a comparison condition is satisfied in which the number of times of mismatch is equal to or greater than a predetermined threshold. Specifically, for example, as described with reference to Fig. 7, the detection unit 6 compares a time change in the vehicle-related information indicated by the pattern information with a time change in the vehicle-related information indicated by the reference information, and determines that an abnormality has occurred if a comparison condition is satisfied in which the number of times of mismatch in the time-series data is equal to or greater than a predetermined threshold.

[0078] Also, for example, the abnormality detection unit 6 determines that an abnormality has occurred when a comparison condition is satisfied in a plurality of driving states. Specifically, the abnormality detection unit 6 determines that an abnormality has occurred when it determines that the difference is "different" a predetermined number of times consecutively during a series of driving of the vehicle 90.

[0079] The abnormality detection unit 6 may be configured to determine that an abnormality has occurred even when the above comparison condition is satisfied in each of the driving states that are not all or partly continuous within a certain period of time.

[0080] As described above, the gateway device 101 can perform anomaly detection through simple processing using subtraction and comparison, thereby reducing the processing load.

[0081] Referring again to FIG. 3, the communication processing unit 1 transmits the pattern information and the reference information to a management server 301 outside the vehicle 90 when the abnormality detection unit 6 detects an abnormality.

[0082] More specifically, when the abnormality detection unit 6 detects an abnormality, it outputs the compared pattern information and the reference information to the communication processing unit 1. The abnormality detection unit 6 may be configured to output not only the compared reference information but also reference information corresponding to all driving states stored in the storage unit 7 to the communication processing unit 1. The abnormality detection unit 6 may be configured to output the pattern information and reference information for all times when it is determined to be "different", or may be configured to output part of the information, such as the most recent pattern information and reference information. The abnormality detection unit 6 may be configured to periodically or irregularly output information indicating normality to the communication processing unit 1 when no abnormality is detected.

[0083] The communication processing unit 1 outputs the pattern information received from the abnormality detection unit 6 and one or more pieces of reference information to the exterior communication device 151 .

[0084] The external vehicle communication device 151 communicates with the management server 301 via the external network 501 shown in FIG. 1 by wirelessly communicating with a wireless base station (not shown) according to a communication method such as WiFi (registered trademark) or LTE (registered trademark) (Long Term Evolution).

[0085] For example, the exterior-vehicle communication device 151 receives pattern information and reference information from the communication processing unit 1 in the gateway device 101 , and transmits the pattern information and the reference information to the management server 301 via the external network 501 .

[0086] The management server 301 receives the pattern information and the reference information transmitted from the exterior communication device 151 via the external network 501, and analyzes the pattern information and the reference information. Then, the management server 301 transmits, for example, analysis information indicating the analysis result to a user terminal or the vehicle 90 (not shown) via the external network 501.

[0087] [Operation flow] A monitoring device according to an embodiment of the present disclosure includes a computer including a memory, and a processor such as a CPU in the computer reads out from the memory and executes a program including some or all of the steps in the following flowcharts and sequences. This program can be installed from an external source. This program is distributed in a state stored on a recording medium or via a communication line.

[0088] FIG. 8 is a flowchart defining an example of an operation procedure when the gateway device according to the embodiment of the present disclosure detects an abnormality in the in-vehicle network.

[0089] 8, first, the gateway device 101 monitors frames transmitted from the in-vehicle device 202 in the in-vehicle network 251, and collects a communication log of vehicle-related information (step S1).

[0090] Next, the gateway device 101 collects communication logs until a generation condition for pattern information is satisfied, for example, until the driving state of the vehicle 90 corresponds to a specific driving state (NO in step S2). If the generation condition is satisfied (YES in step S2), the gateway device 101 calculates a change in the signal value, for example, as shown in FIG. 6, and generates pattern information (step S3).

[0091] Next, the gateway device 101 compares the generated pattern information with the stored reference information (step S4), for example, as shown in Fig. 7, and if it is determined that the two "match" (YES in step S5), it updates the reference information stored in the storage unit 7, for example, the reference information corresponding to the specific driving state, to the newly generated pattern information. This makes it possible to use appropriate reference information in response to a change in the driver or owner of the vehicle 90 (step S6).

[0092] On the other hand, if the gateway device 101 determines that the generated pattern information and the stored reference information are “different” (NO in step S5) and determines that a predetermined condition has been met, such as determining that the information is “different” a predetermined number of times in succession, it determines that an abnormality has occurred in the in-vehicle network 251 (YES in step S7).

[0093] Next, the gateway device 101 transmits the compared pattern information, the reference information, and the like to the management server 301 (step S8).

[0094] On the other hand, if the gateway device 101 determines that the generated pattern information and the stored reference information are "different" (NO in step S5) and the determination that they are "different" has not occurred a predetermined number of times in succession, it determines that no abnormality has occurred in the in-vehicle network 251 (NO in step S7). Then, the gateway device 101 continues to monitor frames and collect communication logs (step S1).

[0095] In the embodiment of the present disclosure, the time-series data of multiple types of vehicle-related information has been described as an example of the pattern information, but the present invention is not limited to this. The pattern information may be data indicating a change in a signal value relative to the position or speed of the vehicle 90, for example. In this case, the pattern information is data in which the times t1 to t6 shown in FIG. 6 are replaced with the position or speed of the vehicle 90. In other words, the pattern information may be data indicating a change in multiple types of vehicle-related information.

[0096] The above-described embodiments should be considered as illustrative and not restrictive in all respects. The scope of the present invention is defined by the claims, not by the above description, and is intended to include all modifications within the meaning and scope of the claims. [Explanation of symbols]

[0097] 1. Communication processing section 2 Monitoring Department 3. Pattern information generation section 4 Reference information acquisition part 5. Driving condition determination unit 6. Anomaly detection section 7 Memory section 90 vehicles 101 Gateway device 151 External communication device 201 In-vehicle communication system 202 On-vehicle equipment 251 In-vehicle network 301 Management Server 401 Vehicle Monitoring System

Claims

1. A monitoring device mounted on a vehicle, A monitoring unit that monitors vehicle-related information regarding the vehicle transmitted through an in-vehicle network in the vehicle; a pattern information generating unit that generates pattern information, which is time-series data of the plurality of types of vehicle-related information, indicating changes in the plurality of types of vehicle-related information based on a monitoring result of the monitoring unit; an anomaly detection unit that compares the pattern information generated by the pattern information generation unit with reference information that is the pattern information for reference, and detects an anomaly in the in-vehicle network based on a comparison result; a transmission unit that transmits the pattern information and the reference information to an external device outside the vehicle when the abnormality detection unit detects the abnormality.

2. The monitoring device further comprises: a running state determination unit that determines a running state of the vehicle based on a monitoring result of the monitoring unit, The monitoring device according to claim 1 , wherein the abnormality detection unit selects the reference information corresponding to the traveling state, and compares the selected reference information with the pattern information.

3. The monitoring device further comprises: The monitoring device according to claim 1 , further comprising a reference information acquisition unit that acquires and stores the reference information based on a monitoring result of the monitoring unit.

4. The monitoring device further comprises: a running state determination unit that determines a running state of the vehicle based on a monitoring result of the monitoring unit, The monitoring device according to claim 3 , wherein the reference information acquisition unit acquires and stores the reference information for each of the driving conditions.

5. The monitoring device according to claim 3 or claim 4, wherein the reference information acquisition unit updates the reference information to the newly generated pattern information based on a comparison result between the pattern information newly generated by the pattern information generation unit and the reference information.

6. 5. The monitoring device according to claim 3, wherein the reference information acquisition unit updates the reference information to the pattern information newly generated by the pattern information generation unit, based on an operation history of the vehicle.

7. The monitoring device according to claim 1 , wherein the pattern information includes data indicating a change in the vehicle-related information related to an operation on the vehicle.

8. The monitoring device according to any one of claims 1 to 7, wherein the abnormality detection unit compares the change in the vehicle-related information indicated by the pattern information with the change in the vehicle-related information indicated by the reference information, and determines that an abnormality has occurred if a condition is met in which the number of mismatches is equal to or greater than a predetermined threshold.

9. The monitoring device further comprises: a running state determination unit that determines a running state of the vehicle based on a monitoring result of the monitoring unit, The monitoring device according to claim 8 , wherein the abnormality detection unit determines that an abnormality has occurred when the condition is satisfied in a plurality of the driving states.

10. A monitoring device mounted on the vehicle; an external device outside the vehicle, The monitoring device includes: A monitoring unit that monitors vehicle-related information regarding the vehicle transmitted through an in-vehicle network in the vehicle; a pattern information generating unit that generates pattern information, which is time-series data of the plurality of types of vehicle-related information, indicating changes in the plurality of types of vehicle-related information based on a monitoring result of the monitoring unit; an anomaly detection unit that compares the pattern information generated by the pattern information generation unit with reference information that is the pattern information for reference, and detects an anomaly in the in-vehicle network based on a comparison result; a transmission unit that transmits the pattern information and the reference information to an external device outside the vehicle when the abnormality detection unit detects the abnormality, The external device analyzes the pattern information and the reference information received from the monitoring device.

11. A vehicle monitoring method in a monitoring device mounted on a vehicle, comprising: monitoring vehicle-related information about the vehicle transmitted over an in-vehicle network in the vehicle; generating pattern information, which is time-series data of the plurality of types of vehicle-related information, indicating changes in the plurality of types of vehicle-related information based on a monitoring result; comparing the generated pattern information with reference information, which is the pattern information for reference, and detecting an abnormality in the in-vehicle network based on a comparison result; If the abnormality is detected, transmitting the pattern information and the reference information to an external device outside the vehicle.

Images