Vehicle ECU Program Update Control Device for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Program updates for Electronic Control Units (ECUs) in vehicles are often executed without specifying the notification party, leading to inconvenience for non-owners and potential security risks when updates are performed by unauthorized individuals.
Innovation Solution
A control device that remotely changes the program of an ECU by acquiring vehicle and user information, determining ownership, and guiding the update process only through authorized administrators, ensuring that only the rightful owner or corporate administrators can execute the updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If program update notification is executed without specifying a notification party, then update execution is simplified, but security deteriorates and user convenience worsens
Solution Approach 1:
The system automatically determines the right holder and specifies the notification party without requiring manual input from the update executor. The control device autonomously queries vehicle information, determines ownership status, and identifies who should receive notifications, eliminating the need for manual configuration while maintaining security.
Solution Approach 2:
The system establishes a feedback loop where the control device continuously monitors vehicle information, determines the right holder's status, and dynamically adjusts notification routing. This feedback mechanism ensures that notifications are always sent to the appropriate party based on current vehicle ownership data.
2Loss of information
If program update notification is sent to non-owners, then update awareness is improved, but security deteriorates
Solution Approach 1:
The control device acts as an intermediary between the update system and the right holder. It queries vehicle information, determines the right holder's identity and status, and routes notifications appropriately. This intermediary function prevents direct notification to unauthorized users while ensuring legitimate users receive timely updates.
3Reliability
If right holder determination is implemented, then security is improved, but device complexity increases
Solution Approach 1:
The control device leverages existing multi-functional capabilities to determine right holder status. It utilizes the vehicle information query function, which is already part of the telematics system, to gather ownership data. By reusing existing communication and data processing functions, the system avoids adding significant complexity while achieving secure right holder determination.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed is a control device capable of prompting change of a control content and improving security. A program delivery center 2 is a program update device which updates a program of an ECU mounted in a vehicle 5, wherein a right holder specification unit 25 specifies a right holder who has a right to execute the update of the program on the basis of information regarding the vehicle 5, and a reprogramming guide execution unit 26 sets and outputs program update guide notification to the right holder. Accordingly, the update of the program by a person other than the right holder can be avoided, thereby improving security. Furthermore, since the update of the program is notified to the right holder which can execute the update of the program, a program update execution frequency increases compared to a case where a user who cannot execute the update of the program is notified, thereby prompting the execution of the program update.