GATEWAY DEVICE, AND SERVICE PROVIDING SYSTEM

摘要

Provided are a control device, system, and method capable of controlling an accessible range of information on an individual external device basis even in the case of a valid access for the information from an external device. An ACL management server is installed to introduce an ACL associating a service provider ID identifying a service provider accessing an ECU mounted on an automobile with an attribute of an ECU that the service provider can access or with an ASIL determined for the ECU, and to manage the ACL safely and in the latest state. Also, a service providing server is installed for providing services for reading and rewriting ECU control information in accordance with a request from a user. A gateway is installed for determining, using the ACL, whether access to the ECU should be granted with respect to access instruction execution information received from the service providing server.

主权项

1. A gateway device for controlling access to a processing device connected with an internal network from an external network, the gateway device comprising:
a control information transfer control unit; an access control management updating unit; and a control information access unit, wherein the access control management updating unit, when receiving an access execution instruction from the external network, acquires determination information on the access execution instruction, the determination information being set an accessible attribute of the processing device per transmission source of the access execution instruction; the control information transfer control unit determines whether execution of the access execution instruction should be permitted or not using the determination information, and transmits the access execution instruction, execution of which is determined to be permitted, to the control information access unit; the control information access unit transmits the received access execution instruction to the processing device, and transmits a result message of the access execution instruction to the control information transfer control unit; and the control information transfer control unit transmits the result message to the transmission source of the access execution instruction.