In-vehicle network system

摘要

Provided is an in-vehicle network equipped with a function whereby configuration verification is performed while preventing an increase in the processing load (and cost) for each in-vehicle control device, thus improving vehicle security. This in-vehicle network system is equipped with a configuration management device that authenticates an in-vehicle control device. The configuration management device delivers to the in-vehicle control device, via a registration device connected to the in-vehicle network, configuration verification data that is used to perform configuration verification (see FIG. 1).

主权项

1. An in-vehicle network system comprising:
an in-vehicle control unit that controls an operation of a car; and a configuration management device that authenticates whether the in-vehicle control unit has a valid authorization to join an in-vehicle network of the car; wherein upon receiving, from a registration device that lets the in-vehicle control unit join the in-vehicle network, a registration request requesting to let the in-vehicle control unit join the in-vehicle network, the configuration management device performs an authentication with respect to the registration device, generates attestation data unique to the in-vehicle control unit, and sends the attestation data to the registration device, wherein the registration device is configured as a device connected to the in-vehicle network only when the registration device lets the in-vehicle unit join the in-vehicle network, and receives the attestation data from the configuration management device and relays the attestation data to the in-vehicle control unit, wherein the in-vehicle control unit receives the attestation data from the registration device and stores the attestation data in a memory, and wherein the configuration management device authenticates the in-vehicle control unit using the attestation data.