Patent Application
20210397504
This application is based on Japanese Patent Application No. 2020-104331 filed on Jun. 17, 2020, the disclosure of which is incorporated herein by reference.
The present disclosure relates to a log collection system, a log transmission controller, a log transmission control method and a computer program product for controlling the transmission of a log to a server.
It has been known that technologies for driving support and automated driving control, including V2X such as vehicle-to-vehicle communication and road-to-vehicle communication, have been drawing attention. Therefore, vehicles may be equipped with a communication function so that the vehicles are becoming more connected. However, the vehicles equipped with the communication function may be increasingly vulnerable to a cyber-attack.
The present disclosure describes a log collection system, a log transmission controller, a log transmission control method and a computer program product for updating priority information based on an update instruction and transmitting a log to a server based on the updated priority information.
The objects, features and advantages of the present disclosure will become more apparent from the following detailed description made with reference to the accompanying drawings. In the drawings:
In a situation where a cyber-attack on vehicles occurs, the cyber-attack may hinder the control of the vehicle through the attack. Therefore, it is important that an analysis on the cyber-attack is needed for prevention in advance, countermeasure on the cyber-attack or restoration from the cyber-attack. Therefore, a server device having abundant resources may collect and analyze logs of an in-vehicle device. However, it may not be desirable to transmit all the large amount of logs generated by the in-vehicle device to the server device, in view of lack of resources of the in-vehicle device or network load.
For example, in a situation where the server device analyzes log received from the in-vehicle device and detects possibility of the cyber-attack, the server device may transmit to the in-vehicle device an update instruction for modifying the priority of the log stored in the in-vehicle device. In a situation where the in-vehicle device receives the update instruction for modifying the priority to raise the priority of the log used for determining the cyber-attacks, the in-vehicle device stores the log according to the priority and transmits the log to the server device. As a result, the server device may collect the log for determining the cyber-attacks while utilizing limited resources.
The inventors in the present application had found the following difficulty. In a situation where the in-vehicle device updates the priority of the log based on the instruction from the server device, it takes some time for the server device to execute log analysis, and it also takes some time for the server device to transmit the instruction for updating the priority. Therefore, the time is needed from the occurrence of the cyber-attack to the modification of the priority at the in-vehicle device. In a situation where the communication environment between the in-vehicle device and the server device is not at a desirable level, it is possible that the in-vehicle device may not receive the update instruction from the server device. In such a situation, the time may be consumed in collecting the log having a higher priority. Additionally, it is possible that the log required for analyzing the cyber-attack may be lost during a period from the in-vehicle device receiving the update instruction for modifying priority until the in-vehicle device updating the priority.
According to a first aspect of the present disclosure, a log collection system includes a log transmission controller and a server. The log transmission controller is equipped in a moving object. The log transmission controller includes a log acquirer, a priority storage, an update instruction acquirer, a priority updater and a transmitter. The log acquirer acquires a log indicating respective states of electronic control units connected to the log transmission controller. The priority storage stores priority information indicating a priority for transmitting the log to the server. The update instruction acquirer acquires a first update instruction and a second update instruction. The first update instruction is generated by an update instructor equipped in the moving object for instructing to update the priority information stored in the priority storage. The second update instruction is generated by the server for instructing to update the priority information. The priority updater updates the priority information based on the first update instruction and the second update instruction. The transmitter transmits the log to the server based on the priority indicated by the updated priority information. The server is disposed at exterior of the moving object. The server includes a communicator, a log analyzer and a server-side instruction generator. The communicator receives the log transmitted from the transmitter. The log analyzer analyzes the log received by the communicator and analyzes a security fault generated at the moving object. The server-side instruction generator generates the second update instruction for instructing to update the priority information based on an analysis result of the log analyzer.
According to a second aspect of the present disclosure, a log transmission controller includes a log acquirer, a priority storage, an update instruction acquirer, a priority updater and a transmitter. The log acquirer acquires a log indicating respective states of electronic control units connected to the log transmission controller, which is equipped in a moving object. The priority storage stores priority information indicating a priority for transmitting the log to a server, which is disposed at exterior of the moving object. The update instruction acquirer acquires an update instruction, which is generated by an update instructor equipped in the moving object, for instructing to update the priority information stored in the priority storage. The priority updater updates the priority information based on the update instruction. The transmitter transmits the log to the server based on the priority indicated by the updated priority information.
According to a third aspect of the present disclosure, a method for controlling log transmission is executed by a log transmission controller equipped in a moving object. The method includes: acquiring a log indicating respective states of electronic control units connected to the log transmission controller; storing priority information indicating a priority for transmitting the log to a server, which is disposed at exterior of the moving object; acquiring an update instruction, which is generated by an update instructor equipped in the moving object, for instructing to update the stored priority information; updating the priority information based on the update instruction; and transmitting the log to the server based on the priority indicated by the updated priority information.
According to a fourth aspect of the present disclosure, a computer program product is stored on a non-transitory computer readable medium and including instructions, when executed by a processor in a log transmission controller equipped in a moving object, cause the processor to: acquire a log indicating respective states of a plurality of electronic control units connected to the log transmission controller; store priority information indicating a priority for transmitting the log to a server disposed at exterior of the moving object; acquire an update instruction, which is generated by an update instructor equipped in the moving object, for instructing to update the stored priority information; update the priority information based on the update instruction; and transmit the log to the server based on the priority indicated by the updated priority information.
According to the above aspects of the present disclosure, it is possible that each of the log collection system, the log transmission controller, the log transmission control method and the computer program product described in the present disclosure modifies the priority of the log to be transmitted to the server device promptly, based on the instruction for instructing to modify the priority of the log generated by the in-vehicle device.
The difficulty described above is not a publicly known matter but is originally found by the inventors in the present application, and is a fact that confirms non-obviousness of the present application together with a configuration and a method described in the present application.
Embodiments of the present disclosure will be described below with reference to the drawings.
The following describes an example of a log collection system 1 commonly adopted in each of the embodiments with reference to
For the communication network 2, a wireless communication may be used, such as IEEE802.11 (Wi-Fi: registered trademark), IEEE802.16 (WiMAX: registered trademark), W-CDMA (Wideband Code Division Multiple Access), HSPA (High Speed Packet Access), LTE (Long Term Evolution), LTE-A (Long Term Evolution Advanced), 4G, and 5G. DSRC (Dedicated Short Range Communication) may also be used. For the communication network 2, a wired communication may be used, such as wired LAN (Local Area Network), internet, and landline phone line.
The following describes the configuration of the in-vehicle system 10 with reference to
The CGW 11 is an electronic control unit that relays communication between the external communication ECU 12 and the ECU 13 or between the ECUs 13 via the network 14.
The external communication ECU 12 is an electronic control unit that wirelessly communicates with the server devices 20 and 30 using the communication network 2.
The ECU 13 is an electronic control unit that implements respective functions. Any ECU may be used as the ECU 13. The electronic control unit (ECU) may be, for example, a drive system electronic control device that controls an engine, a steering wheel, a brake, etc. The ECU may be, for example, a vehicle-body electronic control device that controls a meter, and a power window, etc. The ECU may be, for example, an information-system electronic control device such as a navigation device. The ECU may be, for example, a safety-control electronic control device that controls to prevent a collision with an obstacle or a pedestrian.
The ECUs may be classified to have a master-slave relationship, rather than in parallel with each other. The ECUs may be classified into a master and a slave. Multiple ECUs 13 may be further provided under the particular ECU 13 through a sub-network. In this situation, the particular ECU 13 functions as a gateway device.
The network 14 connects the CGW 11, the external communication ECU 12 and the ECU 13. In
The following describes the configuration of the log transmission controller 100 according to a first embodiment with reference to
The moving object may also be referred to as a moveable object, and the moving speed of the moving object is not particularly restricted. The moving object may stop. For example, the moving object includes, but is not limited to, vehicles, motorcycles, bicycles, pedestrians, ships, aircraft, and objects mounted on these examples.
In each of the following embodiments, the log transmission controller 100 is provided inside the CGW 11 as illustrated in
The log transmission controller 100 may be in the form of a component, a semi-finished product, or a finished product. In the present embodiment, the log transmission controller 100 is implemented by a semiconductor circuit in the CGW 12, and therefore the log transmission controller 100 in the present embodiment is in the form of a component.
Examples of the form of a component include a semiconductor module. Examples of the form of a semi-finished product include an independent electronic control unit (ECU). Examples of the form of a finished product include a server, a workstation, a personal computer (PC), a smart phone, a cell phone, and a navigation system. However, the security management device 100 is not limited to these examples.
The log transmission controller 100 may be composed of a general-purpose CPU (Central Processing Unit), a volatile memory such as RAM, a non-volatile memory such as ROM, flash memory, or hard disk, various interfaces, and an internal bus connecting them. Then, by executing software on these hardware, the log transmission controller 100 can be configured to execute the functions of each functional block described in
The log acquisition device 101 acquires a log that indicates the state or status of the ECU 13 connected to the log transmission controller 100. The log acquisition device 101 corresponds to an acquisition device. The log for indicating the state of the ECU 13 (hereinafter referred to as a state log) is a log adopted for log analysis at the server device 20. For example, the log records resources such as input and output of data to the ECU 13 (for instance, the interval of inputting or outputting data, or the size of date being input or output), the CPU usage or the memory usage amount of the ECU 13. The state log may also record, for example, the function or version information of the ECU 13 or the type information of an automobile equipped with the log transmission controller 100. The state log may further include information such as time information or identification information of ECU in addition to the state of the ECU 13.
In the present disclosure, the log indicating the “state” is, for example, a log that records a constantly changing dynamic state such as the operation of the ECU, and a static state that essentially does not change such as the version or function of the ECU.
The priority storage 102 stores priority information indicating “priority” for transmitting a state log to the server device 20. Details of the priority information stored in the priority storage 102 is described hereinafter.
Here, the “priority” is an index determined based on a predetermined evaluation standard, and the expression method is arbitrary. For example, it may be represented by a symbol as well as a number. The number classified by the index may be plural, and may be finite or infinite.
The log storage 103 is a volatile or non-volatile memory, and stores the state log acquired by the log acquisition device 101.
The update instruction acquisition device 104 acquires an update instruction generated by an update instruction device 300 (may also be referred to as an update instructor) described hereinafter. This update instruction instructs updating the priority information stored in the priority storage 102, and includes the update content of the priority information. For example, the update instruction includes the type of state log whose priority should be updated, the updated value of the priority of each state log, and the validity period of the updated value of the priority. The priority update device 105 updates the priority information stored in the priority storage 102, based on the update instruction acquired by the update instruction acquisition device 104.
The log transmitter 106 transmits the state log stored in the log storage 103 to the server device 20 based on the priority indicated by the priority information stored in the priority storage 102. In a situation where the priority information is updated by the priority update device 105, the log transmitter 106 may transmit the state log and the updated priority information to the server device 20.
The transmission of the log based on the priority may refer to a situation in which, by adopting the priority, the log with a higher priority is preferentially transmitted as compared with the log with a lower priority. For example, the logs are sequentially transmitted from the start of the log with higher priority, or the transmission frequency of the log with the higher priority is made to be higher than the transmission frequency of the log with the lower priority.
For example, in a situation where the log acquisition device 101 acquires the state log, the priority corresponding to the state log acquired from the priority information stored in the priority storage 102 is extracted, and the state log given by the extracted priority is stored in the log storage 103. Subsequently, the state log with a higher priority is output to the log transmitter 106 in order. As a result, the log transmitter 106 sequentially transmits the state log to the server device 20 from higher orders based on the priority.
Alternatively, the state log with the higher priority may be transmitted to the server device 20 in a higher frequency, and the state log with the lower priority may be transmitted to the server device 20 in a lower frequency.
In a situation where the storage capacity of the log storage 103 is reached, the state log may be discarded from the one with the lower priority.
Each of
The default priority is a value preliminarily set by, for example, a manufacturer of the CGW 13 or the in-vehicle system 10, or a dealer of automobile equipped with the in-vehicle system 10. The newest priority is a priority to be adopted in a situation where the state log is transmitted to the server device 20. The priority update device 105 updates the value of the newest priority to the value of priority instructed by the update instruction.
In a situation where the priority storage 102 stores the information as illustrated in
The lowest priority may indicate that the state log has not been transmitted. In a situation where the lowest priority indicates that the state log has not transmitted, the state log corresponding to this priority is not transmitted to the server device 20 until the priority information is updated.
On the other hand,
In a situation where the priority storage 102 stores the information as illustrated in
The following describes the configuration of the update instruction device 300 with reference to
Similar to the log transmission controller 10, the update instruction device 300 is equipped in the automobile. In each of the following embodiments, the update instruction device 300 is provided at an external part of the log transmission controller 100, for example, the inner part of the ECU 13 in
The fault detector 301 detects a fault occurred at the ECU 13. The fault detector 301 detects a fault state by, for example, CFI (Control Flow Integrity), IDS (Intrusion Detection System), error checking such as SSL certificate error and transmission error, detection of communication to be filtered, and resource monitoring for detecting the fault occurred at the ECU 13. Alternatively, the fault detector 301 may detect the fault occurred at the ECU 13 by acquiring the information indicating that the fault has occurred from the fault detector (not shown) provided at the ECU 13 different from the update instruction device 300. Since it is possible that the fault detector 301 monitors the ECU 13 in real time and detects the fault, there is a high possibility that the fault can be detected without delay after receiving the cyber-attack.
The fault detector may find out the fault by itself to detect the fault. In addition, the fault may also be detected by acquiring the information indicating that the fault is found out by other devices.
The update information storage 302 stores the state log whose priority should be updated, the updated value of the priority and the validity period of the priority for each content of the fault which can be detected by the fault detector 301. Details of the information stored in the update information storage 302 is described hereinafter.
In a situation where the fault detector 301 detects the fault, the instruction generator 303 extracts information of the state log for which should be updated, the updated value of the priority and the validity period corresponding to the content of the detected fault from the update information storage 302 to generate the update instruction. In other words, the instruction generator 303 generates the update instruction for instructing the predetermined state log to be updated only the predetermined validity period for the priority corresponding to the content of the detected fault.
Herein, the content of the fault includes not only the type of fault, but also includes the degree of the fault, the location where the fault occurs, and the fact of the fault occurrence.
The transmitter 304 transmits the update instruction generated by the instruction generator 303 to the log transmission controller 100. The transmitter 304 may further provide the fault information indicating, for example, the type of fault detected by the fault detector 301 to the state log indicating the fault state and then transmit it to the log transmission controller 100.
For example, in a situation where the fault detector 302 detects the CFI fault of the ECU-A, the update instruction is generated for five state logs illustrated in
As illustrated in
Not only for the ECUs having the fault, but also for the priority of the state log of the ECU related to the ECUs having the fault, it may be desirable to store the priority in the update information storage 302 as the state log whose priority should be updated. As a result, it is possible that the server device 20 analyzes the possibility of the cyber-attack or the damage state caused by the cyber-attack in detail.
The type of state log whose priority should be updated, the updated value of the priority, and the validity period of the priority, which are stored in the update information storage 302, are set in view of, for example, the importance of the function of the ECU and the relationship between the ECUs. For example, as similar to the priority information to be stored in the priority storage 102, these values may be preliminary stored by, for example, a manufacturer or may be updated periodically by an instruction of the server device 20.
The update information storage 302 may set different state log, updated values of priority and the validity periods of the priority according to the severity of the fault, even though the type of fault is identical. The severity of the fault may be set according to, for example, the level of the fault such as the difference between a threshold value and a value indicating the fault log or a location having an occurrence of the fault. In a situation where the transmitter 302 transmits the state log with the detected fault to the log transmission controller 100, the information of the type of fault or the severity of fault may be added to the state log and then transmitted to the log transmission controller 100. However, for example, the content of the fault stored in the update information storage 302 and the state log whose priority should be updated are not restricted to the example illustrated in
In
The following describes the configuration of the server device with reference to
The communication device 21 executes communication with the in-vehicle system 10 through the communication network 2.
The database 22 is a database including a log database (hereinafter, log DB) 221 and a security database (hereinafter, security DB) 222. The log DB 221 collects and then stores the logs, which are transmitted from the in-vehicle system 10 and received by the communication device 21. The security DB 222 stores the analyzed results of the log analyzer 23 described hereinafter, or the information related to the past cyber-attacks and the vulnerability of the in-vehicle system 10.
The log analyzer 23 analyzes the log transmitted from the log transmitter 106 of the log transmission controller 100 to analyze, for example, security faults occurred at the vehicle, in other words, the details of the cyber-attack such as an attacker, an attacking route, a cause, an attack. The analysis method of the security fault executed by the log analyzer 23 is arbitrary. For example, the log analyzer 23 may adopt, for example, information of the security DB 222 to execute analysis. The analysis result of the log analyzer 23 may be fed back to the in-vehicle system 10, or may be output as a report to a security manager.
The following describes an operation of the log transmission controller 100 with reference to
In a situation where the update instruction acquisition device 104 acquires the update instruction in S101 (in other words, S101: YES), the priority information stored in the priority storage 102 is updated based on the update instruction in S102. In S103, the log acquisition device 101 acquires the state log transmitted by the ECU 13.
The state log acquired in S103 is transmitted to the server device 20 based on the priority indicated by the priority information stored in the priority storage 102. In a situation where the priority information is updated in S201, the state log is transmitted based on the priority indicated by the updated priority information.
The priority information updated in S102 is maintained until reaching the validity period of the priority stored in the priority storage 102. In a situation of reaching the validity period of the priority stored in the priority storage 102 (in other words, S105: YES), the priority update device 105 updates the value of the priority stored in the priority storage 102 to the default priority in S106.
As described above, according to the log transmission controller 100 in the present embodiment, the priority information of the state log is updated based on the update instruction from the update instruction device 300 equipped in the automobile. In the update instruction device 300 equipped in the automobile, since it is possible to detect the fault and generate the update instruction without a time lag after receiving the cyber-attack, the priority information of the state log stored in the priority storage 102 can be updated promptly.
In the first embodiment, in a situation where the priority information is updated based on the update instruction, the log transmission controller 100 transmits the state log, which is acquired by the log acquisition device 101, to the server device 20 based on the updated priority information, The state log transmitted from the log transmission controller 100 to the server device 20 may be a state log stored in the log storage 103 prior to updating the priority information. The default priority before update is added to the state log stored in the log storage 103 prior to the priority update device 105 updating the priority information (corresponding to a pre-updated log). However, in a situation where the priority update device 105 updates the priority, the updated priority is again added to the state log stored in the log storage 103. Therefore, the state log stored in the log storage 103 is transmitted to the server device based on the priority indicated by the updated priority information.
Since the server device 20 executes the log analysis on both of the state log before the occurrence of the fault (in other words, the state log at the normal state) and the state log after the occurrence of the fault, it is possible to analyze the cyber-attacks in detail.
In a second embodiment, the update instruction acquisition device 104 of the log transmission controller 100 acquires the update instruction generated by the update instruction device 300 and an update instruction generated by the server device, and updates the priority information based on these update instructions.
The configuration of the log transmission controller 100 and the configuration of the update instruction device 300 in the present embodiment are described with reference to
Since the log analyzer 23 can adopt much information related to the cyber-attack stored in the security DB or abundant resources in the server device 30, it is possible to determine and then set the priority of the state log, which seems to be useful for analyzing the cyber-attacks in detail, with higher precision. Therefore, it may be desirable that the update information storage 31 of the server device 30 stores the update information classified by the update information storage 302 of the update instruction device 300 in detail. Alternatively, the server device 30 may include an update information determination device (not shown) that properly determines the updated value of the priority of an appropriate state log according to the analysis result of the log, in replacement of the update information storage 31. Alternatively, a user of the server device 30 may set the updated value of the priority manually based on the analysis result of the log analyzer 23.
The instruction generator 32 generates the update instruction for updating the priority information stored in the priority storage 102, and transmits the update instruction to the log transmission controller 100 through the communication device 21.
The update instruction acquisition device 104 of the log transmission controller 100 in the present embodiment acquires the update instruction (corresponding to a first update instruction) generated by the update instruction device 300 and the update instruction (corresponding to a second update instruction) generated by the instruction generator 32 of the server device 30.
The priority update device 105 updates the priority information based on the update instruction generated by the update instruction device 300 and the update instruction generated by the server device 30.
The operation of the log transmission controller 100 in the present embodiment is identical to the one described in the first embodiment. However, the update instruction acquired in S101 is either the update instruction generated by the update instruction device 300 or the update instruction generated by the server device 30.
The server device 30 analyzes the fault based on the state log transmitted from the in-vehicle system 10, and generates the update instruction for enhancing the priority of the state log required for analyzing further cyber-attack based on the analysis result. Therefore, it may take some time for the instruction generator 32 to generate the update instruction. In a situation where the update instruction generated by the instruction generator 32 is transmitted to the log transmission controller 100, it may take some time for the log transmission controller 100 to acquire the update instruction if the communication environment of the network 2 is not at a desirable level.
However, in the present embodiment, prior to acquiring the update instruction from the server device 30, it is possible to update the priority information of the state log based on the update instruction generated by the instruction generator 303 of the update instruction device 300. Therefore, even if the time lag happens for the log transmission controller 100 to acquire the update instruction from the server device 30 after the occurrence of the cyber-attack, it is possible to transmit the state log to the server device 30 by adopting the priority indicated by the priority information updated based on the update instruction from the update instruction device 300. As a result, it is possible to prevent the state log required for log analysis from being accidentally lost until acquiring the update instruction from the server device 30.
The update instruction in the present embodiment may also include information of instructor that indicates whether the instructor of the update instruction is the update instruction device 300 or the server device 30. In other words, the update instruction generated by the update instruction device 300 includes the information of instructor (corresponding to first instructor information) indicating the instructor for updating the priority is the update instruction device 300, and the update instruction generated by the server device 30 includes the information of instructor (corresponding to second instructor information) indicating the instructor for updating the priority is the server device 30. In this situation, the priority storage 102 stores the information of instructor in addition to each information illustrated in
The update instruction generated by the server device 30 may further include information indicating that the priority information updated based on the update instruction generated by the server device 30 is not to be updated according to the update instruction generated by the update instruction device 300.
For example, it is possible that the update instruction device 300 detects a new fault and generates a new update instruction, after the priority information is updated based on the update instruction generated by the server device 30. In this situation, the priority information updated based on the update instruction generated by the server device 30 is again updated based on the new update instruction generated by the update instruction device 300. However, in a situation where the priority information is again updated before the state log required analyzing the fault previously occurred is transmitted to the server device 30, the server device 30 may not collect the state log sufficiently for analyzing the fault occurred previously. As the priority information based on the update instruction generated by the server device 30 includes the information indicating that the priority information is not to be updated according to the update instruction of the update instruction device 300, it is possible to prevent a situation where the priority information is again updated and overwritten based on the new update instruction generated by the new update instruction generated by the update instruction device. As the update instruction of the server device 30 includes information for enabling only the update through the update instruction of the server device 30, the update instruction of the server device 30 may indicate that the priority information is not to be updated according to the update instruction of the update instruction device 300.
In a situation where the update instruction includes the information of instructor, the information of instructor may indicate that the priority information is set not to be updated by the update instruction of the update instruction device 300. For example, the update instruction from the server device 30 includes the information of instructor (for example, the instructor ID: 0000) indicating that the priority information is set not to be updated by the update instruction of the update instruction device 300, or the information of instructor (for example, the instructor ID: 1111) indicating that the update of the priority information is enabled by the update instruction of the update instruction device 300. As the update instructions generated by the identical server device 30 includes different information of instructor, it is possible to indicate whether the priority information is updated or not by the update instruction of the update instruction device 300 without increasing the amount of information of the update instructions, It is necessary to specify in advance which of these information of instructor indicates whether or not the priority information is permitted to be updated by the update instruction of the update instruction device 300. Therefore, such information of instructor is information that indicates whether or not the priority information is permitted to be updated by the update instruction of the update instruction device 300.
In the present embodiment, it may be desirable to transmit the updated priority information updated based on the update instruction from the update instruction device 300 to the server device 30. It is possible for the server device 30 to grasp the priority of the state log set in the log transmission controller 100 by transmitting the updated priority information to the server device 30. Therefore, the priority information is already updated by the update instruction from the update instruction device 300. In a situation where it is not necessary to update the priority information according to the update instruction from the server device 30, it is possible to exclude the unnecessary information from the update instruction and transmit the update instruction to the log transmission controller 100. Therefore, it is possible to suppress the amount of communication through the update instruction.
According to the present embodiment, the priority may be promptly updated by adopting a simple fault detection result in the update instruction device 300, and may be further updated by adopting a detailed analysis result of the log through the server device 30. Therefore, it is possible to determine the state log required for analyzing the cyber-attack with higher precision to set and update the proper priority, as compared with a situation where the priority is updated based on only the update instruction from the update instruction device 300. Since it is possible to update the priority promptly as compared with a situation where the priority is updated based on only the update instruction from the server device 30, it is possible to prevent the required log from being lost even in a situation where the update instruction for the priority from the server device 30 cannot be properly received due to a bad communication environment between the in-vehicle system 10 and the server device 30.
In a third embodiment, the log transmission controller 100 transmits the state log and other useful information for log analysis in the server device 20 to the server device 20. Since the configuration and operation of the log transmission controller 100 and the update instruction device 300 in the present embodiment are identical to the ones in the first and second embodiments, the description is omitted. Although the following describes the server device as the server device 20 in the first embodiment, the server device in the present embodiment may also be the server device 30 in the second embodiment.
In the present embodiment, at least one of the ECUs 13 included in the in-vehicle system 10 in
The log acquisition device 101 in the present embodiment acquires the state log and the vehicular information transmitted from the vehicular information management device. The log acquisition device 101 may periodically acquire and store the vehicular information into the log storage 103, as similar to the state log. However, the log acquisition device 101 may acquire the vehicular information from the vehicular information management device in a situation where the fault detector 301 of the update instruction device 300 detects the fault. For example, in a situation where the log acquisition device 101 receives the state log provided with the fault information from the update instruction device 300, the log acquisition device 100 requests the vehicular information management device to transmit the vehicular information at a time of the fault detector 301 detecting the fault. In a situation where the log acquisition device 101 acquires the vehicular information, the log acquisition device 101 stores the vehicular information into the log storage 103. The log transmitter 106 transmits the state log and the vehicular information at a time of detecting the fault to the server device 20.
Unlike the state log, the vehicular information indicates the state of the vehicle. It is possible for the vehicular information to be used for analyzing which situation causes the occurrence of the fault, when the server device 20 analyzes the state log in detail. As the state log and the vehicular information at a time of detecting the fault are transmitted to the server device 20, it is possible to transmit the useful information for analyzing the log in the server device 20.
The features of the log transmission controller and the like according to each embodiment of the present disclosure have been described above.
Terms used in the description of each embodiment are examples and may be replaced with synonymous terms or terms having a synonymous function.
The block diagram used in the description of each embodiment is a diagram in which the configurations of devices and the like are classified and organized by function. An individual function of the functional blocks may be implemented by (i) hardware alone (i.e., by using hardware circuitry including digital and/or analog circuits without CPU), or (ii) software alone (i.e., by using CPU along with memory storing program instructions), or (iii) any combination of the hardware and the software. Further, since the block diagram illustrates the functions, the block diagram can be understood as disclosure of the method and the program that implements the method.
Order of functional blocks that can be grasped as processing, a sequence, and a method described in relation to each embodiment may be changed unless some restriction is imposed, for example, a result from one step is utilized at another step.
The terms “first”, “second”, or “N” (N is an integer) used in each embodiment and the present disclosure are used to distinguish two or more configurations and methods of the same type, it does not limit the order or superiority.
In the above-described embodiments, the system is mounted on the vehicle. However, the present disclosure may be used for the system for special devices or general purpose devices other than vehicles.
In the above-described embodiment, the apparatus disclosed in each of the embodiments mounts on a vehicle. However, the apparatus may be carried by a pedestrian.
Further, examples of the log transmission controller described in the present disclosure include the following. Examples of the security management device according to the present disclosure include a semiconductor device, an electronic circuit, a module, and a microcontroller. Example of the security management device according to the present disclosure include an electronic control unit (ECU) and a system board. Example of the security management device according to the present disclosure include a mobile phone, a smartphone, a tablet, a personal computer (PC), a workstation, and a server. Further, the security management device may be a device having a communication function such as a video camera, a still camera, a car navigation system.
In addition, necessary functions such as an antenna and a communication interface may be added to the log transmission controller.
The present disclosure is implemented not only by dedicated hardware having a configuration and a function described in relation to each embodiment. The present disclosure can also be implemented as a combination of a program for implementing the present disclosure, recorded on such a recording medium as memory and a hard disk and general-purpose hardware including dedicated or general-purpose CPU, memory, or the like, capable of executing the program.
A program may be stored in a non-transitory tangible storage medium including an external storage (for example, hard disk, USB memory, CD/BD), or an internal storage (for example, RAM, ROM) in a special-purpose or general-purpose hardware (for example, computer). Such a program may be downloaded to the storage medium in the hardware via a communication link from a server. As a result, it is possible to provide a latest function by updating the program.
Although the log transmission controller described in the present disclosure is an electronic control unit equipped in the automobile, the log transmission controller may be an electronic control unit which is not equipped in the automobile.
Here, the flowchart described in this application or the process of the flowchart is composed of a plurality of sections (or referred to as steps), and each section is expressed as, for example, S101. Each section may be divided into several subsections, while several sections may be combined into one section. Furthermore, each section thus configured may be referred to as a device, module, or means.
Any effects described in the above embodiments are effects attained by a configuration of an embodiment as an example of this disclosure, and are not necessarily effects of this disclosure.
In the present disclosure, the configuration disclosed in each embodiment is not limited to each embodiment alone, but may be combined across the embodiments. For example, the configuration disclosed in one embodiment may be combined with another embodiment. Further, the disclosed configurations may be collected and combined in each of multiple embodiments.
While the present disclosure has been described with reference to embodiments thereof, it is to be understood that the disclosure is not limited to the embodiments and constructions. The present disclosure is intended to cover various modification and equivalent arrangements. In addition, while the various combinations and configurations, other combinations and configurations, including more, less or only a single element, are also within the spirit and scope of the present disclosure.
| Number | Date | Country | Kind |
|---|---|---|---|
| 2020-104331 | Jun 2020 | JP | national |
