JP2017108351A - In-vehicle communication device, abnormality notification system, and abnormality notification method - Google Patents

Abstract

An abnormality notification system, an in-vehicle communication device, and an abnormality notification method capable of notifying that an abnormality has occurred in communication between a vehicle and the outside are provided. A gateway 30b of a vehicle 1b detects an abnormality related to communication with another vehicle 1a by a first wireless communication device 10b. When the gateway 30b detects an abnormality, the gateway 30b transmits identification information that can identify the vehicle 1a with which the first wireless communication device 10b is communicating from the second wireless communication device 20b to the server device 6 outside the vehicle. The server device 6 that has received the identification information from the vehicle 1b transmits an abnormality occurrence notification to the vehicle 1a related to the identification information. The gateway 30a of the vehicle 1a that has received the abnormality notification from the server device 6 at the second wireless communication device 20a can recognize that an abnormality has occurred in the first wireless communication device 10a. [Selection] Figure 1

Description

  The present invention relates to an in-vehicle communication device, an abnormality notification system, and an abnormality notification method that perform notification when an abnormality occurs in a communication device mounted on a vehicle.

  Conventionally, a plurality of electronic devices such as an ECU (Electronic Control Unit) is mounted on a vehicle, and these electronic devices are connected via an in-vehicle network such as a CAN (Controller Area Network). A plurality of electronic devices transmit and receive messages to and from each other via an in-vehicle network, whereby the plurality of electronic devices operate cooperatively and various functions such as vehicle travel control are realized. For such an in-vehicle network, for example, there is a possibility that unauthorized message transmission may be performed by unauthorized connection of an apparatus or unauthorized alteration of any electronic device.

  Patent Document 1 proposes a network monitoring device for estimating the presence or absence of a communication message that causes an abnormality in the communication state of the network in a network that transmits and receives communication messages based on a multitask method such as the CAN protocol. ing. This network monitoring device monitors a communication state of a communication bus to which a communication device that transmits a CAN protocol communication message is connected, and the reception interval of the communication message to be monitored is defined as a range including the transmission interval of the communication message. If it is shorter than the appropriate reception interval, it is determined that an abnormality has occurred in the communication state of this communication message. In addition, when the reception interval of the communication message to be monitored is longer than the appropriate reception interval, the network monitoring device determines that an abnormality has occurred in the communication state of other communication messages other than this communication message.

JP 2014-187445 A

  In recent years, the vehicle has a function of performing communication with other vehicles (so-called inter-vehicle communication function) and a function of performing communication with a server device using a mobile phone communication network or a wireless LAN (Local Area Network). Like this, the function to communicate with the outside of the car has begun to be installed. The network monitoring device described in Patent Document 1 monitors a network in a vehicle and cannot determine whether there is an abnormality related to communication with the outside of the vehicle. For example, if an inter-vehicle communication device is illegally taken over and an unauthorized message is sent to another vehicle, it can be determined that an abnormality has occurred in the other vehicle that received the unauthorized message. It is difficult for a device to determine that an abnormality has occurred in a vehicle-to-vehicle communication device.

  The present invention has been made in view of such circumstances, and an object of the present invention is to provide an in-vehicle communication device capable of notifying that an abnormality has occurred in communication between the vehicle and the outside, and an abnormality notification. To provide a system and an abnormality notification method.

  An in-vehicle communication device according to the present invention is mounted on a vehicle including a first wireless communication device that performs wireless communication with another vehicle and a second wireless communication device that performs wireless communication with a device outside the vehicle, An abnormality detection unit that detects an abnormality related to communication with another vehicle by the first wireless communication device, and the other vehicle in which the first wireless communication device was performing wireless communication when the abnormality detection unit detected an abnormality. An identification information transmission processing unit that performs processing for transmitting identification information that can be identified to the device outside the vehicle by the second wireless communication device, and a notification transmitted by the device outside the vehicle at the second wireless communication device And a notification reception processing unit for performing a reception process.

  In addition, the in-vehicle communication device according to the present invention includes a notification unit that performs notification to another in-vehicle device mounted on the vehicle when the notification reception processing unit receives a notification from the device outside the vehicle. It is characterized by that.

  The in-vehicle communication device according to the present invention further includes a stop processing unit that performs processing for stopping wireless communication of the first wireless communication device when the notification reception processing unit receives a notification from the device outside the vehicle. It is characterized by providing.

  An abnormality notification system according to the present invention is mounted on a vehicle and performs wireless communication between a first wireless communication device that performs wireless communication with another vehicle and a device that is mounted on the vehicle and outside the vehicle. A second wireless communication device to perform, an abnormality detection unit that is mounted on the vehicle and detects an abnormality related to communication with another vehicle by the first wireless communication device, and when the abnormality detection unit detects an abnormality, In-vehicle communication having an identification information transmission processing unit that performs processing of transmitting identification information that can identify the other vehicle in which the first wireless communication device was performing wireless communication to the device outside the vehicle by the second wireless communication device. A wireless communication unit that performs wireless communication between a device and the in-vehicle communication device, and an identification information reception processing unit that performs processing for receiving the identification information transmitted by the identification information transmission unit of the in-vehicle communication device by the wireless communication unit And the identification An abnormality notification device having a notification transmission processing unit that performs processing for transmitting a notification of abnormality detection to the vehicle related to the identification information received by the report receiving unit by the wireless communication unit, and the in-vehicle communication device includes the abnormality notification device. The notification transmission processing unit further includes a notification reception processing unit that performs processing for receiving the notification transmitted by the second wireless communication device.

  The abnormality notification system according to the present invention is mounted on the first vehicle, and the first wireless communication device that performs wireless communication with the second vehicle and the first wireless communication device that performs wireless communication with devices outside the vehicle. A first in-vehicle communication system including a two-wireless communication device, an in-vehicle communication device that communicates with the first wireless communication device and the second wireless communication device, and the first vehicle. A first wireless communication device that performs wireless communication with a vehicle, a second wireless communication device that performs wireless communication with a device outside the vehicle, and the first wireless communication device and the second wireless communication device Between a second in-vehicle communication system that includes an in-vehicle communication device that performs communication and a second wireless communication device of the first in-vehicle communication system and a second wireless communication device of the second in-vehicle communication system that are installed outside the vehicle. Has a wireless communication unit that performs wireless communication. An abnormality notification system including an abnormality notification device that notifies an abnormality that is detected, wherein the in-vehicle communication device of the first in-vehicle communication system detects an abnormality related to communication with the second vehicle by the first wireless communication device. When the abnormality is detected by the abnormality detection unit and the abnormality detection unit, the first wireless communication device can identify the second vehicle with which the first wireless communication device was performing wireless communication. An identification information transmission processing unit that performs processing to transmit to the notification device, wherein the abnormality notification device transmits the identification information transmitted by the identification information transmission unit of the in-vehicle communication device of the first in-vehicle communication system to the wireless communication unit And an identification information reception processing unit that performs processing of transmitting a notification of abnormality detection to the vehicle related to the identification information received by the identification information reception unit by the wireless communication unit. The in-vehicle communication device of the second in-vehicle communication system includes a notification reception processing unit that performs processing for receiving the notification transmitted by the notification transmission processing unit of the abnormality notification device in the second wireless communication device. To do.

  In addition, the abnormality notification method according to the present invention includes a first wireless communication device that is mounted on a first vehicle and performs wireless communication with a second vehicle and a wireless communication with a device outside the vehicle. The first in-vehicle communication device that communicates with the two wireless communication devices detects an abnormality related to the communication with the second vehicle by the first wireless communication device, and the first in-vehicle communication device detects that the abnormality detection unit When the abnormality is detected, the second wireless communication device performs processing for transmitting identification information that can identify the second vehicle that has been performing wireless communication to the abnormality notification device. The notification device performs processing for receiving the identification information transmitted by the first in-vehicle communication device, and the abnormality notification device performs processing for transmitting a notification of abnormality detection to the vehicle related to the received identification information. Between the first vehicle and the second vehicle. Notification of abnormality detection transmitted by the abnormality notification device by the second in-vehicle communication device that communicates with the first wireless communication device that performs line communication and the second wireless communication device that performs wireless communication with the abnormality notification device Is received by the second wireless communication apparatus.

In the present invention, a first wireless communication device that performs wireless communication with another vehicle, a second wireless communication device that performs wireless communication with a device outside the vehicle, such as a server device, the first wireless communication device, A vehicle-mounted communication device that performs in-vehicle communication with the second wireless communication device is mounted on the vehicle. Note that the three devices, the first wireless communication device, the second wireless communication device, and the in-vehicle communication device, are not necessarily individual devices, and two or three of these devices may be realized as one device. Good. The abnormality notification of the present invention is performed using at least two vehicles equipped with the first wireless communication device, the second wireless communication device, and the in-vehicle communication device, and an abnormality notification device installed outside the vehicle.
The in-vehicle communication device detects an abnormality related to communication with the other vehicle by the first wireless communication device, for example, when an unauthorized message is transmitted from the other vehicle to the first wireless communication device. When the abnormality is detected, the in-vehicle communication device transmits identification information that can identify the vehicle with which the first wireless communication device is communicating when the abnormality is detected from the second wireless communication device to the abnormality notification device outside the vehicle. To do. The abnormality notification device that has received the identification information from the in-vehicle communication device notifies the abnormality detection to the vehicle related to the identification information (that is, the vehicle that has performed an illegal message transmission or the like).
Thereby, the vehicle-mounted communication apparatus which received the notification from an abnormality notification apparatus can recognize that abnormality has generate | occur | produced in the 1st radio | wireless communication apparatus of the vehicle in which self was mounted.

  Moreover, in this invention, the vehicle-mounted communication apparatus which received the notification from an abnormality notification apparatus performs notification to the other vehicle-mounted apparatus mounted in the vehicle. Thereby, other in-vehicle devices can recognize that an abnormality has occurred in the first wireless communication device, and for example, it is possible to perform processing such as discarding a message from the first wireless communication device. .

  Moreover, in this invention, the vehicle-mounted communication apparatus which received the notification from an abnormality notification apparatus performs the process which stops the wireless communication of a 1st wireless communication apparatus. The in-vehicle communication device may perform a process of transmitting a stop command to the first wireless communication device, for example, or may perform a process of cutting off power supply to the first wireless communication device, for example. You may perform the process which stops radio | wireless communication. Thereby, the unauthorized message transmission to the other vehicle by the first wireless communication device can be stopped.

  In the case of the present invention, when an abnormality relating to communication is detected in the first wireless communication device, identification information that can identify the communication partner vehicle is transmitted from the in-vehicle communication device to the abnormality notification device, and the abnormality notification is received. By adopting a configuration in which the apparatus notifies the vehicle-mounted communication device of the vehicle related to the identification information of the abnormality detection, the vehicle that has detected the abnormality can be notified to the vehicle that has generated the abnormality via the abnormality notification device.

It is a schematic diagram which shows the structural example of the abnormality notification system which concerns on this Embodiment. It is a block diagram which shows the structure of the gateway mounted in each vehicle. It is a block diagram which shows the structure of a server apparatus. It is a schematic diagram for demonstrating the process of the abnormality notification system which concerns on this Embodiment. It is a flowchart which shows the procedure of the process which a gateway performs when abnormality arises in the radio | wireless communication of a 1st radio | wireless communication apparatus. It is a flowchart which shows the procedure of the abnormality notification process which a server apparatus performs. It is a flowchart which shows the procedure of the process which a gateway performs when an abnormality generation notification is received.

  FIG. 1 is a schematic diagram illustrating a configuration example of an abnormality notification system according to the present embodiment. The abnormality notification system according to the present embodiment includes at least two vehicles 1 and a server device 6 installed at an appropriate place outside the vehicle. Each vehicle 1 is equipped with a first wireless communication device 10, a second wireless communication device 20, a gateway 30, and the like, and these three devices are connected via an in-vehicle network. The first wireless communication device 10 of the vehicle 1 can perform wireless communication with the first wireless communication device 10 of another vehicle 1. The second wireless communication device 20 of the vehicle 1 can perform wireless communication with the wireless station 5 using a wireless network such as a mobile phone communication network, and communicates with the server device 6 via the wireless station 5. It can be carried out.

  Note that the abnormality notification system according to the present embodiment includes two vehicles 1. However, when it is necessary to distinguish between them, a or b is added to the end of the reference numerals as in the vehicles 1a and 1b. To distinguish. Similarly, the first wireless communication device 10, the second wireless communication device 20, and the gateway 30 mounted on each vehicle 1 are the same as the first wireless communication device 10 a and the second wireless communication device 20 a mounted on the vehicle 1 a. And the gateway 30a, which are mounted on the vehicle 1b are distinguished as the first wireless communication device 10b, the second wireless communication device 20b, and the gateway 30b.

  FIG. 2 is a block diagram illustrating a configuration of the gateway 30 mounted on each vehicle 1. The gateway 30 according to the present embodiment includes a processing unit 31 and four in-vehicle communication units 32a to 32d. The processing unit 31 is configured using an arithmetic processing device such as a CPU (Central Processing Unit) or an MPU (Micro-Processing Unit). The processing unit 31 can perform various processes related to message relay processing and abnormality notification in the in-vehicle network by reading and executing a program stored in a ROM (Read Only Memory) (not shown) or the like.

  The in-vehicle communication units 32a to 32d are each connected to a communication line arranged in the vehicle 1, and communicate with one or a plurality of other in-vehicle devices mounted on the vehicle 1 via the communication line. It can be carried out. The in-vehicle communication units 32a to 32d perform message transmission / reception according to, for example, a CAN communication protocol. In the present embodiment, the in-vehicle communication unit 32a can communicate with the ECU 40a via a communication line, the in-vehicle communication unit 32b can communicate with the ECU 40b, and the in-vehicle communication unit 32c can communicate with the display device 40c. The in-vehicle communication unit 32d can communicate with the first wireless communication device 10 and the second wireless communication device 20. The ECUs 40a and 40b can be various ECUs mounted on the vehicle 1, such as an engine control ECU or a body ECU. The display device 40c is a liquid crystal display, for example, and may be shared with the car navigation device.

  The first wireless communication device 10 performs wireless communication with the first wireless communication device 10 mounted on another vehicle 1. The first wireless communication device 10 is a wireless communication device that realizes so-called vehicle-to-vehicle communication. The first wireless communication device 10 gives the message received from the other vehicle 1 to the gateway 30 via the in-vehicle network. When a message for transmission is given from the gateway 30 via the in-vehicle network, this message is transmitted to the other vehicle 1 by inter-vehicle communication.

  The second wireless communication device 20 communicates with a device outside the vehicle 1 via a wireless network such as a cellular phone communication network or a wireless local area network (LAN). In the present embodiment, the second wireless communication device 20 can perform wireless communication with the wireless station 5. The wireless station 5 is connected to the server device 6 via the Internet or a dedicated network, and the second wireless communication device 20 can communicate with the server device 6 via the wireless station 5. Note that a plurality of communication devices may further intervene between the second wireless communication device 20 and the server device 6. The second wireless communication device 20 gives the message received from the server device 6 to the gateway 30 via the in-vehicle network. When a message for transmission is given from the gateway 30 via the in-vehicle network, this message is transmitted to the server device 6.

  In the processing unit 31 of the gateway 30 according to the present embodiment, a relay processing unit 41, an abnormality detection unit 42, an identification information transmission processing unit 43, and a notification reception processing unit 44 are executed by executing a program stored in a ROM or the like. The in-vehicle notification processing unit 45, the stop processing unit 46, and the like are realized as software functional blocks. The relay processing unit 41 performs a process of relaying a message between a plurality of communication lines arranged in the vehicle 1. The relay processing unit 41 relays the message by transmitting the message received by any one of the in-vehicle communication units 32a to 32d from the other three in-vehicle communication units 32a to 32d. However, the relay processing unit 41 receives the message received by the in-vehicle communication unit 32d connected to the first wireless communication device 10 and the second wireless communication device 20 when a notification of occurrence of abnormality is given from the server device 6. Relaying to other in-vehicle communication units 32a to 32c is prohibited.

  The abnormality detection unit 42 performs processing for detecting an abnormality in wireless communication with the other vehicle 1 by the first wireless communication device 10. For example, when the amount of messages received from the other vehicle 1 per predetermined time in the first wireless communication device 10 exceeds a threshold value, the abnormality detection unit 42 is when the ID attached to the received message is not valid. Or, when the authenticator included in the received message is not valid, it is determined that an abnormality has occurred in communication. The conditions for determining that an abnormality has occurred are not limited to those described above, and various other conditions may be adopted.

  When the abnormality detection unit 42 detects an abnormality, the identification information transmission processing unit 43 acquires the ID of the vehicle 1 with which the first wireless communication device 10 was communicating when the abnormality was detected. For example, when the first wireless communication apparatus 10 performs authentication processing by exchanging information such as an ID and a password prior to performing communication with another vehicle 1, the identification information transmission processing unit 43 is replaced at this time. The ID of the vehicle 1 can be acquired from the information. For example, when an ID indicating a transmission source is attached to a message transmitted and received between the vehicles 1, the identification information transmission processing unit 43 can acquire the ID attached to the received message. The ID acquired by the identification information transmission processing unit 43 is not limited to the ID of the vehicle 1, for example, the ID given to the first wireless communication device 10 of the vehicle 1, or the ID of the user of the vehicle 1. Good. The identification information transmission processing unit 43 that has acquired the ID transmits a message including this identification information as data to the server device 6 by the second wireless communication device 20.

  The notification reception processing unit 44 performs processing for receiving, by the second wireless communication device 20, a notification indicating that an abnormality transmitted from the server device 6 has occurred. When the second wireless communication apparatus 20 receives the above notification in the in-vehicle communication unit 32d connected via the communication line, the notification reception processing unit 44 stores the notification in a storage unit (not shown) or the like. When the notification reception processing unit 44 receives an abnormality occurrence notification from the server device 6, the in-vehicle notification processing unit 45 transmits a notification that an abnormality has occurred from the in-vehicle communication units 32 a to 32 d to other in-vehicle devices. Perform the process.

  The stop processing unit 46 performs processing to stop the wireless communication by the first wireless communication device 10 when the notification reception processing unit 44 receives the abnormality occurrence notification from the server device 6. For example, the stop processing unit 46 stops the wireless communication with the other vehicle 1 by the first wireless communication device 10 by transmitting a stop command or the like from the in-vehicle communication unit 32d to the first wireless communication device 10. In addition, for example, the stop processing unit 46 transmits a command to stop power supply to the first wireless communication device 10 to the device supplying power to the first wireless communication device 10, thereby The power supply to the apparatus 10 is interrupted to stop the operation. Note that various methods other than these can be adopted as a method of stopping the wireless communication of the first wireless communication device 10 by the stop processing unit 46.

  FIG. 3 is a block diagram illustrating a configuration of the server device 6. The server device 6 according to the present embodiment includes a processing unit 61, a storage unit 62, a communication unit 63, and the like. The processing unit 61 is configured using an arithmetic processing device such as a CPU or MPU. The processing unit 61 reads out and executes a program (not shown) stored in the storage unit 62, and notifies the second vehicle 1 of the occurrence of abnormality based on the identification information received from the first vehicle 1. Can be processed.

  The storage unit 62 is configured using a storage device such as a hard disk. In the present embodiment, the storage unit 62 stores a table in which the ID of the vehicle 1 is associated with communication information such as an e-mail address or an IP address necessary for communication with the vehicle 1. . The server device 6 that has received the ID transmitted by the identification information transmission processing unit 43 of the vehicle 1 acquires the communication information corresponding to this ID from the table of the storage unit 62, and sends it to the vehicle 1 indicated by the acquired communication information. Send an error notification. When the ID transmitted by the identification information transmission processing unit 43 of the vehicle 1 can be directly used to communicate with the vehicle 1 to which this ID is attached, the above table is stored in the storage unit 62. You do n’t have to.

  The communication unit 63 can communicate with the wireless station 5 via, for example, the Internet or a dedicated network. The radio station 5 is a device for configuring a mobile phone communication network, for example, and a plurality of radio stations 5 are installed at appropriate locations near the road on which the vehicle 1 can travel. The second wireless communication device 20 of the vehicle 1 can communicate with the server device 6 via the wireless station 5 by performing wireless communication with the nearest wireless station 5. The communication unit 63 transmits the information for transmission given from the processing unit 61 to the wireless station 5 and gives the information received from the wireless station 5 to the processing unit 61.

  In the processing unit 61 of the server device 6 according to the present embodiment, the identification information reception processing unit 61a, the notification transmission processing unit 61b, and the like are executed as software functional blocks by executing a program stored in the storage unit 62. Realized. The identification information reception processing unit 61a receives the message including the ID transmitted by the identification information transmission processing unit 43 of the vehicle 1 by the communication unit 63, and performs processing for acquiring the ID included in the received message. The notification transmission processing unit 61 acquires and acquires communication information necessary for communicating with the vehicle 1 corresponding to the ID acquired by the identification information reception processing unit 61a with reference to the table stored in the storage unit 62. The process of transmitting the abnormality occurrence notification to the vehicle 1 indicated by the communication information is performed.

  FIG. 4 is a schematic diagram for explaining processing of the abnormality notification system according to the present embodiment. For example, an attack such as unauthorized access is performed by an external attacker on the first wireless communication device 10a mounted on the vehicle 1a (see the thick black arrow in (1) in the figure), and the first wireless communication device 10a It is assumed that an abnormality such as hijacking has occurred. The first wireless communication device 10a in which an abnormality has occurred performs, for example, a DoS (Denial of Service) attack or an unauthorized access attack on another vehicle 1b that travels in the vicinity (see the black thick arrow in (2) in the figure). reference).

  The first wireless communication device 10b of the vehicle 1b that has received an attack from the vehicle 1a performs operations such as transmitting a large amount of messages to the in-vehicle network or transmitting an unauthorized message to the in-vehicle network. The abnormality detection unit 42 of the gateway 30b detects such an abnormality of the first wireless communication device 10b (see the thick black arrow in (3) in the figure). When the abnormality detecting unit 42 detects an abnormality, the identification information transmission processing unit 43 of the gateway 30b acquires and acquires the ID of the attacking vehicle 1a based on the message received by the first wireless communication device 10b. A message including the ID is wirelessly transmitted from the second wireless communication device 20b to the server device 6 (see the thick black arrow in (4) in the figure).

  The message including the ID transmitted by the vehicle 1b is received by the identification information reception processing unit 61a of the server device 6 via the wireless station 5. The notification transmission processing unit 61b of the server device 6 acquires transmission information corresponding to the received ID from the table of the storage unit 62, and transmits an abnormality occurrence notification to the vehicle 1a indicated by the acquired communication information (in the drawing). (See the thick black arrow in (5)).

  The abnormality occurrence notification transmitted by the server device 6 is received by the second wireless communication device 20a of the vehicle 1a, and reception processing is performed by the notification reception processing unit 44 of the gateway 30a. When the abnormality notification is received, the in-vehicle notification processing unit 45 of the gateway 30a notifies the ECU 40a, 40b in the vehicle 1a that the in-vehicle communication units 32a to 32d have notified the abnormality to the first wireless communication device 10a. And it transmits to vehicle equipment, such as the display apparatus 40c. At this time, the in-vehicle notification processing unit 45 may give a display command such as a warning message to the display device 40c, and the display device 40c displays a warning message for the user of the vehicle 1a accordingly. When the abnormality occurrence notification is received, the processing unit 31 of the gateway 30 prohibits part or all of the communication relay processing by the relay processing unit 41. At this time, the processing unit 31 prohibits a process of relaying at least the message received by the in-vehicle communication unit 32d to the other in-vehicle communication units 32a to 32c. Further, the stop processing unit 46 of the gateway 30a transmits a stop command from the in-vehicle communication unit 32d to the first wireless communication device 10a, and performs a process of stopping the operation of the first wireless communication device 10a ((6) in the figure). (See the thick black arrow).

  FIG. 5 is a flowchart illustrating a procedure of processing performed by the gateway 30 when an abnormality occurs in the wireless communication of the first wireless communication device 10. The abnormality detection unit 42 of the processing unit 31 of the gateway 30 makes an abnormality in the wireless communication with the other vehicle 1 by the first wireless communication device 10 based on the frequency or content of the message given from the first wireless communication device 10. It is determined whether or not it has been detected (step S1). When no abnormality is detected (S1: NO), the abnormality detection unit 42 stands by until an abnormality is detected. When the abnormality is detected (S1; YES), the identification information transmission processing unit 43 of the processing unit 31 detects the first wireless communication device when the abnormality is detected based on the information included in the message given from the first wireless communication device 10. The ID of the vehicle 1 of the communication partner with which 10 was performing wireless communication is acquired (step S2). The identification information transmission processing unit 43 creates a message including the acquired ID of the vehicle 1 (step S3), transmits the created message to the server device 6 by the second wireless communication device 20 (step S4), and performs processing. finish.

  FIG. 6 is a flowchart showing a procedure of abnormality notification processing performed by the server device 6. The identification information reception processing unit 61a of the processing unit 61 of the server device 6 determines whether or not the communication unit 63 has received a message including an ID from the vehicle 1 (step S11). When the message including the ID is not received (S11: NO), the identification information reception processing unit 61a waits until the message including the ID is received. When the message including the ID is received (S11: YES), the identification information reception processing unit 61a acquires the ID included in the received message. Next, the notification transmission processing unit 61b of the processing unit 61 acquires communication information necessary for communicating with the vehicle 1 having the acquired ID from the table of the storage unit 62 (step S12). Based on the acquired communication information, the notification transmission processing unit 61b transmits an abnormality occurrence notification to the vehicle 1 indicated by the communication information (step S13), and ends the process.

  FIG. 7 is a flowchart illustrating a procedure of processing performed by the gateway 30 when an abnormality occurrence notification is received. The notification reception processing unit 44 of the processing unit 31 of the gateway 30 determines whether or not the second wireless communication device 20 has received the abnormality occurrence notification from the server device 6 (step S21). When the abnormality occurrence notification is not received (S21: NO), the notification reception processing unit 44 waits until the abnormality occurrence notification is received. When the abnormality occurrence notification is received (S21: YES), the processing unit 31 prohibits the relay processing unit 41 from relaying a message from the in-vehicle communication unit 32d to the in-vehicle communication units 32a to 32c (step S22). The in-vehicle notification processing unit 45 of the processing unit 31 transmits a notification that an abnormality has occurred in the first wireless communication device 10 in the in-vehicle communication units 32a to 32d (step S23). Further, the processing unit 31 displays a warning message for the user of the vehicle 1 by transmitting a warning message display command to the display device 40c in the in-vehicle communication unit 32c (step S24). The stop processing unit 46 of the processing unit 31 transmits an operation stop command to the first wireless communication device 10 in the in-vehicle communication unit 32d (step S25), and ends the process.

  In the abnormality notification system according to the present embodiment having the above-described configuration, the second wireless communication is performed between the first wireless communication device 10 that performs wireless communication with another vehicle 1 and a device outside the vehicle such as the server device 6. The vehicle 1 includes a wireless communication device 20 and a gateway 30 that performs in-vehicle communication with the first wireless communication device 10 and the second wireless communication device 20. The abnormality notification according to the present embodiment uses at least two vehicles 1 on which the first wireless communication device 10, the second wireless communication device 20, and the gateway 30 are mounted, and a server device 6 installed outside the vehicle 1. Done.

  The abnormality detection unit 42 of the gateway 30 communicates with the other vehicle 1 by the first wireless communication device 10 when, for example, an unauthorized message transmission from the other vehicle 1 is performed to the first wireless communication device 10. Detect an abnormality related to. The identification information transmission processing unit 43 of the gateway 30 provides identification information such as an ID that can identify the vehicle with which the first wireless communication device 10 is communicating when the abnormality detection unit 42 detects an abnormality, as a second wireless communication. The data is transmitted from the device 20 to the server device 6 outside the vehicle. The server device 6 that has received information such as an ID from the vehicle 1 by the identification information reception processing unit 61a notifies the occurrence of an abnormality to the vehicle 1 related to this ID (that is, the vehicle 1 that has transmitted an illegal message). Send. Thereby, the gateway 30 that has received the abnormality occurrence notification from the server device 6 can recognize that an abnormality has occurred in the first wireless communication device 10 of the vehicle 1 in which the gateway 30 is mounted.

  In the present embodiment, in the gateway 30 that has received the abnormality notification from the server device 6, the in-vehicle notification processing unit 45 sends the in-vehicle communication units 32 a to 32 d to other in-vehicle devices in the vehicle 1. 10 is notified that an abnormality has occurred. Thereby, it is possible for other in-vehicle devices mounted on the vehicle 1 to recognize that an abnormality has occurred in the first wireless communication device 10, such as discarding a message from the first wireless communication device 10. Processing can be performed.

  Further, in the present embodiment, the gateway 30 that has received the abnormality occurrence notification from the server device 6 performs a process in which the stop processing unit 46 stops the wireless communication of the first wireless communication device 10. The stop processing unit 46 may transmit a stop command from the in-vehicle communication unit 32d to the first wireless communication device 10, for example, or may perform a process of cutting off power supply to the first wireless communication device 10, for example. A process for stopping the wireless communication of the first wireless communication apparatus 10 by a method other than these may be performed. Thereby, unauthorized message transmission to the other vehicle 1 by the first wireless communication device 10 can be stopped.

  Further, in the present embodiment, the gateway 30 that has received the abnormality occurrence notification from the server device 6 prohibits the relay processing unit 41 from relaying messages between the in-vehicle networks. At this time, the gateway 30 at least prohibits the process of relaying the message received by the in-vehicle communication unit 32d to which the first wireless communication device 10 is connected to the other in-vehicle communication units 32a to 32c. Thereby, it can prevent that the message from the 1st radio | wireless communication apparatus 10 which abnormality has produced has a bad influence on other vehicle equipment.

  In the present embodiment, the three devices, the first wireless communication device 10, the second wireless communication device 20, and the gateway 30, which are mounted on the vehicle 1, are individual devices, but the present invention is not limited to this. Two or three of the first wireless communication device 10, the second wireless communication device 20, and the gateway 30 farmland may be realized as one device. Moreover, the structure of the apparatus mounted in the some vehicle 1 does not need to be the same.

  In addition, the gateway 30 that has received the abnormality occurrence notification from the server device 6 is configured to perform the abnormality occurrence notification to the in-vehicle device, the first wireless communication device 10 being stopped, and the message relay prohibition processing. It is not a thing. The gateway 30 may be configured to perform some of these processes, or may be configured to perform processes other than these processes.

  Moreover, although the server apparatus 6 mounted in the vehicle 1 is configured to perform processing such as abnormality detection and transmission of identification information, the present invention is not limited to this. Another vehicle-mounted device connected to the first wireless communication device 10 may be configured to detect abnormality, and for example, the second wireless communication device 20 may be configured to detect abnormality. Moreover, the structure which the other vehicle equipment connected to the 2nd radio | wireless communication apparatus 20 transmits identification information may be sufficient, for example, the structure which the 2nd radio | wireless communication apparatus 20 transmits identification information may be sufficient. That is, a configuration in which the processing performed by the gateway 30 in the present embodiment is performed by the second wireless communication device 20 or other in-vehicle devices may be used.

  Moreover, although the 1st radio | wireless communication apparatus 10 and the 2nd radio | wireless communication apparatus 20 were set as the structure connected to the gateway 30 via a common communication line, it does not restrict to this. The first wireless communication device 10 and the second wireless communication device 20 may be configured to be connected to the gateway 30 via different communication lines.

1, 1a, 1b Vehicle 5 Radio station 6 Server device (abnormality notification device)
10, 10a, 10b First wireless communication device 20, 20a, 20b Second wireless communication device 30, 30a, 30b Gateway (in-vehicle communication device)
31 processing unit 32a to 32d In-vehicle communication unit 40a, 40b ECU
40c Display device 41 Relay processing unit 42 Abnormality detection unit 43 Identification information transmission processing unit 44 Notification reception processing unit 45 In-car notification processing unit (notification unit)
46 Stop processing unit 61 Processing unit 61a Identification information reception processing unit 61b Notification transmission processing unit 62 Storage unit 63 Communication unit

Claims (6)

It is mounted on a vehicle including a first wireless communication device that performs wireless communication with another vehicle and a second wireless communication device that performs wireless communication with a device outside the vehicle,
An abnormality detection unit for detecting an abnormality related to communication with another vehicle by the first wireless communication device;
When the abnormality detection unit detects an abnormality, the second wireless communication device transmits identification information that can identify the other vehicle with which the first wireless communication device was performing wireless communication to the device outside the vehicle. An identification information transmission processing unit for processing;
An in-vehicle communication device comprising: a notification reception processing unit that performs processing for receiving the notification transmitted by the device outside the vehicle by the second wireless communication device. 2. The notification unit according to claim 1, further comprising: a notification unit that performs notification to another in-vehicle device mounted on the vehicle when the notification reception processing unit receives a notification from a device outside the vehicle. In-vehicle communication device. 2. The apparatus according to claim 1, further comprising: a stop processing unit that performs a process of stopping wireless communication of the first wireless communication device when the notification reception processing unit receives a notification from the device outside the vehicle. Item 3. The in-vehicle communication device according to Item 2. A first wireless communication device mounted on a vehicle and performing wireless communication with another vehicle;
A second wireless communication device mounted on the vehicle and performing wireless communication with a device outside the vehicle;
An abnormality detection unit that is mounted on the vehicle and detects an abnormality related to communication with another vehicle by the first wireless communication device, and the first wireless communication device wirelessly communicates when the abnormality detection unit detects an abnormality. An in-vehicle communication device having an identification information transmission processing unit that performs processing of transmitting identification information that can identify the other vehicle that has been performed to the device outside the vehicle by the second wireless communication device;
A wireless communication unit that performs wireless communication with the in-vehicle communication device, an identification information reception processing unit that performs processing for receiving the identification information transmitted by the identification information transmission unit of the in-vehicle communication device by the wireless communication unit, and An abnormality notification device having a notification transmission processing unit that performs processing of transmitting a notification of abnormality detection to the vehicle related to the identification information received by the identification information receiving unit by the wireless communication unit;
The in-vehicle communication device further includes a notification reception processing unit that performs processing for receiving, by the second wireless communication device, a notification transmitted by the notification transmission processing unit of the abnormality notification device. A first wireless communication device mounted on a first vehicle and performing wireless communication with a second vehicle, a second wireless communication device performing wireless communication with a device outside the vehicle, and the first wireless A first in-vehicle communication system comprising a communication device and an in-vehicle communication device that communicates with the second wireless communication device;
A first wireless communication device mounted on the second vehicle and performing wireless communication with the first vehicle, a second wireless communication device performing wireless communication with a device outside the vehicle, and the first A second in-vehicle communication system comprising an in-vehicle communication device that communicates with one wireless communication device and the second wireless communication device;
An abnormality related to communication having a wireless communication unit installed outside the vehicle and performing wireless communication between the second wireless communication device of the first in-vehicle communication system and the second wireless communication device of the second in-vehicle communication system An abnormality notification system comprising an abnormality notification device for notifying
The in-vehicle communication device of the first in-vehicle communication system is:
An abnormality detection unit for detecting an abnormality related to communication with the second vehicle by the first wireless communication device;
When the abnormality detection unit detects an abnormality, the first wireless communication device transmits identification information that can identify the second vehicle that is performing wireless communication to the abnormality notification device by the second wireless communication device. An identification information transmission processing unit for processing,
The abnormality notification device includes:
An identification information reception processing unit that performs processing for receiving the identification information transmitted by the identification information transmission unit of the in-vehicle communication device of the first in-vehicle communication system by the wireless communication unit;
A notification transmission processing unit that performs processing of transmitting a notification of abnormality detection to the vehicle related to the identification information received by the identification information receiving unit by the wireless communication unit;
The in-vehicle communication device of the second in-vehicle communication system includes a notification reception processing unit that performs processing for receiving the notification transmitted by the notification transmission processing unit of the abnormality notification device at the second wireless communication device. Anomaly notification system. A first radio communication device that is mounted on a first vehicle and communicates with a second radio communication device that performs radio communication with a device outside the vehicle and a first radio communication device that performs radio communication with the second vehicle. The in-vehicle communication device detects an abnormality related to communication with the second vehicle by the first wireless communication device,
When the first in-vehicle communication device detects the abnormality by the abnormality detection unit, the second wireless communication device is configured to identify identification information that can identify the second vehicle with which the first wireless communication device was performing wireless communication. To send to the abnormality notification device,
The abnormality notification device performs a process of receiving the identification information transmitted by the first in-vehicle communication device,
The abnormality notification device performs a process of transmitting a notification of abnormality detection to the vehicle related to the received identification information,
Communication with a first wireless communication device mounted on the second vehicle and performing wireless communication with the first vehicle and a second wireless communication device performing wireless communication with the abnormality notification device The abnormality notification method, wherein the second in-vehicle communication device performs a process of receiving an abnormality detection notification transmitted by the abnormality notification device at the second wireless communication device.

Images