JP6992959B2 - Communication processing system, communication processing device, communication processing method and communication processing program - Google Patents

Description

The present invention relates to a communication processing system, a communication processing device, a communication processing method, and a communication processing program.

In the above technical field, Patent Document 1 discloses a technique for switching a route by using a flow table of an internal switch. Patent Document 2 discloses a technique for determining whether or not a CAN message needs to be relayed and a destination path by referring to a routing table in an in-vehicle communication network.

Publication of International Application WO2012 / 165446 International Application Publication WO2008 / 126698

However, in the technique described in the above document, it is the message identifier and the source and destination information that the route is switched in the flow table, and the virtual switch determines the content of the data contained in the message and performs routing. I couldn't control it.

An object of the present invention is to provide a technique for solving the above-mentioned problems.

In order to achieve the above object, the communication processing device according to the present invention is
A communication processing device included in an in-vehicle communication network.
A setting means for setting an abnormality determination data pattern for determining whether a received CAN (Controller Area Network) message contains a data pattern indicating a vehicle abnormality in at least one virtual switch means of the virtual network, and a setting means.
A data pattern determination means for determining whether or not the same data pattern is included by comparing at least a part of the data patterns included in the CAN message while shifting the abnormality determination data pattern.
When the at least a part of the data pattern and the abnormality determination data pattern include the same data pattern, a control means for controlling switching of the virtual switch means in order to perform processing at the time of a vehicle abnormality.
A generation means for generating the abnormality determination data pattern indicating a vehicle abnormality, which may be included in the CAN message, based on the history of a normal CAN message or an abnormal CAN message.
To prepare for .

In order to achieve the above object, the communication processing method according to the present invention is:
It is a communication processing method of a communication processing device included in an in-vehicle communication network.
A setting step for setting an abnormality determination data pattern for determining whether a received CAN (Controller Area Network) message contains a data pattern indicating a vehicle abnormality in at least one virtual switch means of the virtual network, and a setting step.
A data pattern determination step of determining whether or not the same data pattern is included by comparing at least a part of the data patterns included in the CAN message while shifting the abnormality determination data pattern.
When the at least a part of the data pattern and the abnormality determination data pattern include the same data pattern, a control step for controlling switching of the virtual switch means in order to perform processing at the time of vehicle abnormality.
A generation step that generates the abnormality determination data pattern indicating a vehicle abnormality, which may be included in the CAN message, based on the history of a normal CAN message or an abnormal CAN message.
Including .

In order to achieve the above object, the communication processing program according to the present invention is
A communication processing program executed by a communication processing device included in an in-vehicle communication network.
A setting step for setting an abnormality determination data pattern for determining whether a received CAN (Controller Area Network) message contains a data pattern indicating a vehicle abnormality in at least one virtual switch means of the virtual network, and a setting step.
A data pattern determination step of determining whether or not the same data pattern is included by comparing at least a part of the data patterns included in the CAN message while shifting the abnormality determination data pattern.
When the at least a part of the data pattern and the abnormality determination data pattern include the same data pattern, a control step for controlling switching of the virtual switch means in order to perform processing at the time of vehicle abnormality.
A generation step that generates the abnormality determination data pattern indicating a vehicle abnormality, which may be included in the CAN message, based on the history of a normal CAN message or an abnormal CAN message.
Let the computer run .

In order to achieve the above object, the communication processing system according to the present invention is
A communication processing system that constitutes an in-vehicle communication network.
A collecting means for collecting CAN (Controller Area Network) messages transmitted in the virtual network of the in-vehicle communication network, and
A generation means for generating an abnormality determination data pattern indicating a vehicle abnormality, which may be included in the CAN message, based on the history of normal CAN messages or abnormal CAN messages collected by the collection means.
A setting means for setting the abnormality determination data pattern in at least one virtual switch means of the virtual network, and a setting means.
A determination means for determining whether or not the same data pattern is included by comparing at least a part of the data pattern included in the transmitted CAN message while shifting the abnormality determination data pattern.
When the at least a part of the data pattern and the abnormality determination data pattern include the same data pattern, a control means for controlling switching of the virtual switch means in the virtual network in order to perform processing at the time of a vehicle abnormality.
To prepare for .

According to the present invention, it is possible to control switching by determining the content of data included in a message in a virtual switch.

It is a block diagram which shows the structure of the communication processing apparatus which concerns on 1st Embodiment of this invention. It is a figure which shows the display example in the communication processing system for vehicle which includes the communication processing apparatus which concerns on 2nd Embodiment of this invention. It is a figure which shows the outline of the communication processing system for in-vehicle use including the in-vehicle gateway as the communication processing apparatus which concerns on 2nd Embodiment of this invention. It is a figure which shows the outline of the vehicle-mounted gateway as a communication processing apparatus which concerns on 2nd Embodiment of this invention. It is a figure which shows the log collection process and the normal state establishment process of an in-vehicle gateway as a communication processing apparatus which concerns on 2nd Embodiment of this invention. It is a figure which shows the log collection processing and abnormality detection processing of the vehicle-mounted gateway as the communication processing apparatus which concerns on 2nd Embodiment of this invention. It is a figure which shows the functional structure of the vehicle-mounted gateway as a communication processing apparatus which concerns on 2nd Embodiment of this invention. It is a sequence diagram which shows the operation procedure of the vehicle-mounted gateway as the communication processing apparatus which concerns on 2nd Embodiment of this invention. It is a figure which shows the functional structure of the self-learning type abnormality detection processing part which concerns on 2nd Embodiment of this invention. It is a figure which shows the structure of the communication log database which concerns on 2nd Embodiment of this invention. It is a figure which shows the structure of the abnormality determination database which concerns on 2nd Embodiment of this invention. It is a figure which shows the functional structure of the virtual network controller which concerns on 2nd Embodiment of this invention. It is a figure which shows the structure of the flow table generation table which concerns on 2nd Embodiment of this invention. It is a figure which shows the functional structure of the virtual network switch which concerns on 2nd Embodiment of this invention. It is a figure which shows the structure of the flow table storage part which concerns on 2nd Embodiment of this invention. It is a flowchart which shows the processing procedure of the vehicle-mounted gateway as the communication processing apparatus which concerns on 2nd Embodiment of this invention. It is a flowchart which shows the procedure of the log collection processing which concerns on 2nd Embodiment of this invention. It is a flowchart which shows the procedure of the normal state establishment process which concerns on 2nd Embodiment of this invention. It is a flowchart which shows the procedure of abnormality determination processing which concerns on 2nd Embodiment of this invention. It is a flowchart which shows the procedure of the virtual network in the abnormality determination processing which concerns on 2nd Embodiment of this invention. It is a figure which shows the structure of the abnormality processing table of the abnormality determination database which concerns on 3rd Embodiment of this invention. It is a flowchart which shows the procedure of the virtual network in the abnormality determination processing which concerns on 3rd Embodiment of this invention.

Hereinafter, embodiments of the present invention will be described in detail exemplary with reference to the drawings. However, the components described in the following embodiments are merely examples, and the technical scope of the present invention is not intended to be limited thereto.

[First Embodiment]
The communication processing device 100 as the first embodiment of the present invention will be described with reference to FIG. The communication processing device 100 is an in-vehicle device.

As shown in FIG. 1, the communication processing device 100 includes a setting unit 101, a determination unit 102, and a control unit 103. The setting unit 101 sets determination data for determining a received message in at least one virtual switch unit 110 of the virtual network. The determination unit 102 compares at least a part of the data included in the received message with the determination data, and determines whether or not they match. The control unit 103 controls the switching of the virtual switch unit 110 based on the determination result of the determination unit 102.

According to the present embodiment, since the setting data set in at least one virtual switch of the virtual network is compared with the data of the received message, the content of the data included in the message is determined in the virtual switch and switching is performed. Can be controlled.

[Second Embodiment]
Next, an in-vehicle communication processing system including the communication processing device according to the second embodiment of the present invention will be described. An in-vehicle communication processing system including a communication processing device according to the present embodiment controls a message in an in-vehicle communication network, for example, in a CAN (Controller Area Network) message that is not controlled by an IP (Internet Protocol) address. That is, the judgment data for judging the CAN message is set in the virtual switch of the virtual network, at least a part of the data included in the CAN message is compared with the judgment data, and the virtual is based on the judgment result of whether or not they match. Control switch switching

In the present embodiment, the setting data is generated based on the history of normal received messages or abnormal received messages. It is also included in the flow table set in the virtual switch from the virtual network controller. In addition, the control of switching by the virtual switch is also included in the flow table. The control of switching includes at least one of blocking a message, changing a route of a message, and determining another message.

<< Communication processing system >>
A vehicle-mounted communication processing system including the communication processing device of the present embodiment will be described with reference to FIGS. 2 to 3B.

(System display example)
FIG. 2 is a diagram showing a display example in the display unit 210 in an in-vehicle communication processing system including the communication processing device according to the present embodiment. The display unit 210 may be, for example, a display screen for car navigation.

In the left figure of FIG. 2, the comment 211 that it is "normal" that the CAN message is transmitted in a predetermined range within the normal range in the in-vehicle communication processing system including the communication processing device according to the present embodiment is shown. It is displayed in. It is not necessary to display it in the normal state.

In the upper right figure of FIG. 2, in the in-vehicle communication processing system including the communication processing device according to the present embodiment, it is determined that the CAN message is not normal, and the CAN message is also transmitted from the virtual switch to the diagnostic unit. .. Then, the diagnostic department analyzes that the state of the CAN message does not directly lead to an abnormality, and displays a comment 212 saying "Please inspect the vehicle in the near future." In the lower right figure of FIG. 2, it is determined that the CAN message is abnormal in the in-vehicle communication processing system including the communication processing device according to the present embodiment. The CAN message is blocked by the virtual switch and sent from the virtual switch to the diagnostic unit, and the analysis that the state of the CAN message is directly linked to the abnormality displays the comment 212 "Please stop urgently". ing.

(System overview)
FIG. 3A is a diagram showing an outline of an in-vehicle communication processing system 200 including an in-vehicle gateway 310 as a communication processing device according to the present embodiment.

The communication processing system 200 as an in-vehicle communication network exchanges messages via an in-vehicle gateway 310, for example, an engine / drive system subnetwork, a failure diagnosis system subnetwork, an information system subnetwork, and a body system sub. The network, etc. are connected. These communications are usually carried out, in particular, by CAN messages. It should be noted that each of the components of FIG. 3A will not be described in detail.

FIG. 3B is a diagram showing an outline of an in-vehicle gateway 310 as a communication processing device according to the present embodiment. FIG. 3B shows what kind of external communication is connected to the board (or chip) constituting the vehicle-mounted gateway 310.

Broadly speaking, CAN connection 311 by CAN message, Ethernet (registered trademark) communication connection from in-vehicle cameras and road-to-vehicle communication, Wi-Fi (Wireless-Fidelity) connection with PCs and tablets, base stations from external communication devices, etc. 3G communication connection via Ethernet, etc. are included. In the present embodiment, the message communication without using the IP address is controlled by the vehicle-mounted gateway 310.

<< Overview of in-vehicle gateway >>
An outline of the configuration and operation of the vehicle-mounted gateway 310 as the communication processing device of the present embodiment will be described with reference to FIGS. 4A to 6.

(Outline of operation)
FIG. 4A is a diagram showing an outline of a log collection process and a normal state establishment process of the vehicle-mounted gateway 310 as a communication processing device according to the present embodiment.

The in-vehicle gateway 310 has CAN log collection processing, self-learning type abnormality detection processing (ASI: Automated Security Intelligence), switching processing (OpenFlow controller and OpenFlow switch), and UI (UI) as functions related to the present embodiment. User Interface) Display control processing, is included.

FIG. 4A shows a case where normal CAN communication is performed. In the CAN log collection process in step S401, the DATA Frame and REMOTE Frame of the CAN are recorded by adding NTP (Network Time Protocol) time information and CAN ID (CAN Identifier) and RTR (Remote Transmission request) bit information of the CAN message. do. In the self-learning type abnormality detection process of step S402, the CAN frame is inspected by ASI to establish a normal state. That is, in the self-learning type abnormality detection process (ASI), CAN messages in a normal state are collected and a message pattern in a normal state at a certain point in time or in a time series is generated from the set. By comparing the message pattern in the normal state with the order, timing, contents, etc. of the received CAN messages, if the message pattern in the normal state deviates from the predetermined threshold value or more, or if the deviation is small, it may lead to an abnormality. It is used to judge the case where there is an abnormal state as an abnormal state.

FIG. 4B is a diagram showing a log collection process and an abnormality detection process of the vehicle-mounted gateway 310 as the communication processing device according to the present embodiment.

FIG. 4B shows the case where an abnormal CAN communication is found. It should be noted that the abnormal CAN message is not limited to the abnormality of one CAN message, but also includes the relationship between a plurality of CAN messages and the state expected to lead to the abnormality. In the self-learning type abnormality detection process in step S412, the CAN frame is inspected by ASI and the abnormal state is determined by comparison with the established normal state. That is, in the self-learning type abnormality detection process (ASI), the message pattern in the normal state is compared with the order, timing, content, and the like of the received CAN messages. Then, a case where the message pattern in the normal state deviates from a predetermined threshold value or more, or a case where the deviation is small but may lead to an abnormality is determined as an abnormal state. When an abnormality is detected, the subsequent CAN message monitoring is performed on all virtual switches / selected virtual switches so that the abnormality does not lead to a fatal failure. Instruct the switching process (open flow controller and open flow switch).

The OpenFlow controller of the switching process instructed to monitor the CAN message warns of the communication of the invalid message in step S413. In addition, the OpenFlow controller generates a flow table containing monitoring data that monitors CAN messages and controls subsequent routes according to the OpenFlow protocol, and sets it for the OpenFlow switch. In step S414, the OpenFlow switch monitors the CAN message data with the monitoring data according to the flow table set from the OpenFlow controller, and determines whether or not the message is an invalid message. When it is determined that the illegal message has been received, the illegal message is notified to the self-learning type abnormality detection process, and in step S415, the error content is presented to the driver by the UI display control process.

<< Functional configuration of in-vehicle gateway >>
FIG. 5 is a diagram showing a functional configuration of an in-vehicle gateway 310 as a communication processing device according to the present embodiment.

The vehicle-mounted gateway 310 includes a virtual network unit 501, a communication log collection unit 502, a self-learning type abnormality detection processing unit 503, an abnormality information collection unit 504, and an abnormality information display instruction unit 505.

The virtual network unit 501 has a virtual network controller 511 and a virtual network switch 512, and controls the route of a message transmitted through the vehicle-mounted communication network by software. The communication log collection unit 502 collects a message passing through the virtual network switch 512, in this example, a CAN message as a communication log. The collection of CAN messages can also be transferred to the simple communication log collection unit 502 by setting the flow table in the virtual network switch 512.

The self-learning type abnormality detection processing unit 503 includes a communication log learning unit 531, a communication log database 532, and an abnormality processing setting unit 533. The communication log learning unit 531 establishes a normal state based on the CAN communication log collected in the communication log database 532, and determines an abnormal state or an abnormal sign state based on the normal state. The abnormality processing setting unit 533 causes the virtual network switch 512 to monitor the CAN message to be observed when an abnormality has occurred or is likely to occur in the analysis of the communication log in the communication log learning unit 531. Instruct the controller 511.

The abnormality information collection unit 504 collects abnormality information when the virtual network switch 512 determines that there is an abnormality by monitoring the CAN message. The abnormality information may be collected directly from the virtual network switch 512 or via the virtual network controller 511. The abnormality information display instruction unit 505 instructs an abnormality notification device such as a car navigation system to display an abnormality prediction from an abnormality processing setting unit 533 or an abnormality information from an abnormality information collection unit 504.

(Operation sequence)
FIG. 6 is a sequence diagram showing an operation procedure of the vehicle-mounted gateway 310 as the communication processing device according to the present embodiment.

In step S601, the virtual network switch 512 receives the CAN message and transmits it to the ASI503 via the communication log collection unit 502. The broken line indicates that the virtual network controller 511 may be notified. ASI503 accumulates log information in step S603. Then, in step S605, ASI503 refers to the accumulated log information and establishes the content of the CAN message in the normal state.

In step S611, the virtual network switch 512 receives the CAN message and transmits it to the ASI503 via the communication log collection unit 502. ASI503 accumulates log information in step S613. Then, ASI503 determines in step S615 whether the collected CAN message is different from the normal state.

When it is determined that there is an abnormal state or a sign of an abnormality due to a difference from the normal state, the ASI 503 instructs the virtual network unit 501 to perform a process for determining the abnormal operation in step S617. In step S619, the virtual network controller 511 generates a flow table for determining the abnormal operation and sends it to the virtual network switch 512. The virtual network switch 512 sets a flow table for determining an abnormal operation in step S621.

The virtual network switch 512 receives the CAN message in step S631. In step S633, the virtual network switch 512 inspects the contents of the CAN message by setting the flow table to determine whether it is normal or abnormal. If it is normal, the received CAN message is transmitted to the ASI503 via the communication log collection unit 502 by normal processing as in steps S601 and S611. On the other hand, if an abnormality is determined, the virtual network switch 512 transmits the log information including the abnormality information to the ASI503 and also transmits the log information including the abnormality information to the abnormality information collecting unit 504 (not shown) in step S635.

(Functional configuration of self-learning type abnormality detection processing unit)
FIG. 7A is a diagram showing a functional configuration of the self-learning type abnormality detection processing unit 503 according to the present embodiment. In FIG. 7A, the same reference numbers as those in FIG. 5 are assigned the same reference numbers, and duplicate description will be omitted.

The self-learning type abnormality detection processing unit 503 includes a communication control unit 701, a communication log receiving unit 702, a communication log analysis unit 703 included in the communication log learning unit 531, and an abnormality determination unit 705. The communication control unit 701 controls the reception of the communication log from the communication log collection unit 502 and the transmission of information to the virtual network unit 501 and the abnormality information display instruction unit 505. The communication log receiving unit 702 receives a communication log from the communication log collecting unit 502 via the communication control unit 701.

The communication log analysis unit 703 analyzes the communication log stored in the communication log database 532, generates data for abnormality determination in the present embodiment, and stores it in the abnormality determination database 704. The abnormality determination database 704 stores abnormality determination data for determining whether or not there is an abnormality in the CAN message of the communication log by the abnormality determination unit 705, and processing when it is determined to be abnormal. The abnormality determination unit 705 determines an abnormality in the CAN message based on the abnormality determination data stored in the abnormality determination database 704, and when the abnormality is determined, the abnormality processing stored in the abnormality determination database 704 is performed. Based on the data, the abnormality processing setting unit 533 selects the processing after the abnormality determination.

(Communication log database)
FIG. 7B is a diagram showing the configuration of the communication log database 532 according to the present embodiment. The communication log database 532 is used to store communication logs even received from the virtual network switch 512 via the communication log collection unit 502.

The communication log database 532 stores the CAN message reception time 711, the CANID 712, the frame type 713, and the frame data 714. The reception time 711 is time information obtained by general NTP. The CANID 712 is obtained from the Identifier of the Arbitration Field of the CAN message. Further, the frame type 713 is obtained from the bit of the RTR. Further, in FIG. 7B, the standard format is shown as the frame data 714, but it may be an extended format.

(Abnormality judgment database)
FIG. 7C is a diagram showing the configuration of the abnormality determination database 704 according to the present embodiment. The abnormality determination database 704 has an abnormality determination table 720 for determining an abnormality in a CAN message by an abnormality determination unit 705, and an abnormality processing table 730 used for selecting a process from the determination result.

The abnormality determination table 720 includes a determination content ID 722 for determining what is determined according to the message type (including content, source, and destination) 721, a normal state 723 in that case, an abnormality determination condition 724, and the like. Remember. The information of the normal state 723 includes, for example, the message content, the message history, the relationship with other messages (timing, etc.), and the like. The abnormality determination condition 724 includes differences, the same points, and criteria such as the possibility of abnormality in consideration of them.

The abnormality processing table 730 stores the abnormality determination result 732, the abnormality type 733, the abnormality occurrence prediction (predictive) 734, and the abnormality determination information 735 in association with the abnormality determination ID 731 determined to be an abnormality. The abnormality type 733 includes, for example, a timing shift of the CAN message, a large amount of data transmitted at a predetermined time, a destination error of the CAN message, and the like. In addition, the order in which the CAN message protocol is followed is different from the standard. The abnormality determination information 735 stores the abnormality determination data and the corresponding post-abnormality determination processing such as the abnormality type. For example, the processing after the abnormality determination includes blocking the transmission of the CAN message, changing the transmission route, determining another message, and the like. The change of the transmission route includes transmission to the ASI 503 and the abnormality information display instruction unit 505.

(Functional configuration of virtual network controller)
FIG. 8A is a diagram showing a functional configuration of the virtual network controller 511 according to the present embodiment.

The virtual network controller 511 includes a communication control unit 801, an abnormality determination information acquisition unit 802, an abnormality determination processing full table generation unit 803, an open flow control unit 804, a new routing generation unit 805, and optionally an abnormality information reception. A unit 806 and an abnormality information transmission unit 807 are provided.

The communication control unit 801 controls communication with the abnormality processing setting unit 533 of the ASI503 and the abnormality information collection unit 504. The abnormality determination information acquisition unit 802 acquires abnormality determination information from the abnormality processing setting unit 533. The abnormality determination processing full table generation unit 803 has a flow table generation table 831 and generates a flow table to be set in the virtual network switch 512 based on the abnormality determination information. The flow table is also set when it is not abnormal, but it is omitted in FIG. 8A.

The open flow control unit 804 controls the exchange of commands and data with the virtual network switch 512. The new routing generation unit 805 receives the CAN message that does not match the flow table set in the virtual network switch 512, and generates a new routing. The abnormality information receiving unit 806 receives the abnormality information from the virtual network switch 512, and the abnormality information transmitting unit 807 transmits the abnormality information to the abnormality information collecting unit 504.

(Flow table generation table)
FIG. 8B is a diagram showing the configuration of the flow table generation table 831 according to the present embodiment. The flow table generation table 831 is set data for monitoring the contents of the CAN message based on the information of the abnormality determination result included in the abnormality determination information and the information of which process (monitoring) will be performed in the future based on the abnormality determination. Used to generate a proper flow table containing.

The flow table generation table 831 stores the flow table data 812 to be generated in association with the flow table ID 811. In the flow table data 812, abnormality determination data, processing at the time of abnormality, transmission destination of an abnormality CAN message, and the like are stored as action information for CAN ID. When this flow table is set, if it is found that the CAN message should be monitored by CANID, at least a part of the CAN message data that needs to be observed is compared with the abnormality determination data to see if they match. Is determined. If they match, it is considered that the CAN message has an abnormality or may lead to an abnormality, and the processing at the time of the abnormality is executed. Then, if there is a destination to which the abnormal CAN message should be sent, set it.

(Functional configuration of virtual network switch)
FIG. 9A is a diagram showing a functional configuration of the virtual network switch 512 according to the present embodiment.

The virtual network switch 512 includes an open flow control unit 901, a flow table storage unit 902, a message determination unit 903, an open flow switch unit 904, an abnormality determination unit 905, an error processing execution unit 906, and a normal message transmission unit. 907 and.

The open flow control unit 901 controls the exchange of commands and data with the virtual network controller 511. The flow table storage unit 902 stores the flow table transmitted from the virtual network controller 511. The message determination unit 903 compares the CANID included in the CAN message with the CANID set in the flow table, and determines whether or not the CAN message should be monitored. If there is no flow table corresponding to the flow table storage unit 902, it is sent to the virtual network controller 511 to request rerouting. The open flow switch unit 904 switches the transmission / reception of the CAN message.

When the CAN message to be monitored is a CAN message to be monitored, the abnormality determination unit 905 compares at least a part of the CAN message with the abnormality determination table of the flow table and determines whether or not they match. The determination method includes a method of determining whether or not there is the same data pattern while shifting the entire determination area, a method of comparing the determined areas, and the like. When it is determined that there is an abnormality as a result of the determination of the abnormality determination unit 905, the abnormality processing execution unit 906 executes the processing at the time of abnormality based on the processing at the time of abnormality in the flow table, the transmission destination, and the like. When the abnormality determination unit 905 determines that the normal message transmission unit 907 is normal, the normal message transmission unit 907 performs normal transmission to the CAN message.

(Flow table storage)
FIG. 9B is a diagram showing the configuration of the flow table storage unit 902 according to the second embodiment of the present invention. A flow table is stored in the flow table storage unit 902, and is used for determining switching by the virtual network switch 512 for each received CAN message.

The flow table storage unit 902 stores CANID 912 as flow table data, action information 913, and a deletion timer 914 for deleting an unused flow table in association with the flow table ID 911. Since the structure of the flow table data is the same as that of the flow table data 812 of FIG. 8B, duplicate description will be omitted.

<< Processing procedure of in-vehicle gateway >>
FIG. 10 is a flowchart showing a processing procedure of the vehicle-mounted gateway 310 as the communication processing device according to the present embodiment. This glow chart is executed by the processor of the vehicle-mounted gateway 310 using the memory, and realizes the functional component in FIG. The functional component constituting the vehicle-mounted gateway 310 may have a processor independently, and in that case, it is executed by the processor of each functional component. However, since the explanation is complicated in the following description, the vehicle-mounted gateway 310 will be described as the execution subject.

The vehicle-mounted gateway 310 executes the CAN log collection process in step S1001. The vehicle-mounted gateway 310 executes the normal state establishment process in step S1003. The vehicle-mounted gateway 310 executes the abnormality determination process in step S1005. In step S1007, the vehicle-mounted gateway 310 determines whether or not the processing is completed, and if not, returns to step S1001 to continue the processing.

(Log collection process)
FIG. 11A is a flowchart showing the procedure of the log collection process (S1001) according to the present embodiment.

The vehicle-mounted gateway 310 waits for the reception of the CAN message from the ECU (Electronic Control Unit) in step S1111. If the CAN message is received, the vehicle-mounted gateway 310 captures the CAN message in the CAN log collecting unit in step S1113. Then, in step S1115, the CAN log collecting unit transmits the CAN log to the ASI of the vehicle-mounted gateway 310.

(Normal state establishment process)
FIG. 11B is a flowchart showing the procedure of the normal state establishment process (S1003) according to the present embodiment.

The vehicle-mounted gateway 310 waits for log transmission from the CAN log collecting unit in step S1121. If there is a log transmission from the CAN log collecting unit, the vehicle-mounted gateway 310 establishes a normal state by machine learning in step S1123.

(Abnormality judgment processing)
FIG. 11C is a flowchart showing the procedure of the abnormality determination process (S1005) according to the present embodiment.

The vehicle-mounted gateway 310 waits for log transmission from the CAN log collecting unit in step S1131. If there is a log transmission from the CAN log collecting unit, the vehicle-mounted gateway 310 determines in step S1133 whether or not an abnormality has been recognized. When the abnormality is recognized, the vehicle-mounted gateway 310 notifies the virtual network controller 511 of the occurrence of the abnormality and transmits information for monitoring the CAN message in step S1135. On the other hand, when the abnormality is not recognized, the vehicle-mounted gateway 310 performs a process of updating the normal state by machine learning in step S1137.

(Procedure for virtual network)
FIG. 12 is a flowchart showing the procedure of the virtual network in the abnormality determination process (S1005) according to the present embodiment.

The virtual network controller 511 waits for an abnormality notification from the ASI in step S1211. If there is an abnormality notification, the virtual network controller 511 generates a corresponding flow table in step S1213 and sends it to the virtual network switch 512. Then, in step S1215, the virtual network controller 511 informs the UI display control unit of the display of the abnormality.

In step S1221, the virtual network switch 512 waits for the flow table of the abnormality determination process from the virtual network controller 511. When the virtual network controller 511 receives the flow table transmitted in step S1213, the virtual network switch 512 updates the flow table in step S1223 and starts switching control based on the abnormality determination.

According to the present embodiment, in the vehicle-mounted gateway, the transmission of the CAN message is switched in the virtual switch based on the comparison between the setting data set according to the establishment of the normal state of the collected CAN message and the CAN message data. Since it is controlled, it is possible to quickly and accurately determine an abnormality or a sign of an abnormality and perform appropriate processing.

[Third Embodiment]
Next, an in-vehicle communication processing system including the communication processing device according to the third embodiment of the present invention will be described. The vehicle-mounted communication processing system including the communication processing device according to the present embodiment has a message, an abnormality, or an abnormality related to the target message, as compared with the case where the second embodiment controls the message independently. It differs in that each switching is controlled based on each setting data for a plurality of messages including a message related to an abnormality sign. That is, in the present embodiment, a plurality of the setting data are set in the plurality of virtual switches in relation to the history of the normal received message or the abnormal received message. Since other configurations and operations are the same as those in the second embodiment, the same configurations and operations are designated by the same reference numerals and detailed description thereof will be omitted.

(Abnormality judgment table)
FIG. 13 is a diagram showing the configuration of the abnormality handling table 1330 of the abnormality determination database 704 according to the present embodiment. In FIG. 13, the same components as those in FIG. 7C are designated by the same reference numbers, and duplicate description will be omitted.

There are a plurality of abnormality determination information 1335s for each abnormality determination ID 731, and by combining a plurality of processes in response to an abnormality in a certain CAN message, it is possible to prevent the abnormality from spreading more quickly. can.

(Procedure for virtual network)
FIG. 14 is a flowchart showing the procedure of the virtual network in the abnormality determination process (S1005) according to the present embodiment. In FIG. 14, the same steps as in FIG. 12 are assigned the same step numbers, and duplicate description is omitted.

If there is an abnormality notification from the ASI, the virtual network controller 511 generates a plurality of types of flow tables corresponding to the plurality of CAN messages in step S1413 and transmits them to the respective virtual network switches 512.

According to the present embodiment, it is possible to perform an abnormality determination or an abnormality sign determination in consideration of the relationship between messages from the result of comprehensively analyzing complicated message generation and transmission in an in-vehicle communication processing system.

[Other embodiments]
Although the invention of the present application has been described above with reference to the embodiments, the invention of the present application is not limited to the above-described embodiment. Various changes that can be understood by those skilled in the art can be made within the scope of the present invention in terms of the configuration and details of the present invention. Also included in the scope of the present invention are systems or devices in which the different features contained in each embodiment are combined in any way.

Further, the present invention may be applied to a system composed of a plurality of devices, or may be applied to a single device. Furthermore, the present invention is also applicable when the communication processing program that realizes the functions of the embodiment is supplied directly or remotely to the system or device. Therefore, in order to realize the functions of the present invention on a computer, a program installed on the computer, a medium containing the program, and a WWW (World Wide Web) server for downloading the program are also included in the scope of the present invention. .. In particular, at least a non-transitory computer readable medium containing a program for causing a computer to execute the processing steps included in the above-described embodiment is included in the scope of the present invention.

Claims (8)

A communication processing device included in an in-vehicle communication network.
A setting means for setting an abnormality determination data pattern for determining whether a received CAN (Controller Area Network) message contains a data pattern indicating a vehicle abnormality in at least one virtual switch means of the virtual network, and a setting means.
A data pattern determination means for determining whether or not the same data pattern is included by comparing at least a part of the data patterns included in the CAN message while shifting the abnormality determination data pattern.
When the at least a part of the data pattern and the abnormality determination data pattern include the same data pattern, a control means for controlling switching of the virtual switch means in order to perform processing at the time of a vehicle abnormality.
A generation means for generating the abnormality determination data pattern indicating a vehicle abnormality, which may be included in the CAN message, based on the history of a normal CAN message or an abnormal CAN message.
A communication processing device. The setting means further sets an abnormal message identifier that identifies a CAN message that is predicted to contain an abnormality.
Further provided with a message determination means for comparing the CAN message identifier included in the CAN message with the abnormal message identifier and determining whether or not they match.
When the CAN message identifier and the abnormality message identifier match, the data pattern determining means determines whether or not the data pattern of at least a part of the CAN message and the abnormality determination data pattern include the same data pattern . The communication processing device according to claim 1. The data pattern determination means and the control means are included in the virtual switch means, and the data pattern determination means and the control means are included in the virtual switch means.
The abnormality determination data pattern set by the setting means and the content of the processing at the time of the vehicle abnormality by the virtual switch means are described in a flow table set in the virtual switch means from the virtual network controller included in the virtual network. The communication processing device according to claim 1, which is included. The process according to any one of claims 1 to 3, wherein the process at the time of the vehicle abnormality by the control means includes at least one of a CAN message blocking process, a CAN message route change process, and another CAN message determination process. Communication processing device. One of claims 1 to 4, wherein the setting means sets a plurality of the abnormality determination data patterns in each of the plurality of virtual switch means in relation to the history of a normal CAN message or an abnormal CAN message. The communication processing device described in the section. It is a communication processing method of a communication processing device included in an in-vehicle communication network.
A setting step for setting an abnormality determination data pattern for determining whether a received CAN (Controller Area Network) message contains a data pattern indicating a vehicle abnormality in at least one virtual switch means of the virtual network, and a setting step.
A data pattern determination step of determining whether or not the same data pattern is included by comparing at least a part of the data patterns included in the CAN message while shifting the abnormality determination data pattern.
When the at least a part of the data pattern and the abnormality determination data pattern include the same data pattern, a control step for controlling switching of the virtual switch means in order to perform processing at the time of vehicle abnormality.
A generation step that generates the abnormality determination data pattern indicating a vehicle abnormality, which may be included in the CAN message, based on the history of a normal CAN message or an abnormal CAN message.
Communication processing method including . A communication processing program executed by a communication processing device included in an in-vehicle communication network.
A setting step for setting an abnormality determination data pattern for determining whether a received CAN (Controller Area Network) message contains a data pattern indicating a vehicle abnormality in at least one virtual switch means of the virtual network, and a setting step.
A data pattern determination step of determining whether or not the same data pattern is included by comparing at least a part of the data patterns included in the CAN message while shifting the abnormality determination data pattern.
When the at least a part of the data pattern and the abnormality determination data pattern include the same data pattern, a control step for controlling switching of the virtual switch means in order to perform processing at the time of vehicle abnormality.
A generation step that generates the abnormality determination data pattern indicating a vehicle abnormality, which may be included in the CAN message, based on the history of a normal CAN message or an abnormal CAN message.
A communication processing program that causes a computer to execute. A communication processing system that constitutes an in-vehicle communication network.
A collecting means for collecting CAN (Controller Area Network) messages transmitted in the virtual network of the in-vehicle communication network, and
A generation means for generating an abnormality determination data pattern indicating a vehicle abnormality, which may be included in the CAN message, based on the history of normal CAN messages or abnormal CAN messages collected by the collection means.
A setting means for setting the abnormality determination data pattern in at least one virtual switch means of the virtual network, and a setting means.
A determination means for determining whether or not the same data pattern is included by comparing at least a part of the data pattern included in the transmitted CAN message while shifting the abnormality determination data pattern.
When the at least a part of the data pattern and the abnormality determination data pattern include the same data pattern, a control means for controlling switching of the virtual switch means in the virtual network in order to perform processing at the time of a vehicle abnormality.
Communication processing system equipped with.

Images