Abstract: A data overwriting device includes an overwriting unit that overwrites a part of data stored in a memory, the part in which a difference is generated; a first writing unit that writes first information in a first storage unit when a data overwriting process is completed by the overwriting unit; a second writing unit that writes second information in a second storage unit when confirming that the part of the data overwritten by the overwriting unit includes no error; and a deleting unit that clears the first storage unit storing the first information and the second storage unit storing the second information before the overwriting unit starts executing the data overwriting process.

Abstract: A vehicular system includes a master ECU, a first slave ECU, and a second slave ECU. The second slave ECU transmits a storing request to the master ECU on detection of a malfunction. The master ECU transmits a storing instruction for causing diagnostic information to be stored, on reception of the storing request. The first slave ECU generates diagnostic information on the first slave ECU, on reception of the storing instruction from the master ECU. The first slave ECU further stores the generated diagnostic information in a retention storage medium. The retention storage medium is configured to retain validity determination information in a condition where the first slave ECU is not supplied with electric power source.

Abstract: A relay device is provided. The relay device includes: an acquisition unit acquiring data necessary for an upgrade processing from an upgrading tool, which performs the upgrading processing to an ECU connected to a vehicle-mounted network; a relay unit providing the data, via the vehicle-mounted network, to a target ECU which is subject to the upgrade processing; a suspend instructing unit transmitting, via the vehicle-mounted network, a suspend command which instructs the non-target ECU to shift to a suspend state in which a transmission of other data to the non-target ECU via the vehicle-mounted network is suspended in response to a start of the upgrade processing; and a cancel instructing unit instructing, via the vehicle-mounted network, the non-target ECU to cancel the suspend state when the upgrade processing is completed.

Abstract: A gateway device includes a request receiving portion receiving, from diagnosis purpose tools, diagnosis requests for performing malfunction diagnosis to an ECU of a vehicle, an outputting portion outputting the diagnosis request to an in-vehicle LAN, a response receiving portion receiving a diagnosis response output from the ECU to the in-vehicle LAN as a response to the diagnosis request, a transmitting portion transmitting the diagnosis response to corresponding diagnosis purpose tool, and an arbitration portion.

Abstract: An in-vehicle system for communicating with an external tool for storing a tool secret key includes: a communication device; a tool key acquisition device; and a communication controller. The in-vehicle system and an external server for storing external tool information provide a vehicular communication system. The external tool information provides a tool public key and key identification information. The tool public key pairs with the tool secret key. When the external tool requests communication connection with the in-vehicle system, the tool key acquisition device transmits the key identification information to the external server, so that the tool key acquisition device acquires the tool public key from the external server. The communication controller performs cryptographic communication with the external tool using the tool public key.

Abstract: A vehicular data communication system includes an authentication device for authenticating an external tool connected to a bus, an authentication control device for determining whether an external tool is authenticated by the authentication device and for setting an authenticated state to permit a data communication between the external tool and an access target ECU on the bus upon determining that the external tool is authenticated by the authentication device, and an authentication maintain device for maintaining the authenticated state within a predetermined period after the authenticated state is set by the authentication control device.

Abstract: A vehicular system includes a master ECU, a first slave ECU, and a second slave ECU. The second slave ECU transmits a storing request to the master ECU on detection of a malfunction. The master ECU transmits a storing instruction for causing diagnostic information to be stored, on reception of the storing request. The first slave ECU generates diagnostic information on the first slave ECU, on reception of the storing instruction from the master ECU. The first slave ECU further stores the generated diagnostic information in a retention storage medium. The retention storage medium is configured to retain validity determination information in a condition where the first slave ECU is not supplied with electric power source.

Abstract: A gateway device includes a request receiving portion, a request storage, a request conversion portion, a request transmitting portion, a response receiving portion, a response storage, a response conversion portion, and a response transmitting portion. When receiving, from a first diagnosis purpose tool, a diagnosis request for performing a malfunction diagnosis to an ECU equipped to a vehicle, the gateway device relays a diagnosis request and a diagnosis response between the first diagnosis purpose tool and the ECU. When receiving, from a second diagnosis purpose tool, a diagnosis request for performing a malfunction diagnosis to the ECU equipped to the vehicle, the gateway device relays a diagnosis request and a diagnosis response between the second diagnosis purpose tool and the ECU after converting identification informations of the diagnosis request and the diagnosis response.

Abstract: A gateway device includes a request receiving portion receiving, from diagnosis purpose tools, diagnosis requests for performing malfunction diagnosis to an ECU of a vehicle, an outputting portion outputting the diagnosis request to an in-vehicle LAN, a response receiving portion receiving a diagnosis response output from the ECU to the in-vehicle LAN as a response to the diagnosis request, a transmitting portion transmitting the diagnosis response to corresponding diagnosis purpose tool, and an arbitration portion.

Abstract: A gateway device includes a request receiving portion, a request storage, a request conversion portion, a request transmitting portion, a response receiving portion, a response storage, a response conversion portion, and a response transmitting portion. When receiving, from a first diagnosis purpose tool, a diagnosis request for performing a malfunction diagnosis to an ECU equipped to a vehicle, the gateway device relays a diagnosis request and a diagnosis response between the first diagnosis purpose tool and the ECU. When receiving, from a second diagnosis purpose tool, a diagnosis request for performing a malfunction diagnosis to the ECU equipped to the vehicle, the gateway device relays a diagnosis request and a diagnosis response between the second diagnosis purpose tool and the ECU after converting identification informations of the diagnosis request and the diagnosis response.

Abstract: A bus monitoring security device is connected to a bus, which includes a tool side bus having a tool connection terminal and an ECU side bus. The ECU side bus is coupled with an ECU, and the tool side bus is coupled with a tool capable of communicating with the ECU via the tool connection terminal. The tool side bus and the ECU side bus are separately coupled with the bus monitoring security device. The bus monitoring security device includes: a controller for determining whether the tool being to access the ECU is connected to the ECU side bus, and for restricting transmission and reception of data between the tool and the ECU when the controller determines that the tool is connected to the ECU side bus.

Abstract: A vehicular data communication system is disclosed. The vehicular data communication system includes an authentication device for authenticating an external tool connected to a bus, an authentication control device for determining whether an external tool is authenticated by the authentication device and for setting an authenticated state to permit a data communication between the external tool and an access target ECU on the bus upon determining that the external tool is authenticated by the authentication device, and an authentication maintain device for maintaining the authenticated state within a predetermined period after the authenticated state is set by the authentication control device.

Abstract: A vehicular system includes a master ECU, a first slave ECU, and a second slave ECU. The second slave ECU transmits a storing request to the master ECU on detection of a malfunction. The master ECU transmits a storing instruction for causing diagnostic information to be stored, on reception of the storing request. The first slave ECU generates diagnostic information on the first slave ECU, on reception of the storing instruction from the master ECU. The first slave ECU further stores the generated diagnostic information in a retention storage medium. The retention storage medium is configured to retain validity determination information in a condition where the first slave ECU is not supplied with electric power source.

Abstract: In an ECU, a flash ROM has a main storage area for storing a current version of an application program and a sub-storage area for storing update version program that includes updated points from the current version program. A rewriting tool executes program rewrite processing including: store processing of storing the update version program in the sub-storage area; and memory changeover processing in which, when the writing of the update version program in the sub-storage area has been done successfully, the sub-storage area where the storing of the update version program has ended is changed over to a new main storage area instead of a memory area currently being used as the main storage area. When the writing in the sub-storage area has failed, the changeover is not conducted.

Abstract: A gateway apparatus performs frame forwarding between an external device connected to a first bus and controllers connected to a second bus. Each controller outputs a response frame upon reception of a communication frame from the external device. The response frame has an address field in which a private address is set. The private address is uniquely assigned to each controller in a private network space defined by the second bus. When the communication frame is directed to each controller, the communication frame is forwarded to each controller in sequence at different times to prevent collision between the response frames in the second bus. The private address set in the address field of the response frame is converted into a predetermined transmitting address specified in the first bus.

Abstract: In an ECU, a flash ROM has a main storage area for storing a current version of an application program and a sub-storage area for storing update version program that includes updated points from the current version program. A rewriting tool executes program rewrite processing including: store processing of storing the update version program in the sub-storage area; and memory changeover processing in which, when the writing of the update version program in the sub-storage area has been done successfully, the sub-storage area where the storing of the update version program has ended is changed over to a new main storage area instead of a memory area currently being used as the main storage area. When the writing in the sub-storage area has failed, the changeover is not conducted.

Abstract: An in-vehicle system for communicating with an external tool for storing a tool secret key includes: a communication device; a tool key acquisition device; and a communication controller. The in-vehicle system and an external server for storing external tool information provide a vehicular communication system. The external tool information provides a tool public key and key identification information. The tool public key pairs with the tool secret key. When the external tool requests communication connection with the in-vehicle system, the tool key acquisition device transmits the key identification information to the external server, so that the tool key acquisition device acquires the tool public key from the external server. The communication controller performs cryptographic communication with the external tool using the tool public key.

Abstract: A bus monitoring security device is connected to a bus, which includes a tool side bus having a tool connection terminal and an ECU side bus. The ECU side bus is coupled with an ECU, and the tool side bus is coupled with a tool capable of communicating with the ECU via the tool connection terminal. The tool side bus and the ECU side bus are separately coupled with the bus monitoring security device. The bus monitoring security device includes: a controller for determining whether the tool being to access the ECU is connected to the ECU side bus, and for restricting transmission and reception of data between the tool and the ECU when the controller determines that the tool is connected to the ECU side bus.

Abstract: A gateway apparatus performs frame forwarding between an external device connected to a first bus and controllers connected to a second bus. Each controller outputs a response frame upon reception of a communication frame from the external device. The response frame has an address field in which a private address is set. The private address is uniquely assigned to each controller in a private network space defined by the second bus. When the communication frame is directed to each controller, the communication frame is forwarded to each controller in sequence at different times to prevent collision between the response frames in the second bus. The private address set in the address field of the response frame is converted into a predetermined transmitting address specified in the first bus.

Abstract: A vehicular system includes a master ECU, a first slave ECU, and a second slave ECU. The second slave ECU transmits a storing request to the master ECU on detection of a malfunction. The master ECU transmits a storing instruction for causing diagnostic information to be stored, on reception of the storing request. The first slave ECU generates diagnostic information on the first slave ECU, on reception of the storing instruction from the master ECU. The first slave ECU further stores the generated diagnostic information in a retention storage medium. The retention storage medium is configured to retain validity determination information in a condition where the first slave ECU is not supplied with electric power source.