Abstract: A moving display device disposed in a vehicle includes a display configured to be moveable in a forward or backward direction according to a driving mode of a vehicle, and a moving device mounted on a rear of the display and being configured to move a position of the display and to tilt the display, wherein the moving device includes rails, actuators, and gear modules for forward or backward movement of the display.

Abstract: Disclosed are airbag integrated moving display and a control method where the airbag-integrated display includes a display movable to a forward or rearward position according to a driving mode of a vehicle, and an airbag mounted to the rear of the display and being configured to move along with a movement of the display, vary a level of inflation of the airbag based on at least one of a position of the display or a distance from a driver of the vehicle.

Abstract: Disclosed herein is a device for interlocking a display device with a vehicle, the device including a mount disposed in the vehicle, the display device being attached to and detached from the mount, a first sliding member disposed on a front surface of the mount and capable of moving forward or backward in a direction perpendicular to a rear surface of the display device, and a connector provided to the first sliding member, wherein the connector may transmit and receive electrical signals to and from the display device. The vehicle may be controlled by coupling a display device to the interlocking device disposed in the vehicle. Even when the display device is not coupled to the vehicle, the vehicle may be controlled by pairing through wireless communication between the vehicle and the display device.

Abstract: An apparatus of controlling an over-the-air (OTA) update of a vehicle and a method thereof, includes a controller that collects vehicle information and battery information from a plurality of vehicles, and determines an optimal OTA update-target for each of the vehicles, based on the vehicle information and the battery information, and a communication device that transmits the optimal OTA update-target and corresponding update data to each of the vehicles.

Abstract: A reprogramming method of a vehicle includes authenticating a diagnostor; receiving integrated firmware comprising a plurality of firmwares that correspond to a plurality of target controllers, respectively, from the diagnostor that is completely authenticated; authenticating the integrated firmware; encrypting and storing the plurality of firmwares included in the integrated firmware; and generating encryption keys that corresponds the plurality of target controllers, respectively apparatus. The encrypting and storing comprises encrypting and storing the plurality of firmwares to the encryption keys that correspond to the plurality of firmwares, respectively.

Abstract: A method of performing diagnostic communication with a vehicle using a diagnostic device includes: acquiring a certificate revocation list (CRL) corresponding to a certificate of the diagnostic device from an external device, verifying a validity of the certificate using the acquired CRL, performing authentication with the vehicle when the validity of the certificate is verified, and starting diagnostic communication between the diagnostic device and the vehicle when the authentication is performed.

Abstract: The present disclosure provides a vehicle controller area network (CAN) communication attack detection method and apparatus. The apparatus includes: a learning module, a profiling module, and a detection module. The learning module identifies a CAN identifier (ID) upon receiving a predefined CAN packet and generates learning statistical information expressed as bits with respect to a data field corresponding to the identified CAN ID. The profiling module maintains the learning statistical information received and a precollected attack type, and the detection module extracts a CAN ID and a bit stream of a data field from a real-time input CAN packet. In addition, the detection module configures a neural network by acquiring the learning statistical information from the profiling module, inputs the extracted bit stream to the configured neural network, and determines whether attack is detected, based on an output value of the neural network.

Abstract: The present disclosure relates to a method of managing a controller with reliability and, more particularly, to authentication and data exchange during installation/use/removal of a vehicle controller, a gateway and a tester using an encryption algorithm. A method of authenticating a controller by a gateway in a vehicle includes: transmitting a first message including a first random number to the controller when a first condition is satisfied; receiving, from the controller, a second message including the first random number to which an electronic signature has been attached through a private key of the controller; decrypting the first random number having the electronic signature attached thereto using a public key of the controller; and transmitting, to the controller, a symmetric key encrypted using the public key of the controller when the decryption has been successfully performed.

Abstract: A method of authenticating a controller by a gateway in a vehicle may include transmitting a first symmetric key to the controller; generating a first one-time authentication value (OTAV), encrypting the first OTAV with the first symmetric key and delivering the encrypted first OTAV to the controller; sending a request for authentication using the first OTAV to the controller; and receiving a hash value from the controller in response to the request.

Abstract: A reprogramming method of a vehicle includes authenticating a diagnostor; receiving integrated firmware comprising a plurality of firmwares that correspond to a plurality of target controllers, respectively, from the diagnostor that is completely authenticated; authenticating the integrated firmware; encrypting and storing the plurality of firmwares included in the integrated firmware; and generating encryption keys that corresponds the plurality of target controllers, respectively apparatus. The encrypting and storing comprises encrypting and storing the plurality of firmwares to the encryption keys that correspond to the plurality of firmwares, respectively.

Abstract: A method of performing diagnostic communication with a vehicle using a diagnostic device includes: acquiring a certificate revocation list (CRL) corresponding to a certificate of the diagnostic device from an external device, verifying a validity of the certificate using the acquired CRL, performing authentication with the vehicle when the validity of the certificate is verified, and starting diagnostic communication between the diagnostic device and the vehicle when the authentication is performed.

Abstract: A method of performing cross-authentication in a vehicle controller interworking with an external device includes: generating a random number S and transmitting the random number S to the external device according to an authentication request message received from the external device; generating a variable i using a first function having the random number S as a parameter; generating a first session key Ks using a second function having the variable i and a pre-stored secret key K as parameters; receiving a first response key from the external device; generating a second response key using a third function having the random number S, the variable i and the first session key Ks as parameters; and authenticating the external device based on whether the first response key is equal to the second response key.

Abstract: A method for controlling access security at a vehicle gateway of a vehicle including at least one control unit in communication with the vehicle gateway includes: receiving a certificate from a diagnosis device; recognizing a rating of the certificate; and performing at least one of an integrity checking process and a security key authorization process according to the rating of the certificate to determine whether the diagnosis device is allowed to access to the vehicle.

Abstract: A method of authenticating a controller by a gateway in a vehicle may include transmitting a first symmetric key to the controller; generating a first one-time authentication value (OTAV), encrypting the first OTAV with the first symmetric key and delivering the encrypted first OTAV to the controller; sending a request for authentication using the first OTAV to the controller; and receiving a hash value from the controller in response to the request.

Abstract: The present disclosure relates to a method of managing a controller with reliability and, more particularly, to authentication and data exchange during installation/use/removal of a vehicle controller, a gateway and a tester using an encryption algorithm. A method of authenticating a controller by a gateway in a vehicle includes: transmitting a first message including a first random number to the controller when a first condition is satisfied; receiving, from the controller, a second message including the first random number to which an electronic signature has been attached through a private key of the controller; decrypting the first random number having the electronic signature attached thereto using a public key of the controller; and transmitting, to the controller, a symmetric key encrypted using the public key of the controller when the decryption has been successfully performed.

Abstract: A method and apparatus for authenticating packets in a controller area network (CAN) are disclosed. The method includes transmitting messages using a mixture of message authentication codes (MACs) in a controller area network (CAN). In addition, a first MAC is generated using a first message and the first MAC is divided into a first MAC part and a second MAC part. A second MAC is generated using a second message and the second MAC is divided into a third MAC part and a fourth MAC part. A linear operation is performed between the second MAC part and the third MAC part to generate a first authentication MAC. The first message is transmitted with the first MAC part and the second message is transmitted with the first authentication MAC.

Abstract: A method of transmitting K messages using divided message authentication codes (MACs) in a controller area network (CAN) includes: generating a MAC using a first message and a specific MAC, performing a first operation with respect to j using j-th messages subsequent to the first message and a second MAC part of the generated MAC, performing a second operation with respect to j using a result of the performed first operation and a j-th subblock subsequent to a first MAC subblock among K MAC subblocks obtained by dividing a first MAC part of the generated MAC, transmitting the first message along with the first MAC subblock, and transmitting K-1 j-th messages in an order of j, each of the j-th messages being transmitted along with a j-th result of the performed second operation.

Abstract: The present disclosure provides a vehicle controller area network (CAN) communication attack detection method and apparatus. The apparatus includes: a learning module, a profiling module, and a detection module. The learning module identifies a CAN identifier (ID) upon receiving a predefined CAN packet and generates learning statistical information expressed as bits with respect to a data field corresponding to the identified CAN ID. The profiling module maintains the learning statistical information received and a precollected attack type, and the detection module extracts a CAN ID and a bit stream of a data field from a real-time input CAN packet. In addition, the detection module configures a neural network by acquiring the learning statistical information from the profiling module, inputs the extracted bit stream to the configured neural network, and determines whether attack is detected, based on an output value of the neural network.

Abstract: A method for controlling access security at a vehicle gateway of a vehicle including at least one control unit in communication with the vehicle gateway includes: receiving a certificate from a diagnosis device; recognizing a rating of the certificate; and performing at least one of an integrity checking process and a security key authorization process according to the rating of the certificate to determine whether the diagnosis device is allowed to access to the vehicle.

Abstract: A method for detecting intrusion into an in-vehicle network using an intrusion detection system (IDS) of a vehicle includes: receiving messages of the in-vehicle network in a preset cycle, calculating a current count value per message of the received messages, receiving operation state information of the vehicle when the cycle starts, determining a normal count value per message corresponding to the operation state information, calculating a linearly approximated relative distance function per message using the current count value and the normal count value, and determining whether an intrusion state occurs by comparing the calculated linearly approximated relative distance function per message to a preset threshold value.