Abstract: A data transmission device includes a shared memory and an access control unit. The shared memory has M bank memories arranged therein and is accessible by N processors. The access control unit controls access to the M bank memories by the N processors based on identification information for specifying the M bank memories.

Abstract: To realize one-time password cross-referencing at low cost. A cross-referencing device includes a clock unit which keeps time by a built-in clock, and an authentication calculation unit which has a minor password FIFO capable of storing (N + 1) numerical values from a last written numerical value to a numerical value written N (N being a natural number) before and which generates a time-synchronized first cross-referencing one-time password at a time point having a predetermined time relationship with the current time at a predetermined first time interval on the basis of the time indicated by the clock, writes the same in the minor password FIFO, and determines that authentication is successful where an authentication target one-time password received in a first authentication request matches with any of the (N + 1) first cross-referencing one-time passwords in the minor password FIFO.

Abstract: Even when cores in a multi-core system are asynchronously operated, it is possible to transmit a data set with ensured simultaneity between the cores while improving real-time properties of processing of the cores. Bank memories and a write core and read cores accessible to these bank memories are provided. An access control unit assigns only one write core to the bank memories in which writing is performed, assigns one or more read cores to the bank memories in which reading is performed, and exclusively controls the accessing to the bank memories such that the bank memories in which the writing is performed and the bank memories in which the reading is performed are not the same.

Abstract: The present invention prevents a maintenance tool for carrying out maintenance work of an electronic control unit (ECU) from being abused by a third person. In an authentication system according to the present invention, an authentication apparatus authenticates an operator of an operation terminal (equivalent to the maintenance tool), and the operation terminal forwards an authentication code generated by the authentication apparatus to the ECU. By using the authentication code, the ECU determines whether or not to permit the operation terminal to carry out a maintenance operation.

Abstract: The present invention prevents a maintenance tool for carrying out maintenance work of an electronic control unit (ECU) from being abused by a third person. In an authentication system according to the present invention, an authentication apparatus authenticates an operator of an operation terminal (equivalent to the maintenance tool), and the operation terminal forwards an authentication code generated by the authentication apparatus to the ECU. By using the authentication code, the ECU determines whether or not to permit the operation terminal to carry out a maintenance operation.

Abstract: Provided is a vehicle-mounted network system that enhances security of a vehicle by detecting or eliminating an attack on a vehicle-mounted network from an unauthorized ECU while reducing an increase in a processing load (and cost) of each vehicle-mounted control device. The vehicle-mounted network system according to the present invention provides a communication protocol issue device having a function of distributing definition data that defines a portion that is based on implementation on the vehicle-mounted network among communication protocols to the vehicle-mounted control device via a registration device that allows the vehicle-mounted control device to register in the vehicle-mounted network.

Abstract: Provided is an in-vehicle network equipped with a function whereby configuration verification is performed while preventing an increase in the processing load (and cost) for each in-vehicle control device, thus improving vehicle security. This in-vehicle network system is equipped with a configuration management device that authenticates an in-vehicle control device. The configuration management device delivers to the in-vehicle control device, via a registration device connected to the in-vehicle network, configuration verification data that is used to perform configuration verification (see FIG. 1).

Abstract: A vehicle control software includes control data serving as information for controlling a vehicle; a public side software component serving as a software component for laying open the control data; a plurality of reference side software components each serving as a software component for referring to the control data; and data conversion software for converting a data format when transferring the control data between the public side software component and each of the reference side software components. In this vehicle control software, the data conversion software is subjected to an activate request at a predetermined timing, makes a reference request of the public side software component, and converts the acquired control data into a data format to which the public side software component refers.

Abstract: Provided is an in-vehicle network equipped with a function whereby configuration verification is performed while preventing an increase in the processing load (and cost) for each in-vehicle control device, thus improving vehicle security. This in-vehicle network system is equipped with a configuration management device that authenticates an in-vehicle control device. The configuration management device delivers to the in-vehicle control device, via a registration device connected to the in-vehicle network, configuration verification data that is used to perform configuration verification (see FIG. 1).

Abstract: Provided is a method capable of enhancing security of a vehicle-mounted network while reducing processing loads in each vehicle-mounted control device. In a vehicle-mounted network system according to the present invention, a communication device issuing a read request or a write request on data held in the vehicle-mounted control device is previously authenticated by an authentication device (see FIG. 1).

Abstract: Provided is a technology such that communication performance required for relaying communication data in an in-vehicle network including a time-triggered network can be appropriately maintained even when the traffic to be relayed by a gateway is increased or decreased. An in-vehicle gateway according to the present invention dynamically changes a slot amount or the slot ID used by the in-vehicle gateway for the time-triggered network in accordance with the traffic to be relayed, and determines the execution timing of a process corresponding to a slot in accordance with the changed slot amount or slot ID (see FIG. 9).

Abstract: It is possible to surely commit a revision made on a software component in a software component database and a software product group and to create a new software product from the same database. Provided is a software configuration management system which includes a software component database and a software product management unit and accepts data transmission/reception from a software component database management client and a software product operation client. The software configuration management system further includes: a component-product correspondence table, component-file correspondence information, a synchronization unit for mutually committing a modification of the software component database and a modification of a software product; update information; and a correspondence table update unit.

Abstract: An automatic software configuring system includes a database storage section for storing therein a plurality of soft components. In the event that soft components are extracted from the database storage section and are combined together to thereby generate a file, a comment indicative of a storage location in the database storage section for storing a respective soft component extracted from the database storage section is added to the respective soft component. The automatic software configuring system further includes a device for identifying the respective soft component combined into the file and a storage location of the respective soft component by reading the comment; a device for identifying a comparison-target soft component stored in the database storage section; a device for identifying a soft component having a different content; and a device for replacing specified soft component in the database storage section with the soft component combined into the file.

Abstract: An object of the present invention is to provide a technique making it possible to transmit and receive communication data among multiple types of networks in an in-vehicle network having the networks therein. An in-vehicle-data relaying device according to the present invention relays communication data to a different in-vehicle-data relaying device when the transmission destination of the communication data is a network not directly connected to the in-vehicle-data relaying device.

Abstract: There is provided means enabling effective selection of a method of combining software assets in the development of software that is hierarchized and segmented into components. Control software 101 created with a control software development tool 102 includes an application 103 which executes a control calculation process, a connection layer 104 which connects software components with each other, and basic software 114. In conventional software configurations, combination of software components hierarchized in the basic software is described by a standard I/F 108, and thus it has been difficult to flexibly change the method of combining software components adapting to the design change of the software. In the present invention, flexible selection of the method of combining software components is made possible by using template description for the method of combining software components.

Abstract: The automotive control system includes a first subsystem, a second subsystem and an adaptive cruise control system. The first and second subsystems and the adaptive cruise control system are interconnected through their gateway ECUs and the FlexRay. Each of the gateway ECUs has a time tagging unit that tags the received data with time information of their reception.

Abstract: It is possible to surely commit a revision made on a software component in a software component database and a software product group and to create a new software product from the same database. Provided is a software configuration management system which includes a software component database and a software product management unit and accepts data transmission/reception from a software component database management client and a software product operation client. The software configuration management system further includes: a component-product correspondence table, component-file correspondence information, a synchronization unit for mutually committing a modification of the software component database and a modification of a software product; update information; and a correspondence table update unit.

Abstract: In a vehicle control apparatus having an arithmetic processing unit including an arithmetic unit, a storage unit and a communication unit, and an input/output unit including an signal input unit or a signal output unit and a communication unit, the arithmetic processing unit is connected to the input/output unit via a serial communication line, the input/output unit is equipped with an event management unit for detecting an event of a signal input or a signal output and notifying the event to the arithmetic processing unit; and the arithmetic processing unit is, equipped with an input/output management unit for performing data exchange between the signal input unit or the signal output unit and the storage unit via the communication units, in accordance with a request from the arithmetic unit and an event notice from the event management unit.

Abstract: The present invention offers an advanced control software verification technology, particularly, an assertion-based verification technology, by providing a control microcomputer verification device and vehicle-mounted control device that exhibit improved verification efficiency. Assertion-based verification is performed with a verification device that has a hardware configuration in which the verification device is independent of a CPU core of a microcomputer but operates in parallel with the CPU core of the microcomputer, which sequentially executes control software. The hardware to be employed to achieve the above purpose is a finite state machine based on microprogrammed control. An interrupt factor is branched immediately before an interrupt controller for the microcomputer and used as a transition input. When an abnormal transition is detected, a warning is output to the microcomputer as an interrupt or output to the outside in the form of a signal.

Abstract: In addition to fast on-off timing, instructive information on an output wave such as an amplitude or a slope is transmitted through a small number of signal lines. Output wave modifier information such as the amplitude or slope is transferred through serial communication 1, and an on-off timing signal is transmitted as an individual signal 20.