Search Results

Modern vehicles utilize various functionalities that require security solutions such as secure in-vehicle communication and ECU authentication. Cryptographic keys are the basis for such security solutions. We propose two approaches for secure and efficient invehicle key management. In both approaches, an ECU acting as a Key Master in the vehicle is required. The first approach is based on SHE. The Key Master generates and distributes new keys to all ECU based on the SHE key update protocol. The second approach performs key establishment based on key derivation. The Key Master sends a trigger in form of a counter and all ECUs derive new keys based on the received counter value and pre-shared keys. It is thus possible to handle in-vehicle key management without the need for an OEM backend to manage all keys. This reduces cost and complexity of the solution.

Instrument clusters that display all information on a TFT-LCD screen, also known as reconfigurable instrument clusters, have become the new trend in automotive interiors. DENSO mass-produced the world's first reconfigurable instrument cluster in 2008. To satisfy customer requirements, large quantities of resources were required. Coupled with an iterative process due to requirement changes, development costs became very high. Reducing development costs was vital in order to expand the reconfigurable instrument cluster products line. One solution was to use existing human machine interface (HMI) tools. However, most HMI tools are geared toward software developers and not graphic artists. Furthermore, each tool has its own unique method for image and scene creation, creating an ineffective and sometimes difficult environment for artists familiar with industry-leading computer graphics (CG) software to learn and use the tools.

In gasoline direct injection (GDI) systems, various injection types are needed to reduce emissions and improve fuel consumption. This requires high-precision injection in the region in which the amount of injection is small. Achieving injection of a small amount of fuel using GDI solenoid injectors requires the use of the half-lift region. In this region, however, the variation in the injection amount tends to increase due to the variation in the lift behavior of the injectors, posing the problem of how to achieve high-precision injection. To reduce the variation, we analyzed the lift timing out of the injector current and voltage signal with the ECU in an attempt to adjust the amount of injection.

Recent electric vehicles use Li-ion batteries to power the main electric motor. To maintain the safety of the main electric motor battery using Li-ion cells, it is necessary to monitor the voltage of each cell. DENSO has developed a battery Electronic Control Unit (ECU) that contributes greatly to the reduction of the cost and the improvement of the reliability of the system. Each manufacturer has been developing a dedicated IC for monitoring the voltages of each cell of a battery. However, since the number of cells that can be monitored is limited, more than one IC is required to measure the voltages of a large number of cells. The increase in the number of ICs and the amount of insulator leads to the rise in system cost. DENSO has developed a dedicated IC that uses a proprietary high-breakdown voltage process, and which enables monitoring up to 24 cells with a single IC chip.

In-vehicle network communication is evolving faster speeds and higher performance capabilities, connecting the information possessed by ECU and sensors with the in-vehicle electronic systems which are continuing to develop. With the evolution of the complicated networks, it is becoming difficult to develop them without many verification of actual machine. On the other hand, as for the verification means required at the logic level or physical level for a network verification through ECU design, virtual verification in the whole vehicle is difficult due to speed increases and the sheer size of the system. Therefore, it is only applicable for systems which are limited to a domain or an area, and flexible and timely utilization would be difficult due to the changes in specifications.

In the last decade, radar-based Advanced Driver Assistance Systems (ADAS) have improved safety of transportation. Today, the standardization of ADAS established by New Car Assessment Program (NCAP) is expected to expand its market globally. One of the key technologies of ADAS is the rear-side monitoring system such as Blind Spot Warning (BSW) and Closing Vehicle Warning (CVW). It is required to expand its detection range so that it can monitor not only nearside targets for BSW, but farther targets for CVW. These applications can be achieved using two radar sensors installed at rear-side corner of the vehicle. However, the expanded detection range causes undesirable target detections and decreases target recognition performance. In this paper, a novel solution to improve the performance using DCMP(Directional-Constrained Minimization of Power)-based Beamspace technology using Two-frequency continuous wave (2FCW also known as FSK) is introduced.

We propose a verification method in the field of automotive control systems integrating the concepts of Formal Methods with testing, aiming at efficient and reliable software development. Although Formal Methods are believed to provide the benefits of their rigorous nature and their inherent capability of automation, only limited cases are known where Formal Methods were applied in system and software development, in practice, due to two major difficulties: appropriate abstraction in modeling and scalability in automated reasoning. Focusing on testing on the other hand, there is the difficulty of selecting reasonable set of tests for given verification objectives. In order to overcome these difficulties, our approach is to present verification criteria for testing to appropriately cover the property with the help of the Formal Method concepts.

Along with the evolution of vehicle electronic systems from independent control in each domain system to the integration control of the whole vehicle system, ECU systems have become increasingly complicated and large-scale. This has made it extremely difficult to develop the entire system coherently and efficiently from the functional level down to implementation level. On the other hand, the development methodology focusing on single ECU system used today has been facing an additional challenge because of increasingly strict requirements for safety design based on multi-ECU systems. To address these challenges, we have been working on developing virtual development of Engine ECU by modeling technology. In order to achieve optimum electronic systems, it is necessary to build many real devices and evaluate the performance of systems. However, it is also becoming necessary to build virtual devices because of the increasingly complicated and large-scale systems.

Externally-connected Electronic Control Units (ECUs) contain millions of lines of code, which may contain security vulnerabilities. Hackers may exploit these vulnerabilities to gain code execution privileges, which affect public safety. Traditional Cybersecurity solutions fall short in meeting automotive ECU constraints such as zero false positives, intermittent connectivity, and low performance impact. A desirable solution would be deterministic, require minimum resources, and protect against known and unknown security threats. We integrated Autonomous Security on a BeagleBone Black (BBB) system to evaluate the feasibility of mitigating Cybersecurity risks against potential threats. We identified key metrics that should be measured, such as level of security, ease of integration and system performance impact. In this paper, we describe the integration and evaluation process and present its results.

As automotive electronic systems aiming for a safe and secure automobile society continue to develop, the control specifications of the ECU are becoming increasingly complex. When attempting to validate control specifications that cooperatively control different control specifications, control specification developers must consider various validation viewpoints. They narrow down the validation viewpoints based on rules from past experience, describe timing charts, and validate the specifications. However, due to complicated specifications, empirical rules do not pass, and specification mismatches are often found after actual systems completion. On the other hand, a block diagram simulator is a tool to verify control specifications. Since these tools are aimed at modeling and verifying the system design, it is efficient to describe how to implement the system. However, first it is necessary to verify the consistency between the model and the specifications.

Recent developments in the commercialization of mobility services have brought unprecedented connectivity to the automotive sector. While the adoption of connected features provides significant benefits to vehicle owners, adversaries may leverage zero-day attacks to target the expanded attack surface and make unauthorized access to sensitive data. Protecting new generations of automotive controllers against malicious intrusions requires solutions that do not depend on conventional countermeasures, which often fall short when pitted against sophisticated exploitation attempts. In this paper, we describe some of the latent risks in current automotive systems along with a well-engineered multi-layer defense strategy. Further, we introduce a novel and comprehensive attack and performance test framework which considers state-of-the-art memory corruption attacks, countermeasures and evaluation methods.

A new development environment is required where conflict between control systems is minimized, where processing can be executed while maintaining independence between systems, and where quality can be assured easily. This environment must enable flexibility in software layouts to accommodate software changes during the development process and the parallel development of multiple derivative systems. We have developed virtualization technology (virtual CPU), which allows the execution of system control with a single CPU without conflict between systems. An outstanding virtual CPU architecture that we have developed allows us to execute multiple real-time control tasks with the hardware scheduler, and we have developed hardware that extends the management of address space and interrupt handling, making it possible for a single CPU to be configured as multiple CPUs. Also, we have implemented a bus system that reduces interference between threads.

The adaptive cruise control (ACC) system reduces the workload of the driver. Lower cost and more precise control are the keys to successfully creating a market with the ACC system. A system that eliminates unexpected acceleration or deceleration caused by incorrect judgment is in high demand. From 1997, the laser radar ACC system has been produced for the domestic version of the Lexus LS400. It provides high recognition capability with a two-dimensional scanning system at an affordable price. Th millimeter wave radar ACC system can perform with better recognition capability, but is quite expensive. While many companies are developing millimeter wave radar ACC systems, we think our laser radar ACC system is superior.

The electric power steering (EPS) is increasing its number since there are many advantages compared to hydraulic power steering. The EPS saves fuel and eliminates hydraulic fluid. Also, it is more suitable to the cooperation control with the other vehicle components. The EPS is now expanding to the heavier vehicle with the advance in the power electronics. In order to meet customer's needs, such as down-sizing, lower failure rate and lower price, we have developed the new motor control unit (MCU) for the EPS. The motor and the electric control unit (ECU) were integrated for the better installation. We adopted new technologies of redundant 2-drive design for more safe EPS. “2-drive Motor Control technology” which consists of dual winding, two torque sensors and two inverter drive units. In our developed MCU, even if there is a failure in one of the drive unit, the assistance of the EPS can be maintained with the other drive unit.

The growing functionality and complexity of recent vehicle electronic systems have made inter-device communication (on-board LAN) technology vital to vehicle design. By field of application, the LAN (Local Area Network) systems currently in use are LIN (Local Interconnect Network) used for body systems, CAN (Controller Area Network) used for control systems, and MOST (Media Oriented Systems Transport ) used for multimedia and camera systems, and work to standardize the next-generation communication technology for each of those fields is underway. This paper provides a technical overview of the CXPI (Clock Extension Peripheral Interface) communication protocol, which satisfies the body system requirements (rapid response, system extensibility, high reliability, and low cost). It also presents the progress made on standardization at SAE and other organizations.