Method for reprogram with enhanced security

1 . A method performed by an electronic control unit (ECU) for reprogramming with enhanced security, the method comprising:

verifying that a cyber security function that requires acquisition of an electronic signature, of a ROM of the ECU is applied and a cyber security function of a reprogram ROM of a diagnostic device is not applied while the ECU is running in a NORMAL area;

after it is confirmed that the cyber security function of the ROM of the ECU is applied and it is confirmed that the cyber security function of a reprogram ROM of a diagnostic device is not applied, receiving a first backdoor password for the cyber security function of the ROM of the ECU; and

after confirming that the received first backdoor password is the same as a second backdoor password included in program data stored in the ROM of the ECU, performing reprogramming of the ECU without any electronic signature acquisition procedure.

2 . The method of claim 1 , wherein performing reprogramming of the ECU comprises:

changing a state of a boot area of the ECU;

entering a Boot Strap Loader (BSL) area of the ECU based on the changed state of the boot area; and

performing reprogramming of the boot area by checking ROM information in the BSL area.

3 . The method of claim 2 further comprising:

checking, before checking whether the cyber security function of the ROM of the ECU is applied, whether ROM identification information stored in the boot area and ROM identification information stored in a diagnostic device match;

checking, after it is confirmed that the ROM identification information stored in the boot area and the ROM identification information stored in the diagnostic device do not match, whether ROM identification information stored in the BSL area and the ROM identification information stored in the diagnostic device do not match; and

checking, after the ROM identification information stored in the BSL area and the ROM identification information stored in the diagnostic device do not match, information necessary for reprogram of the boot area.

4 . The method of claim 1 , wherein checking whether the cyber security function is applied comprises:

verifying a validity of a reprogram ROM of a diagnostic device;

checking, after the validity is verified, whether the cyber security function of the ECU is applied; and

checking, after it is confirmed that the cyber security function of the ECU is applied, whether a cyber security function of the diagnostic device is applied.

5 . A method performed by an electronic control unit (ECU) for reprogramming with enhanced security, the method comprising:

verifying that ROM identification information stored in a boot area of the ECU and ROM identification information stored in a diagnostic device do not match;

after confirming that the ROM identification information stored in the boot area and the ROM identification information stored in the diagnostic device do not match, verifying that ROM identification information stored in a Boot Strap Loader (BSL) area and the ROM identification information stored in the diagnostic device do not match;

after confirming that the ROM identification information stored in the BSL area and the ROM identification information stored in the diagnostic device do not match, checking information necessary for reprogram of the boot area;

verifying that a cyber security function that requires acquisition of an electronic signature is applied to each of the ROM of the ECU and a reprogram ROM of the diagnostic device while the ECU is running in a NORMAL area, and in response, reprogramming the ECU; and

after it is detecting that the cyber security function is applied to the ROM of the ECU and the cyber security function is no longer applied to the reprogram ROM of the diagnostic device, stopping reprogramming of the ECU.

6 . An electronic control unit (ECU) comprising:

one or more processors;

a memory configured to load a computer program executed by the one or more processors; and

a storage configured to store the computer program;

wherein the computer program comprises instructions for performing operations comprising:

checking whether a cyber security function that requires acquisition of an electronic signature, of a ROM of the ECU is applied and whether the cyber security function of a reprogram ROM of a diagnostic device is applied while the ECU is running in a NORMAL area;

receiving, after it is confirmed that the cyber security function of the ROM of the ECU is applied and it is confirmed that the cyber security function of a reprogram ROM of a diagnostic device is not applied, a first backdoor password for the cyber security function of the ROM of the ECU; and

performing, after the received first backdoor password is the same as a second backdoor password included in program data stored in the ROM of the ECU, reprogramming of the ECU without requiring any electronic signature acquisition procedure.

7 . The ECU of claim 6 , wherein performing reprogramming of the ECU comprises:

changing a state of a boot area of the ECU;

entering a Boot Strap Loader (BSL) area of the ECU based on the changed state of the boot area; and

performing reprogramming of the boot area by checking ROM information in the BSL area.

8 . The ECU of claim 7 , wherein the computer program further comprises instructions for performing operations comprising:

checking, before checking whether the cyber security function of the ROM of the ECU is applied, whether ROM identification information stored in the boot area and ROM identification information stored in a diagnostic device match;

checking, after it is confirmed that the ROM identification information stored in the boot area and the ROM identification information stored in the diagnostic device do not match, whether ROM identification information stored in the BSL area and the ROM identification information stored in the diagnostic device do not match; and

checking, after the ROM identification information stored in the BSL area and the ROM identification information stored in the diagnostic device do not match, information necessary for reprogram of the boot area.

9 . The ECU of claim 6 , wherein checking whether the cyber security function is applied comprises:

verifying a validity of a reprogram ROM of a diagnostic device;

checking, after the validity is verified, whether the cyber security function of the ECU is applied; and

checking, when it is confirmed that the cyber security function of the ECU is applied, whether a cyber security function of the diagnostic device is applied.

10 . An electronic control unit (ECU) comprising:

one or more processors;

a memory configured to load a computer program executed by the one or more processors; and

a storage configured to store the computer program;

wherein the computer program comprises instructions for performing operations comprising:

checking whether ROM identification information stored in a boot area of the ECU and ROM identification information stored in a diagnostic device match;

checking, after it is confirmed that the ROM identification information stored in the boot area and the ROM identification information stored in the diagnostic device do not match, whether ROM identification information stored in a Boot Strap Loader (BSL) area and the ROM identification information stored in the diagnostic device do not match;

checking, after the ROM identification information stored in the BSL area and the ROM identification information stored in the diagnostic device do not match, information necessary for reprogram of the boot area;

checking whether a cyber security function that requires acquisition of an electronic signature, is applied to each of the ROM of the ECU and a reprogram ROM of the diagnostic device while the ECU is operating in a NORMAL area, and in response, reprogramming the ECU; and

stopping the reprogramming of the ECU, after it is confirmed that the cyber security function is applied to the ROM of the ECU and that the cyber security function is no longer applied to the reprogram ROM of the diagnostic device.