Extra-vehicular communication device, communication control method, and communication control program
An extra-vehicular communication device installed in a vehicle and capable of communicating with an external device outside the vehicle includes: a control unit; and a storage unit that has a tamper-resistant secure area and stores, in the secure area, at least one of communication destination information regarding a communication destination outside the vehicle and emergency operation information regarding a predetermined operation in an emergency. When unauthorized access in in-vehicle equipment installed in the vehicle is detected, the control unit performs at least one of control of communication with the communication destination by use of the communication destination information and processing based on the emergency operation information.
1. An extra-vehicular communication device installed in a vehicle that communicates with an external device outside of the vehicle, the vehicle being configured to perform autonomous driving, the extra-vehicular communication device comprising:
a memory that includes a tamper-resistant secure area, the memory storing, in the secure area, at least one of communication destination information regarding a communication destination outside of the vehicle and emergency operation information regarding a predetermined operation in an emergency; and
a control circuit that:
performs (i) control of communication with the communication destination by use of the communication destination information, and (ii) processing based on the emergency operation information when unauthorized access in in-vehicle equipment installed in the vehicle is detected, and
upon detecting unauthorized access in the in-vehicle equipment installed in the vehicle, restricts transmission of information, except for control information and map information, which are permitted to be transmitted and are used to perform autonomous driving of the vehicle.
2. The extra-vehicular communication device according to claim 1 , wherein the communication destination is the external device that transmits information necessary for autonomous driving of the vehicle.
3. The extra-vehicular communication device according to claim 1 , wherein the communication destination is the external device of an emergency-report receiving organization.
4. The extra-vehicular communication device according to claim 1 , wherein the communication destination indicates a broadcast.
5. The extra-vehicular communication device according to claim 4 , wherein information indicating that the vehicle receives the unauthorized access is broadcast as communication with the communication destination.
6. The extra-vehicular communication device according to claim 1 , wherein the predetermined operation in an emergency is communication with at least one of the external device and the in-vehicle equipment.
7. The extra-vehicular communication device according to claim 1 , wherein the predetermined operation in an emergency is switching from autonomous driving to manual driving of the vehicle.
8. The extra-vehicular communication device according to claim 1 , wherein the predetermined operation in an emergency is stopping the vehicle on a road shoulder.
9. The extra-vehicular communication device according to claim 1 , wherein the secure area is included in a storage area of a secure device.
10. An extra-vehicular communication device installed in a vehicle that communicates with an external device outside the vehicle, the vehicle being configured to perform autonomous driving, the extra-vehicular communication device comprising:
a first memory that stores normal-time operation information regarding a predetermined operation in a normal time;
a main control circuit that performs processing based on the normal-time operation information;
a secure memory that includes a tamper-resistant secure area, the memory storing, in the secure area, at least one of communication destination information regarding a communication destination outside of the vehicle and emergency operation information regarding a predetermined operation in an emergency; and
a secure control circuit that:
accesses the secure area,
performs (i) control of communication with the communication destination by use of the communication destination information, and (ii) processing based on the emergency operation information when unauthorized access in in-vehicle equipment installed in the vehicle is detected, and
upon detecting unauthorized access in the in-vehicle equipment installed in the vehicle, restricts transmission of information, except for control information and map information, which are permitted to be transmitted and are used to perform autonomous driving of the vehicle.
11. An extra-vehicular communication device installed in a vehicle that communicates with an external device outside of the vehicle, the vehicle being configured to perform autonomous driving, the extra-vehicular communication device comprising:
a control circuit; and
a memory that includes a secure area to which access from the control circuit is permitted when the control circuit outputs predetermined information, the memory storing, in the secure area, at least one of communication destination information regarding a communication destination outside the vehicle and emergency operation information regarding a predetermined operation in an emergency,
wherein when unauthorized access in in-vehicle equipment installed in the vehicle is detected, the control circuit:
performs control of communication with the communication destination by use of the communication destination information and processing based on the emergency operation information, and
restricts transmission of information, except for control information and map information, which are permitted to be transmitted and are used to perform autonomous driving of the vehicle.
12. An extra-vehicular communication device installed in a vehicle that communicates with an external device outside the vehicle, the vehicle being configured to perform autonomous driving, the extra-vehicular communication device comprising:
a first memory that stores normal-time operation information regarding a predetermined operation in a normal time;
a main control circuit that performs processing based on the normal-time operation information;
a secure memory that includes a secure area, the secure memory storing, in the secure area, at least one of communication destination information regarding a communication destination outside the vehicle and emergency operation information regarding a predetermined operation in an emergency; and
a secure control circuit that:
accesses the secure area,
performs (i) control of communication with the communication destination by use of the communication destination information, and (ii) processing based on the emergency operation information when unauthorized access in in-vehicle equipment installed in the vehicle is detected, and
upon detecting unauthorized access in the in-vehicle equipment installed in the vehicle, restricts transmission of information, except for control information and map information, which are permitted to be transmitted and are used to perform autonomous driving of the vehicle.