Method for handling case of detecting unauthorized frame transmitted over onboard network

1. An anomaly handling method used in one or a plurality of electronic control units (ECUs) installed in one vehicle, the anomaly handling method comprising:

receiving an anomaly detection notification transmitted from a device installed in another vehicle, the anomaly detection notification being issued when an unauthorized frame is detected in an onboard network which is installed in the other vehicle,

wherein the anomaly detection notification includes (i) level information indicating one of a plurality of levels, and (ii) a location of the other vehicle,

wherein the one of the plurality of levels indicated by the level information is associated with one of a plurality of predetermined anomaly handling processes, and

wherein a higher level among the plurality of levels indicates more safety is affected than other levels of the plurality of levels;

selecting an anomaly handling process among the predetermined anomaly handling processes;

executing the selected anomaly handling process;

obtaining a location of the one vehicle;

determining whether a distance between the location of the other vehicle and the location of the one vehicle is within a predetermined range or not;

when the distance is within the predetermined range and is shorter than a first predetermined distance, not changing the level information and transmitting the received anomaly detection notification externally from the one vehicle;

when the distance is within the predetermined range and is longer than or equal to the first predetermined distance, changing to decrement a level indicated by the level information, and transmitting changed anomaly detection notification externally from the one vehicle; and

when the distance is not within the predetermined range, not transmitting the received anomaly detection notification externally from the one vehicle.

2. The anomaly handling method according to claim 1 , wherein the selecting includes (i) selecting the anomaly handling process by referencing handling information where each of the plurality of predetermined anomaly handling processes is correlated with each of the plurality of levels, and (ii) selecting the anomaly handling process corresponding to the handling information by the level indicated by the level information included in the anomaly detection Motif notification.

3. The anomaly handling method according to claim 2 , wherein each of the plurality of anomaly handling processes includes at least one of (i) control to stop traveling of the one vehicle, (ii) control to cause the one vehicle to proceed slowly, (iii) control for the one vehicle to maintain inter-vehicle distance as to a vehicle ahead within a certain range, and (iv) control to notify the driver of the one vehicle.

4. The anomaly handling method according to claim 1 , wherein

the first predetermined distance is shorter than a second predetermined distance, and

the second predetermined distance is shorter than a third predetermined distance.

5. The anomaly handling method according to claim 4 , wherein

the determining determines that the distance is within the predetermined range when the distance is shorter than the third predetermined distance.

6. The anomaly handling method according to claim 1 , wherein,

the plurality of levels includes a first level that controls the one vehicle to be stopped, a second level that controls the one vehicle to lower its speed, a third level to control the one vehicle to be driven with a predetermined distance to the other vehicle, and a fourth level that notifies a driver of the one vehicle.

7. An anomaly handling method that handles unauthorized situations by performing communication among first and second vehicles, the anomaly handling method comprising:

transmitting from a device installed in the first vehicle an anomaly detection notification at the time of detecting an unauthorized frame in an onboard network installed in the first vehicle;

receiving the anomaly detection notification by one or a plurality of electronic control units installed in the second vehicle,

wherein the anomaly detection notification includes (i) level information indicating one of a plurality of levels, and (ii) a location of the first vehicle,

wherein the one of the plurality of levels indicated by the level information is associated with one of a plurality of predetermined anomaly handling processes, and

wherein a higher level among the plurality of levels indicates more safety is affected than other levels of the plurality of levels;

selecting an anomaly handling process among the predetermined anomaly handling processes;

executing the selected anomaly handling process;

obtaining a location of the second vehicle;

determining whether a distance between the location of the first vehicle and the location of the second vehicle is within a predetermined range or not;

when the distance is within the predetermined range and is shorter than a first predetermined distance, not changing the level information and transmitting the received anomaly detection notification externally from the second vehicle;

when the distance is within the predetermined range and is longer than or equal to the first predetermined distance, changing to decrement a level indicated by the level information, and transmitting changed anomaly detection notification externally from the second vehicle; and

when the distance is not within the predetermined range, not transmitting the received anomaly detection notification externally from the second vehicle.

8. The anomaly handling method according to claim 7 , wherein, when the unauthorized frame is detected, the device installed in the first vehicle performs the transmission including the anomaly detection notification indicating one level selected based on, of the plurality of levels predetermined by dividing frame Ds, a frame ID of the unauthorized frame, and

wherein the one or plurality of electronic control units installed in the second vehicle perform the selection of anomaly handling process in accordance with the level indicated by the level information included in the anomaly detection notification.

9. An electronic control unit in one vehicle, the electronic control unit comprising:

a processor; and

a memory having a program stored therein, the program causing the processor to execute operations including

receiving an anomaly detection notification transmitted from a device installed in another vehicle, the anomaly detection notification being issued when an unauthorized frame is detected in an onboard network which is installed in the other vehicle,

wherein the anomaly detection notification includes (i) level information indicating one of a plurality of levels, and (ii) a location of the other vehicle,

wherein the one of the plurality of levels indicated by the level information is associated with one of a plurality of predetermined anomaly handling processes, and

wherein a higher level among the plurality of levels indicates more safety is affected than other levels of the plurality of levels;

selecting an anomaly handling process among the predetermined anomaly handling processes;

executing the selected anomaly handling process;

obtaining a location of the one vehicle;

determining whether a distance between the location of the other vehicle and the location of the one vehicle is within a predetermined range or not;

when the distance is within the predetermined range and is shorter than a first predetermined distance, not changing the level information and transmitting the received anomaly detection notification externally from the one vehicle;

when the distance is within the predetermined range and is longer than or equal to the first predetermined distance, changing to decrement a level indicated by the level information, and transmitting changed anomaly detection notification externally from the one vehicle; and

when the distance is not within the predetermined range, not transmitting the received anomaly detection notification externally from the one vehicle.