Vehicle control system and vehicle control method
An integrated ECU is a vehicle control system provided in a vehicle, and includes: an application executor that executes an application program; an environment state determiner that determines whether the application executor is anomalous; a first resource provider that provides a resource to be used for controlling the vehicle; and a first access controller that, upon acceptance of a request for the resource from the application program, (a) prohibits provision of the resource from the resource provider to the application program, when the environment state determiner determines that the application executor is anomalous, and (b) permits the provision of the resource from the resource provider to the application program, when the environment state determiner determines that the application executor is not anomalous.
1 . A vehicle control system provided in a vehicle, the vehicle control system comprising:
circuitry; and
at least one memory connected to the circuitry, wherein
using the at least one memory, the circuitry performs operations, the operations including:
receiving a request, from an application program, for a resource that is used for controlling the vehicle;
determining whether an application executor that executes the application program is anomalous;
determining whether the resource is in a providable state;
upon receipt of the request for the resource from the application program; prohibiting provision of the resource to the application program, when the application executor is determined to be anomalous; and permitting the provision of the resource to the application program, when the application executor is determined to not be anomalous; and
providing the resource to the application program, when the provision of the resource is permitted, wherein
the operations determine the prohibiting or the permitting of the provision of the resource to the application program according to an identification result of the application program and executing the application program for which the resource is requested, a first determination result of whether the executing of the application is anomalous, and a second determination result of whether the resource is in the providable state.
2 . The vehicle control system according to claim 1 , wherein
the operations check an authority of the application program, and according to a result of the check of the authority, the request for the resource from the application program is permitted, held, or prohibited.
3 . The vehicle control system according to claim 2 , wherein
the circuitry: determines the prohibiting or the permitting of the provision of the resource to the application program from outside the application executor, when the resource requested by the application program is not providable in the application executor; and does not determine the prohibiting or the permitting of the provision of the resource to the application program from outside the application executor, when the resource requested by the application program is providable in the application executor.
4 . The vehicle control system according to claim 1 , wherein
the circuitry further determines whether the application program or the application executor has authority to use the resource, and
upon the receipt of the request for the resource from the application program, the provision of the resource to the application program is permitted, when the circuitry determines that the application executor is not anomalous and that one of the application program or the application executor has the authority.
5 . The vehicle control system according to claim 1 , wherein
upon the receipt of the request for the resource from the application program, the provision of the resource to the application program is permitted, when the circuitry determines that the application executor is not anomalous and that the resource is in the providable state.
6 . The vehicle control system according to claim 1 , wherein
the resource is at least one of information, a function, or a hardware resource to be used for controlling the vehicle.
7 . A vehicle control method performed by a computer provided in a vehicle, the vehicle control method comprising:
receiving a request, from an application program, for a resource that is used for controlling the vehicle;
determining whether an application executor that executes the application program is anomalous;
determining whether the resource is in a providable state;
upon receipt of the request for the resource from the application program; prohibiting provision of the resource to the application program, when the application executor is determined to be anomalous; and permitting the provision of the resource to the application program, when the application executor is determined not to be anomalous; and
providing the resource to the application program, when the provision of the resource is permitted, wherein
the vehicle control method determines the prohibiting or the permitting of the provision of the resource to the application program according to an identification result of the application program and executing the application program for which the resource is requested, a first determination result of whether the executing the application program is anomalous, and a second determination result of whether the resource is in the providable state.
8 . A vehicle control system provided in a vehicle, the vehicle control system comprising:
a first processor; and
a memory including a program that, when executed by the first processor, causes the first processor to perform operations, the operations including:
receiving a request, from an application program, for a resource that is used for controlling the vehicle;
determining whether a second processor that executes the application program is anomalous;
determining whether the resource is in a providable state;
upon receipt of the request for the resource from the application program: prohibiting provision of the resource to the application program, when the second processor is determined to be anomalous; and permitting the provision of the resource to the application program, when the second processor is determined to not be anomalous; and
providing the resource to the application program, when the provision of the resource is permitted, wherein
the operations determine the prohibiting or the permitting of the provision of the resource to the application program according to an identification result of the application program and executing the application program for which the resource is requested, a first determination result of whether executing the application program is anomalous, and a second determination result of whether the resource is in the providable state.