Data provision system, data security device, data provision method, and computer program

1. A data provision system, comprising:

a data provision device;

a data security device; and

an in-vehicle computer installed in a vehicle,

wherein the data provision device includes:

at least one first memory configured to store instructions; and

at least one first processor configured to execute the instructions to,

transmit a first data, which is a computer program or setting data, to be applied to the in-vehicle computer to the vehicle, and

transmit a first message authentication code of the first data and a third message authentication code of the first message authentication code to the data security device,

the data security device includes:

at least one second memory configured to store instructions; and

at least one second processor configured to execute the instructions to,

calculate a fourth message authentication code of the first message authentication code received from the data provision device and verify the fourth message authentication code on the basis of the third message authentication code received from the data provision device, and

transmit the first message authentication code for which the verification of the fourth message authentication code has succeeded to the in-vehicle computer,

the in-vehicle computer includes:

at least one third memory configured to store instructions; and

at least one third processor configured to execute the instructions to,

apply the first data provided by the data provision device to the in-vehicle computer, set a first message authentication code, which is provided by the data provision device in advance and is transmitted when the verification in the data security device has succeeded, as an expected value for use in a secure boot, and execute the secure boot after applying the first data to the in-vehicle computer,

calculate, in the secure boot, a second message authentication code of the first data applied to the in-vehicle computer, and verify the second message authentication code on the basis of the expected value, and

transmit a data application result indicating success or failure of application of the first data to the in-vehicle computer based on a result of the verification,

wherein the one first processor of the data provision device is configured to receive the data application result from the vehicle.

2. A data provision method for use in a data provision system including a data provision device, a data security device, and an in-vehicle computer installed in a vehicle, the data provision method comprising:

transmitting, by the data provision device, a first data, which is a computer program or setting data, to be applied to the in-vehicle computer to the vehicle through a vehicle interface configured to transmit data to and receive data from the vehicle;

transmitting, by the data provision device, a first message authentication code of the first data and a third message authentication code of the first message authentication code to the data security device;

calculating, by the data security device, a fourth message authentication code of the first message authentication code received from the data provision device through a second interface unit configured to transmit data to and receive data from a device outside the data security device and verifying the fourth message authentication code on the basis of the third message authentication code received from the data provision device through the second interface unit; and

transmitting, by the data security device, the first message authentication code for which the verification of the fourth message authentication code has succeeded to the in-vehicle computer through the second interface unit;

applying, by the in-vehicle computer, the first data provided by the data provision device to the in-vehicle computer, setting a first message authentication code, which is provided by the data provision device in advance and is transmitted when the verification in the data security device has succeeded, as an expected value for use in a secure boot, and executing the secure boot after applying the first data to the in-vehicle computer;

calculating in the secure boot, by the in-vehicle computer, a second message authentication code of the first data applied to the in-vehicle computer, and verifying the second message authentication code on the basis of the expected value;

transmitting, by the in-vehicle computer, a data application result indicating success or failure of application of the first data to the in-vehicle computer based on a result of the verification through the first interface unit configured to transmit data to and receive data from a device outside the in-vehicle computer; and

receiving, by the data provision device, the data application result from the vehicle through the vehicle interface.

3. The data provision system according to claim 1 ,

wherein the one first processor of the data provision device is further configured to calculate the first message authentication code using a first common key of the in-vehicle computer, and

the one third processor of the in-vehicle computer is configured to calculate the second message authentication code using the first common key of the in-vehicle computer.

4. The data provision system according to claim 3 ,

wherein the one first processor of the data provision device is configured to calculate the third message authentication code using a second common key of the data security device, and

the one second processor of the data security device is configured to calculate the fourth message authentication code using the second common key of the data security device.