On-board communication system, switching device, verification method, and verification program
An on-vehicle communication system includes: a plurality of function units; and one or a plurality of switch devices, each switch device being configured to perform a relay process of relaying communication data between the function units. When unauthorized communication by a function unit has been detected, the switch device performs a validation process of validating a function unit other than an unauthorized-communication function unit that is the function unit for which the unauthorized communication has been detected.
1. An on-vehicle communication system comprising:
a plurality of function units; and
one or a plurality of switch devices, each switch device being configured to perform a relay process of relaying communication data between the function units, wherein
when unauthorized communication by a function unit has been detected, the switch device performs a validation process of validating a function unit other than an unauthorized-communication function unit that is the function unit for which the unauthorized communication has been detected, and
the validation process is a process for determining whether or not the function unit other than the unauthorized-communication function unit has an abnormality.
2. The on-vehicle communication system according to claim 1 , wherein
the switch device: performs the relay process by using relay information indicating a relationship of communication between the function units; as the validation process, identifies a function unit serving as a communication counterpart of the unauthorized-communication function unit, on the basis of the relay information; and
validates the identified function unit.
3. The on-vehicle communication system according to claim 1 , wherein
as the validation process, the switch device further validates a secondary function unit that is a function unit serving as a communication counterpart of an abnormality function unit that is a function unit determined as having an abnormality in the validation process.
4. The on-vehicle communication system according to claim 1 , wherein
the on-vehicle communication system includes a plurality of the switch devices, and
each switch device holds a list indicating at least one of the unauthorized-communication function unit, and an abnormality function unit that is a function unit determined as having an abnormality in the validation process.
5. The on-vehicle communication system according to claim 4 , wherein
the switch device performs a process of, when a secondary function unit that is a function unit serving as a communication counterpart of the abnormality function unit is connected to another switch device, providing the list to the other switch device and causing the other switch device to validate the secondary function unit.
6. The on-vehicle communication system according to claim 4 , wherein
every time the switch device updates the list, the switch device transmits the updated list to another switch device.
7. The on-vehicle communication system according to claim 1 , wherein
in the validation process, the switch device acquires validation data for stored data from the function unit, and validates the function unit by using the acquired validation data.
8. The on-vehicle communication system according to claim 1 , wherein
in the validation process, the switch device acquires authentication data for stored data from the function unit, and validates the function unit by using the acquired authentication data.
9. A switch device to be used in an on-vehicle communication system, the switch device comprising:
a switch unit configured to perform a relay process of relaying communication data between a plurality of function units; and
a validation unit configured to perform, when unauthorized communication by a function unit has been detected, a validation process of validating a function unit other than an unauthorized-communication function unit that is the function unit for which the unauthorized communication has been detected, wherein
the validation process is a process for determining whether or not the function unit other than the unauthorized-communication function unit has an abnormality.
10. A validation method to be performed in an on-vehicle communication system, the on-vehicle communication system including a plurality of function units and one or a plurality of switch devices, each switch device being configured to perform a relay process of relaying communication data between the function units,
the validation method comprising the steps of:
acquiring, performed by the switch device, a detection result of unauthorized communication performed by a function unit;
transmitting, performed by the switch device, a confirmation request to a function unit serving as a communication counterpart of an unauthorized-communication function unit that is the function unit for which the unauthorized communication has been detected; and
transmitting to the switch device, performed by the function unit serving as the communication counterpart of the unauthorized-communication function unit, response information to the confirmation request, wherein
the response information indicates whether or not the function unit serving as the communication counterpart of the unauthorized-communication function unit has an abnormality.
11. A validation method to be performed in a switch device configured to perform a relay process of relaying communication data between a plurality of function units,
the validation method comprising the steps of:
acquiring a detection result of unauthorized communication performed by a function unit; and
performing, when the unauthorized communication performed by the function unit has been detected, a validation process of validating a function unit other than an unauthorized-communication function unit that is the function unit for which the unauthorized communication has been detected, wherein
the validation process is a process for determining whether or not the function unit other than the unauthorized-communication function unit has an abnormality.
12. A non-transitory computer readable storage medium storing a computer program to be used in a switch device, the computer program being configured to cause a computer to function as:
a switch unit configured to perform a relay process of relaying communication data between a plurality of function units; and
a validation unit configured to perform, when unauthorized communication by a function unit has been detected, a validation process of validating a function unit other an unauthorized-communication function unit that is the function unit for which the
unauthorized communication has been detected, wherein
the validation process is a process for determining whether or not the function unit other than the unauthorized-communication function unit has an abnormality.