Vehicle network system whose security is improved using message authentication code

A method for a vehicle network system, the vehicle network system employing a controller area network protocol and including a bus, a first electronic control unit connected to the bus, and a second electronic control unit connected to the bus, the method comprising:

• receiving, by the second electronic control unit, one data frame, which is transmitted by the first electronic control unit via the bus, including an identifier, the identifier being data in the one data frame that indicates a position of different data in the one data frame, the different data being used for a calculation for obtaining a message authentication code indicating authenticity of transmission content;
• selecting, by the second electronic control unit, the different data used for the calculation for obtaining the message authentication code;
• and
• performing, by the second electronic control unit, a process for verifying the message authentication code using the selected different data,
• wherein the identifier indicates an area in a data field of the one data frame, the different data being stored in the area of the data field, and
• wherein each of the identifier and the different data is in the data field of the one data frame.

A method for a vehicle network system, the vehicle network system employing a controller area network protocol and including a bus, a first electronic control unit connected to the bus, and a second electronic control unit connected to the bus, the method comprising:

• obtaining, by the first electronic control unit, a message authentication code indicating authenticity of transmission content through calculation using first data arranged in an area in one data frame;
• and
• transmitting, by the first electronic control unit, the one data frame to the bus;
• wherein the one data frame includes an identifier, the identifier being second data in the one data frame that indicates a position of the first data in the one data frame, the first data being used for the calculation for obtaining the message authentication code, the second data of the identifier being different than the first data used for the calculation,
• wherein, among at least one frame including the one data frame, at least one of the at least one frame includes the obtained message authentication code,
• wherein the identifier indicates the area in a data field of the one data frame, the first data being stored in the area of the data field, and
• wherein each of the identifier and the different data is in the data field of the one data frame.

An electronic control unit employing a controller area network protocol, the electronic control unit comprising:

• one or more memories;
• and
• circuitry that, in operation, performs operations including
• receiving one data frame, which is transmitted by another electronic control unit via a bus, including an identifier, the identifier being data in the one data frame that indicates a position of different data in the one data frame, the different data being used for a calculation for obtaining a message authentication code indicating authenticity of transmission content,
• selecting the different data used for the calculation for obtaining the message authentication code in accordance with the identifier included in the one data frame, and
• verifying the message authentication code using the selected different data,
• wherein the identifier indicates an area in a data field of the one data frame, the different data being stored in the area of the data field, and
• wherein each of the identifier and the different data is in the data field of the one data frame.

An electronic control unit employing a controller area network protocol, the electronic control unit comprising:

• one or more memories;
• and
• circuitry that, in operation, performs operations including
• obtaining a message authentication code indicating authenticity of transmission content through calculation using first data arranged in one or more areas in one data frame, and
• transmitting the one data frame to a bus to which the electronic control unit is connected,
• wherein the one data frame includes an identifier, the identifier being second data in the one data frame that indicates a position of the first data in the one data frame, the first data being used for the calculation for obtaining the message authentication code, the second data of the identifier being different data than the first data used for the calculation,
• wherein at least one of the one data frame includes the obtained message authentication code,
• wherein the identifier indicates an area in a data field of the one data frame, the first data being stored in the area of the data field, and
• wherein each of the identifier and the different data is in the data field of the one data frame.