# US 11,113,382 B2 · Vehicle network system whose security is improved using message authentication code > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,113,382 B2 - Document ID: US11113382B2 - Status: Granted - Kind: B2 - Application number: 15/386,055 - Filed: 2016-12-21 - Published: 2017-04-20 - Granted: 2021-09-07 - Earliest claimed: 2014-07-10 - Assignees: Panasonic Intellectual Property Corporation of America - Applicants: Panasonic Intellectual Property Corporation of America - Inventors: Yoshihiro Ujiie; Masato Tanabe; Takeshi Kishikawa; Tomoyuki Haga; Hideki Matsushima - Web page: https://patentgrep.com/patent/US11113382B2 ## CPC - G06F 21/44: Program or device authentication - B60R 16/0231: {Circuits relating to the driving or the functioning of the vehicle (monitoring tyres B60C23/00; indicating overspeed B60K31/00; for dash boards B60K37/00, B60Q3/10; for indicating emergencies B60Q1/52; brake control systems B60T; registering or indicating the working of vehicles G07C5/00; measuring distance G01C, e.g. combinations of speed and distance G01C23/00; engine indicators G01L; measuring speed or acceleration G01P)} - G06F 13/4208: {being a system bus, e.g. VME bus, Futurebus, Multibus} - H04L 12/40: Bus networks - H04L 63/123: {received data contents, e.g. message integrity} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04L 2012/40215: {Controller Area Network CAN} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - B60R: VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A vehicle network system employing a controller area network protocol includes a bus, a first electronic control unit, and a second electronic control unit. The first electronic control unit transmits, via the bus, at least one data frame including an identifier relating to data used for a calculation for obtaining a message authentication code indicating authenticity of transmission content. The second electronic control unit receives the at least one data frame transmitted via the bus and verifies the message authentication code in accordance with the identifier included in the at least one data frame. ## Claims ### Claim 1 A vehicle network system employing a controller area network protocol, the vehicle network system comprising: a bus; a first electronic control unit connected to the bus; and a second electronic control unit connected to the bus, wherein the first electronic control unit performs operations including transmitting, via the bus, one data frame including an identifier, the identifier being data in the one data frame that indicates a position of different data in the one data frame, the different data being used for a calculation for obtaining a message authentication code indicating authenticity of transmission content, wherein the second electronic control unit performs operations including receiving the one data frame transmitted via the bus, selecting the different data used for the calculation for obtaining the message authentication code in accordance with the identifier included in the one data frame, and verifying the message authentication code using the selected different data, wherein the identifier indicates an area in a data field of the one data frame, the different data being stored in the area of the data field, and wherein each of the identifier and the different data is in the data field of the one data frame. ### Claim 2 (depends on 1) The vehicle network system according to claim 1, wherein the first electronic control unit obtains the message authentication code through calculation using the different data arranged in the area in the one data frame, and wherein, among at least one frame including the one data frame, at least one of the at least one frame includes the message authentication code. ### Claim 3 (depends on 2) The vehicle network system according to claim 2, wherein the identifier further includes information indicating a number of the at least one frame, and wherein, after receiving the number of the at least one frame indicated by the identifier, the second electronic control unit performs the verifying through the calculation using the different data arranged in the area indicated by the identifier. ### Claim 4 A method for a vehicle network system, the vehicle network system employing a controller area network protocol and including a bus, a first electronic control unit connected to the bus, and a second electronic control unit connected to the bus, the method comprising: receiving, by the second electronic control unit, one data frame, which is transmitted by the first electronic control unit via the bus, including an identifier, the identifier being data in the one data frame that indicates a position of different data in the one data frame, the different data being used for a calculation for obtaining a message authentication code indicating authenticity of transmission content; selecting, by the second electronic control unit, the different data used for the calculation for obtaining the message authentication code; and performing, by the second electronic control unit, a process for verifying the message authentication code using the selected different data, wherein the identifier indicates an area in a data field of the one data frame, the different data being stored in the area of the data field, and wherein each of the identifier and the different data is in the data field of the one data frame. ### Claim 5 (depends on 4) The method according to claim 4, wherein the identifier indicates a type of content of the data field of the one data frame. ### Claim 6 (depends on 5) The method according to claim 5, wherein, among at least one frame including the one data frame, at least one of the at least one frame includes the message authentication code, wherein the type of content indicates whether the data field includes the area in which the different data used for the calculation for obtaining the message authentication code is stored, and wherein, if the type of content indicates that the data field includes the area of the different data used for the calculation for obtaining the message authentication code, the process for verifying is performed through the calculation using a value of the area of the different data used for the calculation for obtaining the message authentication code included in the data field. ### Claim 7 (depends on 4) The method according to claim 4, wherein the identifier indicates the area of data of an arbitrary type in the data field of the one data frame. ### Claim 8 (depends on 7) The method according to claim 7, wherein, among at least one frame including the one data frame, at least one of the at least one frame includes the message authentication code, and wherein the area of data of the arbitrary type is the area of the different data used for the calculation for obtaining the message authentication code. ### Claim 9 (depends on 4) The method according to claim 4, wherein the identifier is arranged in the data field of the one data frame. ### Claim 10 A method for a vehicle network system, the vehicle network system employing a controller area network protocol and including a bus, a first electronic control unit connected to the bus, and a second electronic control unit connected to the bus, the method comprising: obtaining, by the first electronic control unit, a message authentication code indicating authenticity of transmission content through calculation using first data arranged in an area in one data frame; and transmitting, by the first electronic control unit, the one data frame to the bus; wherein the one data frame includes an identifier, the identifier being second data in the one data frame that indicates a position of the first data in the one data frame, the first data being used for the calculation for obtaining the message authentication code, the second data of the identifier being different than the first data used for the calculation, wherein, among at least one frame including the one data frame, at least one of the at least one frame includes the obtained message authentication code, wherein the identifier indicates the area in a data field of the one data frame, the first data being stored in the area of the data field, and wherein each of the identifier and the different data is in the data field of the one data frame. ### Claim 11 (depends on 10) The method according to claim 10, wherein the identifier indicates a type of content of the data field of the one data frame. ### Claim 12 (depends on 11) The method according to claim 11, wherein the type of content indicates whether the data field includes the area of the first data used for the calculation for obtaining the message authentication code. ### Claim 13 (depends on 10) The method according to claim 10, wherein the identifier indicates an area of data of an arbitrary type in the data field of the one data frame. ### Claim 14 (depends on 13) The method according to claim 13, wherein the area of data of the arbitrary type is the area of the first data used for the calculation for obtaining the message authentication code. ### Claim 15 (depends on 10) The method according to claim 10, wherein the identifier is arranged in the data field of the one data frame transmitted by the first electronic control unit. ### Claim 16 An electronic control unit employing a controller area network protocol, the electronic control unit comprising: one or more memories; and circuitry that, in operation, performs operations including receiving one data frame, which is transmitted by another electronic control unit via a bus, including an identifier, the identifier being data in the one data frame that indicates a position of different data in the one data frame, the different data being used for a calculation for obtaining a message authentication code indicating authenticity of transmission content, selecting the different data used for the calculation for obtaining the message authentication code in accordance with the identifier included in the one data frame, and verifying the message authentication code using the selected different data, wherein the identifier indicates an area in a data field of the one data frame, the different data being stored in the area of the data field, and wherein each of the identifier and the different data is in the data field of the one data frame. ### Claim 17 An electronic control unit employing a controller area network protocol, the electronic control unit comprising: one or more memories; and circuitry that, in operation, performs operations including obtaining a message authentication code indicating authenticity of transmission content through calculation using first data arranged in one or more areas in one data frame, and transmitting the one data frame to a bus to which the electronic control unit is connected, wherein the one data frame includes an identifier, the identifier being second data in the one data frame that indicates a position of the first data in the one data frame, the first data being used for the calculation for obtaining the message authentication code, the second data of the identifier being different data than the first data used for the calculation, wherein at least one of the one data frame includes the obtained message authentication code, wherein the identifier indicates an area in a data field of the one data frame, the first data being stored in the area of the data field, and wherein each of the identifier and the different data is in the data field of the one data frame. ### Claim 18 (depends on 1) The vehicle network system according to claim 1, wherein the identifier indicates plural areas in the one data frame.