System for detecting control device security malfunctions

A non-transitory storage medium storing a program to determine whether or not a control device installed in a vehicle is malfunctioning by performing communication with the control device, the program causing a computer to execute processing comprising:

• a first sending processing of sending first information to the control device, the first information not conforming to a rule of a firewall of the control device;
• a first determination processing of, when a response by the control device to the first information has been acquired from the control device as a first notification, determining the control device to be in a malfunction state and ending the processing in a case in which the first notification is a normal notification indicating that the control device is in a normal state, and determining the control device to be in a normal state with respect to the first information and continuing the processing in a case in which the first notification is an abnormal notification indicating that the control device is in an abnormal state;
• a second sending processing of additionally sending, to the control device determined to be in the normal state with respect to the first information, second information conforming to the rule in a case in which the control device has been determined to be in the normal state with respect to the first information by the first determination processing;
• and
• a second determination processing of, when a response by the control device to the second information has been acquired from the control device as a second notification, determining that the control device is in the malfunction state and the ending the processing in a case in which the second notification is the abnormal notification, and determining the control device to be in a normal state and ending the processing in a case in which the second notification is the normal notification.

A determination method to determine whether or not a control device installed in a vehicle is malfunctioning by communicating with the control device and with a determination device connected to the control device, the determination method comprising executing processing that includes:

• a request processing in which the determination device requests the control device to perform diagnosis on the control device;
• a start processing in which the diagnosis is started in a case in which the control device has received the diagnosis request and there is no compromise to safety of the vehicle;
• a first sending processing following the start processing, in which first information not conforming to a rule of a firewall of the control device is sent from the determination device to the control device;
• a first response processing in which the control device that has received the first information determines that the control device is in either a normal state or an abnormal state, and responds to the determination device;
• a first determination processing in which the control device is determined to be in a malfunction state and the processing is ended in a case in which a first notification acquired by the determination device and corresponding to the first response processing is a normal notification indicating that the control device is in a normal state, and the control device is determined to be in a normal state with respect to the first information and the processing is continued in a case in which the first notification is an abnormal notification indicating the control device to be in an abnormal state;
• a second send processing in which second information conforming to the rule is additionally sent from the determination device to the control device in a case in which the control device has been determined to be in a normal state with respect to the first information by the first determination processing;
• a second response processing in which the control device that has received the second information determines the control device to be in either a normal state or an abnormal state, and responds to the determination device;
• and
• a second determination processing in which the control device is determined to be in a normal state in a case in which a second notification acquired by the determination device and corresponding to the second response processing is the normal notification and ending the processing in a case in which the second notification is the normal notification.