# US 11,444,939 B2 · Authentication control device, authentication control method, and authentication control program > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,444,939 B2 - Document ID: US11444939B2 - Status: Granted - Kind: B2 - Application number: 16/629,982 - Filed: 2018-06-12 - Published: 2020-04-30 - Granted: 2022-09-13 - Earliest claimed: 2017-07-10 - Assignees: Sumitomo Electric Industries, Ltd.; Autonetworks Technologies, Ltd.; Sumitomo Wiring Systems, Ltd. - Applicants: Sumitomo Electric Industries, Ltd.; Autonetworks Technologies, Ltd.; Sumitomo Wiring Systems, Ltd. - Inventors: Akihiro Ogawa; Hirofumi Urayama; Takeshi Hagihara; Yasuhiro Yabuuchi - Web page: https://patentgrep.com/patent/US11444939B2 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - G06F 21/44: Program or device authentication - H04B 7/155: Ground-based stations (H04B7/204 takes precedence) - H04L 9/14: using a plurality of keys or algorithms - H04L 9/32: including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} - H04L 12/40: Bus networks - H04L 12/66: Arrangements for connecting between networks having differing types of switching systems, e.g. gateways - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/105: {Multiple levels of security} - H04W 4/40: for vehicles, e.g. vehicle-to-pedestrians [V2P] - H04W 4/48: for in-vehicle communication - H04W 12/06: Authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04B: TRANSMISSION - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract An authentication control device includes: an acquisition unit configured to acquire predetermined identification information regarding an on-vehicle device to be newly added to an on-vehicle network; and a determination unit configured to determine which of a plurality of types of authentication procedures is to be applied as an authentication process for the on-vehicle device, on the basis of the identification information acquired by the acquisition unit. ## Claims ### Claim 1 An authentication control method for an authentication control device, the authentication control method comprising the steps of: acquiring predetermined identification information regarding an on-vehicle device to be newly added to an on-vehicle network; determining which of a plurality of types of authentication procedures is to be applied as an authentication process for the on-vehicle device, on the basis of the acquired identification information; and determining a reliability level representing a degree of trust of a mounting person and a mounting procedure for the on-vehicle device from among a plurality of reliability levels, on the basis of the identification information that is acquired, and determining the authentication procedure corresponding to the determined reliability level. ### Claim 2 An authentication control device comprising: an acquisition unit configured to acquire predetermined identification information regarding an on-vehicle device to be newly added to an on-vehicle network; and a determination unit configured to determine which of a plurality of types of authentication procedures is to be applied as an authentication process for the on-vehicle device, on the basis of the identification information acquired by the acquisition unit, wherein the determination unit determines a reliability level representing a degree of trust of a mounting person and a mounting procedure for the on-vehicle device from among a plurality of reliability levels, on the basis of the identification information acquired by the acquisition unit, and determines the authentication procedure corresponding to the determined reliability level. ### Claim 3 (depends on 2) The authentication control device according to claim 2, wherein the identification information is information with which a place where work for mounting the on-vehicle device is performed is identifiable. ### Claim 4 (depends on 2) The authentication control device according to claim 2, wherein the identification information is at least either one of a product number and a model number of the on-vehicle device. ### Claim 5 (depends on 2) The authentication control device according to claim 2, wherein the identification information is information with which the on-vehicle device is uniquely identifiable. ### Claim 6 (depends on 2) The authentication control device according to claim 2, wherein the determination unit determines the authentication procedure to be newly applied, further on the basis of the authentication procedure applied for the on-vehicle device in the past. ### Claim 7 (depends on 2) The authentication control device according to claim 2, wherein the authentication control device is included in a relay device configured to relay data in the on-vehicle network. ### Claim 8 (depends on 7) The authentication control device according to claim 7, wherein the identification information is included in an authentication key used in the authentication process with the relay device. ### Claim 9 (depends on 2) The authentication control device according to claim 2, wherein the plurality of types of authentication procedures include a plurality of authentication procedures different from each other in number of authentication devices performing the authentication process for the on-vehicle device. ### Claim 10 (depends on 2) The authentication control device according to claim 2, wherein the plurality of types of authentication procedures include a plurality of authentication procedures different from each other in authentication devices performing the authentication process for the on-vehicle device. ### Claim 11 (depends on 9) The authentication control device according to claim 9, wherein an authentication key used in the authentication process is different for each authentication device. ### Claim 12 (depends on 9) The authentication control device according to claim 9, wherein a relay device configured to relay data in the on-vehicle network is included in the authentication device. ### Claim 13 (depends on 12) The authentication control device according to claim 12, wherein, when the authentication process for the on-vehicle device by the relay device has been successfully performed, the relay device instructs another on-vehicle device that is to be a communication partner for the on-vehicle device, to start the authentication process. ### Claim 14 (depends on 12) The authentication control device according to claim 12, wherein, when the authentication process for the on-vehicle device by the relay device has been successfully performed, the relay device instructs another relay device to start the authentication process. ### Claim 15 (depends on 2) The authentication control device according to claim 2, wherein each authentication procedure of the plurality of types of authentication procedures has a different security level. ### Claim 16 (depends on 2) The authentication control device according to claim 2, wherein the determination unit determines the reliability of the on-vehicle device on the basis of the identification information acquired by the acquisition unit, and determines the authentication procedure having a larger number of authentication devices performing the authentication process for the on-vehicle device when the determined reliability is lower. ### Claim 17 A non-transitory computer readable storage medium storing an authentication control program used in an authentication control device, the authentication control program causing a computer to: acquire predetermined identification information regarding an on-vehicle device to be newly added to an on-vehicle network; determine which of a plurality of types of authentication procedures is to be applied as an authentication process for the on-vehicle device, on the basis of the identification information that is acquired; and determine a reliability level representing a degree of trust of a mounting person and a mounting procedure for the on-vehicle device from among a plurality of reliability levels, on the basis of the identification information that is acquired, and determine the authentication procedure corresponding to the determined reliability level.