# US 12,112,206 B2 · Control device for controlling multiple applications based on priority-based message encryption arbitration > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,112,206 B2 - Document ID: US12112206B2 - Status: Granted - Kind: B2 - Application number: 17/643,283 - Filed: 2021-12-08 - Published: 2022-08-25 - Granted: 2024-10-08 - Earliest claimed: 2021-02-19 - Assignees: Toyota Jidosha Kabushiki Kaisha - Applicants: Toyota Jidosha Kabushiki Kaisha - Inventors: Takayuki Osajima - Web page: https://patentgrep.com/patent/US12112206B2 ## CPC - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 9/5038: {considering the execution order of a plurality of tasks, e.g. taking priority or time dependency constraints into consideration (scheduling strategies G06F9/4881 and subgroups)} - B60W 60/00: Drive control systems specially adapted for autonomous road vehicles - G06F 9/45533: {Hypervisors; Virtual machine monitors} - G06F 9/4881: {Scheduling strategies for dispatcher, e.g. round robin, multi-level priority queues} - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - G06F 2209/5021: Priority - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - B60W: CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT ## Abstract A control device manages multiple applications by acquiring and comparing messages they transmit and receive. It includes a storage unit that prioritizes message processing across these applications and an arbitration unit that determines the sequence for encrypting these messages based on the stored priorities. ## Claims ### Claim 1 A control device that is mounted on a vehicle, the control device comprising: a processor; a memory; and circuitry configured to: acquire a plurality of transmit messages transmitted from each of a plurality of applications of the vehicle and a plurality of receive messages received by each of the plurality of applications; acquire a state of the vehicle; and store, in the memory, a priority order for an encryption process of the plurality of transmit messages and a decryption process of the plurality of receive messages for a first application and a second application of the plurality of applications, wherein the first application is associated with a first control system of the vehicle other than a second control system for autonomously driving the vehicle, and wherein the second application is associated with the second control system for autonomously driving the vehicle, wherein: when the state of the vehicle is a first state, the priority of the encryption process of the plurality of transmit messages of the second application is higher than the priority of the decryption process of the plurality of receive messages of the first application, the first state being when the vehicle is autonomously driving; and when the state of the vehicle is a second state other than the first state, the priority of the encryption process of the plurality of transmit messages of the first application is higher than the priority of the decryption process of the plurality of receive messages of the second application, the second state being when the vehicle is not autonomously driving. ### Claim 2 (depends on 1) A vehicle equipped with the control device according to claim 1. ### Claim 3 (depends on 1) The control device according to claim 1, wherein the plurality of transmit messages and the plurality of receive messages of the first application are stored in a first virtual hardware security module (HSM) of the first control system and the plurality of transmit messages and the plurality of receive messages of the second application are stored in a second virtual HSM of the second control system. ### Claim 4 (depends on 1) The control device according to claim 1, wherein the control device communicates with at least the first control system and the second control system. ### Claim 5 (depends on 1) The control device according to claim 1, wherein the first control system and the second control system each comprise at least one virtual machine. ### Claim 6 (depends on 1) The control device according to claim 1, wherein the control device further comprises an acquisition unit and an arbitration unit. ### Claim 7 (depends on 1) The control device according to claim 1, wherein the control device communicates with a hardware security module (HSM) of a system-on-a-chip (SoC) of the vehicle. ### Claim 8 (depends on 1) The control device according to claim 1, wherein the control device communicates with at least one multimedia system of the vehicle. ### Claim 9 A control method that is performed by circuitry of a control device mounted on a vehicle, the control method comprising: acquiring a plurality of transmit messages transmitted from each of a plurality of applications of the vehicle and a plurality of receive messages received by each of the plurality of applications; acquiring a state of the vehicle; and storing, in a memory of the control device, a priority order for an encryption process of the plurality of transmit messages and a decryption process of the plurality of receive messages for a first application and a second application of the plurality of applications, wherein the first application is associated with a first control system of the vehicle other than a second control system for autonomously driving the vehicle, and wherein the second application is associated with the second control system for autonomously driving the vehicle, wherein: when the state of the vehicle is a first state, the priority of the encryption process of the plurality of transmit messages of the second application is higher than the priority of the encryption process of the plurality of transmit messages of the first application, the priority of the decryption process of the plurality of receive messages of the second application is higher than the priority of the decryption process of the plurality of receive messages of the first application, and the priority of the encryption process of the plurality of transmit messages of the first application and the second application is higher than the priority of the decryption process of the plurality of receive messages of the first application and the second application, the first state being when the vehicle is autonomously driving; and when the state of the vehicle is a second state other than the first state, the priority of the encryption process of the plurality of transmit messages of the first application is higher than the priority of the encryption process of the plurality of transmit messages of the second application, the priority of the decryption process of the plurality of receive messages of the first application is higher than the priority of the decryption process of the plurality of receive messages of the second application, and the priority of the encryption process of the plurality of transmit messages of the first application and the second application is higher than the priority of the decryption process of the plurality of receive messages of the first application and the second application, the second state being when the vehicle is not autonomously driving. ### Claim 10 (depends on 9) The control method according to claim 9, wherein the plurality of transmit messages and the plurality of receive messages of the first application are stored in a first virtual hardware security module (HSM) of the first control system and the plurality of transmit messages and the plurality of receive messages of the second application are stored in a second virtual HSM of the second control system. ### Claim 11 (depends on 9) The control method according to claim 9, wherein the control device communicates with the first control system and the second control system and at least one multimedia system of the vehicle. ### Claim 12 (depends on 9) The control method according to claim 9, wherein the first control system and the second control system each comprise at least one virtual machine. ### Claim 13 (depends on 9) The control method according to claim 9, wherein the control device further comprises an acquisition unit and an arbitration unit. ### Claim 14 (depends on 9) The control method according to claim 9, wherein the control device communicates with a hardware security module (HSM) of a system-on-a-chip (SoC) of the vehicle. ### Claim 15 A non-transitory computer-readable medium storing instructions that, when executed by one or more processors of a control device that is mounted on a vehicle, cause the control device to: acquire a plurality of transmit messages transmitted from each of a plurality of applications of the vehicle and a plurality of receive messages received by each of the plurality of applications; acquire a state of the vehicle; and store, in a memory of the control device, a priority order for an encryption process of the plurality of transmit messages and a decryption process of the plurality of receive messages for a first application and a second application of the plurality of applications, wherein the first application is associated with a first control system of the vehicle other than a second control system for autonomously driving the vehicle, and wherein the second application is associated with the second control system for autonomously driving the vehicle, wherein: when the state of the vehicle is a first state, the priority of the encryption process of the plurality of transmit messages of the second application is higher than the priority of the decryption process of the plurality of receive messages of the first application, the first state being when the vehicle is autonomously driving; and when the state of the vehicle is a second state other than the first state, the priority of the encryption process of the plurality of transmit messages of the first application is higher than the priority of the decryption process of the plurality of receive messages of the second application, the second state being when the vehicle is not autonomously driving. ### Claim 16 (depends on 15) The non-transitory computer-readable medium according to claim 15, wherein the plurality of transmit messages and the plurality of receive messages of the first application are stored in a first virtual hardware security module (HSM) of the first control system and the plurality of transmit messages and the plurality of receive messages of the second application are stored in a second virtual HSM of the second control system. ### Claim 17 (depends on 15) The non-transitory computer-readable medium according to claim 15, wherein the control device communicates with the first control system and the second control system and at least one multimedia system of the vehicle. ### Claim 18 (depends on 15) The non-transitory computer-readable medium according to claim 15, wherein the first control system and the second control system each comprise at least one virtual machine. ### Claim 19 (depends on 15) The non-transitory computer-readable medium according to claim 15, wherein the control device further comprises an acquisition unit and an arbitration unit. ### Claim 20 (depends on 15) The non-transitory computer-readable medium according to claim 15, wherein the control device communicates with a hardware security module (HSM) of a system-on-a-chip (SoC) of the vehicle.