Vehicle control system, access control device, and access control method

An access control device comprising:

• a plurality of functional blocks each configured to execute a predetermined process, the plurality of functional blocks including a service system functional block and a control system functional block, the control system functional block being configured to provide a function for controlling motion of a vehicle in response to a request from the service system functional block;
• and
• a coordination controller configured to implement coordination between the service system functional block and the control system functional block;
• wherein:
• the control system functional block includes a functional interface configured to provide an own function to the service system functional block;
• the coordination controller includes:
• a policy storage configured to store an authorization policy indicating a rule for authorizing access of an access request from the service system functional block to the functional interface;
• and
• an access controller configured to:
• upon receiving the access request from the service system functional block, extract a provision level from the service system functional block and extract a request level from the control system functional block;
• upon receiving the access request from the service system functional block, determine whether to authorize access from a request source block to a request destination interface by comparing the extracted provision level and the extracted request level in accordance with the authorization policy;
• and
• transmit the access request to the request destination interface when the access is authorized;
• the authorization policy is set using the provision level and the request level;
• the provision level is set in the service system functional block, and the request level is set in the control system functional block;
• the provision level is a safety level indicating safety of the function of the service system functional block;
• and
• the request level is the safety level requested by the request destination interface serving as a request destination of the access request to the request source block serving as a request source of the access request.

An access control method comprising:

• extracting a provision level from a service system functional block and extracting a request level from a control system functional block in response to receiving an access request from the service system functional block;
• determining whether to authorize access from a request source block to a request destination interface by comparing the extracted provision level and the extracted request level, in accordance with an authorization policy, in response to receiving the access request from the service system functional block;
• and
• transmitting the access request to the request destination interface when the access is authorized;
• wherein:
• the control system functional block is configured to provide a function for controlling motion of a vehicle in response to a request from the service system functional block;
• the control system functional block includes a functional interface for providing an own function to the service system functional block;
• the authorization policy is set using the provision level and the request level;
• the provision level is set in the service system functional block, and the request level is set in the control system functional block;
• the provision level is a safety level indicating safety of the function of the service system functional block;
• and
• the request level is the safety level requested by the request destination interface serving as a request destination of the access request to the request source block serving as a request source of the access request.