Hitachi, Ltd.

Renesas Electronics Corporation

Clarion Co

Eriko Ando

Takayuki Suzuki

Toru Owada

Takashi Kawauchi

Ken Naganuma

Makoto Kayashima

Kota Ideguchi

Yasuko Fukuzawa

Nobuyoshi Morita

Hiromitsu Kato

Susumu Matsui

Yasushi Nagai

Takeiki Aizono

Akitoshi Shimura

Keisuke Hakuta

Shuichi Ishida

Chinatsu Yamauchi

Yusuke Mishina

Akira Kanehira

Takayoshi Fujioka

Tetsuo Manchu

Chinatsu Sato

Yiwen Chen

The present invention is provided with a threat analysis processing unit that, on the basis of an analysis result from the vulnerability analysis unit, analyzes a threat to the system and outputs a threat analysis result; a countermeasure planning unit that, on the basis of the threat analysis result and vulnerability information, plans the countermeasure plan which reduces the impact of the vulnerability; a security test planning unit that plans the security test on the basis of the countermeasure plan; an evaluation calculation unit that performs an evaluation on the basis of the security test, and outputs an evaluation result; and a result processing unit that processes the evaluation result and generates a security countermeasure.

Risk evaluation and countermeasure planning system, and risk evaluation and countermeasure planning method

When a client certificate is required to connect to a client according to a predetermined communication protocol, a server receives a connection request that is a message associated with specific information from the client in a handshake for connection with the client. The server makes a client judgement as to whether or not a cache hit occurs, which is to find a summary client certificate in a cache area using the specific information associated with the connection request. When the result of the client judgement is true, the server returns to the client a connection response including hit information indicating that a cache hit occurs.

Method for controlling connection with client or server

A security design planning support device which supports planning of a security design of an in-vehicle network, includes: a strategy policy creation unit which creates first strategy policy information representing a plurality of control strategies corresponding respectively to threats against the in-vehicle network; a merge processing unit which merges control strategies of a same type among the plurality of control strategies represented by the first strategy policy information created by the strategy policy creation unit and groups the plurality of control strategies; and a communication unit which externally outputs second strategy policy information representing a relationship of the threats and the plurality of control strategies grouped by the merge processing unit.

Security design planning support device

A packet according to a secure protocol over a high-speed protocol has a small size header. A reception system estimates a packet number which is used in processing of a packet having a small size header on the basis of information indicating a packet number of a received packet. The header of each of one or more packets among N packets (where N is an integer of two or more) is a small size header, which is either a first header having one part of the packet number of the packet or a second header without the packet number of the packet. When the small size header is the first header, the header of each of the N packets is the first header. When the small size header is the second header, the header of each of the packets other than one packet among the N packets is the second header.

Packet communication system and method

An in-vehicle apparatus is an in-vehicle apparatus connected to a server via a network and mounted on a vehicle. The in-vehicle apparatus includes: a log collection unit configured to collect a log; a log storage unit for accumulation of at least a part of the log; a log priority information storage unit storing log priority information indicating a priority of a log to be accumulated in the log storage unit; an accumulation log determination unit configured to determine a log to be accumulated in the log storage unit based on the log priority information; a communication unit configured to transmit the log accumulated in the log storage unit to the server; and a log priority table management unit configured to update the log priority information stored in the log priority information storage unit based on an update command from the server.

In-vehicle apparatus and log collection system

An information processing device including a security function related to information security and an information processing function related to predetermined information processing, includes: a control unit which performs control processing for realizing the security function and the information processing function; and a storage unit which stores information related to the security function and the information processing function, wherein: when the control unit detects an occurrence of a predetermined event related to the security function or the information processing function, the control unit determines an operation content of the security function based on the information stored in the storage unit.

Information processing device and information processing method

An in-vehicle device includes: an acquiring unit that acquires comparison information; and a detecting unit that detects an abnormality in a positioning device based on position information on a host vehicle output from the positioning device mounted in the host vehicle and the comparison information different from the position information.

In-vehicle device and vehicle

A plurality of in-vehicle information collecting devices mounted on a plurality of vehicles; a center server to manage each in-vehicle information collecting device as a communication target; and a communication unit to relay communication between each in-vehicle information collecting device and the center server are included. Each in-vehicle information collecting device has an in-vehicle controller to transmit/receive information including vehicle information to/from the center server, and the center server includes a server controller to transmit/receive information to/from each in-vehicle controller. The server controller, when receiving the vehicle information from each in-vehicle controller, analyzes the received vehicle information, generates speed information defining a transmission speed of the vehicle information based on an analysis result, and transmits the generated speed information to each in-vehicle controller. Each in-vehicle controller controls a communication amount of the vehicle information to the server controller, based on the speed information received from the server controller.

Information communication system, information communication method, and server

An in-vehicle information communication system is configured from an in-vehicle communication device, an electronic control device that is installed in a vehicle, and an information processing device that is not installed in a vehicle. The electronic control device comprises an electronic control device storage unit, a message generation unit, a MAC generation unit, and an electronic control device communication unit which sends the message and the MAC to the information processing device via the in-vehicle communication device. The information processing device comprises an information processing device storage unit, a message authentication code verification unit, a response code generation unit, and an information processing device communication unit which sends the response code to the electronic control device via the in-vehicle communication device. The electronic control device further comprises a response code verification unit.

In-vehicle information communication system and authentication method

An information sharing system includes a server and an in-vehicle system. The server includes: a first storage part; a first key generation part configured to generate a first private key and a first public key, if keys can be exchanged with the in-vehicle system; and a signature generation part configured to generate a signature value of the first public key using a server private key. The in-vehicle system includes: a second storage part configured to store a public key certificate including a server public key; a signature verification part configured to verify the first public key and a signature value received from the server, using a public key certificate; and a second key generation part configured to generate a second private key and a second public key, if a combination of the first public key and the signature value is correct as a result of the verification.

Information sharing system, computer, and information sharing method without using confidential information provided in advance

The present invention is directed to solve a problem that time is required for a process related to verification of a public key certificate of a message sender. An in-vehicle device mounted on a vehicle has a memory for holding information of a device which failed in verification of a public key certificate. At the time of performing communication between vehicles or between a vehicle and a roadside device, a check is made to see whether or not information of a device included in a message transmitted matches information of a device which failed and held in the memory. When the information matches, verification of a public key certificate is not performed.

In-vehicle communication system with verification failure holding circuit

A user permission check system with less CPU throughput while ensuring non-repudiation is provided. In order to solve the above-described problem, in the present invention firstly, a MAC function that does not require a CPU to have high processing power is utilized. Additionally, a message is encrypted with a plurality of secret keys and the plurality of keys are distributed to a plurality of servers to make them have the keys in order to ensure validity of the message as a proof of non-repudiation. Subsequently, each server proves the validity of the message within its own range and the validity of the message is ensured by aggregating these individual results, thereby implementing the non-repudiation.

User permission check system

In-vehicle communication system

A communication system () includes a certificate authority () for performing authentication, a roadside device (), a vehicle-mounted terminal (), a first server (), and a second server (). The vehicle-mounted terminal transmits its position information to the first server. The certificate authority acquires information about a vehicle-mounted terminal likely to appear according to place and time from the first server. The certificate authority allows the second server to verify validity of a certificate for a vehicle-mounted terminal acquired from the first server. The certificate authority generates a first list of vehicle-mounted terminals having valid certificates and a second list of vehicle-mounted terminals having invalid certificates according to place and time based on a verification result. The certificate authority transmits the first and second lists to the roadside device and the vehicle-mounted terminal. The roadside device and the vehicle-mounted terminal verify a certificate using the first and second lists.

Communication system, vehicle-mounted terminal, roadside device

An authentication method is provided which is capable of performing message authentication within an allowable time regardless of the magnitude of the number of messages and performing message authentication high in accuracy within a range for which the allowable time allows. Upon transmission by wireless communications with another mobile or a fixed station, a message authentication code of communication data and a digital signature are generated (Sand S). The generated message authentication cod and digital signature are transmitted with being added to the communication data. Upon reception, whether authentication should be done using either one of the message authentication code and the digital signature included in received information is determined according to its own state for the authentication (Sand S). This state includes, for example, a load state of a central processing unit or the like that performs an authentication process.

Growing community of inventors

Tokyo, Japan

Eriko Ando