Hitachi Astemo Ltd.

Tokyo Electron Limited

Hitachi, Ltd.

Nippon Telegraph and Telephone Corporation

Tokyo Electron Limi Ted

Ihi Corporation

Hiroki Yamazaki

Chishio Koshimizu

Naoki Matsumoto

Yohei Yamazawa

Akira Koshiishi

Manabu Iwata

Manabu Sato

Masashi Saito

Masaru Sugimoto

Noriyuki Kobayashi

Hidetoshi Hanaoka

Toshihiro Hayami

Kazuo Kibi

Ryuji Ohtani

Daisuke Yano

Nobuyoshi Morita

Tadayuki Imai

Naoyuki Yamamoto

Kazuya Nagaseki

Atsushi Suzuki

Takeshi Inoue

Kunihiko Hinata

Yoshinobu Ohya

Kota Ideguchi

Michio Ono

Makoto Kayashima

Haruki Kozawaguchi

Shougo Yagi

Mikio Kataoka

Hitoshi Kawaguchi

Momoka Kasuya

Makoto Aikawa

Hiroyuki Higaki

Hidetoshi Teraoka

Yoshinobu Ooya

Yasuhiro Fujii

Yasuhiko Nagai

Hiromi Isokawa

Shuhei Kaneko

Masashi Yano

Kengo Ijima

Yasuhiro Ii

Keiji Kitane

Shoko Hatanaka

Shinichirou Fukushima

Masaki Fujiwara

Teruaki Nomura

Yiwen Chen

Masahiro Terasawa

The present invention provides a technology to ensure security during fast boot-up. Provided according to the present invention is an electronic control device installed on a mobile body, the electronic control device including a controller which controls a microcomputer using code, a security verifier which makes security verification of the code, and boot-up code which is part of the code and is executed when the microcomputer is booted. The controller enables, when the code or the boot-up code has been verified by the security verifier at the time of a transition of the microcomputer to a shutdown state, the boot-up code to be executed during next boot-up.

Electronic control device and security verification method for electronic control device

A computer system holds: function information for managing functions of modules which form a product; resource information for managing a resource which implements a function of components that forms each of the modules; and product configuration system information for managing a system of the modules and relationships between the modules and the components. The computer system obtains cyber security information on a target resource having a security risk, identifies, based on the resource information, a target component provided with a target function implemented through use of the target resource; identifies, based on the product configuration system information and the function information, a target module provided with the target function with a starting point being set to one of the modules which is provided with the target component, identifies, based on the product configuration system information, each of the components which relates to the target module; and generates impact range information for presenting the each of the components which has been identified.

Computer system and analysis method for impact of security risk

Provided is a gateway device capable of reducing influence on intra-vehicle network communication from a cyber security attack that infringes availability represented by a DoS attack from an extra-vehicle network. Included are: an external-network-side transfer processing unit that transfers a communication frame received from an external network to an internal network; an internal-network-side transfer processing unit that transfers the communication frame transferred from the external network via the external-network-side transfer processing unit to the internal network; a transfer notification unit that gives a transfer notification to notify transfer of the communication frame from the external-network-side transfer processing unit to the internal-network-side transfer processing unit; and a monitoring unit that determines whether to transfer the communication frame based on at least one of a frequency of the transfer notification to the internal-network-side transfer processing unit and a transfer data amount of the communication frame transferred from the external-network-side transfer processing unit.

Gateway device

A security processing device which manages a device related to operation control of a vehicle includes a non-transitory computer-readable medium configured to store instructions executable by one or more processors. The non-transitory computer readable medium includes a non-secure area in which a mounted program is capable of being changed from an outside and a secure area in which a mounted program is incapable of being changed from the outside. The instructions cause a code of an operation program in the non-secure area to perform the operation control of the vehicle, and a diagnosis program in the secure area to diagnose an abnormality of the code of the operation program. When the abnormality of the operation program in the non-secure area is diagnosed, the instructions cause the diagnosis program in the secure area to determine a type of the abnormality and execute processing on a basis of the determined type.

Security processing device

An electronic control device includes a tamper storage unit that stores a secure boot key and a control key, and has tamper resistance, a processor that is able to execute a program, a verification unit that verifies a program by using the secure boot key, performs secure boot causing the processor to execute the program based on a result of the verification, and has tamper resistance, a calculation unit that performs calculation related to encryption using the control key, and has tamper resistance, and a general storage unit that stores a first program that implements a delegated verification unit to which authority of the secure boot is delegated from the verification unit and a second program that implements a control unit that uses the calculation unit, and does not have tamper resistance. The verification unit delegates the authority of the secure boot to the delegated verification unit to end the execution of the secure boot when the verification for the first program and the second program is successful and the processor is caused to execute the first program and the second program, the calculation unit starts an operation when the verification unit ends the execution of the secure boot, and the delegated verification unit is able to simultaneously execute processing with the calculation unit.

Electronic control device and control method

An information processing device that can update software includes: a storage unit that stores control information for controlling whether or not the software can be updated; a communication unit that receives a communication message transmitted from another information processing device connected thereto via a communication line; an update control unit that updates the control information on the basis of the communication message received by the communication unit; and an update propriety determination unit that determines whether or not the software can be updated, on the basis of the control information.

Information processing device

An arithmetic device includes a first core, a second core, and one or more other cores that perform arithmetic processing. The first core includes a first verification unit that performs a first verification process on a message received from outside of the arithmetic device. The second core includes a verification destination determination processing unit that determines whether or not the second core executes the second verification process on the message based on identification information included in the message.

Arithmetic device

An information processing device which transmits and receives a message to which a communication ID indicating a class has been assigned, includes: a storage unit which stores, for each of the communication IDs, a communication counter for verifying a recency of a communication; a recency information management unit which updates the communication counter based on a predetermined condition; an abnormality monitoring unit which identifies an influence range of an abnormality that occurred; and a message generation unit which generates a synchronization request message including the communication ID indicating that it is a message requesting a synchronization of the communication counter, and a synchronization target identifier indicating the influence range identified by the abnormality monitoring unit.

Information processing device and management device

When updating a key to guarantee security, updating the key during decryption of update data causes an ECU to stop functioning due to a decryption failure. Therefore, an in-vehicle gateway or a key management device of the present invention includes: an update data acquisition unit that receives, from outside a vehicle, update data encrypted with a predetermined key; a key acquisition unit that receives a key from outside the vehicle; a key storage unit in which the key received by the key acquisition unit is stored; and a decryption unit that decrypts the update data acquired by the update data acquisition unit based on the key stored in the storage unit, in which the update data acquisition unit transmits a key acquisition request signal after completion of decryption of the update data by the decryption unit.

In-vehicle gateway and key management device

The present invention provides an in-vehicle communication device and an in-vehicle system that can establish communication, in a short time, between applications corresponding to the same communication protocol between in-vehicle processing devices connected to communication buses having different communication protocols. In the present invention, when the first communication controllerhas received a specific message from the first in-vehicle processing deviceconnected to the first communication bus, the in-vehicle communication devicetransmits a communication protocol switching command from the second communication controllerto the second in-vehicle processing deviceconnected to the second communication busto switch a communication protocol setting of the second communication controller to the same communication protocol setting as that of the first communication bus.

In-vehicle communication device and in-vehicle system

An information update apparatus that updates first information stored in a vehicle control apparatus to second information. The information update apparatus includes: a download control unit that receives an update package including an update body that is a difference between the first information and the second information or the second information, procedure information including a procedure of updating the first information to the second information using the update body, and an activation condition that is a condition of starting updating the first information to the second information; and an event management unit that acquires a state of a vehicle on which the vehicle control apparatus and the information update apparatus are mounted, and causes an update execution unit to execute the update based on the procedure information when the state of the vehicle matches the activation condition.

Information update apparatus and information update method

A plasma processing method includes executing an etching process that includes supplying an etching gas into a process container in which a target substrate is supported on a second electrode serving as a lower electrode, and applying an RF power for plasma generation and an RF power for ion attraction to turn the etching gas into plasma and to subject the target substrate to etching. The etching process includes applying a negative DC voltage to a first electrode serving as an upper electrode during the etching to increase an absolute value of self-bias on the first electrode. The etching process includes releasing DC electron current generated by the negative DC voltage to ground through plasma and a conductive member disposed as a ring around the first electrode, by using a first state where the conductive member is connected to a ground potential portion.

Plasma processing apparatus and method

A confidential information setting apparatus includes: a communication unit that acquires an encryption key and condition information, which is a condition for setting a secret key to a terminal, from a memory unit of a server and acquires a terminal ID, which is an identifier for uniquely identifying the terminal, and the secret key associated with the terminal ID and encrypted from a memory unit of a user apparatus; an encryption processing unit that decrypts the encrypted secret key with the encryption key; and a control unit that judges whether the decrypted secret key can be set to the terminal or not, based on the condition information and sets the secret key to the terminal when a result of the judgment indicates that the secret key can be set to the terminal.

Confidential information setting method, confidential information setting system, and confidential information setting apparatus

A plasma etching apparatus includes an upper electrode and a lower electrode, between which plasma of a process gas is generated to perform plasma etching on a wafer W. The apparatus further comprises a cooling ring disposed around the wafer, a correction ring disposed around the cooling ring, and a variable DC power supply directly connected to the correction ring, the DC voltage being preset to provide the correction ring with a negative bias, relative to ground potential, for attracting ions in the plasma and to increase temperature of the correction ring to compensate for a decrease in temperature of a space near the edge of the target substrate due to the cooling ring.

An apparatus includes an upper electrode and a lower electrode for supporting a wafer disposed opposite each other within a process chamber. A first RF power supply configured to apply a first RF power having a relatively higher frequency, and a second RF power supply configured to apply a second RF power having a relatively lower frequency is connected to the lower electrode. A variable DC power supply is connected to the upper electrode. A process gas is supplied into the process chamber to generate plasma of the process gas so as to perform plasma etching.

Growing community of inventors

Tokyo, Japan

Hiroki Yamazaki