Toyota Jidosha Kabushiki Kaisha

Ntt Docomo, Inc.

Fujitsu Corporation

Yokohama National University

National University Corporation Yokohama National University

Hisashi Oguma

Masato Suzuki

Seigo Kotani

Ken Ohta

Tsutomu Matsumoto

Tsuyoshi Toyama

Kazuomi Oishi

Kenichi Yamazaki

Daisuke Ochi

Tomokazu Moriya

Masato Tanabe

Yu Inamura

Hideki Gotoh

Katsunari Yoshioka

Masato Hata

A vehicle system includes a master ECU and a general ECU. The general ECU attaches a digital signature to transmission data including data (for example, a digest value of a program) and transmits the transmission data to the master ECU. The master ECU verifies the digital signature and the data and, when both the digital signature and the data are valid, determines that the general ECU is valid. The master ECU attaches a digital signature to transmission data including data of the master ECU and a session key and transmits the transmission data to the general ECU. The general ECU verifies the digital signature and the data and, when both the digital signature and the data are valid, the general ECU uses the session key included in the transmission data as a common key when performing subsequent communications.

Vehicle system and authentication method

Disclosed is a system for detecting an attack, which includes a server and a plurality of vehicles capable of wirelessly communicating with each other. Each of the vehicles has a sensor, a sensor information acquisition unit, a traffic information reception unit, and a transmission unit that transmits the sensor information and the traffic information to the server. The server has a reception unit that receives the sensor information and the traffic information from the vehicles, a verification unit that verifies whether the sensor information and the traffic information are inconsistent with each other, and a notification unit that notifies, when the sensor information and the traffic information are inconsistent with each other, the vehicles of the inconsistency.

System and method for detecting attack when sensor and traffic information are inconsistent

Sensor information is regularly acquired from a plurality of sensors and stored. For each of the sensors, other sensors whose information is correlated are selected. When sensor information of a sensor is requested from an application program or the like, while if the requested sensor is available the sensor information is acquired directly from the sensor, if the requested sensor is unavailable the sensor information of sensors relevant to the sensor is acquired and the sensor information of the requested sensor is estimated. As a result, in a system comprising a plurality of sensors, sensor information of an unavailable sensor will be estimated in a short period of time.

Sensor information complementing system and sensor information complementing method

A method includes receiving first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile, calculating second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information, transmitting the correction program to the control unit, receiving from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit, comparing the received third information with the calculated second information, and judging whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

Method for confirming correction program and information processing apparatus

A program stored in a computer-readable medium causes a computer to execute a process includes receiving, from an automobile in which a control program for controlling devices mounted on the automobile operates, an update request concerning the control program, classifying a plurality of correction programs corresponding to the update request into a plurality of groups on the basis of usable electric energy of a battery corresponding to a vehicle type to which the automobile belongs, an amount of the usable electric energy being stored in a memory, and transmitting the classified correction programs to the automobile for each of the groups.

Apparatus and method for installing vehicle correction program

Each of ECUs counts the number of messages transmitted for each of CAN IDs. A transmission node that has transmitted a main message produces an MAC from a data field and the CAN ID in the main message and a counter value corresponding to the CAN ID, and transmits the MAC as an MAC message. A reception node that has received the main message produces an MAC from the data field and the CAN ID contained in the main message and the counter value corresponding to the CAN ID, and determines whether the MAC matches the MAC contained in the MAC message. By so doing, verification whether the main message is valid or not can be made. According to this configuration, message authentication by the MAC can be made without changing a CAN protocol.

Message authentication method in communication system and communication system

A terminal device according to the present invention includes: a first domain configured to execute multiple software programs; and a second domain configured to operate independently of the first domain and to check whether or not the software programs are safe. The second domain includes: an execution sequence storage unit configured to store execution priority of the multiple software programs to be executed by the first domain; a software program checking unit configured to check whether or not the multiple software programs are safe, according to the execution sequence storage unit; and an execution restricting unit configured to restrict the first domain from executing a software program included in the multiple software programs and having a check result indicating that the software program is unsafe, before checking of all the multiple, software programs is completed.

Terminal device and method for checking a software program

Disclosed is an operating system monitoring setting information generator apparatus including: a monitoring setting information management unit configured to store monitoring setting information used for monitoring of an operating system monitoring apparatus; a monitoring setting information output unit configured to generate a monitoring setting information file including the monitoring setting information stored by the monitoring setting information management unit, version information and binding information indicating a correspondence with a monitoring target software program, and to output the generated monitoring setting information file; and a digital signature unit configured to generate a digital signature of the monitoring setting information file, and to add the generated digital signature to the monitoring setting information file.

Operating system monitoring setting information generator apparatus and operating system monitoring apparatus

A communication system able to smoothly provide services and make requests for services even when the communication link is not constantly connected. The communication system includes a user node, a corresponding node, and a relay node constantly connected to the corresponding node. The relay node acts as proxy for the user node to transmit signals to or receive signals from the corresponding node. The relay node and the user node act as a virtual node with respect to the corresponding node, and the virtual node is identified by the address of the relay node.

Growing community of inventors

Kawasaki, Japan

Hisashi Oguma