Hitachi, Ltd.

Hitachi Astemo Ltd.

Hitachi Solutions, Ltd.

Kota Ideguchi

Nobuyoshi Morita

Eriko Ando

Hiroki Yamazaki

Kota Seki

Takashi Yamaguchi

Makoto Kayashima

Momoka Kasuya

Guillaume Borrits

Provided is an electronic control system configured to read a log recording an operation of a device and to detect a security event that is an event related to information security; execute a safety feature serving as a measure against a safety event that is an event related to functional safety; execute a security feature serving as a measure against the security event; store correspondence information indicating at least one of the safety feature and the security feature corresponding to the security event; and identify, based on the correspondence information, a feature corresponding to the security event to execute the identified feature, wherein the correspondence information records the event classified into at least one of the security events so as to correspond to the safety feature.

Electronic control system

Provided is an information processing apparatus that allows a plurality of systems to efficiently share information regarding an alert. An information processing apparatus includes an ID assigning computer that assigns a log ID to collected log data of a device, a first processing computer that stores the log data and the log ID and detects an abnormality based on the log data, and a second processing computer that stores the log data and the log ID, detects an abnormality based on the log data, and transmits the log ID of the log data in which the abnormality is detected and a detection result of the abnormality to the first processing computer. The first processing computer stores the log data stored in the first processing computer and the received detection result in association with each other based on the log ID received from the second processing computer.

Information processing device, information processing method, program, and storage medium

An information processing device that can update software includes: a storage unit that stores control information for controlling whether or not the software can be updated; a communication unit that receives a communication message transmitted from another information processing device connected thereto via a communication line; an update control unit that updates the control information on the basis of the communication message received by the communication unit; and an update propriety determination unit that determines whether or not the software can be updated, on the basis of the control information.

Information processing device

An arithmetic device includes a first core, a second core, and one or more other cores that perform arithmetic processing. The first core includes a first verification unit that performs a first verification process on a message received from outside of the arithmetic device. The second core includes a verification destination determination processing unit that determines whether or not the second core executes the second verification process on the message based on identification information included in the message.

Arithmetic device

An information processing device which transmits and receives a message to which a communication ID indicating a class has been assigned, includes: a storage unit which stores, for each of the communication IDs, a communication counter for verifying a recency of a communication; a recency information management unit which updates the communication counter based on a predetermined condition; an abnormality monitoring unit which identifies an influence range of an abnormality that occurred; and a message generation unit which generates a synchronization request message including the communication ID indicating that it is a message requesting a synchronization of the communication counter, and a synchronization target identifier indicating the influence range identified by the abnormality monitoring unit.

Information processing device and management device

An information processing apparatus capable of aperiodic communication and periodic communication, provided with a communication determination unit that determines a type of a communication message; a first processing determination unit that determines relatedness between aperiodic communication and periodic communication by using a first communication message for which the type is determined to be aperiodic communication, and a prediction range for an amount of time for receiving a second communication message for which the type is determined to be periodic communication; and a second processing determination unit that determines that the second communication message is legitimate communication for periodic communication in a case where the periodic communication second communication message determined to have relatedness is in the prediction range a predetermined amount of time later.

Information processing apparatus and legitimate communication determination method

When a client certificate is required to connect to a client according to a predetermined communication protocol, a server receives a connection request that is a message associated with specific information from the client in a handshake for connection with the client. The server makes a client judgement as to whether or not a cache hit occurs, which is to find a summary client certificate in a cache area using the specific information associated with the connection request. When the result of the client judgement is true, the server returns to the client a connection response including hit information indicating that a cache hit occurs.

Method for controlling connection with client or server

A vehicular control apparatus is used in an onboard system provided with a plurality of information processors mutually connected via a communication bus, and includes a storage section for storing information, and an arithmetic section for executing a process based on the information stored in the storage section. The information contains first management information relating to a security abnormality as a communication data abnormality owing to security attack from outside the onboard system, and second management information relating to a safety abnormality as a communication data abnormality owing to an abnormality in the onboard system. The first management information contains first limit condition information indicating a first limit condition for executing a security coping with the security abnormality. The second management information contains second limit condition information indicating a second limit condition for executing a safety coping with the safety abnormality. Upon detection of the communication data abnormality in the onboard system, the arithmetic section determines a coping content to the detected communication data abnormality based on the first management information and the second management information.

Vehicular control apparatus

An unauthorized access to a vehicle is accurately detected. An attack detection rule generation server includes: a general unauthorized access information receiving section receiving, from an external information processing apparatus, general unauthorized access information about an unauthorized access made to an information processing apparatus; a vehicle unauthorized access characteristic information generation section generating vehicle unauthorized access characteristic information about characteristics of an unauthorized access to a vehicle in a case of comparing the unauthorized access to the vehicle with the unauthorized access to the information processing apparatus; a vehicle unauthorized access information generation section generating vehicle unauthorized access information indicating a configuration of the unauthorized access to the vehicle, on the basis of the general unauthorized access information and the vehicle unauthorized access characteristic information; and a vehicle unauthorized access detection rule generation section generating a vehicle unauthorized access detection rule detecting the unauthorized access to the vehicle, on the basis of the vehicle unauthorized access information.

Vehicle unauthorized access countermeasure taking apparatus and vehicle unauthorized access countermeasure taking method

A monitor for monitoring a monitored object comprises: a processor configured to execute a program; a storage device configured to store the program; and a communication interface capable of communicating with the monitored object, wherein the processor is configured to execute: acquisition processing for acquiring threat information indicating association of a plurality of events necessary for an occurrence of a threat; and determination processing for determining, as a collection scheme of a log from the monitored object according to a rule for detecting an attack on the monitored object, either a passive scheme for collecting the log transmitted from the monitored object or an active scheme for collecting from the monitored object the log requested from the monitor to the monitored object.

Threat monitor, threat monitoring method, and recording medium therefore

A packet according to a secure protocol over a high-speed protocol has a small size header. A reception system estimates a packet number which is used in processing of a packet having a small size header on the basis of information indicating a packet number of a received packet. The header of each of one or more packets among N packets (where N is an integer of two or more) is a small size header, which is either a first header having one part of the packet number of the packet or a second header without the packet number of the packet. When the small size header is the first header, the header of each of the N packets is the first header. When the small size header is the second header, the header of each of the packets other than one packet among the N packets is the second header.

Packet communication system and method

When a cache miss occurs for a connection request from a client, a server calculates predicted next connection time which is the sum of time related to reception of the latest connection request from the client and a connection request period of the client. At least when the cache area is full, the server determines whether to cache, in the cache area, a session information set including a session ID associated with the latest connection request on the basis of the predicted next connection time calculated for the client.

Server for caching session information set and method of controlling cache of session information set

An information sharing system includes a server and an in-vehicle system. The server includes: a first storage part; a first key generation part configured to generate a first private key and a first public key, if keys can be exchanged with the in-vehicle system; and a signature generation part configured to generate a signature value of the first public key using a server private key. The in-vehicle system includes: a second storage part configured to store a public key certificate including a server public key; a signature verification part configured to verify the first public key and a signature value received from the server, using a public key certificate; and a second key generation part configured to generate a second private key and a second public key, if a combination of the first public key and the signature value is correct as a result of the verification.

Information sharing system, computer, and information sharing method without using confidential information provided in advance

A user permission check system with less CPU throughput while ensuring non-repudiation is provided. In order to solve the above-described problem, in the present invention firstly, a MAC function that does not require a CPU to have high processing power is utilized. Additionally, a message is encrypted with a plurality of secret keys and the plurality of keys are distributed to a plurality of servers to make them have the keys in order to ensure validity of the message as a proof of non-repudiation. Subsequently, each server proves the validity of the message within its own range and the validity of the message is ensured by aggregating these individual results, thereby implementing the non-repudiation.

Growing community of inventors

Tokyo, Japan

Kota Ideguchi