Hitachi, Ltd.

Clarion Co

Hitachi Automotive Systems, Ltd.

Makoto Kayashima

Masato Terada

Nobuyoshi Morita

Toru Owada

Tatsuya Fujiyama

Eriko Ando

Hiromi Isokawa

Keisuke Hakuta

Norio Suzuki

Takatoshi Kato

Hiroshi Nakagoe

Masakatsu Mori

Shinichi Tsunoo

Nariyasu Hamada

Takaaki Ogino

Takashi Tsunehiro

Nagamasa Mizushima

Minoru Koizumi

Hiroki Uchiyama

Kazushi Nakagawa

Yasuhiko Nagai

Takashi Kawauchi

Satoshi Ohkubo

Kazuo Nishimura

Jun Hamanaka

Takahiko Kawashima

Tetsuya Fujiyama

Kazunari Hirayama

Osamu Katsumata

Yusuke Fujihara

Yasushi Nagai

Kenichi Yoshida

Hiroki Yamazaki

Masaya Umemura

Yoshinori Watanabe

Kota Ideguchi

Katsuyuki Umezawa

Katsuyuki Okeya

Akira Kanehira

Hirotaka Yoshida

Momoka Kasuya

Mitsuhiro Tsunoda

Tomoaki Yamada

Tomotada Naito

Yasuji Ishida

Toru Senoo

Eri Katoh

Kouta Ideguchi

Nobuaki Onodera

A computer system holds: function information for managing functions of modules which form a product; resource information for managing a resource which implements a function of components that forms each of the modules; and product configuration system information for managing a system of the modules and relationships between the modules and the components. The computer system obtains cyber security information on a target resource having a security risk, identifies, based on the resource information, a target component provided with a target function implemented through use of the target resource; identifies, based on the product configuration system information and the function information, a target module provided with the target function with a starting point being set to one of the modules which is provided with the target component, identifies, based on the product configuration system information, each of the components which relates to the target module; and generates impact range information for presenting the each of the components which has been identified.

Computer system and analysis method for impact of security risk

An in-vehicle device is mounted on a vehicle capable of automated driving, and comprises an incident detection processing unit which acquires vehicle information representing a control state of the vehicle, and detects an incident that occurred in the vehicle based on the vehicle information.

In-vehicle device and incident monitoring method

An information processing device including a security function related to information security and an information processing function related to predetermined information processing, includes: a control unit which performs control processing for realizing the security function and the information processing function; and a storage unit which stores information related to the security function and the information processing function, wherein: when the control unit detects an occurrence of a predetermined event related to the security function or the information processing function, the control unit determines an operation content of the security function based on the information stored in the storage unit.

Information processing device and information processing method

An in-vehicle device includes: an acquiring unit that acquires comparison information; and a detecting unit that detects an abnormality in a positioning device based on position information on a host vehicle output from the positioning device mounted in the host vehicle and the comparison information different from the position information.

In-vehicle device and vehicle

An information processing device that receives, from another information processing device, a communication message generated based on recency information and control data, includes: a recency information generation unit that generates the recency information; and a recency information management unit that extracts the recency information from the received communication message.

Information processing device and malicious message detection method

An in-vehicle information communication system is configured from an in-vehicle communication device, an electronic control device that is installed in a vehicle, and an information processing device that is not installed in a vehicle. The electronic control device comprises an electronic control device storage unit, a message generation unit, a MAC generation unit, and an electronic control device communication unit which sends the message and the MAC to the information processing device via the in-vehicle communication device. The information processing device comprises an information processing device storage unit, a message authentication code verification unit, a response code generation unit, and an information processing device communication unit which sends the response code to the electronic control device via the in-vehicle communication device. The electronic control device further comprises a response code verification unit.

In-vehicle information communication system and authentication method

A gateway device that relays a message between two or more domains receives a first message including a first message authentication code corresponding to a first domain among the two or more domains and first data from the first domain and transmits a second message including a second message authentication code corresponding to a second domain among the two or more domains and the first data to the second domain.

Gateway device and control method for the same

An information sharing system includes a server and an in-vehicle system. The server includes: a first storage part; a first key generation part configured to generate a first private key and a first public key, if keys can be exchanged with the in-vehicle system; and a signature generation part configured to generate a signature value of the first public key using a server private key. The in-vehicle system includes: a second storage part configured to store a public key certificate including a server public key; a signature verification part configured to verify the first public key and a signature value received from the server, using a public key certificate; and a second key generation part configured to generate a second private key and a second public key, if a combination of the first public key and the signature value is correct as a result of the verification.

Information sharing system, computer, and information sharing method without using confidential information provided in advance

A system that detects any unauthorized communication without imposing a processing load on a control device is provided. In the incident detection system configured to detect any security incident, a gateway device includes: an ID generation unit that generates its own gateway device identification information; a detection packet generation unit that generates a detection packet including control information transmitted from a control device and path information obtained by adding its own gateway device identification information to a communication packet; a log generation unit that generates log information including the detection packet; and a device communication unit that transmits the log information to a management server connected to the gateway device over a network or transmits the detection packet to a control device controlled based on the control information. In the incident detection system, the management server includes: a server communication unit that receives log information from a gateway device; a communication path extraction unit that stores assumed path information, obtained by extracting path information from the log information, in a storage unit in advance; and an incident detection unit that detects any unauthorized communication packet based on the assumed path information stored in the storage unit and path information included in the log information.

Incident detection system including gateway device and server

There are provided an inspection apparatus, an inspection system, and an inspection method capable of inspecting operation of a control device, accurately, during use. An inspection apparatus configured to inspect operation of an ECU coupled to automotive networks, includes an inspection performance control unit configured to transmit two pieces of data including operation-inspection data and security-check data used for inspecting the operation of the ECU, to the ECU, and configured to receive data output from the ECU. The operation-inspection data is data previously generated based on design information of the ECU. The security-check data is data including part or entirety of the operation-inspection data replaced with random data.

Inspection apparatus, inspection system, and inspection method

An evaluation system includes a network device, a gateway device, a policy evaluation device, and first and second control devices. The network device copies a packet received from the first control device and transmits to the gateway device and the policy evaluation device. The gateway device receives the copied packet, performs a first filtering based on the policy stored in a first policy storage unit, transmits the packet to the second control device while storing the result of the first filtering, and transmits the result of the stored first filtering to the policy evaluation device. The policy evaluation device receives the copied packet, performs a second filtering based on the policy stored in a second policy storage unit, stores the result of the second filtering, and evaluates the policy stored in the second policy storage unit based on the results of the two filterings.

Evaluation system

The present invention efficiently displays in a tree structure form a file operation history. A file storage identifier, an operation identifier, and a count are stored as additional meta-information in an alternate data stream with respect to each file stored in a client terminal file system. The operation identifier manages a number of operations (operation generations). The count manages copy frequencies. This meta-information is also sent to a management apparatus, and used for displaying the file operation history in a tree structure form.

Computer system management method and client computer

The content of operations is identified and an alert is generated to an operation having a high risk of information leakage. An agent monitors, for example, operations performed with respect to a dialogue displayed on a client PC. If a file is selected by an operation performed with respect to the displayed dialogue, the agent assigns an identifier indicating a source for the file to the file. If the file is sent as an attached file, the agent identifies an output destination for the attached file as well as the source for the attached file; and if the output destination for the attached file is an external Web server and the source for the attached file is a mail server, the agent generates an alert by determining that an unauthorized operation has been executed; and then sends the generated alert to a management server.

Unauthorized operation detection system and unauthorized operation detection method

A client computer detects a user operation for transmitting data to a server or a storage device, determines whether the detected user operation is a fraudulent manipulation, and, if the determination is a positive result, performs security processing which is processing related to security of data to be transmitted. If the data is data within a group to which the user belongs and a destination of the data is a server or a storage device outside the group, the determination is a positive result.

Fraudulent manipulation detection method and computer for detecting fraudulent manipulation

Disclosed is a secure remote access system for improving convenience of a user by utilizing a storage device including an anti-tampering device as a user authentication device in the secure remote access system for making access and execution of job while a user is making the encrypted communication to a server from an unspecified client. Usability can be improved and thereby the job executing function can be used smoothly at the internal and external sides of the working office by providing a server client system where the server can be manipulated remotely by distributing a storage device loading the authorized anti-tampering device to users, connecting the storage device to unspecified clients by users, and using the authentication information and application stored in the storage device. A remote access system having improved security and convenient during usage of client from the user can also be provided by reducing the secret information remaining in the manipulated client.

Remote access system, gateway, client device, program, and storage medium

Growing community of inventors

Tokyo, Japan

Makoto Kayashima