Hitachi Astemo Ltd.

Hitachi Automotive Systems, Ltd.

Hitachi Solutions, Ltd.

Mikio Kataoka

Nobuyoshi Morita

Yasuhiro Fujii

Masashi Yano

Kenichi Osada

Mitsuhiro Kitani

Hiroki Yamazaki

Hidetoshi Teraoka

Tetsuya Yamada

Kohei Sakurai

Shuhei Kaneko

Naoyuki Yamamoto

Momoka Kasuya

Masaaki Nakamura

Yuuichi Nakamura

Mitsuhiro Katsuta

Akihiko Yoshino

Kazuaki Ibori

Teruaki Nomura

Masaki Fujiwara

Provided are a control device and a program verification method capable of suppressing an operation load in a case where different keys are used for respective devices. The control devicestores a program to be verified, a plurality of verification expected values related to verification of the program to be verified, and registered verification expected value informationthat identifies one of the verification expected values. The control device verifies whether the program to be verified is correct using the registered verification expected value information

Control device and program verification method

An information processing device that executes a program includes: a storage unit that includes a plurality of regions for storing a rewritable program; a calculation unit that executes a program stored in the storage unit; a start region specification unit that specifies, from the plurality of regions, a start region in which the calculation unit is executing a program; a rule update unit that specifies a rewrite target region in which a program can be rewritten based on information on the specified start region; and a reception selection unit that selectively receives a rewrite program stored in the rewrite target region.

Information processing device, program update system, and program update method

Provided is an analysis device that reduces false detection of an attack event to appropriately output an anomaly notification. The analysis device configured to be communicable with a plurality of monitoring-target devices collects monitoring results of each of the monitoring-target devices, determines whether an anomaly has occurred in each of the monitoring-target devices, based on the monitoring results, and

Intrusion anomaly monitoring analysis device in vehicle environment that detects and responds to secure boot processing tampering

The disclosure provides a vehicle control system (VCS) capable of safely and forcibly controlling a vehicle. The VCS includes a mode setting unit configured to output a forced mode signal upon receiving a forced control instruction from outside the vehicle via a communication device, and a forced operation unit configured to output a forced operation signal of forcibly operating vehicle to an operation control unit. Further, the VCS includes a signal selection unit configured to allow all the operation signals to pass therethrough before receiving the forced mode signal, and block at least a part of the operation signals and allow the forced operation signal instead of the blocked operation signal to pass therethrough after receiving the forced mode signal. The VCS controls an operation of the vehicle by controlling the operation control unit based on the operation signal or the forced operation signal passing through the signal selection unit.

Vehicle control system

An electronic control device includes a tamper storage unit that stores a secure boot key and a control key, and has tamper resistance, a processor that is able to execute a program, a verification unit that verifies a program by using the secure boot key, performs secure boot causing the processor to execute the program based on a result of the verification, and has tamper resistance, a calculation unit that performs calculation related to encryption using the control key, and has tamper resistance, and a general storage unit that stores a first program that implements a delegated verification unit to which authority of the secure boot is delegated from the verification unit and a second program that implements a control unit that uses the calculation unit, and does not have tamper resistance. The verification unit delegates the authority of the secure boot to the delegated verification unit to end the execution of the secure boot when the verification for the first program and the second program is successful and the processor is caused to execute the first program and the second program, the calculation unit starts an operation when the verification unit ends the execution of the secure boot, and the delegated verification unit is able to simultaneously execute processing with the calculation unit.

Electronic control device and control method

When updating a key to guarantee security, updating the key during decryption of update data causes an ECU to stop functioning due to a decryption failure. Therefore, an in-vehicle gateway or a key management device of the present invention includes: an update data acquisition unit that receives, from outside a vehicle, update data encrypted with a predetermined key; a key acquisition unit that receives a key from outside the vehicle; a key storage unit in which the key received by the key acquisition unit is stored; and a decryption unit that decrypts the update data acquired by the update data acquisition unit based on the key stored in the storage unit, in which the update data acquisition unit transmits a key acquisition request signal after completion of decryption of the update data by the decryption unit.

In-vehicle gateway and key management device

The autonomous driving ECU includes a first communication unit that transmits and receives autonomous driving data to and from the plurality of data ECUs, and a vehicle control unit that controls a vehicle on the basis of the autonomous driving data transmitted from the plurality of data ECUs. Each data ECU includes a data construction unit that performs a construction of the autonomous driving data transmitted to the autonomous driving ECU, and a second communication unit that transmits and receives the autonomous driving data to and from the autonomous driving ECU. If a predetermined event occurs, among the data ECUs, the data construction unit of the data ECU in which the predetermined event occurs constructs the autonomous driving data so that a total amount of the autonomous driving data transmitted from the data ECU in which the predetermined event occurs is not greater than a predetermined amount of data.

Autonomous driving system, autonomous driving control method, data ECU, and autonomous driving ECU

The gateway device includes a plurality of communication ports that are connected to the respective low-level networks and receive low-level data that is transmitted and received to and from the low-level networks; a storage unit that stores each of the plurality of communication ports and a source identifier in association with each other; and a control unit that generates high-level data and transmits the high-level data to the high-level network, in which the payload of the high-level data that is generated by the control unit includes at least a part of the low-level data that is received by the communication ports, and in which the header of the high-level data that is generated by the control unit includes the source identifier which is associated with the communication ports.

Gateway device and computing device

A data collection server includes a load monitoring unit configured to monitor a load on the computer system, and a management unit configured to, based on a result of the monitoring, determine a content of a transfer process of data executed at one of servers and transmit the determined content of the transfer process of data to the one of the servers. The management unit determines a type of the transfer process applied to the one of the servers, generates a process subject data list indicating a list of data to which the transfer process is applied out of the data transferred to the data collection server based on the determined type of the transfer process, and determines the content of the transfer process applied to the one of the servers based on the determined type of the transfer process and the generated process subject data list.

Growing community of inventors

Tokyo, Japan

Mikio Kataoka