Hitachi Astemo Ltd.

Hitachi Automotive Systems, Ltd.

Clarion Co

Hitachi, Ltd.

Nobuyoshi Morita

Kota Ideguchi

Makoto Kayashima

Toru Owada

Mikio Kataoka

Keisuke Hakuta

Hiroki Yamazaki

Eriko Ando

Yasuhiro Fujii

Masashi Yano

Yasushi Nagai

Momoka Kasuya

Kota Seki

Tetsuya Yamada

Takashi Kawauchi

Shuhei Kaneko

Teruaki Nomura

Masaki Fujiwara

Kouta Ideguchi

An appropriate countermeasure is taken against a cyber-security attack at an appropriate timing. An analysis device, configured using a computer including a computation device that executes predetermined computation processing and a storage device accessible by the computation device, includes: a communication unit that receives, by the computation device, a log of an information processing device mounted on an instrument; an attack progress analysis unit that calculates, by the computation device, an intrusion location in a route from an intrusion point on the instrument to a protected asset from the received log; and an urgency degree determination unit that determines, by the computation device, an urgency degree of a countermeasure against an attack based on an analysis result of the attack progress analysis unit.

Analysis device and analysis method

Provided are a control device and a program verification method capable of suppressing an operation load in a case where different keys are used for respective devices. The control devicestores a program to be verified, a plurality of verification expected values related to verification of the program to be verified, and registered verification expected value informationthat identifies one of the verification expected values. The control device verifies whether the program to be verified is correct using the registered verification expected value information

Control device and program verification method

An information processing device that executes a program includes: a storage unit that includes a plurality of regions for storing a rewritable program; a calculation unit that executes a program stored in the storage unit; a start region specification unit that specifies, from the plurality of regions, a start region in which the calculation unit is executing a program; a rule update unit that specifies a rewrite target region in which a program can be rewritten based on information on the specified start region; and a reception selection unit that selectively receives a rewrite program stored in the rewrite target region.

Information processing device, program update system, and program update method

Provided is an analysis device that reduces false detection of an attack event to appropriately output an anomaly notification. The analysis device configured to be communicable with a plurality of monitoring-target devices collects monitoring results of each of the monitoring-target devices, determines whether an anomaly has occurred in each of the monitoring-target devices, based on the monitoring results, and

Intrusion anomaly monitoring analysis device in vehicle environment that detects and responds to secure boot processing tampering

The disclosure provides a vehicle control system (VCS) capable of safely and forcibly controlling a vehicle. The VCS includes a mode setting unit configured to output a forced mode signal upon receiving a forced control instruction from outside the vehicle via a communication device, and a forced operation unit configured to output a forced operation signal of forcibly operating vehicle to an operation control unit. Further, the VCS includes a signal selection unit configured to allow all the operation signals to pass therethrough before receiving the forced mode signal, and block at least a part of the operation signals and allow the forced operation signal instead of the blocked operation signal to pass therethrough after receiving the forced mode signal. The VCS controls an operation of the vehicle by controlling the operation control unit based on the operation signal or the forced operation signal passing through the signal selection unit.

Vehicle control system

An electronic control device includes a tamper storage unit that stores a secure boot key and a control key, and has tamper resistance, a processor that is able to execute a program, a verification unit that verifies a program by using the secure boot key, performs secure boot causing the processor to execute the program based on a result of the verification, and has tamper resistance, a calculation unit that performs calculation related to encryption using the control key, and has tamper resistance, and a general storage unit that stores a first program that implements a delegated verification unit to which authority of the secure boot is delegated from the verification unit and a second program that implements a control unit that uses the calculation unit, and does not have tamper resistance. The verification unit delegates the authority of the secure boot to the delegated verification unit to end the execution of the secure boot when the verification for the first program and the second program is successful and the processor is caused to execute the first program and the second program, the calculation unit starts an operation when the verification unit ends the execution of the secure boot, and the delegated verification unit is able to simultaneously execute processing with the calculation unit.

Electronic control device and control method

An information processing device that can update software includes: a storage unit that stores control information for controlling whether or not the software can be updated; a communication unit that receives a communication message transmitted from another information processing device connected thereto via a communication line; an update control unit that updates the control information on the basis of the communication message received by the communication unit; and an update propriety determination unit that determines whether or not the software can be updated, on the basis of the control information.

Information processing device

An arithmetic device includes a first core, a second core, and one or more other cores that perform arithmetic processing. The first core includes a first verification unit that performs a first verification process on a message received from outside of the arithmetic device. The second core includes a verification destination determination processing unit that determines whether or not the second core executes the second verification process on the message based on identification information included in the message.

Arithmetic device

An information processing device which transmits and receives a message to which a communication ID indicating a class has been assigned, includes: a storage unit which stores, for each of the communication IDs, a communication counter for verifying a recency of a communication; a recency information management unit which updates the communication counter based on a predetermined condition; an abnormality monitoring unit which identifies an influence range of an abnormality that occurred; and a message generation unit which generates a synchronization request message including the communication ID indicating that it is a message requesting a synchronization of the communication counter, and a synchronization target identifier indicating the influence range identified by the abnormality monitoring unit.

Information processing device and management device

An information processing apparatus capable of aperiodic communication and periodic communication, provided with a communication determination unit that determines a type of a communication message; a first processing determination unit that determines relatedness between aperiodic communication and periodic communication by using a first communication message for which the type is determined to be aperiodic communication, and a prediction range for an amount of time for receiving a second communication message for which the type is determined to be periodic communication; and a second processing determination unit that determines that the second communication message is legitimate communication for periodic communication in a case where the periodic communication second communication message determined to have relatedness is in the prediction range a predetermined amount of time later.

Information processing apparatus and legitimate communication determination method

A vehicular control apparatus is used in an onboard system provided with a plurality of information processors mutually connected via a communication bus, and includes a storage section for storing information, and an arithmetic section for executing a process based on the information stored in the storage section. The information contains first management information relating to a security abnormality as a communication data abnormality owing to security attack from outside the onboard system, and second management information relating to a safety abnormality as a communication data abnormality owing to an abnormality in the onboard system. The first management information contains first limit condition information indicating a first limit condition for executing a security coping with the security abnormality. The second management information contains second limit condition information indicating a second limit condition for executing a safety coping with the safety abnormality. Upon detection of the communication data abnormality in the onboard system, the arithmetic section determines a coping content to the detected communication data abnormality based on the first management information and the second management information.

Vehicular control apparatus

An unauthorized access to a vehicle is accurately detected. An attack detection rule generation server includes: a general unauthorized access information receiving section receiving, from an external information processing apparatus, general unauthorized access information about an unauthorized access made to an information processing apparatus; a vehicle unauthorized access characteristic information generation section generating vehicle unauthorized access characteristic information about characteristics of an unauthorized access to a vehicle in a case of comparing the unauthorized access to the vehicle with the unauthorized access to the information processing apparatus; a vehicle unauthorized access information generation section generating vehicle unauthorized access information indicating a configuration of the unauthorized access to the vehicle, on the basis of the general unauthorized access information and the vehicle unauthorized access characteristic information; and a vehicle unauthorized access detection rule generation section generating a vehicle unauthorized access detection rule detecting the unauthorized access to the vehicle, on the basis of the vehicle unauthorized access information.

Vehicle unauthorized access countermeasure taking apparatus and vehicle unauthorized access countermeasure taking method

An in-vehicle device is mounted on a vehicle capable of automated driving, and comprises an incident detection processing unit which acquires vehicle information representing a control state of the vehicle, and detects an incident that occurred in the vehicle based on the vehicle information.

In-vehicle device and incident monitoring method

An in-vehicle apparatus is an in-vehicle apparatus connected to a server via a network and mounted on a vehicle. The in-vehicle apparatus includes: a log collection unit configured to collect a log; a log storage unit for accumulation of at least a part of the log; a log priority information storage unit storing log priority information indicating a priority of a log to be accumulated in the log storage unit; an accumulation log determination unit configured to determine a log to be accumulated in the log storage unit based on the log priority information; a communication unit configured to transmit the log accumulated in the log storage unit to the server; and a log priority table management unit configured to update the log priority information stored in the log priority information storage unit based on an update command from the server.

In-vehicle apparatus and log collection system

An information processing device including a security function related to information security and an information processing function related to predetermined information processing, includes: a control unit which performs control processing for realizing the security function and the information processing function; and a storage unit which stores information related to the security function and the information processing function, wherein: when the control unit detects an occurrence of a predetermined event related to the security function or the information processing function, the control unit determines an operation content of the security function based on the information stored in the storage unit.

Growing community of inventors

Tokyo, Japan

Nobuyoshi Morita