Hitachi, Ltd.

Nec Corporation

Satoshi Ohkubo

Hiroki Uchiyama

Makoto Kayashima

Toru Owada

Kohhei Yamaguchi

Yusuke Fujihara

Jun Hamanaka

Tsutomu Yamada

Takayuki Nakagawa

Hiroshi Tezuka

Hiromichi Endoh

Toshihiko Nakano

Ryota Mibe

Akifumi Yato

Nobuyuki Ikuta

Kenichi Oohashi

Yuma Shibuya

Shigeaki Tokuda

Junpei Yamasaki

Shugo Mikami

A commodity monitoring device includes a commodity state detection unit configured to, on the basis of image information of a commodity group area set on a commodity shelf, detect removal of a commodity in a quantity satisfying a predetermined condition from the commodity group area; and a change detection information output unit configured to, if the commodity state detection unit has detected the removal, output to an output destination device change detection information including image time-series data of the commodity group area from a point in time at which the commodity state detection unit detected the removal to a predetermined past point in time.

Commodity monitoring device, commodity monitoring system, output destination device, commodity monitoring method, display method and program

Proposed are a log analyzing system and a log analyzing method capable of more effectively defending a control system from unauthorized access. The log analyzing system which analyzes a communication log of a control device comprises a network device which receives a communication packet corresponding to the communication log from a network, and a monitoring device which monitors communication to the network device, wherein the monitoring device obtains a difference between a communication pattern of the communication packet and a stable pattern, which is a pattern of a communication in a state of no unauthorized access, restores the communication packet based on the difference, and notifies the restored communication packet.

Log analyzing system and method

A system that detects any unauthorized communication without imposing a processing load on a control device is provided. In the incident detection system configured to detect any security incident, a gateway device includes: an ID generation unit that generates its own gateway device identification information; a detection packet generation unit that generates a detection packet including control information transmitted from a control device and path information obtained by adding its own gateway device identification information to a communication packet; a log generation unit that generates log information including the detection packet; and a device communication unit that transmits the log information to a management server connected to the gateway device over a network or transmits the detection packet to a control device controlled based on the control information. In the incident detection system, the management server includes: a server communication unit that receives log information from a gateway device; a communication path extraction unit that stores assumed path information, obtained by extracting path information from the log information, in a storage unit in advance; and an incident detection unit that detects any unauthorized communication packet based on the assumed path information stored in the storage unit and path information included in the log information.

Incident detection system including gateway device and server

A detection apparatusstores a determination list (A) for determining whether there is unauthorized communication, receives a communication packet (A) flowing in a control system, determines whether a valid data pattern in the determination list (A) and a data pattern relating to the communication packet (A) match each other. When the valid data pattern in the determination list (A) and the data pattern relating to the communication packet do not match each other, the detection apparatuscalculates a similarity degree between the valid data pattern in the determination list and the data pattern relating to the communication packet, and determines whether the similarity degree satisfies a predetermined condition. When the similarity degree is determined not to satisfy the predetermined condition, the detection apparatusdetermines that the communication packet (A) is an unauthorized communication packet.

Unauthorized communication detection system and unauthorized communication detection method

An evaluation system includes a network device, a gateway device, a policy evaluation device, and first and second control devices. The network device copies a packet received from the first control device and transmits to the gateway device and the policy evaluation device. The gateway device receives the copied packet, performs a first filtering based on the policy stored in a first policy storage unit, transmits the packet to the second control device while storing the result of the first filtering, and transmits the result of the stored first filtering to the policy evaluation device. The policy evaluation device receives the copied packet, performs a second filtering based on the policy stored in a second policy storage unit, stores the result of the second filtering, and evaluates the policy stored in the second policy storage unit based on the results of the two filterings.

Evaluation system

Provided are a control system and an authentication device capable of detecting abnormality of a development device for distributing a control program and of preventing destruction and tampering of the program caused by the abnormality. To solve the above problem, there is provided: a control device that controls a controlled object; a development device that manages a plurality of control programs executed by the control device and sends the predetermined control program and information accompanying the control program to the network; and an authentication device having an authentication list storing the information accompanying the control program in association with the control program. Upon receiving the control program and the information accompanying the control program from the development device, the authentication device performs authentication whether or not the development device is normal by checking the accompanying information received from the development device with the information stored in the authentication list.

Control system and authentication device

An information control system capable of precisely defining and executing a condition for stipulating a state of an apparatus to be controlled. A storage unit stores an object definition table storing data items of a structure and a state of an object constituting a controlled system, and an actor definition table storing a monitor condition of an object state, an object monitor item and a setting value, as an actor as a control element for monitoring and controlling the object. A processing unit receives an object state from the controlled system, and when the state changes, transmits changed state value to the actor. The actor then refers to the actor definition table to judge whether the monitor condition is satisfied, and if satisfied, changes the setting value of the monitor condition and transmits a control command for setting value change to the object corresponding to the monitor item.

Information control system and information control method

Growing community of inventors

Tokyo, Japan

Satoshi Ohkubo