Fujitsu Corporation

Pfu Limited

Toyota Jidosha Kabushiki Kaisha

Fujitsu Fsas Inc.

Fujitsu Semiconductor Limited

Fujitsu Frontech Limited

Fijitsu Limited

Toyo Sanso Co., Ltd.

Seigo Kotani

Masato Suzuki

Takayuki Hasebe

Hideyuki Hirano

Ryota Akiyama

Takaoki Sasaki

Jun Kamada

Keiichi Ikeda

Takehiko Hayashi

Makoto Yoshioka

Ryusuke Masuoka

Keiichi Murakami

Takumi Kishino

Yasuyuki Higashiura

Hisashi Oguma

Jesus Molina

Shinichi Yoshimoto

Kenichi Utsumi

Shigeru Yoshida

Naoya Torii

Satoru Torii

Zhexuan Song

Sung Ho Lee

Keishiro Tanaka

Shinji Hashimoto

Kouichi Minami

Keizo Sato

Kouji Sakai

Takashi Yoshioka

Akihiro Inomata

Toshimitsu Suzuki

Kouichi Kanamoto

Etsuo Ono

Nobuaki Usui

Masahiro Komura

Masashi Mitomo

Bintatsu Noda

Yusuke Yamanaka

Takeshi Hatano

Masao Fujiwara

Shigenori Baba

Fumie Takizawa

Masatoshi Yoshida

Hiroshi Kakutani

Seiichi Urita

Takeshi Imamura

Tomihiro Yamazaki

Takahiro Nakai

Yasuharu Kamioka

Hiroki Inoue

Kazutoshi Miyamura

Masaaski Matsuguchi

Shoki Kadowaki

Mizuma Ishikawa

Nobuo Yoshikawa

Hidenari Miwa

Takayuki Katou

Nao Ando

Houcheng Lee

Massayuki Hatanaka

Masaaki Matsuguchi

Kazuhiko Muramoto

Hirotaka Tachibana

Tatsuro Masuda

A method includes receiving first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile, calculating second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information, transmitting the correction program to the control unit, receiving from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit, comparing the received third information with the calculated second information, and judging whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

Method for confirming correction program and information processing apparatus

A program stored in a computer-readable medium causes a computer to execute a process includes receiving, from an automobile in which a control program for controlling devices mounted on the automobile operates, an update request concerning the control program, classifying a plurality of correction programs corresponding to the update request into a plurality of groups on the basis of usable electric energy of a battery corresponding to a vehicle type to which the automobile belongs, an amount of the usable electric energy being stored in a memory, and transmitting the classified correction programs to the automobile for each of the groups.

Apparatus and method for installing vehicle correction program

A client supported by remote maintenance in an electronic network configured to serve a plurality of clients may comprise a plurality of nodes, a first virtual machine (VM), a second virtual machine, and a virtual machine manager (VMM). The first VM may handle data associated with an external data center. The second VM may be associated with one of the plurality of nodes. The VMM may be configured to manage data transfer between the first VM and the second VM. The first VM may be configured to assess a state of the client system and identify a software update for installation on the one of the plurality of nodes. The software update may be configured to maintain identity between the data in the one of the plurality of nodes and the data center. The VMM may manage an attestation process prior to delivering or installing the software update on the client system using the first VM.

System and methods for remote maintenance in an electronic network with multiple clients

A first electronic device stores first configuration information of the first electronic device collected by a tamper-resistant chip on the first electronic device and approved by a third-party device in the portable medium. A second electronic device stores second configuration information of the second electronic device collected by a tamper-resistant chip on the second electronic device and approved by the third-party device in the portable medium and acquires the first configuration information from the portable medium. The first electronic device transmits the first configuration information of the first electronic device and the second configuration information of the second electronic device acquired from the portable medium to the second electronic device over a long-distance network. The second electronic device controls connection between the first and the second electronic devices over the long-distance network based on the first configuration information and the second configuration information received from the first electronic device.

Network connecting method and electronic device

A first electronic device transmits first configuration information of the first electronic device collected by a tamper-resistant chip mounted thereon and approved by a third-party device to a second electronic device over a short-distance network. The second electronic device transmits second configuration information of the second electronic device collected by a tamper-resistant chip mounted thereon and approved by the third-party device to the first electronic device over the short-distance network. The first electronic device transmits the first configuration information and the second configuration information to the second electronic device over a network. The second electronic device controls connection between the first electronic device and the second electronic device over the network based on the first configuration information and the second configuration information received from the first electronic device.

A method for sharing content between clients at a common trust level in a trust hierarchy associated with a network implementing policy-based management includes receiving integrity information from a first client at a first trust level in the trust hierarchy at a second client at the first trust level, requesting permission to receive electronic content from the first client, receiving a determination regarding the requested permission, and communicating the determination to the first client. The first client obtained content from a policy enforcement point in the network. The request for permission is made to the policy enforcement point and the request includes the integrity information. The determination is received from the policy enforcement point and is based in part on the integrity information about the first client. The second client communicates to the first client the determination of whether the second client receives the content from the first client.

Consigning authentication method

A certificate generation method executed by a computer, includes receiving specific information and configuration information of a communication device collected by an information processing apparatus, the specific information and the configuration information being transmitted from the communication device provided with the information processing apparatus having tamper resistance; determining a communication address of the communication device based on the specific information if a combination of the received specific information and the received configuration information of the communication device is equivalent to information stored beforehand in a storage unit; generating an electronic certificate including a part of or all of the specific information and the configuration information, and the determined communication address; and transmitting the electronic certificate to the communication device.

Certificate generation method, certificate generation apparatus, information processing apparatus, and communication device

In certain embodiments, processors may operate to establish trust with trust point systems by performing a user authentication, a platform authentication, and an environment authentication. The processors may communicate information with the trust point systems in response to establishing trust. In certain embodiments, the trust point systems may cooperate to provide a variety of services, such as escorting, battery charging, vehicle security, and/or emissions reporting services.

Using trust points to provide services

A system and method are disclosed for providing and maintaining a high level of security during migration of data from one platform to another. The disclosed system combines user and equipment authentication with equipment environment authorization guaranteed by a security module such as supported by a trusted platform module (TPM) in parallel, for secure information transfer to support migration between platforms.

Method and apparatus for secure information transfer to support migration

According to one embodiment, a client system supported by remote maintenance in an electronic network configured to serve a plurality of clients may include an electronic network, a plurality of storage resources, a first virtual machine, a second virtual machine, and a virtual machine manager. The electronic network may include a plurality of processing resources and a communication bus. The plurality of storage resources may be accessible by the plurality of processing resources. The plurality of storage resources may include a computer readable memory. The first virtual machine may handle a first data set associated with the client system. The first virtual machine may include an operating system and a reporting agent. The second virtual machine may handle a second data set associated with an external data center. The virtual machine manager may be configured to manage data transfer between the first virtual machine and the second virtual machine. The second virtual machine may be configured to assess a state of the first virtual machine and identify a software update for installation on the first virtual machine. The virtual machine manager may manage an attestation process for the first virtual machine prior to delivering or installing the software update on the client system using the first virtual machine.

A method for sharing content between clients at a common trust level in a trust hierarchy associated with a network implementing policy-based management includes making a first request for delivery of content, receiving the requested electronic content, receiving a second request for delivery of the electronic content, communicating the second request, receiving a decision, and delivering the electronic content if the second request is granted. The first request is made to a policy enforcement point in the network for delivery of content to a first client, and includes a trust level of the first client. The second request is for delivery of the content to a second client at the trust level of the first client and includes integrity information about the second client, and is communicated to the policy enforcement point. If the second request is granted, the content is delivered from the first client to the second client.

An information generating unit generates identification information for an equipment based on environment information of the equipment. A search-result transmitting unit searches, when an information output request for equipment information generated based on the identification information is received, a database for the equipment information corresponding to the identification information, and transmits a search result as information indicating whether the equipment is allowed to receive a service.

Equipment-information transmitting apparatus, service control apparatus, equipment-information transmitting method, and computer products

A terminal of an environment management station that calculates an evaluation value of a user terminal security, the evaluation value being used to determine whether to provide a service from a service provider to the user terminal, the terminal of the environment management station set in a third-party organization and stores environment information about to identify software or hardware that can be incorporated in the user terminal or hardware that can be connected to the user terminal, and the evaluation value of the user terminal in association with each other; a receiving unit that receives the environment information of the user terminal; an evaluation value calculating unit that calculates the evaluation value of the user terminal based on the evaluation value; and a transmitting unit that transmits the evaluation value to the terminal of the service provider.

Terminal of an environment management station and a service user provided a service, method for processing an evaluation value of a terminal, a service request and a service providing

A computer resource verifying method verifies computer resources introduced into a client device. The computer resource verifying method includes performing, by the client device, client side processing including verification of individual computer resources introduced into the client device and information collection for a dependence relation between computer resources; performing, by a server device, a server side processing by receiving information on a result of the client side processing performed in the performing of the client side processing to perform verification of the dependence relation between computer resources; and determining, by the server device, whether the client device is normal based on a verification result of the computer resources and a verification result of the dependence relation between computer resources.

Computer resource verifying method and computer resource verifying program

A data acquiring unit acquires electronic data. A tamper-resistant chip includes a storing unit that stores a confidential key specific to a device, and a collecting unit that collects device information that is internal information of the device. An attaching unit attaches collected device information to acquired electronic data. An encrypting unit encrypts the electronic data with the device information attached, using the confidential key stored in the storing unit.

Method and apparatus for processing information, and computer program product

Growing community of inventors

Kawasaki, Japan

Seigo Kotani