Panasonic Corporation

Panasonic Intellectual Property Corporation of America

Panasonic Intellectual Property Management Co., Ltd.

Matsushita Electric Industrial Co., Ltd.

Panasonic Automotive Systems Co., Ltd.

Sony Corporation

Microsoft Technology Licensing, LLC

The University of Tokyo

Toshihisa Nakano

Motoji Ohmori

Masayuki Kozuka

Yuichi Futa

Natsume Matsuzaki

Hiroshi Amano

Hideki Matsushima

Kaoru Yokota

Masaya Yamamoto

Kaoru Murase

Makoto Tatebayashi

Manabu Maeda

Takahiro Yamaguchi

Jun Anzai

Yoshihiro Ujiie

Shunji Harada

Masao Nonaka

Masaya Miyazaki

Takako Hirose

Tohru Wakabayashi

Takeshi Kishikawa

Yuji Unagami

Hideshi Ishihara

Tomoyuki Haga

Senichi Onoda

Masataka Minami

Kotaro Hakoda

Yoshikatsu Ito

Kimio Minami

Tomoyuki Hirota

Kazukuni Kobara

Hideki Imai

Takeshi Matsuo

Yoshiharu Imamoto

Ryota Miyazaki

Takayuki Fujii

Masaki Takahashi

Takashi Morimoto

Kenji Shimizu

Jun Yamaguchi

Yuko Tsusaka

Soichiro Fujioka

Yuishi Torisaki

Naoki Yamamoto

Tsutomu Sekibe

Masato Tanabe

Yoshiyuki Miyabe

Kazushige Yamada

Yuri Nishikawa

Masato Yamamichi

Jun Takahashi

Hiroki Yamauchi

Junichi Tsurumi

Shinichi Marui

Toshihisa Abe

Sanzo Ugawa

Yoshitomo Osawa

Yasunori Ishii

Jun Yonemitsu

Kazuo Okamura

Tateo Oishi

Ryuichi Okamoto

Katsumi Muramatsu

Minehisa Nagata

Tsutomu Muraji

Masami Yamamichi, Legal Representative

Keiichi Tanaka

Kazuhiro Tsuga

Tomoki Ogawa

Takamitsu Sasaki

Makoto Usui

Yoshikazu Takashima

James Morris Alkove

Masaru Yamaoka

Clifford Paul Strom

Osamu Sasaki

Takahiro Nagai

Masahiro Ito

Ian Cameron Mercer

Masayoshi Tojima

Ryoji Suzuki

Yusuke Nemoto

Kazuya Fujimura

Kazuo Kajimoto

Takatoshi Ono

Jeffrey Richard McKune

Ralf Becker

Fumiaki Suzuki

Chikara Yoshida

Takashi Yamanishi

Motoji Omori

Kevin Leigh LaChapelle

Mamoru Yoshida

Kenji Muraki

Satomi Yamamichi, Legal Representative

Keiko Yamamichi, Legal Representative

Toru Kawaguchi

Yuka Ozawa

Kouji Kobayashi

Hidetaka Oto

A management device includes: an obtainer that obtains, from a processing device, a log of operation performed by the processing device and verification data for certifying that the log is valid information; a verifier that performs verification of whether the log is valid information, based on the verification data obtained by the obtainer; and a controller that performs storage control for storing the log as an analysis log for analyzing an anomaly into a storage device, in accordance with a result of the verification performed by the verifier.

Management device, management method, and recording medium

An integrated ECU is a vehicle control system provided in a vehicle, and includes: an application executor that executes an application program; an environment state determiner that determines whether the application executor is anomalous; a first resource provider that provides a resource to be used for controlling the vehicle; and a first access controller that, upon acceptance of a request for the resource from the application program, (a) prohibits provision of the resource from the resource provider to the application program, when the environment state determiner determines that the application executor is anomalous, and (b) permits the provision of the resource from the resource provider to the application program, when the environment state determiner determines that the application executor is not anomalous.

Vehicle control system and vehicle control method

The monitoring system is a system that monitors a virtualization system, the system including: a VM monitor and a request monitor each of which has a different authority, monitors the virtualization system, and detects an anomaly; and a determiner that determines a state of the virtualization system based on monitoring results from the VM monitor and the request monitor.

Monitoring system

A vehicle control system includes: a detector that detects an attack on an application; a vehicle state verifier that verifies a state of a vehicle when the detector detects the attack; an influence verifier that verifies, based on a verification result of the vehicle state verifier, an influence on the vehicle assuming operation of the application subjected to the attack is stopped; a determiner that determines, based on a verification result of the influence verifier, at least one of a response method for responding to the attack or a recovery method for recovering the application subjected to the attack; and a controller that executes at least one of the response method or the recovery method determined.

Vehicle control system and method for controlling vehicle control system

A server apparatus receives a device ID indicating one electrical home appliance among one or more electrical home appliances and a gateway ID indicating that the one electrical home appliance belongs to a same owner, a same group, or a same home as the one or more electrical home appliances, determines whether or not the one electrical home appliance is a newly connected electrical home appliance, using a management database that manages device IDs indicating the one or more electrical home appliances and the gateway ID, and when it is determined made that the one electrical home appliance is a newly connected electrical home appliance, provides an information device, which is associated with the gateway ID and which differs from the one electrical home appliance, with notification information for confirming whether or not it is to be permitted to collect the log information from the one electrical home appliance.

Information management method

An information management method collects log information of one or more home electrical apparatuses corresponding to service providers. Display screen data is generated which indicates a status of the log information. The display screen data includes groups of information which each contain information on an apparatus, a service provider corresponding to the apparatus, and log information output from the apparatus. Provision of the log information of each group is individually selectable. The display screen data is provided via a network to a display terminal that performs access to a server device. Information is received from the display terminal, which indicates that selection on whether or not provision of the log information is performed. Provision of the log information is not performed on the selected group when a determination is made that refusal of provision of the log information on the selected group is performed.

In an anomaly determination method for determining an anomaly in a received message, a plurality of messages which include messages that are periodic and each of which includes a first field having a fixed value and a second field having a variable value are each received as the received message, and one of a plurality of combinations to be used for determination each of which includes at least one of a plurality of anomaly determinations including an anomaly determination utilizing a reception timing based on the periodicity or the number of received messages, an anomaly determination utilizing the first field, and an anomaly determination utilizing the second field, is selected according to one or more criteria among available execution time of the anomaly determination method, a load amount, a data amount, and the number of messages.

Anomaly determination method, anomaly determination device, and recording medium

A gateway device is connected to a plurality of electronic controllers on-board a vehicle. The gateway device acquires firmware update information, which includes at least a part of updated firmware to be applied to a first electronic controller, patch data, and information indicating where to apply the patch data. When the gateway device determines that the first electronic controller does not include a firmware cache for performing a pre-update firmware cache operation, the gateway device executes a proxy process. In this regard, the gateway device requests the first electronic controller to transmit boot ROM data to the gateway device, merges the patch data and existing firmware to create updated boot ROM data with updated firmware, and transmits the updated boot ROM data to the first electronic controller that updates the boot ROM data and resets the first electronic controller with the updated firmware.

Gateway device, in-vehicle network system, and firmware update method

A server includes: an obtainer that obtains items of information including an item of frame information regarding a communication frame transmitted on an in-vehicle network of each of a plurality of vehicles; and a generator that generates an integrated rule that is suitable for the items of information obtained by the obtainer and is for anomaly detection processing in the in-vehicle network of one of the vehicles; and a provider that outputs the integrated rule generated by the generator. For example, the obtainer obtains condition information indicating a condition pertaining to each of the plurality of vehicles at a time when the communication frame is transmitted on the in-vehicle network, and the generator generates the integrated rule using the items of frame information associated with the condition information.

Information processing device and information processing method

An anomaly detection device is a device for detecting an anomaly in a mobile body and includes: a type determiner that determines a type of an anomaly detected; a type change determiner that determines whether or not a change has occurred between a type of an anomaly detected last time and a type of an anomaly detected this time; and an anomaly detection log transmitter that transmits an anomaly detection log related to the anomaly detected this time when the change has occurred, and does not transmit the anomaly detection log related to the anomaly detected this time when the change has not occurred.

Anomaly detection device and anomaly detection method

A gateway device is connected via network(s) to electronic controllers on-board a vehicle, where at least one of the electronic controllers is implemented in a virtual machine. The gateway device includes one or more memories, and circuitry that acquires firmware update information. The circuitry determines whether a first electronic controller satisfies a second condition based on second information, which is whether the first electronic controller includes a firmware cache for performing a pre-update firmware cache operation. The circuitry also causes, when the second condition is not satisfied, the gateway device to execute a proxy process, where the gateway device requests the first electronic controller to transmit boot ROM data to the gateway device, creates updated boot ROM data with the updated firmware, and transmits the updated boot ROM data to the first electronic controller that updates the boot ROM and resets the first electronic controller with the updated firmware.

An information processing device includes: an obtainer that obtains, from an anomaly detection sensor that detects an anomaly in a network, a detection log related to the anomaly in the network and the detection time of the anomaly indicated in the detection log; an occurrence time determiner that determines the occurrence time of an attack on the network based on the obtained detection time, and records the determined occurrence time; and an end time determiner that determines the expected end time of the attack on the network based on the obtained detection log, and records the determined expected end time.

Growing community of inventors

Osaka, Japan

Toshihisa Nakano