Panasonic Intellectual Property Corporation of America

Panasonic Automotive Systems Co., Ltd.

Panasonic Corporation

Panasonic Intellectual Property Management Co., Ltd.

Yuishi Torisaki

Tomoyuki Haga

Ryo Kato

Takamitsu Sasaki

Kaoru Yokota

Makoto Fujiwara

Yusuke Nemoto

Hiroyasu Terazawa

Hideki Matsushima

Takeshi Kishikawa

Yoshihiro Ujiie

Shoichiro Sekiya

Toshihisa Nakano

Takayoshi Ito

Shinji Inoue

Jun Anzai

Makoto Ochi

Kazuya Fujimura

Akihito Katsura

Tomoya Satou

Kentarou Shiomi

Takumaru Nagai

Manabu Maeda

Masato Tanabe

Hiroyuki Wada

Kou Ishii

Satoru Kuriki

Nobutaka Kawaguchi

Akihito Takeuchi

Kazuya Shimizu

Kazuya Shimzu

Masahiro Sano

An information processing device includes: a log storage that stores a monitoring log; a log transmitter that transmits a monitoring log stored in the log storage to an SOC at a first timing; a first anomaly detector that detects a presence or absence of an anomaly in the information processing device; an integrated monitor that verifies an integrity of each of the log transmitter and the first anomaly detector; a root monitor that verifies an integrity of the integrated monitor; a determiner that determines an intrusion depth based on a monitoring log stored in the log storage when an anomaly due to an attack occurs; and a transmission controller that changes, based on the intrusion depth, a timing of transmission of a monitoring log by the log transmitter from the first timing to a second timing that is earlier than the first timing.

Information processing device and method for controlling information processing device

A management device includes: an obtainer that obtains, from a processing device, a log of operation performed by the processing device and verification data for certifying that the log is valid information; a verifier that performs verification of whether the log is valid information, based on the verification data obtained by the obtainer; and a controller that performs storage control for storing the log as an analysis log for analyzing an anomaly into a storage device, in accordance with a result of the verification performed by the verifier.

Management device, management method, and recording medium

An information notification method includes: obtaining a plurality of incident information items on a plurality of incidents caused by cyber attacks on a monitoring target during a first period in past; determining, based on the plurality of incident information items obtained, for each type of the plurality of incidents, an incident trend of incidents of the type in the monitoring target during a second period in the future and a priority of a provisional response or a permanent response to an incident of the type; and notifying of the incident trend and the priority that are determined for each type of the plurality of incidents.

Information notification method and information notification device

An information output device that outputs monitoring information including monitoring logs generated by monitoring devices, and includes: memory; and a processor coupled to the memory. The processor, by using the memory, operates as: a receiver that sequentially receives monitoring logs, each including a monitoring result indicating whether a monitoring target has an anomaly; a manager that manages, based on the monitoring logs, a first state that is a state of anomaly occurrence in a monitoring target of each of the monitoring devices; a storage that stores path information indicating transmission paths, each indicated by one or more devices through which a monitoring log transmitted by a source passes; a determiner that determines the reliability level of each received monitoring log based on a first transmission path of the monitoring log and the first state; and an outputter that outputs, based on the reliability level, monitoring information including the monitoring log.

Information output device, information output method, and recording medium

A module for a vehicle includes: a first communication module that transmits and receives first data to and from a first in-vehicle module; a second communication module that transmits and receives second data to and from a second in-vehicle module; and a control module that controls relay of third data among the first communication module and the second communication module. In a case where reception data received by the control module from the first or second communication module is unauthorized, the control module stops relaying the third data in accordance with a traveling state of the vehicle satisfying a predetermined condition, The traveling state includes: the vehicle being stopped; a vehicle speed being at or below a predetermined speed; brakes being applied; a hazard indicator being on; a driver being in a state capable of driving; and/or self-driving functions being in an off state.

Communication device, control device, storage medium, and system for controlling relay of data among electronic control units based on a traveling state of a vehicle

An on-vehicle device according to the present disclosure is capable of communicating with a server and mounted on a vehicle. The on-vehicle device includes a memory, and a hardware processor coupled to the memory. The hardware processor is configured to: receive, from the server, a log acquisition requirement including an anomaly detected point portion that designates one or more anomaly detected points and a log acquisition target portion that indicates one or more logs to be acquired when an anomaly is detected at the one or more anomaly detected points designated by the anomaly detected point portion; store the log acquisition requirement; detect an anomaly of the vehicle; acquire, when detecting an anomaly, a log based on a part where an anomaly is detected and the log acquisition requirement; and transmit the acquired log to the server.

On-vehicle device and log management method

A priority determination system incudes a processor, a terminal, and a memory. The processor obtains anomaly data items, each indicating an anomaly in a corresponding one of moving bodies, and obtains state data items, each indicating a state of a corresponding one of the moving bodies. The processor calculates, for each anomaly data item, a risk value indicating a risk of the anomaly based on a state data item of the corresponding one of the moving bodies, determines a priority of a task for dealing with the anomaly indicated by each anomaly data item based on the risk value, and provides an output to the terminal to execute the task. The terminal displays an alert related to at least one of the priority of the task, the risk value, or an estimated dealing time required for completing the task.

Priority determination system, priority determination method, and recording medium

A vehicle anomaly detection server includes: a communicator that communicates with a vehicle to receive a log of an in-vehicle network in the vehicle; a processor; and a memory including at least one set of instructions that, when executed by the processor causes the processor to perform operations including: selecting, when information indicating that an anomaly is occurring to a first vehicle among vehicles is obtained by the processor, an anomaly-related vehicle from among the vehicles based on the anomaly, the first vehicle being the vehicle that communicates with the communicator; transmitting, to the anomaly-related vehicle via the communicator, a first request to transmit a log of an in-vehicle network in the anomaly-related vehicle; and determining whether an anomaly is occurring to the anomaly-related vehicle, based on information indicated by the log transmitted from the anomaly-related vehicle and received by the communicator.

Vehicle anomaly detection server, vehicle anomaly detection system, and vehicle anomaly detection method

An information processing device includes: a log transmitter that transmits a monitoring log generated in the information processing device to an SOC (); an HIDS monitor that verifies an integrity of the log transmitter; and a monitoring ROT that verifies an integrity of the HIDS monitor, and repeatedly outputs a heartbeat signal to the log transmitter. Each time the heartbeat signal is output from the monitoring ROT, the log transmitter transmits the heartbeat signal to the SOC. When the integrity of the log transmitter is anomalous, the HIDS monitor outputs, to the monitoring RoT, an output stop request signal for requesting the monitoring ROT to stop outputting the heartbeat signal. The monitoring RoT stops outputting the heartbeat signal based on the output stop request signal.

Information processing device and control method for information processing device

A vehicle monitoring apparatus includes: a first communicator that receives specifying information for specifying a target vehicle from a server; and an acquirer that acquires driving information from the target vehicle, the driving information being information regarding driving of the target vehicle specified by the specifying information received by the first communicator. The first communicator transmits the driving information acquired by the acquirer to the server. For example, the acquirer may acquire the driving information obtained from the target vehicle through communication.

Vehicle monitoring apparatus, fraud detection server, and control methods

An in-vehicle relay device for a vehicle is provided. The in-vehicle relay device includes a first communication circuit that transmits and receives first data to and from a first in-vehicle equipment in the vehicle. A second communication circuit transmits and receives second data to and from a second in-vehicle equipment in the vehicle. A control circuit controls relay of third data among the first communication circuit and the second communication circuit. In a case where reception data received by the control circuit from the first communication circuit or the second communication circuit is unauthorized, the control circuit stops relaying the third data in accordance with a traveling state of the vehicle.

Vehicle relay device, relay method, and recording medium storing program for stopping unauthorized control by in-vehicle equipment

A statistical information generation device that generates statistical information from Ethernet frames on a mobility network includes: a transceiver that transmits and receives the Ethernet frames; and a statistical information generator that collects a plurality of Ethernet frames transmitted or received by the transceiver within a predetermined time period, and classifies, out of the plurality of Ethernet frames collected, Ethernet frames containing the same destination IP address, source IP address, destination port number, source port number, and protocol, and containing, in payloads, same identification information related to mobility control, into the same group, generates the statistical information for each group from the Ethernet frames classified into groups, and transmits the generated statistical information from the transceiver.

Statistical information generation device, statistical information generation method, and recording medium

An information processing device includes: an obtainer that obtains, from an anomaly detection sensor that detects an anomaly in a network, a detection log related to the anomaly in the network and the detection time of the anomaly indicated in the detection log; an occurrence time determiner that determines the occurrence time of an attack on the network based on the obtained detection time, and records the determined occurrence time; and an end time determiner that determines the expected end time of the attack on the network based on the obtained detection log, and records the determined expected end time.

Information processing device and information processing method

A server as an information processing device includes: a communicator that communicates with mobile a body; a monitoring data storage that stores past monitoring data of the mobile body received by the communicator; and an alive monitor that determines whether a current state of the mobile body is anomalous, based on the past monitoring data stored in the monitoring data storage.

A priority determination system includes: an anomaly obtainer that obtains anomaly data items each indicating anomaly in a corresponding one of moving bodies; a state obtainer that obtains state data items each indicating a state of a corresponding one of the moving bodies; a risk value calculator that calculates, for each of the anomaly data items, a risk value indicating a risk of the anomaly based on a state data item of the corresponding one of the moving bodies; a priority determiner that determines a priority of a task for dealing with the anomaly indicated by each of the anomaly data items, based on the risk value of the anomaly data item; and an outputter that provides output based on a result of the determination.

Growing community of inventors

Osaka, Japan

Yuishi Torisaki