Abstract: A key update device updates key information on the in-vehicle device. The key update device acquires a remaining battery level of a battery that supplies power to an in-vehicle device; determines whether or not to newly issue key information on the in-vehicle device based on the acquired remaining battery level, requests, when it is determined that key information is to be newly issued, an external device for a certificate for newly issued key information through communication with the external device; and switches key information on the in-vehicle device to key information certified by the external device.

Abstract: A method includes receiving first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile, calculating second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information, transmitting the correction program to the control unit, receiving from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit, comparing the received third information with the calculated second information, and judging whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

Abstract: A program stored in a computer-readable medium causes a computer to execute a process includes receiving, from an automobile in which a control program for controlling devices mounted on the automobile operates, an update request concerning the control program, classifying a plurality of correction programs corresponding to the update request into a plurality of groups on the basis of usable electric energy of a battery corresponding to a vehicle type to which the automobile belongs, an amount of the usable electric energy being stored in a memory, and transmitting the classified correction programs to the automobile for each of the groups.

Abstract: A client supported by remote maintenance in an electronic network configured to serve a plurality of clients may comprise a plurality of nodes, a first virtual machine (VM), a second virtual machine, and a virtual machine manager (VMM). The first VM may handle data associated with an external data center. The second VM may be associated with one of the plurality of nodes. The VMM may be configured to manage data transfer between the first VM and the second VM. The first VM may be configured to assess a state of the client system and identify a software update for installation on the one of the plurality of nodes. The software update may be configured to maintain identity between the data in the one of the plurality of nodes and the data center. The VMM may manage an attestation process prior to delivering or installing the software update on the client system using the first VM.

Abstract: A first electronic device stores first configuration information of the first electronic device collected by a tamper-resistant chip on the first electronic device and approved by a third-party device in the portable medium. A second electronic device stores second configuration information of the second electronic device collected by a tamper-resistant chip on the second electronic device and approved by the third-party device in the portable medium and acquires the first configuration information from the portable medium. The first electronic device transmits the first configuration information of the first electronic device and the second configuration information of the second electronic device acquired from the portable medium to the second electronic device over a long-distance network.

Abstract: A first electronic device transmits first configuration information of the first electronic device collected by a tamper-resistant chip mounted thereon and approved by a third-party device to a second electronic device over a short-distance network. The second electronic device transmits second configuration information of the second electronic device collected by a tamper-resistant chip mounted thereon and approved by the third-party device to the first electronic device over the short-distance network. The first electronic device transmits the first configuration information and the second configuration information to the second electronic device over a network. The second electronic device controls connection between the first electronic device and the second electronic device over the network based on the first configuration information and the second configuration information received from the first electronic device.

Abstract: A certificate generation method executed by a computer, includes receiving specific information and configuration information of a communication device collected by an information processing apparatus, the specific information and the configuration information being transmitted from the communication device provided with the information processing apparatus having tamper resistance; determining a communication address of the communication device based on the specific information if a combination of the received specific information and the received configuration information of the communication device is equivalent to information stored beforehand in a storage unit; generating an electronic certificate including a part of or all of the specific information and the configuration information, and the determined communication address; and transmitting the electronic certificate to the communication device.

Abstract: A method for sharing content between clients at a common trust level in a trust hierarchy associated with a network implementing policy-based management includes receiving integrity information from a first client at a first trust level in the trust hierarchy at a second client at the first trust level, requesting permission to receive electronic content from the first client, receiving a determination regarding the requested permission, and communicating the determination to the first client. The first client obtained content from a policy enforcement point in the network. The request for permission is made to the policy enforcement point and the request includes the integrity information. The determination is received from the policy enforcement point and is based in part on the integrity information about the first client. The second client communicates to the first client the determination of whether the second client receives the content from the first client.

Abstract: A certificate generation method executed by a computer, includes receiving specific information and configuration information of a communication device collected by an information processing apparatus, the specific information and the configuration information being transmitted from the communication device provided with the information processing apparatus having tamper resistance; determining a communication address of the communication device based on the specific information if a combination of the received specific information and the received configuration information of the communication device is equivalent to information stored beforehand in a storage unit; generating an electronic certificate including a part of or all of the specific information and the configuration information, and the determined communication address; and transmitting the electronic certificate to the communication device.

Abstract: In certain embodiments, processors may operate to establish trust with trust point systems by performing a user authentication, a platform authentication, and an environment authentication. The processors may communicate information with the trust point systems in response to establishing trust. In certain embodiments, the trust point systems may cooperate to provide a variety of services, such as escorting, battery charging, vehicle security, and/or emissions reporting services.

Abstract: A client supported by remote maintenance in an electronic network configured to serve a plurality of clients may comprise a plurality of nodes, a first virtual machine (VM), a second virtual machine, and a virtual machine manager (VMM). The first VM may handle data associated with an external data center. The second VM may be associated with one of the plurality of nodes. The VMM may be configured to manage data transfer between the first VM and the second VM. The first VM may be configured to assess a state of the client system and identify a software update for installation on the one of the plurality of nodes. The software update may be configured to maintain identity between the data in the one of the plurality of nodes and the data center. The VMM may manage an attestation process prior to delivering or installing the software update on the client system using the first VM.

Abstract: A system for performing remote maintenance an electronic network serving a plurality of clients may comprise a central server, a first client system hosting first virtual machine, and a receiver associated with the first client system. The central server may broadcast a list of updated software modules available for delivery to the plurality of client systems. The first client system may including a plurality of nodes, each one of the plurality of processing resources having a respective set of processing instructions stored on an respective associated computer readable memory. The receiver may be operable to receive the list broadcast by the central server. The first virtual machine may be operable to determine whether to request any of the updated software modules on the received list based at least in part on the identity of the plurality of nodes of the first client system. The receiver may be operable to receive any updated software module requested by the first virtual machine.

Abstract: A system for performing remote maintenance in an electronic network configured to serve a plurality of clients may comprise a client, a database, and a virtual machine. The client may include a plurality of processing resources. Each one of the plurality of processing resources may have a respective set of processing instructions stored on an respective associated computer readable memory. The database may include information correlating a list of processing resources with a respective set of processing instructions. The virtual machine may be operable to access the database and perform calculations simulating proposed combinations of processing resources and their respective set of processing instructions before approving a software update requested for the client.

Abstract: A system and method are disclosed for providing and maintaining a high level of security during migration of data from one platform to another. The disclosed system combines user and equipment authentication with equipment environment authorization guaranteed by a security module such as supported by a trusted platform module (TPM) in parallel, for secure information transfer to support migration between platforms.

Abstract: According to one embodiment, a client system supported by remote maintenance in an electronic network configured to serve a plurality of clients may include an electronic network, a plurality of storage resources, a first virtual machine, a second virtual machine, and a virtual machine manager. The electronic network may include a plurality of processing resources and a communication bus. The plurality of storage resources may be accessible by the plurality of processing resources. The plurality of storage resources may include a computer readable memory. The first virtual machine may handle a first data set associated with the client system. The first virtual machine may include an operating system and a reporting agent. The second virtual machine may handle a second data set associated with an external data center. The virtual machine manager may be configured to manage data transfer between the first virtual machine and the second virtual machine.

Abstract: A method includes receiving first information that is information on a control program from a control unit which executes the control program for controlling equipment loaded onto an automobile, the control unit being loaded onto the automobile, calculating second information that is a state of the control program when applying a correction program on the control program to the control unit on the basis of the received first information, transmitting the correction program to the control unit, receiving from the control unit third information that is information on a state of the control program after applying the transmitted correction program to the control unit, comparing the received third information with the calculated second information, and judging whether or not processing of applying the correction program to the control unit has succeeded on the basis of a result of the comparison.

Abstract: A program stored in a computer-readable medium causes a computer to execute a process includes receiving, from an automobile in which a control program for controlling devices mounted on the automobile operates, an update request concerning the control program, classifying a plurality of correction programs corresponding to the update request into a plurality of groups on the basis of usable electric energy of a battery corresponding to a vehicle type to which the automobile belongs, an amount of the usable electric energy being stored in a memory, and transmitting the classified correction programs to the automobile for each of the groups.

Abstract: A certificate generation method executed by a computer, includes receiving specific information and configuration information of a communication device collected by an information processing apparatus, the specific information and the configuration information being transmitted from the communication device provided with the information processing apparatus having tamper resistance; determining a communication address of the communication device based on the specific information if a combination of the received specific information and the received configuration information of the communication device is equivalent to information stored beforehand in a storage unit; generating an electronic certificate including a part of or all of the specific information and the configuration information, and the determined communication address; and transmitting the electronic certificate to the communication device.

Abstract: An information generating unit generates identification information for an equipment based on environment information of the equipment. A search-result transmitting unit searches, when an information output request for equipment information generated based on the identification information is received, a database for the equipment information corresponding to the identification information, and transmits a search result as information indicating whether the equipment is allowed to receive a service.

Abstract: A method for sharing content between clients at a common trust level in a trust hierarchy associated with a network implementing policy-based management includes making a first request for delivery of content, receiving the requested electronic content, receiving a second request for delivery of the electronic content, communicating the second request, receiving a decision, and delivering the electronic content if the second request is granted. The first request is made to a policy enforcement point in the network for delivery of content to a first client, and includes a trust level of the first client. The second request is for delivery of the content to a second client at the trust level of the first client and includes integrity information about the second client, and is communicated to the policy enforcement point. If the second request is granted, the content is delivered from the first client to the second client.