Abstract: An information processing device includes: a processor; and a memory including at least one set of instructions that, when executed by the processor, causes the processor to perform operations. The operations include: obtaining incident information about an incident of a cyberattack that occurred in a vehicle; obtaining first vehicle information about a state of a first vehicle; storing, in the memory, the incident information and the first vehicle information; determining a risk level of a vehicle function of the first vehicle, based on a degree of matching between the incident information and the first vehicle information stored in the memory, the vehicle function of the first vehicle being one among one or more vehicle functions of the first vehicle; generating a function restriction command for restricting the vehicle function, when the risk level is higher than a first criterion; and outputting the function restriction command.

Abstract: A threat information analysis server includes: an update manager that manages update information indicating that function addition to an IoT device is performed; a threat information manager that stores threat information of a cyberattack; a risk level manager that manages risk level information defining a risk level of the IoT device; a related threat information manager that manages the threat information and related threat information associating the IoT device with the risk level; a risk level updater that associates the threat information and the risk level of the IoT device with each other and updates the related threat information, based on the update information; and an outputter that outputs the related threat information managed by the related threat information manager.

Abstract: A network hub is provided for an onboard network system. The onboard network system includes first and second networks for transmission of first-type and second-type frames following first and second communication protocols. The network hub includes a receiver that receives a first-type frame. A processor determines whether or not the first-type frame received by the receiver includes first information that is a base for a second-type frame to be transmitted to the second network, to obtain a determination result, and selects a port to send a frame based on the first-type frame based on the determination result. A transmitter sends the frame based on the first-type frame to a wired transmission path connected to the port selected by the processor based on the first-type frame received by the receiver.

Abstract: An electronic control unit connected to a bus of a first network where first-type frames are transmitted following a first communication protocol and a second network where second-type frames are transmitted following a second communication protocol in an onboard network system. The electronic control unit sequentially receives the first-type and the second-type frames from the bus and the second network respectively, and stores in first and second reception buffers, respectively. The electronic control unit sequentially generates first-type data and second-type data by referencing the contents of the first reception buffer and the second reception buffer, and stores the first-type and second-type data in first and second transmission buffers, respectively. The first-type data is traveling control data for a vehicle, and the second-type data is other data. The first-type or second-type data that is priority type data is transmitted with priority.

Abstract: A hub is connected to first and second networks where first-type and second-type frames are transmitted following first and second communication protocols. The hub sequentially receives each of the first-type and second-type frames, and stores data in first and second reception buffers. If the destination of data stored in the first and second reception buffers is the first network, the hub stores the data in a first transmission buffer. If the destination is the second network, the hub stores the data in a second transmission buffer. If the first transmission buffer is a priority transmission buffer, the hub transmits priority data in the first transmission buffer with priority over non-priority data in the second transmission buffer, which is a non-priority transmission buffer.

Abstract: An electronic control unit (ECU) is provided. The ECU is connected to a first network in an onboard network system. The onboard network system includes the first network and a second network. In the first network, first-type frames are transmitted following a first communication protocol. In the second network, second-type frames are transmitted following a second communication protocol. The ECU generates first-type frames following the first communication protocol, and transmits the generated first-type frames to the first network. The ECU receives external information indicating state information of a device on the onboard network system received from another electronic control unit connected to the first network or the second network, or receives external information indicating information received from a communication module configured to communicate with the server via an external network.

Abstract: An information processing device capable of reducing an amount of data to be monitored in an onboard system is provided. The information processing device obtains a first log including, per unit time, some communication data flowing through the onboard system. The information processing device determines whether an abnormality is included in the communication data, using the first log. In a case where the abnormality is included in the communication data, the information processing device outputs first detection results to the onboard system. The first detection results cause transmission of a second log from the onboard system. The second log includes, per the unit time, more of the communication data than the first log.

Abstract: A network hub is provided for an onboard network system. The onboard network system includes first and second networks for transmission of first-type and second-type frames following first and second communication protocols. The network hub includes a receiver that receives a first-type frame. A processor determines whether or not the first-type frame received by the receiver includes first information that is a base for a second-type frame to be transmitted to the second network, to obtain a determination result, and selects a port to send a frame based on the first-type frame based on the determination result. A transmitter sends the frame based on the first-type frame to a wired transmission path connected to the port selected by the processor based on the first-type frame received by the receiver.

Abstract: An information processing apparatus connected to one or more vehicles and a threat information server storing pieces of threat information. The information processing apparatus includes: a processor; and a memory including at least one set of instructions that, when executed by the processor, causes the processor to perform: obtaining a detection result of an attack on one of the vehicles; (a) determining whether the attack is included in any one of the pieces of threat information; (b) when the attack is included therein, determining whether the resolution state to the attack included in the one of the pieces of threat information indicates that the attack has not been resolved or has been resolved; (c) deciding a processing priority level of the attack, based on a determination result in (a) and a determination result in (b); and (d) outputting the processing priority level decided.

Abstract: An information processing method is provided to reduce an amount of data to be monitored in an onboard system of a vehicle. In the method, detection results that indicate whether an abnormality is included in communication data on an onboard network are obtained, and a first log transmission instruction is generated to cause periodic transmission of a first log from the onboard system to a server device. The first log is a log of some of the communication data. A second log transmission instruction is generated to cause transmission of a second log from the onboard system to the server device in a case of the detection results indicating the abnormality is included in the communication data. The second log is a log of more of the communication data than the first log.

Abstract: A control method causes a computer of an information apparatus to: display on a display a display screen representing a floor plan including one or more rooms; using at least one memory that associates first information indicating a type of each of one or more device icons representing one or more target devices with second information indicating an attribute of each of the one or more rooms, display each of the one or more device icons in a room that corresponds to each of the one or more device icons in accordance with the type of each of the one or more device icons; and when it is determined that one device icon of the one or more device icons is a second type, the one device icon is displayed in a same room as a room in which the device icon of a first type is displayed.

Abstract: An information processing device capable of reducing an amount of data to be monitored in an onboard system is provided. The information processing device obtains a first log from the onboard system, determines whether an abnormality is included in communication data of the first log using the first log, and, in a case where the abnormality is determined to be included in the communication data, outputs first detection results indicating that the abnormality is included in the communication data to the onboard system. The first detection results is output, as a transmission instruction to cause transmission of a second log from the onboard system to the information processing device, with the second log including a larger amount of data than the first log.

Abstract: An information processing method is provided to reduce an amount of data to be monitored in an onboard system of a vehicle. In the method, detection results that indicate whether an abnormality is included in communication data on an onboard network are obtained, and a first log transmission instruction is generated to cause periodic transmission of a first log from the onboard system to a server device. The first log is a log of the communication data. A second log transmission instruction is generated to cause transmission of a second log from the onboard system to the server device in a case of the detection results indicating the abnormality is included in the communication data. The second log is a log of the communication data and includes an amount of data generated per unit time that is greater than the first log.

Abstract: A network system includes a first network through which a frame of a first type is transmitted in accordance with a first communication protocol and includes a second network in which a frame of a second type is transmitted in accordance with a second communication protocol. A gateway device is connected to the first network and the second network. The gateway device sequentially receives frames of the first type from the first network and determines whether to transmit data regarding the received frames of the first type to the second network. The gateway device transmits, to the second network, a frame of the second type including data regarding a plurality of the frames of the first type determined to be transmitted to the second network when a condition relating to a number of frames of the first type received by the gateway device is satisfied.

Abstract: An IDS ECU includes: an anomalous frame detector that detects an anomalous frame; a connector communicator that transmits an anomaly-related request frame to a connector that is a transmitter of the anomalous frame, to request a response from the connector, and receives, from the connector, an anomaly-related response frame generated by the connector based on the anomaly-related request frame and indicating the transmitter; a network anomaly determiner that calculates, from the anomaly-related response frame, the number of anomalous connectors indicating the number of connectors that transmitted the anomaly-related response frame, and determines that an in-vehicle network system is: in a first anomalous state when the number is 0; and in a second anomalous state when the number is not 0; and a network anomaly handler that handles the first or second anomalous state determined by the network anomaly determiner.

Abstract: A server includes memory and a processor that obtains a log created by a first node monitored on a V2X network, selects predetermined information therefrom, and performs supervised machine learning using the selected predetermined information as training data to create a model for a monitoring node that monitors the first node. The log associatively includes a time, and at the time: first node status information as indicated by at least one of sensor or control data on the first node; first anomaly information indicating whether an anomaly occurred on the first node; and second anomaly information indicating whether an anomaly occurred on a second, surrounding node of the first node that communicates with the first node. When the first anomaly information indicates an anomaly, or when the first and second anomaly information indicate no anomaly and an anomaly, respectively, the associated status information is selected as the predetermined information.

Abstract: An anomaly detection electronic control unit connected to an in-vehicle network includes: a communicator that receives a first communication message indicating speed information of a vehicle including the in-vehicle network and a second communication message indicating peripheral information of the vehicle; a processor; and a memory including at least one set of instructions that, when executed by the processor causes the processor to perform operations including: (A) determining a first traveling state of the vehicle based on the speed information and a second traveling state of the vehicle based on the peripheral information; (B) determining, by comparing the first traveling state with the second traveling state, that the first communication message is anomalous when the first traveling state is different from the second traveling state; and (C) executing processing to handle an anomaly when the first communication message is determined to be anomalous.

Abstract: A control method of the present disclosure causes a computer of an information apparatus to: display an operation icon on a display screen of the information apparatus, the operation icon causing an operation screen for an electric curtain device to be displayed; display the operation screen for the electric curtain device when selection of the operation icon is sensed, the operation screen including a curtain image representing a curtain of the electric curtain device; and when a pinch-out operation is sensed on the operation screen, output to a network a first open control command for opening the curtain of the electric curtain device.

Abstract: A hub is connected to first and second networks where first-type and second-type frames are transmitted following first and second communication protocols. The hub sequentially receives each of the first-type and second-type frames, and stores data in first and second reception buffers. If the destination of data stored in the first and second reception buffers is the first network, the hub stores the data in a first transmission buffer. If the destination is the second network, the hub stores the data in a second transmission buffer. If the first transmission buffer is a priority transmission buffer, the hub transmits priority data in the first transmission buffer with priority over non-priority data in the second transmission buffer, which is a non-priority transmission buffer.

Abstract: An electronic control unit connected to a bus of a first network where first-type frames are transmitted following a first communication protocol and a second network where second-type frames are transmitted following a second communication protocol in an onboard network system. The electronic control unit sequentially receives the first-type and the second-type frames from the bus and the second network respectively, and stores in first and second reception buffers, respectively. The electronic control unit sequentially generates first-type data and second-type data by referencing the contents of the first reception buffer and the second reception buffer, and stores the first-type and second-type data in first and second transmission buffers, respectively. The first-type data is traveling control data for a vehicle, and the second-type data is other data. The first-type or second-type data that is priority type data is transmitted with priority.