Abstract: A risk information processing method is used in a risk information processing system that manages a degree of risk at a target spot at which a moving object is located. The method includes: receiving sensor data collected at each of two spots different from the target spot; determining a degree of risk of an event at each of the two spots from the sensor data collected at each of the two spots; storing, as risk information the determined degree of risk associated with each of the two spots; estimating first risk information associated with the target spot without sensor data of first event at the target spot, by using the stored risk information, the first risk information being a degree of risk of the first event at the target spot; and outputting information for the target spot based on the estimated first risk information.

Abstract: A control apparatus includes a controller, a receiver and a discriminator. The receiver, in operation, receives an instruction for controlling a brake of a movable-body apparatus. The discriminator, in operation, determines, in response to the instruction being received by the receiver, whether or not the instruction is fraudulent based on whether or not a speed of the moving body and a distance between the moving body and an obstacle satisfies a predetermined condition for invalidating the instruction.

Abstract: An information processing device collects information used for analyzing communication performed in an in-vehicle network by ECUs including an ECU which performs predetermined control related to a function of an ADAS. The information processing device includes a receiver, a determiner, and a processor. The receiver receives a plurality of items of communication data sequentially transmitted over the in-vehicle network. The determiner detects a control end time which is a time at which the predetermined control ends, and determine an analysis target period including the control end time. The processor classifies the plurality of items of communication data received by the receiver into analysis target communication data received within the analysis target period and non-analysis target communication data received outside the analysis target period. The processor further performs predetermined processing for analysis of the analysis target communication data based on the classification result.

Abstract: An electronic control unit includes: a first determination unit which determines whether a message received is an address claim message; a second determination unit which determines, when it is determined that the message received is an address claim message, whether a device name included in the address claim message received is a predetermined device name; and a third determination unit which performs a predefined determination process, when it is determined that the device name included in the address claim message received is the predetermined device name, and determine whether the address claim message received is an unauthorized message according to a result of the predefined determination process.

Abstract: An anomaly detection electronic control unit (ECU) that detects unauthorized messages on a communication path is provided. An ECU that periodically transmits a first-type message including data to be monitored, and an ECU that periodically transmits a second-type message including data for comparison, are connected to the communication path. The anomaly detection ECU includes: a receiver that successively receives first-type and second-type messages; a processor that determines whether a first-type message received is normal or anomalous; and a transmitter that transmits a predetermined message in accordance with results of the determining.

Abstract: A server apparatus receives a device ID indicating one electrical home appliance among one or more electrical home appliances and a gateway ID indicating that the one electrical home appliance belongs to a same owner, a same group, or a same home as the one or more electrical home appliances, determines whether or not the one electrical home appliance is a newly connected electrical home appliance, using a management database that manages device IDs indicating the one or more electrical home appliances and the gateway ID, and when it is determined made that the one electrical home appliance is a newly connected electrical home appliance, provides an information device, which is associated with the gateway ID and which differs from the one electrical home appliance, with notification information for confirming whether or not it is to be permitted to collect the log information from the one electrical home appliance.

Abstract: In an anomaly determination method for determining an anomaly in a received message, a plurality of messages which include messages that are periodic and each of which includes a first field having a fixed value and a second field having a variable value are each received as the received message, and one of a plurality of combinations to be used for determination each of which includes at least one of a plurality of anomaly determinations including an anomaly determination utilizing a reception timing based on the periodicity or the number of received messages, an anomaly determination utilizing the first field, and an anomaly determination utilizing the second field, is selected according to one or more criteria among available execution time of the anomaly determination method, a load amount, a data amount, and the number of messages.

Abstract: A server apparatus receives a device ID indicating one electrical home appliance among one or more electrical home appliances and a gateway ID indicating that the one electrical home appliance belongs to a same owner, a same group, or a same home as the one or more electrical home appliances, determines whether or not the one electrical home appliance is a newly connected electrical home appliance, using a management database that manages device IDs indicating the one or more electrical home appliances and the gateway ID, and when it is determined made that the one electrical home appliance is a newly connected electrical home appliance, provides an information device, which is associated with the gateway ID and which differs from the one electrical home appliance, with notification information for confirming whether or not it is to be permitted to collect the log information from the one electrical home appliance.

Abstract: An electronic control device is connected to at least one bus of a mobile object, and includes: a controller that controls behavior of the mobile object; an anomaly detector that performs detection to detect an anomaly in communication data which flows through the at least one bus and which includes identification information for identifying control details related to the behavior of the mobile object; and an obtainer that obtains at least one piece of identification information corresponding to a result of the detection.

Abstract: A master control device is communicatively coupled to a first slave control device and a second slave control device via a first network and a second network, respectively. The master control device provides output data to the first slave control device based on input data received from the second slave control device. A monitoring apparatus which monitors an operation of the master control device stores determination data indicating a correspondence relationship between the input data and the output data, obtains the input data provided to the second network by the second slave control device and the output data provided to the first slave control device via the first network, and determines a presence or an absence of an anomaly in the operation of the master control device by determining whether the input data and the output data correspond to the determination data.

Abstract: A gateway device for a vehicle network system installed in a vehicle is provided. The vehicle network system includes a network, an electronic control unit connected to the network, and the gateway device connected to the first network and configured to communicate outside the vehicle. The gateway device receives a first frame from outside the vehicle; determines whether or not the first frame is appropriate; generates a second frame when the first frame is not determined to be appropriate; and transmits the second frame to the network. The second frame includes control information and additional information based on content of the first frame. The control information restricts processing of the additional information included in the second frame by the electronic control unit, after the second frame is received by the electronic control unit.

Abstract: A gateway connected to a bus, a bus, and the like used by a plurality of electronic control units for communication includes a frame communication unit that receives a frame, a transfer control unit that removes verification information used to verify a frame from the content of the frame received by the frame communication unit and transfers the frame to a destination bus or that adds verification information to the content of the frame and transfers the frame to the destination bus, and the like.

Abstract: An information management method collects log information of one or more home electrical apparatuses corresponding to service providers. Display screen data is generated which indicates a status of the log information. The display screen data includes groups of information which each contain information on an apparatus, a service provider corresponding to the apparatus, and log information output from the apparatus. Provision of the log information of each group is individually selectable. The display screen data is provided via a network to a display terminal that performs access to a server device. Information is received from the display terminal, which indicates that selection on whether or not provision of the log information is performed. Provision of the log information is not performed on the selected group when a determination is made that refusal of provision of the log information on the selected group is performed.

Abstract: A misuse detection method used in an electronic control unit in a vehicle network system including multiple electronic control units that communicate with one another through networks. The misuse detection method includes receiving a target data frame at one time point, and receiving a reference data frame at another time point different than the one time point. The misuse detection method further includes performing, as misuse detection for the target data frame based on a certain rule specifying a reception interval between the one time point at which the target data frame is received and the other time point at which the reference data frame is received, and determining the target data frame received is for misuse based on a length of the reception interval.

Abstract: An evaluation device for evaluating security of an electronic control system in which a plurality of electronic control units are connected to a bus used for communication includes a recording medium that holds attack procedure information indicative of contents and a transmission order of a plurality of frames, a transmitter that transmits the plurality of frames to the bus in the transmission order indicated by the attack procedure information, a monitor that monitors an actuator unit controlled by any of the plurality of electronic control units, and an evaluator that makes the evaluation on basis of a monitoring result obtained by the monitor when the transmitter transmits the plurality of frames to the bus.

Abstract: A gateway device for a vehicle network system is provided. The vehicle network system includes a first network, a second network, a first electronic control unit connected to the first network, a second electronic control unit connected to the second network, and the gateway device connected to the first network and the second network. The gateway device receives a first frame transmitted to the first network by the first electronic control unit; determines whether or not the first frame is appropriate; generates a second frame when the first frame is not determined to be appropriate; and transmits the second frame to the second network. The second frame includes control information and additional information based on content of the first frame. The control information restricts processing of the additional information included in the second frame by the second electronic control unit.

Abstract: A gateway connected to a bus, a bus, and the like used by a plurality of electronic control units for communication includes a frame communication unit that receives a frame, a transfer control unit that removes verification information used to verify a frame from the content of the frame received by the frame communication unit and transfers the frame to a destination bus or that adds verification information to the content of the frame and transfers the frame to the destination bus, and the like.

Abstract: An information management method collects log information of one or more home electrical apparatuses corresponding to service providers. Display screen data is generated which indicates a status of the log information. The display screen data includes groups of information which each contain information on an apparatus, a service provider corresponding to the apparatus, and log information output from the apparatus. Provision of the log information of each group is individually selectable. The display screen data is provided via a network to a display terminal that performs access to a server device. Information is received from the display terminal, which indicates that selection on whether or not provision of the log information is performed. Provision of the log information is not performed on the selected group when a determination is made that refusal of provision of the log information on the selected group is performed.

Abstract: A gateway (103) determines whether or not voice information collected by a sound collecting device (102) needs to be subjected to voice recognition by a server apparatus (101), and only voice information that is determined to need to be subjected to voice recognition by the server apparatus (101) is transmitted by the gateway (103) to the server apparatus (101). The server apparatus (101) recognizes the received voice information, decides a control instruction, and transmits the control instruction to a household electrical appliance (104) via the gateway (103).

Abstract: A voice dialogue method performed by a voice dialog system includes: a voice signal generation unit; a voice dialog agent unit; a voice output unit; and a voice input control unit, the method including: a step of, by the voice signal generation unit, receiving a voice input and generating a voice signal based on the received voice input; a step of, by the voice dialog agent unit, performing voice recognition processing on the voice signal and performing processing based on a result of the voice recognition processing to generate a response signal; a step of, by the voice output unit, outputting a voice based on the response signal; and a step of, when the voice output unit outputs the voice, by the voice input control unit, keeping the voice signal generation unit, for predetermined period after output of the voice, a receivable state in which a voice input is receivable.