Abstract: An attack detection device (501) includes a group generation unit (30), a log management unit (40), an authenticator generation unit (90) and a graph management unit (60). The group generation unit (30) generates an authenticator graph (D36) including a plurality of pieces of correspondence information wherein a plurality of logs and an identifier to identify an authenticator generated by using the plurality of logs are associated. The log management unit (40) manages the plurality of logs used for generation of an authenticator identified by the identifier in the authenticator graph (D36). The authenticator generation unit (90) generates the authenticator identified by the identifier for each identifier in the authenticator graph (D36) from the plurality of logs. The graph management unit (60) manages the authenticator graph (D36) and the authenticator generated.

Abstract: A management domain unit is connected, via an independent virtual network (95) using a hypervisor unit, to a separate management domain unit (B) (10B) of a separate electronic control unit ECU (B) (1) having the separate management domain unit (B) (10B) and a separate basic domain unit (A) (50B) which substitutes for a basic domain unit. When an abnormality of the basic domain unit is detected, the management domain unit halts operation of the basic domain unit, and causes the separate management domain unit (B) (10B) possessed by the separate electronic control unit ECU (B) (1) to start operation of the separate basic domain unit (A) (50B).

Abstract: A waveform analysis unit (102) analyzes a measured waveform which is a waveform obtained by measuring one of a voltage value and an impedance value of a bus line (300). A device authentication unit (104) determines whether or not a new device is connected to the bus line (300), the new device being a device not included in configuration information (1070) which includes one or more devices known to be connected to the bus line (300), performs authentication for each of the devices connected to the bus line (300), and when the new device is connected to the bus line (300), acquires authentication information used for the authentication for the new device, and performs the authentication for the new device. An illegitimate operation determination unit (105) determines whether or not illegitimate operation is performed on the bus line (300), by using the configuration information, an analysis result from the waveform analysis unit (102), and an authentication result from the device authentication unit (104).

Abstract: An object is to reduce unauthorized use of an in-vehicle function by an unpermitted person. An in-vehicle function access control system includes: an encryption processing unit that encrypts an in-vehicle function program for executing an in-vehicle function being a function of an in-vehicle apparatus to acquire encrypted data; an encrypted data storage that stores the encrypted data; an authentication unit that performs authentication of a user; a decryption processing unit that decrypts the encrypted data into the in-vehicle function program after the authentication succeeds; and a program storage that stores the in-vehicle function program decrypted by the decryption processing unit after the authentication succeeds, the program storage being provided in the in-vehicle apparatus.

Abstract: An in-vehicle authentication system has a vehicle communication apparatus (100) that is provided in a vehicle equipped with a plurality of ECUs and that communicates with each ECU of the plurality of ECUs. An authentication part (101) performs configuration authentication for authenticating validity of a configuration for each ECU, and registers an ECU that has failed the configuration authentication in an authentication error list. A determination part (102) determines an in-vehicle function that is realizable in the vehicle based on the authentication error list and a function correlation table which indicates correlation between an in-vehicle function realized in the vehicle and an ECU used to realize the in-vehicle function. A display part (107) displays the in-vehicle function determined to be realizable in the vehicle by the determination part (102) on a display (805).

Abstract: A storage unit stores message information in which a vehicle state, a message attribute that specifies a message to be communicated, and permission information on communication of the message specified by the message attribute are associated with one another. A protocol conversion unit acquires, as a communication message, a message to be communicated between an in-vehicle system and an external system. Based on a message attribute that specifies the communication message, a current state which is a current state of a vehicle, and the message information, a determination unit determines whether communication of the communication message is permitted when the vehicle is in the current state.

Abstract: A terminal mode of at least a part of terminals in a centralized control area and terminals in a distributed control area is set to a time division control mode for performing communication in a time division manner. The terminals in the centralized control area, the terminal mode of which is other than the time division control mode, are set in a centralized control mode. The terminals, the terminal mode of which is other than the time division control mode, are set in a distributed control mode. The terminals set in the time division control mode perform transmission in a communication period in which communication is permitted. The terminals set in the centralized control mode and the terminals set in the distributed control mode perform communication without depending on the communication period.

Abstract: A communication apparatus that, when a device connects to an external network via another device, is capable of reducing the user's workload when connecting. The apparatus includes: a WLAN control unit that uses a WLAN to communicate with a WLAN STA device that communicates with an external network; a BT control unit that uses BT to communicate with a BT device capable of communicating with the external network; a connection history DB that stores therein information on connections to the BT devices and the order of priority for connecting to the BT devices; and a connection management unit that refers to the connection history DB. The communication apparatus connects to the WLAN STA device and to the BT device, and enables the WLAN STA device to communicate with the external network via the own apparatus and the BT device.

Abstract: A communication control method executed in a multi-hop cellular network including at least one gateway and a plurality of radio base stations includes: a first radio base station performing radio resource management and movement management concerning a radio mobile station requesting, when the first radio base station determines it is necessary to switch a connection destination of the radio mobile station, a second radio base station at a handover destination to perform handover processing and instructing the radio mobile station (a handover execution mobile station) to perform handover to the second radio base station; and the second radio base station determining, based on the number of times of transfer until a signal transmitted from the first radio base station reaches the own station, whether to change the radio base station that performs the radio resource management and the movement management concerning the handover execution mobile station.

Abstract: A terminal mode of at least a part of terminals in a centralized control area and terminals in a distributed control area is set to a time division control mode for performing communication in a time division manner. The terminals in the centralized control area, the terminal mode of which is other than the time division control mode, are set in a centralized control mode. The terminals, the terminal mode of which is other than the time division control mode, are set in a distributed control mode. The terminals set in the time division control mode perform transmission in a communication period in which communication is permitted. The terminals set in the centralized control mode and the terminals set in the distributed control mode perform communication without depending on the communication period.

Abstract: A wireless communication apparatus includes a BT-apparatus unit configured to perform wireless communication using frequency hopping, a WLAN-apparatus unit configured to perform wireless communication in a system different from a system of the BT-apparatus unit using a band including at least a part of a band used by the BT-apparatus unit and using a WLAN-antenna whose directionality is controllable, and an information managing unit configured to, upon detecting simultaneous communication of the BT-apparatus unit and the WLAN-apparatus unit, instruct the WLAN-apparatus unit to perform communication while adjusting a beam direction of the WLAN-antenna and instruct the BT-apparatus unit to measure a communication quality, determine a directionality setting value of the WLAN-antenna based on the communication quality measurement by the BT-apparatus unit, and instruct the WLAN-apparatus unit to perform communication using the determined directionality setting value.

Abstract: A communication control method executed in a multi-hop cellular network including at least one gateway and a plurality of radio base stations includes: a first radio base station performing radio resource management and movement management concerning a radio mobile station requesting, when the first radio base station determines it is necessary to switch a connection destination of the radio mobile station, a second radio base station at a handover destination to perform handover processing and instructing the radio mobile station (a handover execution mobile station) to perform handover to the second radio base station; and the second radio base station determining, based on the number of times of transfer until a signal transmitted from the first radio base station reaches the own station, whether to change the radio base station that performs the radio resource management and the movement management concerning the handover execution mobile station.