Abstract: A center device manages data to be written to a plurality of electronic control devices installed in a vehicle. The center device is configured to generate a package including update data to be distributed to the vehicle; and distribute the package to the vehicle. When an input of information on a master device to which a package is to be distributed is received, the center device identifies an ID corresponding to the master device with reference to a logic ID management registration section on a basis of the information, acquires logic corresponding to the ID from a logic management registration section, and generates a package on a basis of the logic.

Abstract: A center device that manages data to be written to a plurality of electronic control devices installed in a vehicle is configured to generate a package including update data to be distributed to the vehicle, and register identification information assigned to logic for generating the package in accordance with a specification of a master device that is installed in the vehicle, receives a package distributed from a center device and transfers update data to the electronic control device. The logic is registered. A manifest file having a description of the identification information is registered.

Abstract: A vehicle communication system is configured to receive vehicle configuration information from a vehicle and determine whether there is campaign information, generate campaign notification information for the vehicle, manage a generation state of the campaign information, and deliver the campaign notification information to the vehicle. The vehicle communication system includes a center apparatus in which an application program that implements functions employs a serverless architecture. When an in-vehicle system transmits a first request including vehicle information to the center apparatus, the center apparatus transmits an intermediate response including a job ID to the in-vehicle system. When receiving the intermediate response, the in-vehicle system transmits a response request of a final response corresponding to the first request to the center apparatus as a second request to which the job ID is assigned.

Abstract: A center device that manages data to be written in an electronic control device and performs, by an application program, functions to transmit update data to a vehicle by wireless communication is provided. An application program implementing at least one of the functions adopts a serverless architecture. The application program is activated upon occurrence of an event and is dynamically allocated with a resource in an on-demand manner for execution of a code of the application program. The resource is released when the execution of the code is terminated. The center device is configured to receive vehicle configuration information and determine whether there is campaign information; generate campaign notification information; manage a generation state of the campaign notification information; and distribute the campaign notification information.

Abstract: A center device manages data to be written in an electronic control device mounted on a vehicle and performs, by an application program, a plurality of functions to transmit update data to the vehicle by wireless communication. An application program implementing at least one of the functions adopts a serverless architecture. The application program is activated upon occurrence of an event and is dynamically allocated with a resource in an on-demand manner for execution of a code of the application program. The resource allocated to the application program is released when the execution of the code is terminated.

Abstract: A data communication system includes a center device that distributes update data to a master device, and a master device that installs the update data downloaded from the center device in an electronic control unit to be reprogrammed. The center device generates a common key for encrypting the update data; encrypts the update data with the common key; encrypts the common key; stores the common key encrypted in a campaign notification; places the update data encrypted with the common key in a content delivery network (CDN); and transmits the campaign notification. The master device acquires the common key from the campaign notification; decrypts the encrypted common key to extract the common key; downloads and acquires encrypted update data from the CDN; performs an exclusive OR operation; and transfers the decrypted update data to the electronic control unit, and installs the update data in the electronic control unit.

Abstract: A data communication system includes a center device that distributes update data to a master device, and a master device that installs the update data in an electronic control unit to be reprogrammed. The center device and the master device exchange random secret information using an algorithm of a Diffie-Hellman key exchange (DHE) or an Elliptic curve Diffie-Hellman key exchange (ECDHE) for key distribution. The center device encrypts an encryption key for encrypting update data based on the exchanged secret information, stores the encrypted encryption key in a campaign notification, places the update data encrypted with the encryption key in a content delivery network, and transmits the campaign notification storing the encrypted encryption key to a vehicle system.

Abstract: A data communication system includes a center device that places update data in a content delivery network (CDN); and a master device that installs the update data downloaded from the CDN in an electronic control unit to be reprogrammed. The center device is connected to CDNs of a plurality of business operators, selects a CDN with a superior distribution cost from the CDNs of the plurality of business operators according to at least one of a distribution method, a distribution area, a communication protocol, and a distribution data size, and places the update data in the selected CDN without encrypting the update data. The master device establishes transport layer security (TLS) with the CDN, and then downloads the update data from the CDN.

Abstract: A center apparatus is configured to generate a content key for protecting content, generate a user key corresponding to a user who uses the content, manage a device key corresponding to each vehicle, encrypt the content using the content key, encrypt the content key using the device key; and encrypt a license file including at least a condition for using the content using the user key.

Abstract: A center device includes a vehicle information storage unit, a hash value generation unit, and a package generation unit. The vehicle information storage unit stores identification information for electronic control devices mounted in a vehicle and information of software architecture of the electronic control devices together with a type of the vehicle. The hash value generation unit is configured to generate difference data, calculate a hash value of the difference data, and store the calculated hash value in a hash value storage unit, for each electronic control device that is an update target. The package generation unit is configured to generate distribution package for the update target using corresponding hash value stored in the hash value storage unit.

Abstract: An in-vehicle communication system includes a center device that transmits update data to a target device as an electronic control unit installed in a vehicle, a master device that is installed in the vehicle, receives the update data as a distribution package, and transfers the update data to the target device, and the target device that writes the update data transferred from the master device into a storage portion. The center device transmits reprogramming policy metadata to the master device. The master device requests the center device for download metadata. The master device interprets the download metadata, acquires necessary data, and perform data update control of the target device.

Abstract: An onboard communication system includes a center device that transmits update data as a distribution package by a streaming manner to an electronic control unit installed in a vehicle, a master device that is installed in the vehicle and receives the distribution package and transfer the update data to the electronic control unit, and the electronic control unit that writes the update data transferred from the master device to a storage unit. The center device also transmits a hash value calculated for the update data to the master device. The electronic control unit calculates a hash value for the update data and transmits the hash value to the master device. The master device compares the hash value transmitted from the center device with the hash value transmitted from the electronic control unit to verify integrity of the update data.

Abstract: A vehicular electronic control device installed in a vehicle capable of switching between a chargeable state and an unchargeable state performs activation acceptance for inquiring of a user whether to accept activation processing of activating updated software after completion of installation processing of writing update data in an update target node to generate the updated software, transmits during the chargeable state a switching instruction that executes the activation processing during the chargeable state to the update target node, and transmits during the chargeable state a switching setting instruction that executes the activation processing during the unchargeable state to the update target node.

Abstract: A vehicle data communication device mounted in a vehicle having a plurality of ECUs. The vehicle data communication device wirelessly communicates data with a center device. The vehicle data communication device comprises: a plurality of communication clients each pairing with a respective one of a plurality of distribution servers included in the center device; a communication information acquisition unit acquiring information of a communication carrier and a region where the center device is located; a client storage unit storing the plurality of communication clients each of which corresponds to the corresponding one of the plurality of distribution servers; and a client selection unit (i) selecting one of the plurality of communication clients that corresponds to the communication carrier and the region that are specified by the information and (ii) activating the selected one of the plurality of communication clients to enable data communication with the corresponding distribution server.

Abstract: A center device includes a vehicle information storage unit, a hash value generation unit, and a package generation unit. The vehicle information storage unit stores identification information for electronic control devices mounted in a vehicle and information of software architecture of the electronic control devices together with a type of the vehicle. The hash value generation unit is configured to generate difference data, calculate a hash value of the difference data, and store the calculated hash value in a hash value storage unit, for each electronic control device that is an update target. The package generation unit is configured to generate distribution package for the update target using corresponding hash value stored in the hash value storage unit.

Abstract: A center device includes an individual vehicle information DB which stores device identity information and information regarding a software architecture of the relevant device together with a vehicle category for each of a plurality of ECUs. In a PKG structure DB, for each of the plurality of ECUs, information regarding a structure of a package to be distributed for data update is stored according to a type of each of the ECUs. Based on the information stored in the individual vehicle information DB and the PKG structure DB, a determination unit identifies a package to be distributed for a target vehicle having a target device whose data is updated among the plurality of ECUs, and a PKG generation unit generates a package including the information indicating the structure of the identified package.

Abstract: A center device includes: a consent request unit that is configured to make a consent request to a plurality of devices for data distribution to a vehicle; a consent determination unit that is configured to judge a consent response from each of the plurality of devices; a distribution control unit that is configured to control the data distribution to the vehicle according to a determination result by the consent determination unit; and a necessity determination unit that is configured to determine whether the consent request to the plurality of devices is needed before the consent request are made to the plurality of devices. The consent request unit is further configured to determine whether to make the consent request to the plurality of devices according to a determination result by the necessity determination unit.

Abstract: There is provided an information processing apparatus including an encrypted-ID generation section which encrypts a unique ID to generate an encrypted ID, the unique ID being set as an ID unique to the information processing apparatus, a communication section which sends the encrypted ID as ID information to be sent to another apparatus, an individualization code holding section which holds, in advance, an individualization code capable of being generated by decrypting the ID information in the other apparatus, and an access key generation section which generates an access key used for authentication with the other apparatus based on the individualization code held by the individualization code holding section.

Abstract: An information processing apparatus including: an attack detection unit that detects an attack; and a strength adjustment unit that incrementally raises the strength of a security measure every time that an attack is detected by the attack detection unit.

Abstract: There is provided a security chip having a tamper-resistant feature, including an acquisition part configured to acquire specific information transmitted by a device performing challenge-response authentication, the specific information being specific to the device, a storage configured to store second key information that enables generation of first key information from the specific information, the first key information being used by the device for challenge-response authentication, and a generation part configured to generate, using the second key information, the first key information from the specific information. A response to be transmitted to the device is generated, using the first key information, from a challenge transmitted by the device. In the device, the first key information is not stored in a tamper-resistant security chip.