Abstract: An information processing device including a security function related to information security and an information processing function related to predetermined information processing, includes: a control unit which performs control processing for realizing the security function and the information processing function; and a storage unit which stores information related to the security function and the information processing function, wherein: when the control unit detects an occurrence of a predetermined event related to the security function or the information processing function, the control unit determines an operation content of the security function based on the information stored in the storage unit.

Abstract: An in-vehicle information communication system is configured from an in-vehicle communication device, an electronic control device that is installed in a vehicle, and an information processing device that is not installed in a vehicle. The electronic control device comprises an electronic control device storage unit, a message generation unit, a MAC generation unit, and an electronic control device communication unit which sends the message and the MAC to the information processing device via the in-vehicle communication device. The information processing device comprises an information processing device storage unit, a message authentication code verification unit, a response code generation unit, and an information processing device communication unit which sends the response code to the electronic control device via the in-vehicle communication device. The electronic control device further comprises a response code verification unit.

Abstract: A gateway device that relays a message between two or more domains receives a first message including a first message authentication code corresponding to a first domain among the two or more domains and first data from the first domain and transmits a second message including a second message authentication code corresponding to a second domain among the two or more domains and the first data to the second domain.

Abstract: An information processing apparatus includes a shared information generation unit for generating shared information via a network, a communication unit configured to receive a message, a shared information verification unit configured to compare shared information in the message with the information generated by the shared information generation unit, and verify validity of the shared information in the message based on the comparison, a security code generation unit for generating a security code based on the shared information, a security code verification unit configured to compare a security code in the message with the security code generated by the security code generation unit, and verify correctness of the shared information in the message based on the comparison, and a processing determination control unit configured to determine normality of the message on the based on the verification by the shared information verification unit and the verification by the security code verification unit.

Abstract: An in-vehicle information communication system is configured from an in-vehicle communication device, an electronic control device that is installed in a vehicle, and an information processing device that is not installed in a vehicle. The electronic control device comprises an electronic control device storage unit, a message generation unit, a MAC generation unit, and an electronic control device communication unit which sends the message and the MAC to the information processing device via the in-vehicle communication device. The information processing device comprises an information processing device storage unit, a message authentication code verification unit, a response code generation unit, and an information processing device communication unit which sends the response code to the electronic control device via the in-vehicle communication device. The electronic control device further comprises a response code verification unit.

Abstract: There are provided an inspection apparatus, an inspection system, and an inspection method capable of inspecting operation of a control device, accurately, during use. An inspection apparatus configured to inspect operation of an ECU coupled to automotive networks, includes an inspection performance control unit configured to transmit two pieces of data including operation-inspection data and security-check data used for inspecting the operation of the ECU, to the ECU, and configured to receive data output from the ECU. The operation-inspection data is data previously generated based on design information of the ECU. The security-check data is data including part or entirety of the operation-inspection data replaced with random data.

Abstract: A gateway device that relays a message between two or more domains receives a first message including a first message authentication code corresponding to a first domain among the two or more domains and first data from the first domain and transmits a second message including a second message authentication code corresponding to a second domain among the two or more domains and the first data to the second domain.

Abstract: An information processing device including a security function related to information security and an information processing function related to predetermined information processing, includes: a control unit which performs control processing for realizing the security function and the information processing function; and a storage unit which stores information related to the security function and the information processing function, wherein: when the control unit detects an occurrence of a predetermined event related to the security function or the information processing function, the control unit determines an operation content of the security function based on the information stored in the storage unit.

Abstract: An information processing apparatus includes a shared information generation unit for generating shared information via a network, a communication unit configured to receive a message, a shared information verification unit configured to compare shared information in the message with the information generated by the shared information generation unit, and verify validity of the shared information in the message based on the comparison, a security code generation unit for generating a security code based on the shared information, a security code verification unit configured to compare a security code in the message with the security code generated by the security code generation unit, and verify correctness of the shared information in the message based on the comparison, and a processing determination control unit configured to determine normality of the message on the based on the verification by the shared information verification unit and the verification by the security code verification unit.

Abstract: There are provided an inspection apparatus, an inspection system, and an inspection method capable of inspecting operation of a control device, accurately, during use. An inspection apparatus configured to inspect operation of an ECU coupled to automotive networks, includes an inspection performance control unit configured to transmit two pieces of data including operation-inspection data and security-check data used for inspecting the operation of the ECU, to the ECU, and configured to receive data output from the ECU. The operation-inspection data is data previously generated based on design information of the ECU. The security-check data is data including part or entirety of the operation-inspection data replaced with random data.

Abstract: A portion of a digital signature value for authenticating the validity of ID information is also used as an ID so as to reduce the amount of data. This is achieved by using a digital signature scheme with a short signature length obtained by transforming a Schnorr signature, which is a typical example of a digital signature scheme.

Abstract: An efficient signature technology is provided, which is capable of arbitrary extraction and storage from a plurality of pieces of data and which can make a signature length relatively short. In a signature device (180), a mathematical function computing unit (190) repeats processing of calculating a hash value from a coupled value obtained by coupling together hash values calculated from each of the plurality of pieces of data to calculate one hash value (h), and calculates a signature value from the calculated one hash value. Then, a signature processing unit (189) generates, for one piece of data contained in the plurality of pieces of data, a signature containing the calculated signature value and a hash value coupled to another hash value calculated from the one piece of data before the one hash value (h) is calculated.

Abstract: Realization of batch verification having both high security and high efficiency.