Abstract: An in-vehicle device is mounted on a vehicle capable of automated driving, and comprises an incident detection processing unit which acquires vehicle information representing a control state of the vehicle, and detects an incident that occurred in the vehicle based on the vehicle information.

Abstract: An in-vehicle device is mounted on a vehicle capable of automated driving, and comprises an incident detection processing unit which acquires vehicle information representing a control state of the vehicle, and detects an incident that occurred in the vehicle based on the vehicle information.

Abstract: An information processing device including a security function related to information security and an information processing function related to predetermined information processing, includes: a control unit which performs control processing for realizing the security function and the information processing function; and a storage unit which stores information related to the security function and the information processing function, wherein: when the control unit detects an occurrence of a predetermined event related to the security function or the information processing function, the control unit determines an operation content of the security function based on the information stored in the storage unit.

Abstract: An information processing device included in an in-vehicle system of a vehicle includes an information acquisition unit that collects abnormality information relevant to an abnormality that has occurred in the vehicle, a determination unit that identifies a source of generation of the abnormality that has occurred on the basis of the abnormality information, and a spread prevention processing unit that executes a spread prevention process in which a predetermined function of a target identified by the determination unit is restricted.

Abstract: An in-vehicle device includes: an acquiring unit that acquires comparison information; and a detecting unit that detects an abnormality in a positioning device based on position information on a host vehicle output from the positioning device mounted in the host vehicle and the comparison information different from the position information.

Abstract: An in-vehicle apparatus mounted in a vehicle equipped with a network configured of a plurality of pieces of equipment includes an incident detection processing unit that: acquires vehicle information indicating a control status of the vehicle; detects an incident which has occurred at the vehicle on the basis of the vehicle information: identifies equipment with vulnerability related to the detected incident within the network; and performs tentative handling with respect to the identified equipment.

Abstract: An in-vehicle device is mounted on a vehicle capable of automated driving, and comprises an incident detection processing unit which acquires vehicle information representing a control state of the vehicle, and detects an incident that occurred in the vehicle based on the vehicle information.

Abstract: An information processing device that receives, from another information processing device, a communication message generated based on recency information and control data, includes: a recency information generation unit that generates the recency information; and a recency information management unit that extracts the recency information from the received communication message.

Abstract: An in-vehicle information communication system is configured from an in-vehicle communication device, an electronic control device that is installed in a vehicle, and an information processing device that is not installed in a vehicle. The electronic control device comprises an electronic control device storage unit, a message generation unit, a MAC generation unit, and an electronic control device communication unit which sends the message and the MAC to the information processing device via the in-vehicle communication device. The information processing device comprises an information processing device storage unit, a message authentication code verification unit, a response code generation unit, and an information processing device communication unit which sends the response code to the electronic control device via the in-vehicle communication device. The electronic control device further comprises a response code verification unit.

Abstract: A gateway device that relays a message between two or more domains receives a first message including a first message authentication code corresponding to a first domain among the two or more domains and first data from the first domain and transmits a second message including a second message authentication code corresponding to a second domain among the two or more domains and the first data to the second domain.

Abstract: An information sharing system includes a server and an in-vehicle system. The server includes: a first storage part; a first key generation part configured to generate a first private key and a first public key, if keys can be exchanged with the in-vehicle system; and a signature generation part configured to generate a signature value of the first public key using a server private key. The in-vehicle system includes: a second storage part configured to store a public key certificate including a server public key; a signature verification part configured to verify the first public key and a signature value received from the server, using a public key certificate; and a second key generation part configured to generate a second private key and a second public key, if a combination of the first public key and the signature value is correct as a result of the verification.

Abstract: A system that detects any unauthorized communication without imposing a processing load on a control device is provided. In the incident detection system configured to detect any security incident, a gateway device includes: an ID generation unit that generates its own gateway device identification information; a detection packet generation unit that generates a detection packet including control information transmitted from a control device and path information obtained by adding its own gateway device identification information to a communication packet; a log generation unit that generates log information including the detection packet; and a device communication unit that transmits the log information to a management server connected to the gateway device over a network or transmits the detection packet to a control device controlled based on the control information.

Abstract: An arithmetic device includes a communication unit configured to receive a message including a reception authentication code, a storage unit configured to store a key, and a message verification unit configured to generate a generation authentication code, using the key, for data to be verified including data excluding at least the reception authentication code from the message received by the communication unit, a first counter value updated in response to reception of the message and initialized at a time when an abnormality regarding transmission/reception of the message occurs, and a second counter value updated at a time when the abnormality occurs, and to verify the message according to whether the reception authentication code and the generation authentication code match.

Abstract: An in-vehicle device includes: an acquiring unit that acquires comparison information; and a detecting unit that detects an abnormality in a positioning device based on position information on a host vehicle output from the positioning device mounted in the host vehicle and the comparison information different from the position information.

Abstract: An in-vehicle information communication system is configured from an in-vehicle communication device, an electronic control device that is installed in a vehicle, and an information processing device that is not installed in a vehicle. The electronic control device comprises an electronic control device storage unit, a message generation unit, a MAC generation unit, and an electronic control device communication unit which sends the message and the MAC to the information processing device via the in-vehicle communication device. The information processing device comprises an information processing device storage unit, a message authentication code verification unit, a response code generation unit, and an information processing device communication unit which sends the response code to the electronic control device via the in-vehicle communication device. The electronic control device further comprises a response code verification unit.

Abstract: There are provided an inspection apparatus, an inspection system, and an inspection method capable of inspecting operation of a control device, accurately, during use. An inspection apparatus configured to inspect operation of an ECU coupled to automotive networks, includes an inspection performance control unit configured to transmit two pieces of data including operation-inspection data and security-check data used for inspecting the operation of the ECU, to the ECU, and configured to receive data output from the ECU. The operation-inspection data is data previously generated based on design information of the ECU. The security-check data is data including part or entirety of the operation-inspection data replaced with random data.

Abstract: An information processing device that receives, from another information processing device, a communication message generated based on recency information and control data, includes: a recency information generation unit that generates the recency information; and a recency information management unit that extracts the recency information from the received communication message.

Abstract: An evaluation system includes a network device, a gateway device, a policy evaluation device, and first and second control devices. The network device copies a packet received from the first control device and transmits to the gateway device and the policy evaluation device. The gateway device receives the copied packet, performs a first filtering based on the policy stored in a first policy storage unit, transmits the packet to the second control device while storing the result of the first filtering, and transmits the result of the stored first filtering to the policy evaluation device. The policy evaluation device receives the copied packet, performs a second filtering based on the policy stored in a second policy storage unit, stores the result of the second filtering, and evaluates the policy stored in the second policy storage unit based on the results of the two filterings.

Abstract: A gateway device that relays a message between two or more domains receives a first message including a first message authentication code corresponding to a first domain among the two or more domains and first data from the first domain and transmits a second message including a second message authentication code corresponding to a second domain among the two or more domains and the first data to the second domain.

Abstract: An information processing device including a security function related to information security and an information processing function related to predetermined information processing, includes: a control unit which performs control processing for realizing the security function and the information processing function; and a storage unit which stores information related to the security function and the information processing function, wherein: when the control unit detects an occurrence of a predetermined event related to the security function or the information processing function, the control unit determines an operation content of the security function based on the information stored in the storage unit.