Abstract: A system performs mutual authentication between a controller and a first device, creates a group key, shares the group key, and sets the first device as a reference device. The system performs mutual authentication between the controller and a second device, and shares the group key with the second device. Thereafter, the system, performs mutual authentication between the controller and the first device, updates the group key, and shares the updated group key between the controller and the first device. At a group key update timing when the group key is updated, the system performs mutual authentication between the controller and the second device, and shares the updated group key with the second device.

Abstract: An anomaly detection server is provided. The anomaly detection server is a server for counteracting an anomalous frame transmitted on an on-board network of a single vehicle. The anomaly detection server acquires information about multiple frames received on one or multiple on-board networks of one or multiple vehicles, including the single vehicle. The anomaly detection server, acting as an assessment unit that, based on the information about the multiple frames and information about a frame received on the on-board network of the single vehicle after the acquisition of the information about the multiple frames, assesses an anomaly level of the frame received on the on-board network of the single vehicle.

Abstract: A security apparatus is provided that is connected to a bus. The security apparatus includes a receiver that receives a first frame from the bus, a memory that stores an examination parameter defining a content of an examination on the first frame, and processing circuitry that performs operations. The performed operations include first determining whether a predetermined condition is satisfied for the first frame. The performed operations also include, in a case where the first determining determined that the predetermined condition is satisfied, updating the examination parameter stored in the memory. The performed operations further include second determining whether the first frame is an attack frame based on the updated examination parameter stored in the memory.

Abstract: A history information anonymization method is provided that includes associating each of a plurality of pieces of history information collected from a plurality of TVs in a current cycle with a temporary ID associated with a TV at a collection destination. The method also includes getting together a plurality of IDs into a plurality of groups such that for the IDs in each group, contents of history information associated in the current cycle and in a past cycle are identical. The method further includes judging whether each of the plurality of groups satisfies anonymity, and changing only some of the plurality of temporary IDs associated with the plurality of TVs, when it is judged that any of the plurality of groups does not satisfy anonymity.

Abstract: A gateway serving as a security apparatus connected to one or a plurality of buses includes a receiver that receives a frame from a bus, a parameter storage that stores an examination parameter defining a content of an examination of the frame, an updater configured to, in a case where a predetermined condition is satisfied for the frame received by the receiver, update the examination parameter stored in the parameter storage, and an examiner that performs an examination, based on the examination parameter stored in the parameter storage, in terms of judgment of whether or not the frame received by the receiver is an attack frame.

Abstract: A gateway connected to a bus used for communication by a plurality of ECUs provided on-board a vehicle is provided with: an external communication unit that receives, from a server external to the vehicle, firmware update information that includes updated firmware for one ECU from among the plurality of ECUs; an ECU information acquiring unit that acquires system configuration information indicating the type of each of the plurality of ECUs connected to the bus; and a FW update processing unit that performs a controlling operation to update firmware of the relevant ECU based on the updated firmware, after an operation verification of the updated firmware is performed using an ECU of each type indicated by the system configuration information.

Abstract: A misuse detection electronic control unit in a vehicle network system including a plurality of electronic control units that communicate with one another through buses in accordance with a CAN protocol includes a transceiver unit that performs a reception step of receiving a target data frame and a reference data frame transmitted through the buses, wherein the target data frame is a data frame having a first identifier and wherein the reference data frame is a data frame having a second identifier different from the first identifier and a misuse detection process unit that performs a detection step of performing, as misuse detection for the target data frame, evaluation in accordance with a reception timing of the reference data frame and a reception timing of the target data frame on the basis of a certain rule specifying a reception interval between the reference data frame and the target data frame.

Abstract: An authentication method for at least one of a plurality of devices connected to a HAN includes checking, with a first device among the plurality of devices, validity of a second device using a CRL including attribute information regarding the second device among the plurality of devices, and revoking, with the first device, the second device if a result of the checking is negative.

Abstract: An anti-fraud method for use in an in-vehicle network system including a plurality of electronic control units that exchange, in an in-vehicle network, data frames, each having added thereto a message authentication code (MAC). The method includes generating a first MAC by using a MAC key and a value of a counter that counts a number of times a data frame having added thereto a MAC is transmitted to the in-vehicle network. The method also includes performing verification that the data frame received has added thereto the generated first MAC and incrementing a number of error occurrences when the verification has failed for the data frame, the data frame including a predetermined ID. When the number of error occurrences exceeds a predetermined threshold, a process associated in advance with the predetermined ID is executed.

Abstract: A vehicle air conditioner includes a blower for blowing air into a space of a vehicle compartment, and an air-conditioning mode switching portion for switching between air conditioning modes. The air conditioning modes include a normal air conditioning mode in which air conditioning of a specific region including a driver seat and air conditioning of a non-specific region not including the specific region in the space of the vehicle compartment are performed, and a specific-region prioritizing air conditioning mode in which an air conditioning capability for the non-specific region is decreased as compared to the normal air conditioning mode. The air-conditioning mode switching portion adjusts the air conditioning capability for the non-specific region based on a pressure of air drawn into the blower, in the specific-region prioritizing air conditioning mode.

Abstract: An anti-fraud method for use in an in-vehicle network system including a plurality of electronic control units that exchange data frames, each having added thereto a message authentication code (MAC), via a bus includes receiving a data frame transmitted on the bus, and generating a first MAC by using a MAC key and a value of a counter that counts a number of times a data frame having added thereto a MAC is transmitted. The method also includes performing verification that the data frame received has added thereto the generated first MAC and incrementing a number of error occurrences when the verification has failed for the data frame, the data frame including a predetermined message ID. When the number of error occurrences exceeds a predetermined threshold, a process associated in advance with the predetermined message ID is executed.

Abstract: A radiant heater air-conditioning system includes: a heater main body having a heating portion energized to generate heat so as to radiate a radiant heat into a vehicle interior; an energization setting unit that sets an energization enable state for enabling energization of the heating portion and an energization disable state for disabling the energization of the heating portion; and an air-conditioning control apparatus that controls an air-conditioning output of a heating operation in the vehicle interior. The air-conditioning control apparatus reduces the air-conditioning output when the energization enable state is set, compared with when the energization disable state is set.

Abstract: A vehicular rear panel with a new configuration is provided. The vehicular rear panel according to an aspect of the present disclosure is made of a resin material and disposed on a rear vehicle body part. The vehicular rear panel includes a light guiding unit configured to guide light from the light source along an extending direction of the vehicular rear panel and a light emitting unit configured to emit light in the light guiding unit to a rear side of a vehicle.

Abstract: An anti-fraud method for use in an in-vehicle network system including a plurality of electronic control units that exchange data frames, each having added thereto a message authentication code (MAC), via a bus includes receiving a data frame transmitted on the bus, and generating a first MAC by using a MAC key and a value of a counter that counts a number of times a data frame having added thereto a MAC is transmitted. The method also includes performing verification that the data frame received has added thereto the generated first MAC and incrementing a number of error occurrences when the verification has failed for the data frame, the data frame including a predetermined message ID. When the number of error occurrences exceeds a predetermined threshold, a process associated in advance with the predetermined message ID is executed.

Abstract: An information management method collects log information of one or more home electrical apparatuses corresponding to service providers. Display screen data is generated which indicates a status of the log information. The display screen data includes groups of information which each contain information on an apparatus, a service provider corresponding to the apparatus, and log information output from the apparatus. Provision of the log information of each group is individually selectable. The display screen data is provided via a network to a display terminal that performs access to a server device. Information is received from the display terminal, which indicates that selection on whether or not provision of the log information is performed. Provision of the log information is stopped on the selected group when a determination is made that refusal of provision of the log information on the selected group is performed.

Abstract: A rotary machine has a housing that houses a fluid in a supercritical state, a rotary shaft that penetrates the housing, rotation rings that rotate integrally with the rotary shaft, and stationary rings that contact the rotation rings when the rotary shaft is stopped, the stationary rings being positioned in a state in which sealing gaps are defined between the rotation rings and the stationary rings when the rotary shaft rotates, a circulating pipe path that supplies a portion of the fluid to inlet portions of the sealing gaps, a temperature-adjusting device that adjusts a temperature of the fluid in the circulating pipe path, and a control unit that controls operation of the temperature-adjusting device so as to heat the inlet portions of the sealing gaps to a predetermined temperature before the rotary shaft is driven.

Abstract: A humidifying device for a vehicle has a humidity detection part, a blower, a non-water-supply humidifier, and a controller. The humidity detection part detects a humidity in a vehicle compartment. The blower draws, as an intake air, an inside air in the vehicle compartment and an outside air outside the vehicle compartment at a specified ratio and blows the intake air toward the vehicle compartment. The non-water-supply humidifier collects water included in the inside air and supplies a humidified air, which is humidified using the water, toward a specified area in the vehicle compartment. The controller sets the specified ratio between the inside air and the outside air and controls an operation of the non-water-supply humidifier. The controller controls the blower to draw at least the inside air, when the non-water-supply humidifier is operated, and when a humidity in the vehicle compartment is lower than a specified humidity.

Abstract: A radiation heater apparatus has a plurality of heat radiation parts and a plurality of heating parts. A low thermal conductive part is formed between adjacent two of the heat radiation parts. The low thermal conductive part is provided with resin material which mainly forms a substrate part. The low thermal conductive part thermally isolates the heat radiation part by surrounding a periphery of the heat radiation part. As a body contacts with the surface of the apparatus, the thermal energy of specific heat radiation part directly under the body dissipates heat to the body. Furthermore, heat transfer from the periphery of the specific heat radiation part to the specific heat radiation part is reduced by the low thermal conductive part.

Abstract: When it is determined that a position of the display terminal is within a range of a prescribed distance from the house and when it is determined that the log information and the information indicating the operational state of the one electric home appliance are not consistent with each other, the server provides the display terminal with information on a possibility of a malfunction of the one electric home appliance while the position of the display terminal is still within the range of the prescribed distance from the house.

Abstract: An information management method includes collecting log information of one or more home electrical apparatuses, generating display screen data indicating a status of the log information of the apparatuses corresponding service providers based on the collected log information, where the display screen data includes groups of information each contain information on an apparatus, a service provider corresponding to the apparatus, and log information output from the apparatus, and provision of the log information of each group is individually selectable, providing the display screen data via a network to a display terminal that performs access to a server device, receiving information from the display terminal, which indicates that selection on whether or not provision of the log information is performed, and stopping provision of the log information on the selected group when a determination is made that the refusal of provision of the log information on the selected group is performed.