Abstract: Provided is an analysis device that reduces false detection of an attack event to appropriately output an anomaly notification. The analysis device configured to be communicable with a plurality of monitoring-target devices collects monitoring results of each of the monitoring-target devices, determines whether an anomaly has occurred in each of the monitoring-target devices, based on the monitoring results, and determines whether to output an anomaly notification indicating the anomaly, based on a result of the determination and code verification results of each of the monitoring-target devices.

Abstract: An information processing device which transmits and receives a message to which a communication ID indicating a class has been assigned, includes: a storage unit which stores, for each of the communication IDs, a communication counter for verifying a recency of a communication; a recency information management unit which updates the communication counter based on a predetermined condition; an abnormality monitoring unit which identifies an influence range of an abnormality that occurred; and a message generation unit which generates a synchronization request message including the communication ID indicating that it is a message requesting a synchronization of the communication counter, and a synchronization target identifier indicating the influence range identified by the abnormality monitoring unit.

Abstract: An object of the present invention is to easily realize safe startup of a control apparatus including a plurality of arithmetic processing devices. A control apparatus 5 includes a first microcomputer 1 including a processor that executes a first program, a second microcomputer 2 including a processor that executes a second program, and a storage device 3 that stores the second program. The first microcomputer 1 includes a verification unit 1221 that verifies whether each of the first program and the second program has been falsified, a first acquisition unit 1126 that acquires the second program from the storage device 3 when the verification unit 1221 verifies that the first program is not falsified, and a startup permission notification unit 1124 that notifies the second microcomputer 2 of startup permission of the second program when the verification unit 1221 verifies that the second program is not falsified.

Abstract: An information processing apparatus capable of aperiodic communication and periodic communication, provided with a communication determination unit that determines a type of a communication message; a first processing determination unit that determines relatedness between aperiodic communication and periodic communication by using a first communication message for which the type is determined to be aperiodic communication, and a prediction range for an amount of time for receiving a second communication message for which the type is determined to be periodic communication; and a second processing determination unit that determines that the second communication message is legitimate communication for periodic communication in a case where the periodic communication second communication message determined to have relatedness is in the prediction range a predetermined amount of time later.

Abstract: The present disclosure provides a vehicle control system capable of safely and forcibly controlling a vehicle. A vehicle control system VCS includes a mode setting unit 56 configured to output a forced mode signal upon receiving a forced control instruction from the outside of a vehicle V via a communication device 30, and a forced operation unit 58 configured to output a forced operation signal of forcibly operating the vehicle V to an operation control unit 20. Further, the vehicle control system VCS includes a signal selection unit 59 configured to allow all the operation signals to pass therethrough before receiving the forced mode signal, and block at least a part of the operation signals and allow the forced operation signal instead of the blocked operation signal to pass therethrough after receiving the forced mode signal.

Abstract: An electronic control device includes a tamper storage unit that stores a secure boot key and a control key, and has tamper resistance, a processor that is able to execute a program, a verification unit that verifies a program by using the secure boot key, performs secure boot causing the processor to execute the program based on a result of the verification, and has tamper resistance, a calculation unit that performs calculation related to encryption using the control key, and has tamper resistance, and a general storage unit that stores a first program that implements a delegated verification unit to which authority of the secure boot is delegated from the verification unit and a second program that implements a control unit that uses the calculation unit, and does not have tamper resistance.

Abstract: Provided are a control device and a program verification method capable of suppressing an operation load in a case where different keys are used for respective devices. The control device 1 stores a program to be verified, a plurality of verification expected values related to verification of the program to be verified, and registered verification expected value information 183 that identifies one of the verification expected values. The control device verifies whether the program to be verified is correct using the registered verification expected value information 183.

Abstract: An information processing apparatus that executes a program includes: a storage unit that includes a first region and a second region in which different versions of the same type of program are rewritably stored; and a computation unit that executes the program stored in the storage unit, in which each of the first region and the second region stores the program and up-to-dateness information regarding up-to-dateness of the program, the information processing apparatus determines whether or not to update the storage unit with the program based on the up-to-dateness information received together with the program to be updated, and the information processing apparatus starts the program with the up-to-dateness information indicating higher up-to-dateness among the programs stored in the respective regions.

Abstract: An information processing device that executes a program includes: a storage unit that includes a plurality of regions for storing a rewritable program; a calculation unit that executes a program stored in the storage unit; a start region specification unit that specifies, from the plurality of regions, a start region in which the calculation unit is executing a program; a rule update unit that specifies a rewrite target region in which a program can be rewritten based on information on the specified start region; and a reception selection unit that selectively receives a rewrite program stored in the rewrite target region.

Abstract: A vehicular control apparatus is used in an onboard system provided with a plurality of information processors mutually connected via a communication bus, and includes a storage section for storing information, and an arithmetic section for executing a process based on the information stored in the storage section. The information contains first management information relating to a security abnormality as a communication data abnormality owing to security attack from outside the onboard system, and second management information relating to a safety abnormality as a communication data abnormality owing to an abnormality in the onboard system. The first management information contains first limit condition information indicating a first limit condition for executing a security coping with the security abnormality. The second management information contains second limit condition information indicating a second limit condition for executing a safety coping with the safety abnormality.

Abstract: An electronic control device includes: a first processing unit; a second processing unit; and a transfer control unit.

Abstract: An appropriate countermeasure is taken against a cyber-security attack at an appropriate timing. An analysis device, configured using a computer including a computation device that executes predetermined computation processing and a storage device accessible by the computation device, includes: a communication unit that receives, by the computation device, a log of an information processing device mounted on an instrument; an attack progress analysis unit that calculates, by the computation device, an intrusion location in a route from an intrusion point on the instrument to a protected asset from the received log; and an urgency degree determination unit that determines, by the computation device, an urgency degree of a countermeasure against an attack based on an analysis result of the attack progress analysis unit.

Abstract: An information processing apparatus capable of aperiodic communication and periodic communication, provided with a communication determination unit that determines a type of a communication message; a first processing determination unit that determines relatedness between aperiodic communication and periodic communication by using a first communication message for which the type is determined to be aperiodic communication, and a prediction range for an amount of time for receiving a second communication message for which the type is determined to be periodic communication; and a second processing determination unit that determines that the second communication message is legitimate communication for periodic communication in a case where the periodic communication second communication message determined to have relatedness is in the prediction range a predetermined amount of time later.

Abstract: An unauthorized access to a vehicle is accurately detected.

Abstract: An arithmetic device includes a first core, a second core, and one or more other cores that perform arithmetic processing. The first core includes a first verification unit that performs a first verification process on a message received from outside of the arithmetic device. The second core includes a verification destination determination processing unit that determines whether or not the second core executes the second verification process on the message based on identification information included in the message.

Abstract: The present invention provides a technology to ensure security during fast boot-up. Provided according to the present invention is an electronic control device installed on a mobile body, the electronic control device including a controller which controls a microcomputer using code, a security verifier which makes security verification of the code, and boot-up code which is part of the code and is executed when the microcomputer is booted. The controller enables, when the code or the boot-up code has been verified by the security verifier at the time of a transition of the microcomputer to a shutdown state, the boot-up code to be executed during next boot-up.

Abstract: An in-vehicle device is mounted on a vehicle capable of automated driving, and comprises an incident detection processing unit which acquires vehicle information representing a control state of the vehicle, and detects an incident that occurred in the vehicle based on the vehicle information.

Abstract: An in-vehicle device is mounted on a vehicle capable of automated driving, and comprises an incident detection processing unit which acquires vehicle information representing a control state of the vehicle, and detects an incident that occurred in the vehicle based on the vehicle information.

Abstract: An information processing device that can update software includes: a storage unit that stores control information for controlling whether or not the software can be updated; a communication unit that receives a communication message transmitted from another information processing device connected thereto via a communication line; an update control unit that updates the control information on the basis of the communication message received by the communication unit; and an update propriety determination unit that determines whether or not the software can be updated, on the basis of the control information.

Abstract: An information processing device which transmits and receives a message to which a communication ID indicating a class has been assigned, includes: a storage unit which stores, for each of the communication IDs, a communication counter for verifying a recency of a communication; a recency information management unit which updates the communication counter based on a predetermined condition; an abnormality monitoring unit which identifies an influence range of an abnormality that occurred; and a message generation unit which generates a synchronization request message including the communication ID indicating that it is a message requesting a synchronization of the communication counter, and a synchronization target identifier indicating the influence range identified by the abnormality monitoring unit.