Abstract: Vehicle security system includes a plurality of groups into which a plurality of software areas are separated for each virtual machine or each container, and includes first communication controller, second communication controller, and third communication controller. First communication controller manages communication related to a software area belonging to a first group of the plurality of groups. Second communication controller manages communication related to the software area belonging to a second group of the plurality of groups. Third communication controller manages communication between the software area belonging to the first group and the software area belonging to the second group, separately from the first communication and the second communication.

Abstract: An information processing device includes: a log storage that stores a monitoring log; a log transmitter that transmits a monitoring log stored in the log storage to an SOC at a first timing; a first anomaly detector that detects a presence or absence of an anomaly in the information processing device; an integrated monitor that verifies an integrity of each of the log transmitter and the first anomaly detector; a root monitor that verifies an integrity of the integrated monitor; a determiner that determines an intrusion depth based on a monitoring log stored in the log storage when an anomaly due to an attack occurs; and a transmission controller that changes, based on the intrusion depth, a timing of transmission of a monitoring log by the log transmitter from the first timing to a second timing that is earlier than the first timing.

Abstract: A verification system includes: a first verification device that verifies integrity of a first verification target; and a second verification device that has a higher security privilege than the first verification device and verifies integrity of the first verification device.

Abstract: An information processing device includes: a plurality of HIDS; a plurality of individual monitors each of which monitors an associated one of the plurality of HIDS; an integrated monitor that monitors each of the plurality of individual monitors; and a root monitor that monitors the integrated monitor. When the integrated monitor is compromised, the root monitor changes a monitoring target thereof from the integrated monitor to any of the plurality of individual monitors based on total monitoring information. When the integrated monitor is compromised, each of the plurality of individual monitors adds, to a monitoring target thereof, another individual monitor than the individual monitor based on the total monitoring information.

Abstract: A vehicle security apparatus includes a primary dynamic authenticator and a connection manager that are provided in an ECU included in a vehicle, wherein when an access request from an access source in the vehicle to an access destination in the vehicle is received, the primary dynamic authenticator determines, based on reliability of an application installed in the access source determined based on at least one of a state of the application of the access source or a state of the vehicle, whether to cause a secondary dynamic authenticator included in a zone ECU connected to the access destination of the access request to execute authorization determination for the access request, and when it is determined to cause the secondary dynamic authenticator that corresponds to the access destination to execute the authorization determination, the connection manager outputs the access request to the zone ECU connected to the access destination.

Abstract: An information processing device includes: a log transmitter that transmits a monitoring log generated in the information processing device to an SOC (28); an HIDS monitor that verifies an integrity of the log transmitter; and a monitoring RoT that verifies an integrity of the HIDS monitor, and repeatedly outputs a heartbeat signal to the log transmitter. Each time the heartbeat signal is output from the monitoring RoT, the log transmitter transmits the heartbeat signal to the SOC. When the integrity of the log transmitter is anomalous, the HIDS monitor outputs, to the monitoring RoT, an output stop request signal for requesting the monitoring RoT to stop outputting the heartbeat signal. The monitoring RoT stops outputting the heartbeat signal based on the output stop request signal.

Abstract: An information processing device includes: a monitored unit; a first monitor unit that monitors the monitored unit, and repeatedly verifies the monitored unit by comparing a hash value of the monitored unit with a first expected hash value; and a second monitor unit that is more secure than the first monitor unit, monitors the first monitor unit, and repeatedly verifies the first monitor unit by comparing a hash value of the first monitor unit including the first expected hash value with a second expected hash value.

Abstract: An information processing device includes: a log transmitter that transmits a monitoring log generated in the information processing device to an SOC (28); an HIDS monitor that verifies an integrity of the log transmitter; and a monitoring ROT that verifies an integrity of the HIDS monitor, and repeatedly outputs a heartbeat signal to the log transmitter. Each time the heartbeat signal is output from the monitoring ROT, the log transmitter transmits the heartbeat signal to the SOC. When the integrity of the log transmitter is anomalous, the HIDS monitor outputs, to the monitoring RoT, an output stop request signal for requesting the monitoring ROT to stop outputting the heartbeat signal. The monitoring RoT stops outputting the heartbeat signal based on the output stop request signal.

Abstract: In a vehicle abnormality detection device, when a transmission and reception unit receives abnormality information of a first control device on an in-vehicle network configured by a plurality of layers via a firewall, an abnormality cause candidate acquisition unit acquires a candidate for a second control device that may cause the abnormality of the first control device. An abnormality information management unit manages the first control device and the second control device as abnormality cause control devices when the second control device in which an abnormality occurs before a time when the abnormality of the first control device is detected is detected from the candidate acquired by the abnormality cause candidate acquisition unit.

Abstract: In a vehicle abnormality detection device, when a transmission and reception unit receives abnormality information of a first control device on an in-vehicle network configured by a plurality of layers via a firewall, an abnormality cause candidate acquisition unit acquires a candidate for a second control device that may cause the abnormality of the first control device. An abnormality information management unit manages the first control device and the second control device as abnormality cause control devices when the second control device in which an abnormality occurs before a time when the abnormality of the first control device is detected is detected from the candidate acquired by the abnormality cause candidate acquisition unit.

Abstract: An automatic vehicle dispatching system includes automatic vehicles, and a server device that performs communication with the automatic vehicles. The server device includes: a storage that stores: area information that includes path points in a predetermined area that indicate a drive route, each of the path points including driving attributes that represent an automatic vehicle movement state on the drive route; and vehicle information indicating a vehicle attribute of each of the automatic vehicles; and a route searcher that generates, for each of the automatic vehicles, first route information that includes path points selected from among the path points of the area information according to the vehicle information that corresponds to the automatic vehicle, the first route information indicating a first drive route for the automatic vehicle. Each of the automatic vehicles is controlled to drive based on the first route information generated.

Abstract: An automatic vehicle dispatching system includes automatic vehicles, and a server device that performs communication with the automatic vehicles. The server device includes; a storage that stores: area information that includes path points in a predetermined area that indicate a drive route, each of the path points including driving attributes that represent an automatic vehicle movement state on the drive route; and vehicle information indicating a vehicle attribute of each of the automatic vehicles; and a route searcher that generates, for each of the automatic vehicles, first route information that includes path points selected from among the path points of the area information according to the vehicle information that corresponds to the automatic vehicle, the first route information indicating a first drive route for the automatic vehicle. Each of the automatic vehicles is controlled to drive based on the first route information generated.