Abstract: An anomaly detection device included in a communication network adopting a time-triggered protocol based on a time slot includes: a frame transceiver that receives frames; and an anomaly detector that detects an occurrence of an anomalous frame in accordance with a time slot among a plurality of time slots included in a cycle and the number of repeated cycles of the cycle for each frame. The anomaly detector detects an occurrence of an anomalous frame by verifying a statistic on the frames received while the cycle is repeated a predetermined number of times, which is at least once, against a rule indicating a reference range of the statistic.

Abstract: A gateway device for a vehicle network system installed in a vehicle is provided. The vehicle network system includes a network, an electronic control unit connected to the network, and the gateway device connected to the first network and configured to communicate outside the vehicle. The gateway device receives a first frame from outside the vehicle; determines whether or not the first frame is appropriate; generates a second frame when the first frame is not determined to be appropriate; and transmits the second frame to the network. The second frame includes control information and additional information based on content of the first frame. The control information restricts processing of the additional information included in the second frame by the electronic control unit, after the second frame is received by the electronic control unit.

Abstract: An electronic control device includes: an acquisition unit that acquires state information indicating at least one of a state of a movable body and a state of an external environment in which the movable body is moving, and a control instruction indicating at least one of a steering control instruction for steering the movable body and an acceleration control instruction for adjusting acceleration of the movable body; and a determining unit that determines whether the control instruction is a false control instruction based on the at least one state indicated by the state information acquired and control indicated by the control instruction acquired.

Abstract: A method for use in a network system is provided. The network system includes a plurality of electronic controllers that transmits and receives, via a network, a plurality of frames. The plurality of frames includes at least one control frame that instructs predetermined control to an object of control. The method receives, sequentially, the plurality of frames from the network, and determines whether the predetermined control, instructed by the control frame received in the receiving, is to be suppressed, based on a set of frames received in the receiving. The set of frames is received in the receiving within a predetermined period preceding a time of reception of the control frame.

Abstract: A risk information processing method is used in a risk information processing system that manages a degree of risk at a target spot at which a moving object is located. The method includes: receiving sensor data collected at each of two spots different from the target spot; determining a degree of risk of an event at each of the two spots from the sensor data collected at each of the two spots; storing, as risk information the determined degree of risk associated with each of the two spots; estimating first risk information associated with the target spot without sensor data of first event at the target spot, by using the stored risk information, the first risk information being a degree of risk of the first event at the target spot; and outputting information for the target spot based on the estimated first risk information.

Abstract: A control apparatus includes a controller, a receiver and a discriminator. The receiver, in operation, receives an instruction for controlling a brake of a movable-body apparatus. The discriminator, in operation, determines, in response to the instruction being received by the receiver, whether or not the instruction is fraudulent based on whether or not a speed of the moving body and a distance between the moving body and an obstacle satisfies a predetermined condition for invalidating the instruction.

Abstract: An information processing device collects information used for analyzing communication performed in an in-vehicle network by ECUs including an ECU which performs predetermined control related to a function of an ADAS. The information processing device includes a receiver, a determiner, and a processor. The receiver receives a plurality of items of communication data sequentially transmitted over the in-vehicle network. The determiner detects a control end time which is a time at which the predetermined control ends, and determine an analysis target period including the control end time. The processor classifies the plurality of items of communication data received by the receiver into analysis target communication data received within the analysis target period and non-analysis target communication data received outside the analysis target period. The processor further performs predetermined processing for analysis of the analysis target communication data based on the classification result.

Abstract: An anomaly detection electronic control unit (ECU) that detects unauthorized messages on a communication path is provided. An ECU that periodically transmits a first-type message including data to be monitored, and an ECU that periodically transmits a second-type message including data for comparison, are connected to the communication path. The anomaly detection ECU includes: a receiver that successively receives first-type and second-type messages; a processor that determines whether a first-type message received is normal or anomalous; and a transmitter that transmits a predetermined message in accordance with results of the determining.

Abstract: A gateway device for a vehicle network system installed in a vehicle is provided. The vehicle network system includes a network, an electronic control unit connected to the network, and the gateway device connected to the first network and configured to communicate outside the vehicle. The gateway device receives a first frame from outside the vehicle; determines whether or not the first frame is appropriate; generates a second frame when the first frame is not determined to be appropriate; and transmits the second frame to the network. The second frame includes control information and additional information based on content of the first frame. The control information restricts processing of the additional information included in the second frame by the electronic control unit, after the second frame is received by the electronic control unit.

Abstract: A gateway device for a vehicle network system is provided. The vehicle network system includes a first network, a second network, a first electronic control unit connected to the first network, a second electronic control unit connected to the second network, and the gateway device connected to the first network and the second network. The gateway device receives a first frame transmitted to the first network by the first electronic control unit; determines whether or not the first frame is appropriate; generates a second frame when the first frame is not determined to be appropriate; and transmits the second frame to the second network. The second frame includes control information and additional information based on content of the first frame. The control information restricts processing of the additional information included in the second frame by the second electronic control unit.

Abstract: An evaluation device for evaluating security of an electronic control system in which a plurality of electronic control units are connected to a bus used for communication includes a recording medium that holds attack procedure information indicative of contents and a transmission order of a plurality of frames, a transmitter that transmits the plurality of frames to the bus in the transmission order indicated by the attack procedure information, a monitor that monitors an actuator unit controlled by any of the plurality of electronic control units, and an evaluator that makes the evaluation on basis of a monitoring result obtained by the monitor when the transmitter transmits the plurality of frames to the bus.

Abstract: An anomaly detection device included in a communication network adopting a time-triggered protocol based on a time slot includes: a frame transceiver that receives frames; and an anomaly detector that detects an occurrence of an anomalous frame in accordance with a time slot among a plurality of time slots included in a cycle and the number of repeated cycles of the cycle for each frame. The anomaly detector detects an occurrence of an anomalous frame by verifying a statistic on the frames received while the cycle is repeated a predetermined number of times, which is at least once, against a rule indicating a reference range of the statistic.

Abstract: A method for use in a network system is provided. The network system includes a plurality of electronic controllers that transmits and receives, via a network, a plurality of frames. The plurality of frames includes at least one control frame that instructs predetermined control to an object of control. The method receives, sequentially, the plurality of frames from the network, and determines whether the predetermined control, instructed by the control frame received in the receiving, is to be suppressed, based on a set of frames received in the receiving. The set of frames is received in the receiving within a predetermined period preceding a time of reception of the control frame.

Abstract: A risk information processing method is used in a risk information processing system that manages a degree of risk at a target spot at which a moving object is located. The method includes: receiving sensor data collected at each of two spots different from the target spot; determining a degree of risk of an event at each of the two spots from the sensor data collected at each of the two spots; storing, as risk information the determined degree of risk associated with each of the two spots; estimating first risk information associated with the target spot without sensor data of first event at the target spot, by using the stored risk information, the first risk information being a degree of risk of the first event at the target spot; and outputting information for the target spot based on the estimated first risk information.

Abstract: An unauthorized control suppression method for use in a network system is provided. The network system includes a plurality of electronic controllers that exchange, via a communication channel, a plurality of frames The plurality of frames includes at least one control frame that instructs predetermined control to an object of control. The method receives, sequentially, the plurality of frames from the communication channel, and determines whether the predetermined control, instructed by the control frame received in the receiving, is to be suppressed, based on a set of frames received in the receiving. The set of frames is received in the receiving within a predetermined period preceding a time of reception of the control frame.

Abstract: A risk information processing method is used in a risk information processing system that manages a degree of risk at a target spot at which a moving object is located. The method includes: receiving sensor data collected at each of two spots different from the target spot; determining a degree of risk of an event at each of the two spots from the sensor data collected at each of the two spots; storing, as risk information the determined degree of risk associated with each of the two spots; estimating first risk information associated with the target spot without sensor data of first event at the target spot, by using the stored risk information, the first risk information being a degree of risk of the first event at the target spot; and outputting information for the target spot based on the estimated first risk information.

Abstract: A gateway device for a vehicle network system is provided. The vehicle network system includes a first network, a second network, a first electronic control unit connected to the first network, a second electronic control unit connected to the second network, and the gateway device connected to the first network and the second network. The gateway device receives a first frame transmitted to the first network by the first electronic control unit; determines whether or not the first frame is appropriate; generates a second frame when the first frame is not determined to be appropriate; and transmits the second frame to the second network. The second frame includes control information and additional information based on content of the first frame. The control information restricts processing of the additional information included in the second frame by the second electronic control unit.

Abstract: Disclosed is a method for controlling a cordless telephone device for use in a system that allows remote control of a home electric appliance. The method includes a first generation step of causing a first generation unit in a handset to encode audio input via a sound receiving unit in the handset to generate a first stream, and a first transmission step of transmitting the first stream to a base unit. The first generation step includes causing the first generation unit to generate instruction bit information and a first instruction stream when a first trigger indicating a request to start the remote control is given to the first generation unit. The first transmission step includes transmitting the instruction bit information and the first instruction stream to the base unit through a multiplexing scheme that is common to transmission of a first stream generated when the first trigger is not given.

Abstract: A wearable terminal includes voice data generation unit a voice data generation unit configured to generate audio data, a sensing unit configured to sense a motion of a user's upper limb in a first axis direction perpendicular to a plane defined by a vertically downward oriented direction of the upper limb and a direction of movement of the user, and to generate motion data concerning the motion, a determination unit configured to determine, based on the motion data, whether or not the user is going to perform remote control of a home electric appliance, and a data processing unit configured to process the audio data. The data processing unit includes a transmission data generation unit configured to generate transmission data corresponding to the audio data if the determination unit determines that the user is going to perform the remote control, and a transmission unit configured to transmit the transmission data to a network.

Abstract: Disclosed is a method for controlling a cordless telephone device for use in a system that allows remote control of a home electric appliance. The method includes a first generation step of causing a first generation unit in a handset to encode audio input via a sound receiving unit in the handset to generate a first stream, and a first transmission step of transmitting the first stream to a base unit. The first generation step includes causing the first generation unit to generate instruction bit information and a first instruction stream when a first trigger indicating a request to start the remote control is given to the first generation unit. The first transmission step includes transmitting the instruction bit information and the first instruction stream to the base unit through a multiplexing scheme that is common to transmission of a first stream generated when the first trigger is not given.