Abstract: In a control process of a control device of a vehicle, normal-case information and execution-case information are compared, and if at least either compared execution orders of a calculation process or compared output values in steps of the calculation process are different from each other, it is judged that abnormality has occurred, thus providing a control system that enables normal traveling by detecting abnormality in the vehicle even if an unknown cyberattack is performed during traveling.

Abstract: An in-vehicle use control system includes: a state management part which acquires the information on an operational state of the system; a memory storage part which memorizes the information on the operational state of the system, which is acquired by the state management part; a control part which has a plurality of control functions; a list management part which holds lists in which the correspondence relation between the control function of the control part and the normal operating state of the control function is defined; and a monitoring part which chooses the list held in the list management part, based on the operational state which is memorized in the memory storage part, compares the normal operating state of a control function which is defined in the list, and an execution state of the control part, and monitors whether the operation of the control function is normal or not.

Abstract: In a control process of a control device of a vehicle, normal-case information and execution-case information are compared, and if at least either compared execution orders of a calculation process or compared output values in steps of the calculation process are different from each other, it is judged that abnormality has occurred, thus providing a control system that enables normal traveling by detecting abnormality in the vehicle even if an unknown cyberattack is performed during traveling.

Abstract: A first processing environment includes: a control processing unit configured to execute control processing on a control subject; a first storage area for storing data for controlling the control subject; and a verification determination unit. A second processing environment includes: a second storage area for storing an expected value; a verification value generation unit; and a verification execution unit. The verification value generation unit generates the verification value before the control processing is stopped. The verification execution unit executes comparison processing of comparing the expected value and the verification value before the control processing is activated.

Abstract: A first processing environment includes: a control processing unit configured to execute control processing on a control subject; a first storage area for storing data for controlling the control subject; and a verification determination unit. A second processing environment includes: a second storage area for storing an expected value; a verification value generation unit; and a verification execution unit. The verification value generation unit generates the verification value before the control processing is stopped. The verification execution unit executes comparison processing of comparing the expected value and the verification value before the control processing is activated.