Abstract: Provided are a functional element holder to hold a plurality of functional elements for executing the control and also backup functional elements, an abnormality detector to detect an abnormality caused by a security attack via the communication network, a processing target identifying circuitry to identify, as processing targets, a functional element in which the abnormality is detected and a related functional element related to the abnormality among the plurality of functional elements, and a functional element switcher to switch control functions of the functional elements identified as the processing targets to corresponding respective backup functional elements to cause an execution. The processing target identifying circuitry is configured to extract, as the related functional element, a functional element that is determined to have an operating status having a similarity to that of the functional element in which the abnormality is detected.

Abstract: A terminal device configured to be able to communicate with a measuring device for measuring biological information includes a first processing unit executing the processing of a first application and a second processing unit executing the processing of a second application. The first processing unit stores biological information acquired from the measuring device. The second processing unit determines whether the second application is able to use biological information, based on specifying information for specifying an application able to use biological information and the identification information of the second application. When the second application is able to use biological information, the second processing unit reads out biological information from the biological information storage unit and outputs the read biological information.

Abstract: A user terminal according to one aspect of the present invention performs a first step of determining a communication parameter value used for wireless communication with the external device by selecting one communication parameter set from a plurality of communication parameter sets each defining a communication parameter value or by receiving designation of a communication parameter value by a user, a second step of making a wireless communication attempt with the external device based on the determined communication parameter value, and a third step of reporting a result of the wireless communication attempt and terminal information of an own device to an external server device.

Abstract: A first processing environment includes: a control processing unit configured to execute control processing on a control subject; a first storage area for storing data for controlling the control subject; and a verification determination unit. A second processing environment includes: a second storage area for storing an expected value; a verification value generation unit; and a verification execution unit. The verification value generation unit generates the verification value before the control processing is stopped. The verification execution unit executes comparison processing of comparing the expected value and the verification value before the control processing is activated.

Abstract: A master control device connected to a plurality of slave control devices via a network is configured to include an own local time counted by a counter unit, in a message and transmit the message to the slave control devices by the timing synchronization unit, calculate a difference between a reception time of a message transmitted from the slave control device, which has received the message, at a timing corrected in accordance with the local time and a pre-calculated message reception predicted time by a timing synchronization determination unit, calculate a correction amount for timing of the slave control devices using the difference by a timing synchronization correction unit, add the correction amount to the local time, include the local time in a message, and transmit the message to the slave control devices.

Abstract: A user terminal according to one aspect of the present invention performs a first step of determining a communication parameter value used for wireless communication with the external device by selecting one communication parameter set from a plurality of communication parameter sets each defining a communication parameter value or by receiving designation of a communication parameter value by a user, a second step of making a wireless communication attempt with the external device based on the determined communication parameter value, and a third step of reporting a result of the wireless communication attempt and terminal information of an own device to an external server device.

Abstract: A first control device includes a data processing controller that generates and transfers information indicating a current operating condition of the first control device and information indicating a current operating condition of a vehicle, and transfers a most recent version of a security program, to which the program is to be updated, to a second control device, while the second control device, having received the most recent version of the security program from the first control device, specifies the current operating condition of the vehicle on the basis of the information obtained from the first control device, and when the specified current operating condition matches a vehicle operating condition in which processing for updating the program to the most recent version of the security program is possible, executes processing for updating the program to the most recent version of the security program.

Abstract: A terminal device is provided which is configured to be able to communicate with a server having a database of biological information measured by a biological information measuring device. The database includes measurement data of biological information of a user of another terminal device that is transmitted from the other terminal device to the server. The terminal device includes a reception unit configured to receive measurement data from the server, a condition determination unit configured to determine whether a health condition of the user is normal or abnormal, based on the measurement data received by the reception unit, and an information output unit configured to output information about a health condition of the user, at least based on a determination result of the condition determination unit.

Abstract: Each of a plurality of type 2 nodes stores one of divisional programs, which are created as parts of a rewriting program for rewriting a program for determining the operation of a type 1 node, by dividing the rewriting program in a manner that allows a partial overlap in data between a divisional program stored in the type 2 node and a divisional program stored in another type 2 node. When divisional programs to the type 1 node are transmittable, each type 2 node transmits the divisional program stored in its own node to the type 1 node via a first network. The type 1 node rewrites a part that corresponds to the received divisional program, and uses the overlapping data to verify whether or not the divisional programs rewritten are the same.

Abstract: A master control device connected to a plurality of slave control devices via a network is configured to include an own local time counted by a counter unit, in a message and transmit the message to the slave control devices by the timing synchronization unit, calculate a difference between a reception time of a message transmitted from the slave control device, which has received the message, at a timing corrected in accordance with the local time and a pre-calculated message reception predicted time by a timing synchronization determination unit, calculate a correction amount for timing of the slave control devices using the difference by a timing synchronization correction unit, add the correction amount to the local time, include the local time in a message, and transmit the message to the slave control devices.

Abstract: A first processing environment includes: a control processing unit configured to execute control processing on a control subject; a first storage area for storing data for controlling the control subject; and a verification determination unit. A second processing environment includes: a second storage area for storing an expected value; a verification value generation unit; and a verification execution unit. The verification value generation unit generates the verification value before the control processing is stopped. The verification execution unit executes comparison processing of comparing the expected value and the verification value before the control processing is activated.

Abstract: A terminal device configured to be able to communicate with a measuring device for measuring biological information includes a first processing unit executing the processing of a first application and a second processing unit executing the processing of a second application. The first processing unit stores biological information acquired from the measuring device. The second processing unit determines whether the second application is able to use biological information, based on specifying information for specifying an application able to use biological information and the identification information of the second application. When the second application is able to use biological information, the second processing unit reads out biological information from the biological information storage unit and outputs the read biological information.

Abstract: A terminal device is provided which is configured to be able to communicate with a server having a database of biological information measured by a biological information measuring device. The database includes measurement data of biological information of a user of another terminal device that is transmitted from the other terminal device to the server. The terminal device includes a reception unit configured to receive measurement data from the server, a condition determination unit configured to determine whether a health condition of the user is normal or abnormal, based on the measurement data received by the reception unit, and an information output unit configured to output information about a health condition of the user, at least based on a determination result of the condition determination unit.

Abstract: A first control device includes a data processing controller that generates and transfers information indicating a current operating condition of the first control device and information indicating a current operating condition of a vehicle, and transfers a most recent version of a security program, to which the program is to be updated, to a second control device, while the second control device, having received the most recent version of the security program from the first control device, specifies the current operating condition of the vehicle on the basis of the information obtained from the first control device, and when the specified current operating condition matches a vehicle operating condition in which processing for updating the program to the most recent version of the security program is possible, executes processing for updating the program to the most recent version of the security program.

Abstract: Each of a plurality of type 2 nodes stores one of divisional programs, which are created as parts of a rewriting program for rewriting a program for determining the operation of a type 1 node, by dividing the rewriting program in a manner that allows a partial overlap in data between a divisional program stored in the type 2 node and a divisional program stored in another type 2 node. When divisional programs to the type 1 node are transmittable, each type 2 node transmits the divisional program stored in its own node to the type 1 node via a first network. The type 1 node rewrites a part that corresponds to the received divisional program, and uses the overlapping data to verify whether or not the divisional programs rewritten are the same.

Abstract: Before a communication control device ECU falls into a sleep state or a power-off state, a substitution request is transmitted to an ECU, among substitute candidate devices ECU to ECU, that is determined by a substitute transmission acceptability determining unit as being capable of taking over the communication control device. A substitution-capable processing load quantity, a substitution-capable process importance level, or a failure determination result of each of the ECUs is used as determination criteria when the substitute transmission acceptability determining unit of the ECU determines a substitute device, and the determination is carried out in an order that takes into consideration the process importance level of each of the ECUs during travelling or at a standstill, to prevent failures in a network or abnormal behaviors of a vehicle.

Abstract: Provided is a cell capacity adjusting device for reducing fluctuations in state of charge (SOC) among cells of a battery pack 101, which is formed by connecting a plurality of cells 111-116 in series, during suspension of operation of electrically-powered equipment whose main power source is the battery pack 101. From among the plurality of cells 111-116, one or a plurality of cells having a voltage value equal to or higher than a cell capacity adjustment target voltage are selected. By the selected cells, an intermittent operation unit 105, which operates even during the suspension of operation of the electrically-powered equipment, is caused to perform an intermittent operation. Through repetition of the intermittent operation, voltage values of the selected cells are decreased. Thus, fluctuations in state of charge (SOC) among cells are reduced without unnecessarily discharging battery stored energy of the battery pack 101.

Abstract: Before a communication control device ECU falls into a sleep state or a power-off state, a substitution request is transmitted to an ECU, among substitute candidate devices ECU to ECU, that is determined by a substitute transmission acceptability determining unit as being capable of taking over the communication control device. A substitution-capable processing load quantity, a substitution-capable process importance level, or a failure determination result of each of the ECUs is used as determination criteria when the substitute transmission acceptability determining unit of the ECU determines a substitute device, and the determination is carried out in an order that takes into consideration the process importance level of each of the ECUs during travelling or at a standstill, to prevent failures in a network or abnormal behaviors of a vehicle.

Abstract: There are included an opposite-side transmitter unit for transmitting the same messages to plural communication paths, respectively; and a host-side receiver unit for receiving the messages flowing through the plural communication paths, respectively; wherein, the receiver unit, compares the plural received messages to perform verification using error-detection code on any one of the messages when they are identical, or on all of the messages when there is a mismatch; and when detected error of message due to error inclusion or reception failure, discards all of the messages received at that time, and calculates an accumulated number of error detections for each of the communication paths through which the messages has been transmitted, so as to stop receiving the control-related message, when the number of error detections has reached a given number, from the communication path where the number of error detections has reached the given number.

Abstract: Provided is a control system capable of reducing cost while securing reliability of original processing of a microcomputer. An engine control device and a meter control device each store a control amount calculating procedure for calculating a control amount regarding a significant control to be performed on the control target of the engine control device. The engine control device compares a control amount regarding the significant control calculated by the engine control device, and a control amount regarding the significant control calculated by the meter control device, to thereby control the control target of the engine control device based on a result of the comparison.