INTEGRITY VERIFICATION DEVICE AND INTEGRITY VERIFICATION METHOD

    公开(公告)号:EP4350551A1

    公开(公告)日:2024-04-10

    申请号:EP22815995.0

    申请日:2022-05-27

    IPC分类号: G06F21/57

    摘要: An integrity verification device, in which software is executed by one of one or more electronic control units connected to an in-vehicle network system, includes: a verification schedule determiner that determines a verification timing at which to verify the integrity of the software; an integrity verifier that, for the software, determines, at the verification timing determined for the software, whether first integrity information, that is information for verifying the integrity of the software and that corresponds to at least part of the software corresponding to a verification scope, matches second integrity information, that is information calculated from at least part of the software at the verification timing, and determines that the integrity of the software is ensured when the first integrity information and the second integrity information match; and a verification priority determiner that determines a verification priority that affects determining of the verification timing or the verification scope.

    COMMUNICATION LOG AGGREGATION DEVICE AND COMMUNICATION LOG AGGREGATION METHOD

    公开(公告)号:EP4161004A1

    公开(公告)日:2023-04-05

    申请号:EP21811901.4

    申请日:2021-05-19

    IPC分类号: H04L12/70

    摘要: A communication log aggregation device used in a control network system including two or more subnetworks is disposed in the control network system and includes: a communicator (103) that obtains flow information including one or more flow records and first statistical information for each flow from each of collection devices, the one or more flow records each including flow identification information included in a message received by at least one observer that is disposed in the control network system and receives the message, the flow being classified based on the flow identification information, the collection devices each being disposed in a different one of the two or more subnetwork systems and each collecting the one or more flow records and the first statistical information for each flow from the message received by the observer; and a flow aggregator (104) that generates aggregated flow information by performing at least one of the following: (i) selecting at least one of the one or more flow records included in one or more flow information items in the flow information obtained, (ii) adding second statistical information based on the first statistical information, and (iii) deleting at least one of the one or more flow records, and outputs the aggregated flow information generated.

    VEHICLE MONITORING DEVICE AND VEHICLE MONITORING METHOD

    公开(公告)号:EP4024250A1

    公开(公告)日:2022-07-06

    申请号:EP20859607.2

    申请日:2020-08-19

    IPC分类号: G06F21/55

    摘要: A vehicle surveillance device for an in-vehicle network system that includes one or more electronic control units includes: a frame transmitter and receiver (61) that receives a frame flowing over the in-vehicle network system; and a score calculator (63) that detects a suspicious behavior different from a normal driving behavior based on the frame received by the frame transmitter and receiver (61) and vehicle data including information on one or more frames received by the frame transmitter and receiver (61) prior to receiving the frame, and calculates, based on a detection result, a score indicating a likelihood that reverse engineering has been performed on a vehicle (200) provided with the in-vehicle network system.

    LOG OUTPUT METHOD, LOG OUTPUT DEVICE, AND PROGRAM

    公开(公告)号:EP3771981A1

    公开(公告)日:2021-02-03

    申请号:EP18913659.1

    申请日:2018-12-04

    摘要: A log generation method for generating a log of communication on an in-vehicle network includes: performing a plurality of determination processes for determining, by using different methods, whether or not a message sent to the in-vehicle network is anomalous (S1002); generating a log in accordance with results of the plurality of determination processes (S1004); and transmitting the generated log (S1005). In the generating (S1004), information items to be included in the log are determined in accordance with a combination of the results of the plurality of determination processes so that the log does not include identical information items.