公开(公告)号：US20240020386A1

公开(公告)日：2024-01-18

申请号：US18258392

申请日：2021-08-23

Applicant: HITACHI ASTEMO, LTD.

Inventor： Nobuyoshi MORITA ,  Masashi YANO ,  Shuhei KANEKO ,  Yasuhiro FUJII ,  Mikio KATAOKA ,  Teruaki NOMURA

IPC: G06F21/57 ,  G06F21/64

CPC classification number: G06F21/57 ,  G06F21/64 ,  G06F2221/034

Abstract: An object of the present invention is to easily realize safe startup of a control apparatus including a plurality of arithmetic processing devices. A control apparatus 5 includes a first microcomputer 1 including a processor that executes a first program, a second microcomputer 2 including a processor that executes a second program, and a storage device 3 that stores the second program. The first microcomputer 1 includes a verification unit 1221 that verifies whether each of the first program and the second program has been falsified, a first acquisition unit 1126 that acquires the second program from the storage device 3 when the verification unit 1221 verifies that the first program is not falsified, and a startup permission notification unit 1124 that notifies the second microcomputer 2 of startup permission of the second program when the verification unit 1221 verifies that the second program is not falsified. The second microcomputer 2 includes a second acquisition unit 222 that acquires the second program from the storage device 3 and a startup execution unit 221 that starts up the second program when a notification of a startup permission is issued.

公开(公告)号：US20250166431A1

公开(公告)日：2025-05-22

申请号：US18840108

申请日：2022-08-08

Applicant: HITACHI ASTEMO, LTD.

Inventor： Kota IDEGUCHI ,  Shinya SASA ,  Takashi YAMAGUCHI ,  Yasuhiro FUJII ,  Nobuyoshi MORITA

IPC: G07C5/08 ,  G06F21/56

Abstract: An object of the present invention is to provide a diagnostic server that can easily diagnose whether an abnormality occurring in a vehicle is a result of an attack or simply a malfunction. A diagnostic server 1 of the present invention includes a log acquisition unit 13 that acquires a history of a first log indicating whether an ECU 32 in a vehicle 3 executes predetermined processing in response to a request signal that requests the ECU 32 to execute the predetermined processing, and a communication determination unit 15 that, when a non-execution log indicating that the predetermined processing is not executed is included in the history, determines validity of communication used to transmit the request signal corresponding to the non-execution log.

公开(公告)号：US20240140448A1

公开(公告)日：2024-05-02

申请号：US18273338

申请日：2021-08-26

Applicant: Hitachi Astemo, Ltd.

Inventor： Momoka KASUYA ,  Hiroki YAMAZAKI ,  Mikio KATAOKA ,  Nobuyoshi MORITA ,  Kota IDEGUCHI ,  Yasuhiro FUJII

IPC: B60W50/023 ,  B60W50/04 ,  G06F21/55

CPC classification number: B60W50/023 ,  B60W50/04 ,  G06F21/55

Abstract: An electronic control device 140 is mounted on an on-vehicle control system 10 that performs travel control of an automobile, and is communicatively connected to a plurality of control devices including a first control device (electronic control device 120) and a second control device (electronic control device 130). The electronic control device 140 includes an attack determination unit 145 that determines presence or absence of a security attack in each control device, and a redundant system execution determination unit 146 that determines whether to cause the second control device to execute a redundant function similar to or a part of the function performed by the first control device based on the result of determination by the attack determination unit 145.

公开(公告)号：US20230114009A1

公开(公告)日：2023-04-13

申请号：US17796158

申请日：2021-01-29

Applicant: Hitachi Astemo, Ltd.

Inventor： Nobuyoshi MORITA ,  Yasuhiro FUJII ,  Shuhei KANEKO ,  Teruaki NOMURA

IPC: G06F21/57 ,  G06F8/65

Abstract: An information processing apparatus that executes a program includes: a storage unit that includes a first region and a second region in which different versions of the same type of program are rewritably stored; and a computation unit that executes the program stored in the storage unit, in which each of the first region and the second region stores the program and up-to-dateness information regarding up-to-dateness of the program, the information processing apparatus determines whether or not to update the storage unit with the program based on the up-to-dateness information received together with the program to be updated, and the information processing apparatus starts the program with the up-to-dateness information indicating higher up-to-dateness among the programs stored in the respective regions.

公开(公告)号：US20240160433A1

公开(公告)日：2024-05-16

申请号：US18549670

申请日：2022-03-01

Applicant: HITACHI ASTEMO, LTD.

Inventor： Teruaki NOMURA ,  Nobuyoshi MORITA ,  Masashi YANO ,  Mikio KATAOKA ,  Yasuhiro FUJII ,  Shuhei KANEKO

IPC: G06F8/654 ,  G06F21/64

CPC classification number: G06F8/654 ,  G06F21/64

Abstract: An object is to shorten a time required for reprogramming of a control device including a single-bank microcomputer. An ECU 901 is a control device including a first microcomputer 1 and a second microcomputer 2 that execute a program stored in a rewriting area 13 in which a memory bank is configured as a single bank. The second microcomputer 2 includes a preprocessing unit 214 that performs preprocessing on a rewriting program 5 in reprogramming processing of rewriting the program stored in the rewriting area 13 into the rewriting program 5, and a transmission unit 213 that transmits the preprocessed rewriting program 5 to the first microcomputer 1. The first microcomputer 1 includes a reception unit 121 that receives the rewriting program 5 transmitted from the second microcomputer 2, and a writing unit 122 that writes the received rewriting program 5 in the rewriting area 13.

公开(公告)号：US20240048388A1

公开(公告)日：2024-02-08

申请号：US18258412

申请日：2021-09-08

Applicant: HITACHI ASTEMO, LTD.

Inventor： Tetsuya YAMADA ,  Masashi SEIMIYA ,  Yasuhiro FUJII

IPC: H04L9/32 ,  G06F21/62 ,  H04L9/08 ,  H04L9/30

CPC classification number: H04L9/3231 ,  G06F21/6245 ,  H04L9/0894 ,  H04L9/3247 ,  H04L9/30 ,  G06Q40/08

Abstract: The present disclosure provides an information management system capable of solving a problem related to handling of information regarding each driver when a plurality of drivers drives one vehicle. An information management system 1 according to an aspect of the present disclosure manages driver information DI regarding a driver of a vehicle V. The information management system 1 includes a driver identification unit 111 that acquires personal identification information PI of the driver, an information acquisition unit 12 that acquires driver information DI including travel information of the vehicle V, and individual information storage units 125 and 132 that store individual information PD in which the personal identification information PI and the driver information DI are associated with each other.

公开(公告)号：US20250023724A1

公开(公告)日：2025-01-16

申请号：US18712800

申请日：2022-08-12

Applicant: HITACHI ASTEMO, LTD.

Inventor： Nobuyoshi MORITA ,  Mikio KATAOKA ,  Yasuhiro FUJII ,  Masashi YANO

IPC: H04L9/08

Abstract: The present disclosure provides an information processing apparatus that enables updating of a key for program verification without invalidating a program verification function. An information processing apparatus 1 that calculates a verification value using a key for program verification and that verifies whether the verification value matches a verification expected value stored in advance. The information processing apparatus 1 includes: a key updating control unit 12 that updates the key; a storage unit 100 that stores in advance a verification expected value corresponding to a key updated by the key updating control unit 12; and a verification expected value changing unit 13 that when a verification value calculated based on the updated key is verified, changes the verification expected value in the storage unit, the verification expected value being referred to for verification, to a verification value corresponding to the updated key.

公开(公告)号：US20250007697A1

公开(公告)日：2025-01-02

申请号：US18710233

申请日：2022-08-10

Applicant: Hitachi Astemo, Ltd.

Inventor： Nobuyoshi MORITA ,  Mikio KATAOKA ,  Yasuhiro FUJII ,  Masashi YANO

IPC: H04L9/08

Abstract: The present disclosure provides an information processing device and a key management device capable of safely writing key information even in a manufacturing environment other than a manufacturing environment of its own company. An information processing device 1 that generates and manages a key includes a storage unit 100 that stores a public key received from a key management device 3, a key generation unit 13 that generates a use key, and a communication unit 11 capable of communicating with the outside. The key generation unit 13 generates a use key in an invalid state in which the communication unit 11 blocks signal input from the outside. The communication unit 11 transmits the use key encrypted with the public key to the key management device 3.

公开(公告)号：US20240045970A1

公开(公告)日：2024-02-08

申请号：US18257961

申请日：2021-08-26

Applicant: HITACHI ASTEMO, LTD.

Inventor： Nobuyoshi MORITA ,  Yasuhiro FUJII ,  Masashi YANO ,  Mikio KATAOKA

IPC: G06F21/57 ,  G06F21/55

CPC classification number: G06F21/575 ,  G06F21/554

Abstract: Provided is an analysis device that reduces false detection of an attack event to appropriately output an anomaly notification.
The analysis device configured to be communicable with a plurality of monitoring-target devices collects monitoring results of each of the monitoring-target devices, determines whether an anomaly has occurred in each of the monitoring-target devices, based on the monitoring results, and



determines whether to output an anomaly notification indicating the anomaly, based on a result of the determination and code verification results of each of the monitoring-target devices.

公开(公告)号：US20230214494A1

公开(公告)日：2023-07-06

申请号：US17928050

申请日：2021-02-05

Applicant: Hitachi Astemo, Ltd.

Inventor： Hiroki YAMAZAKI ,  Momoka KASUYA ,  Nobuyoshi MORITA ,  Yasuhiro FUJII ,  Mikio KATAOKA ,  Masaki FUJIWARA

IPC: G06F21/57 ,  G06F9/4401

CPC classification number: G06F21/575 ,  G06F9/4401 ,  G06F2221/034

Abstract: An electronic control device includes a tamper storage unit that stores a secure boot key and a control key, and has tamper resistance, a processor that is able to execute a program, a verification unit that verifies a program by using the secure boot key, performs secure boot causing the processor to execute the program based on a result of the verification, and has tamper resistance, a calculation unit that performs calculation related to encryption using the control key, and has tamper resistance, and a general storage unit that stores a first program that implements a delegated verification unit to which authority of the secure boot is delegated from the verification unit and a second program that implements a control unit that uses the calculation unit, and does not have tamper resistance. The verification unit delegates the authority of the secure boot to the delegated verification unit to end the execution of the secure boot when the verification for the first program and the second program is successful and the processor is caused to execute the first program and the second program, the calculation unit starts an operation when the verification unit ends the execution of the secure boot, and the delegated verification unit is able to simultaneously execute processing with the calculation unit.