Abstract:
Provided is a management system including vehicles and authentication servers. A vehicle includes a communication circuit, multiple electronic control units connected to an in-vehicle network, a detection circuit, and a transaction data generating circuit. The detection circuit detects a replacement of one or more electronic control units. The transaction data generating circuit generates transaction data including an identifier that uniquely identifies each of the replaced electronic control units. An authentication server includes a communication circuit, and a verifying circuit that verifies validity of the transaction data obtained by the vehicle. The authentication server also includes a recording circuit that, upon verifying that the first transaction data is valid by the verifying unit, records the transaction data in a recording device.
Abstract:
In an information processing method, a query including a first encrypted feature value provided with confidential information unique to a user is received. The first encrypted feature value is generated by encrypting a first feature value calculated from privacy data of the user by using inner product encryption. A plurality of inner product values are acquired by computing an inner product of the first encrypted feature value and each of a plurality of second encrypted feature values. Privacy data of a plurality of pieces of privacy data having an inner product value of the first encrypted feature value and a second encrypted feature value with an encrypted reference feature value calculated from the privacy data being equal to or smaller than a predetermined threshold is transmitted. A secret key of the user is identified by using the confidential information when an unauthorized access is detected, and identification information is outputted.
Abstract:
A method for use in a network communication system including a plurality of electronic controllers that communicate with each other via a bus in accordance with a Controller Area Network (CAN) protocol includes determining whether or not content of a predetermined field in a transmitted frame meets a predetermined condition indicating fraud, transmitting an error frame before an end of the frame is transmitted in a case where it is determined that the frame meets the predetermined condition, recording a number of times the error frame is transmitted, for each identifier (ID) represented by content of an ID field included in a plurality of frames which has been transmitted, and providing a notification in a case where the number of times recorded for an ID exceeds a predetermined count.
Abstract:
An anti-fraud method for use in an in-vehicle network system including a plurality of electronic control units that exchange data frames, each having added thereto a message authentication code (MAC), via at least one bus includes: receiving a data frame transmitted on the bus; generating a first MAC by using a MAC key and a value of a counter that counts the number of times a data frame having added thereto a MAC is transmitted; in a case where the verification has failed, (i) generating as second MAC by using an old MAC key; (ii) re-verifying that the received data frame has added thereto the generated second MAC; transmitting, in a case where the re-verification has succeeded, via the bus a key-update frame indicating a request for updating the MAC key; and updating the MAC key in response to the transmission of the key-update frame.
Abstract:
A method for use in an in-vehicle network system is provided. The in-vehicle network system includes a plurality of electronic control units that communicate a data frame having a message authentication code (MAC) added thereto with one another via a bus in accordance with the Controller Area Network (CAN) protocol. The method includes detecting the state of a vehicle having the in-vehicle network system mounted therein and updating a MAC key used to generate the MAC under the condition that the detected state of the vehicle is a predetermined state.
Abstract:
An information management method includes collecting log information of one or more home electrical apparatuses, generating display screen data indicating a status of the log information of the apparatuses corresponding service providers based on the collected log information, where the display screen data includes groups of information each contain information on an apparatus, a service provider corresponding to the apparatus, and log information output from the apparatus, and provision of the log information of each group is individually selectable, providing the display screen data via a network to a display terminal that performs access to a server device, receiving information from the display terminal, which indicates that selection on whether or not provision of the log information is performed, and stopping provision of the log information on the selected group when a determination is made that the refusal of provision of the log information on the selected group is performed.
Abstract:
An electronic voting system including a terminal, authentication servers, and voting servers is provided. Each authentication server includes an authentication processor that authenticates a voter using authentication data including a first identifier associated with the voter and authentication information regarding the voter, and a first synchronizer that synchronizes a first blockchain including first transaction data indicating that the voter has been authenticated. Each voting server includes a voting processor that receives, from the terminal, voting data including a second identifier associated with a vote cast by the voter, and voting information indicating the vote. Each voting server further includes a second synchronizer that synchronizes a second blockchain including second transaction data and dummy transaction data with at least one other voting server. The terminal transmits the authentication data to each authentication server and transmits the voting data to at least one of the voting servers.
Abstract:
A gateway connected to a bus, a bus, and the like used by a plurality of electronic control units for communication includes a frame communication unit that receives a frame, a transfer control unit that removes verification information used to verify a frame from the content of the frame received by the frame communication unit and transfers the frame to a destination bus or that adds verification information to the content of the frame and transfers the frame to the destination bus, and the like.
Abstract:
A similar-information search method includes obtaining an instruction indicating which of an encrypted search and an unencrypted search a data computation device is to perform; generating an encrypted feature quantity and transmitting the encrypted feature quantity to the data computation device; generating an encrypted similarity value and transmitting the encrypted similarity value; and receiving encrypted reference data from the data computation device and decrypting the encrypted reference data. A homomorphic encryption scheme that makes decryption by the data computation device unsuccessful is used when the encrypted search is performed, whereas an encryption scheme that makes decryption by the data computation device successful is used when the unencrypted search is performed.
Abstract:
A similar-information search method includes receiving, with a data computation device, an encrypted feature quantity and an encrypted similarity value from a user terminal device; calculating, with the data computation device, an encrypted distance between an encrypted reference feature quantity and the encrypted feature quantity; determining, with the data computation device, whether the encrypted distance matches the encrypted similarity value; generating, with the data computation device, encrypted reference data that is information obtained by encrypting reference data if it is determined that the encrypted distance matches the encrypted similarity value; and transmitting, with the data computation device, the generated encrypted reference data to the user terminal device.