-
公开(公告)号:US20250021643A1
公开(公告)日:2025-01-16
申请号:US18903596
申请日:2024-10-01
Inventor: Yoshihiro UJIIE , Hideki MATSUSHIMA , Tomoyuki HAGA , Yuji UNAGAMI , Takeshi KISHIKAWA
Abstract: Provided is a fraud detection rule updating method enabling the updating of rules that serve as the basis for detecting malicious frames as necessary in an on-board network system. In an on-board network system equipped with multiple electronic control units (ECUs) that communicate via buses and fraud detecting ECUs that determine, based on fraud detection rules, whether messages transmitted on the buses conform to the rules, a fraud detection rule updating method is used in which delivery data including updated fraud detection rules is received from a server external to the on-board network system, and if a certain update condition is satisfied, the fraud detection rules in a fraud detecting ECU are updated to the updated fraud detection rules.
-
公开(公告)号:US20240250976A1
公开(公告)日:2024-07-25
申请号:US18590182
申请日:2024-02-28
Inventor: Tomoyuki HAGA , Hideki MATSUSHIMA , Manabu MAEDA , Yoshihiro UJIIE , Takeshi KISHIKAWA , Junichi TSURUMI , Jun ANZAI
CPC classification number: H04L63/1425 , G07C5/0808 , H04L12/40 , H04L63/1441 , H04L67/12 , H04W4/40 , H04W4/44 , H04L2012/40215 , H04L2012/40273 , H04W4/08
Abstract: An anomaly detection server is provided. The anomaly detection server is a server for counteracting an anomalous frame transmitted on an on-board network of a single vehicle. The anomaly detection server acquires information about multiple frames received on one or multiple on-board networks of one or multiple vehicles, including the single vehicle. The anomaly detection server, acting as an assessment unit that, based on the information about the multiple frames and information about a frame received on the on-board network of the single vehicle after the acquisition of the information about the multiple frames, assesses an anomaly level of the frame received on the on-board network of the single vehicle.
-
公开(公告)号:US20240086226A1
公开(公告)日:2024-03-14
申请号:US18517128
申请日:2023-11-22
Inventor: Yoshihiro UJIIE , Ryo HIRANO , Takeshi KISHIKAWA
IPC: G06F9/455 , B60R16/023 , G06F21/57
CPC classification number: G06F9/45558 , B60R16/0239 , G06F21/57 , G06F2009/45587 , G06F2009/45591 , G06F2221/033
Abstract: A monitoring system is for monitoring a vehicle or a monitoring target that operates inside the vehicle, and the monitoring system includes: a reliability manager that manages reliability indicating a security protection state of the monitoring target, according to a vehicle event of the vehicle; and a function restrictor that places a restriction on at least a part of functions of the monitoring target, according to the reliability.
-
公开(公告)号:US20230153099A1
公开(公告)日:2023-05-18
申请号:US18095185
申请日:2023-01-10
Inventor: Yoshihiro UJIIE , Hideki MATSUSHIMA , Jun ANZAI , Toshihisa NAKANO , Tomoyuki HAGA , Manabu MAEDA , Takeshi KISHIKAWA
CPC classification number: G06F8/65 , G06F8/654 , B60R16/023 , G06F11/00 , H04L12/4625 , H04L12/40006 , G06F11/1433 , B60R16/02 , H04L67/12
Abstract: A gateway device is connected via network(s) to electronic controllers on-board a vehicle, where at least one of the electronic controllers is implemented in a virtual machine. The gateway device includes one or more memories, and circuitry that acquires firmware update information. The circuitry determines whether a first electronic controller satisfies a second condition based on second information, which is whether the first electronic controller includes a firmware cache for performing a pre-update firmware cache operation. The circuitry also causes, when the second condition is not satisfied, the gateway device to execute a proxy process, where the gateway device requests the first electronic controller to transmit boot ROM data to the gateway device, creates updated boot ROM data with the updated firmware, and transmits the updated boot ROM data to the first electronic controller that updates the boot ROM and resets the first electronic controller with the updated firmware.
-
公开(公告)号:US20220337494A1
公开(公告)日:2022-10-20
申请号:US17854182
申请日:2022-06-30
Inventor: Takeshi KISHIKAWA , Ryo HIRANO , Yoshihiro UJIIE
IPC: H04L43/026 , H04L67/12 , G07C5/08
Abstract: A communication log aggregation device includes: a communicator that obtains flow information including one or more flow records and first statistical information for each flow from each of collection devices, the one or more flow records each including flow identification information included in a message received by at least one observer that is disposed in a control network system, the flow being classified based on the flow identification information, the collection devices each collecting the one or more flow records and the first statistical information for each flow from the message received by the observer; and a flow aggregator that generates aggregated flow information by performing at least one of the following: (i) selecting at least one of the one or more flow records, (ii) adding second statistical information, and (iii) deleting at least one of the one or more flow records, and outputs the aggregated flow information.
-
公开(公告)号:US20220263849A1
公开(公告)日:2022-08-18
申请号:US17739935
申请日:2022-05-09
Inventor: Yoshihiro UJIIE , Takeshi KISHIKAWA , Ryo HIRANO , Tomoyuki HAGA
Abstract: An anomaly detection method in an in-vehicle network system in which a plurality of ECUs are connected. Among the plurality of ECUs, at least one ECU includes a detector which determines whether a received message satisfies a predetermined rule, and the at least one ECU transmits the detection result determined to a network. The anomaly detection method includes (i) receiving the detection result from the network, and storing the detection result received in a memory, (ii) determining whether the detection result is received within a predetermined time, and storing a determination result in the memory in association with the detection result, and (iii) outputting a message to the outside, the message including the detection result in association with the determination result.
-
公开(公告)号:US20220254198A1
公开(公告)日:2022-08-11
申请号:US17728085
申请日:2022-04-25
Inventor: Ryo HIRANO , Takeshi KISHIKAWA , Yoshihiro UJIIE , Tomoyuki HAGA
Abstract: A vehicle log transmission device includes: an anomaly detector that obtains a vehicle log from at least one electronic control unit, detects an anomaly based on log information in the vehicle log, and extracts log information in which the anomaly is detected as an anomaly log; an anomaly notifier that transmits the anomaly log to a server; a change instructor that, based on a vehicle state extracted from the vehicle log, transmits, to the at least one electronic control unit, a change instruction to change a save priority level of the log information included in the vehicle log; and a vehicle log request responder that, when a vehicle log request is received, obtains the vehicle log including log information saved based on the save priority level changed in response to the change instruction, and transmits the vehicle log obtained to the server.
-
公开(公告)号:US20220182404A1
公开(公告)日:2022-06-09
申请号:US17665218
申请日:2022-02-04
Inventor: Takeshi KISHIKAWA , Ryo HIRANO , Tomoyuki HAGA , Yoshihiro UJIIE
IPC: H04L9/40
Abstract: The control network system is connected to electronic control unit(s) and a communication device, and includes security sensor(s) that transmits a security alert indicating that an indication of a security breach is detected to the network, if the indication is detected in at least one of the network, the electronic control unit(s), or the communication device. The intrusion path analysis device includes: an alert obtainer that obtains the security alert from the security sensor(s); an event obtainer that obtains an event history of an event that occurs in the control network system; and an intrusion path analyzer that performs an analysis on an intrusion path of an attack on the basis of the security alert, the event history, and an intrusion depth indicating an intrusion level to be assumed in a case the security alert occurs, and that outputs a result of the analysis.
-
公开(公告)号:US20210349997A1
公开(公告)日:2021-11-11
申请号:US17380228
申请日:2021-07-20
Inventor: Ryo HIRANO , Takeshi KISHIKAWA , Yoshihiro UJIIE , Tomoyuki HAGA
IPC: G06F21/56
Abstract: An anomalous vehicle detection server includes an anomaly score calculator that detects a suspicious behavior different from a predetermined driving behavior based on pieces of vehicle information that are received from a plurality of vehicles, respectively, and are each based on a vehicle log including the content of an event that has occurred in a vehicle system provided in the vehicle, and acquires an anomaly score of each of the plurality of vehicles that indicates a likelihood that reverse engineering is performed on the vehicle; and an anomalous vehicle determiner that determines whether one vehicle of the plurality of vehicles is an anomalous vehicle based on the anomaly score of the one vehicle and a statistical value of the anomaly scores of two or more vehicles of the plurality of vehicles.
-
公开(公告)号:US20210188201A1
公开(公告)日:2021-06-24
申请号:US17194701
申请日:2021-03-08
Inventor: Tomoyuki HAGA , Toshihisa NAKANO , Jun ANZAI , Hideki MATSUSHIMA , Yoshihiro UJIIE , Yuji UNAGAMI
IPC: B60R16/023 , H04L9/32 , H04L12/40 , H04L12/46 , H04L12/66
Abstract: A gateway connected to a bus, a bus, and the like used by a plurality of electronic control units for communication includes a frame communication unit that receives a frame, a transfer control unit that removes verification information used to verify a frame from the content of the frame received by the frame communication unit and transfers the frame to a destination bus or that adds verification information to the content of the frame and transfers the frame to the destination bus, and the like.
-
-
-
-
-
-
-
-
-