Abstract:
A method for dealing with unauthorized frames that makes it possible to take appropriate measures when an unauthorized data frame is detected in a vehicle network system is provided. A plurality of ECUs in the vehicle network system are connected to a bus used for communicating frames. In the method for dealing with unauthorized frames, if a misuse detection ECU that checks a frame appearing in the bus detects an unauthorized frame that does not comply with a certain rule and a certain prevention condition is satisfied, a process for preventing the plurality of ECUs from performing a process corresponding to the unauthorized frame is performed (an error frame is transmitted) or, if the certain prevention condition is not satisfied, the process is not performed.
Abstract:
A fraud sensing method for use in an in-vehicle network system including a plurality of electronic control units that communicate with each other via a bus includes detecting that a state of a vehicle satisfies a predetermined condition, and switching, upon detecting that the state of the vehicle satisfies the predetermined condition, an operation mode of a fraud-sensing electronic control unit connected to the bus between a first mode in which a first type of sensing process for sensing a fraudulent message in the bus is performed and a second mode in which the first type of sensing process is not performed.
Abstract:
A fraud detection method for use in an in-vehicle network system including a plurality of electronic control units that communicate with one another via a bus in accordance with Controller Area Network (CAN) protocol is provided. The method includes receiving at least one data frame sent to the bus, verifying a specific identifier in the received data frame only if the received data frame does not follow a predetermined rule regarding a transmission period and a state of a vehicle having the in-vehicle network system mounted therein is a predetermined state, detecting the received data frame as an authenticated data frame if the verification is successful, and detecting the received data frame as a fraudulent data frame if the verification fails.
Abstract:
A method for controlling one of voting servers in an electronic voting system is provided. The method includes receiving, from a terminal, transaction data including voting data, and determining, by a processor, a block to include the transaction data from among multiple blocks. The method further includes generating, using the processor, the block including the transaction data, and connecting the block to a blockchain, the blockchain being stored in a memory.
Abstract:
A method of obtaining a shared prediction model is provided. The method includes: obtaining a prediction model as a neural network; converting each negative numerical value in a plurality of parameters included in the prediction model to a positive numerical value to obtain a converted prediction model; and sharing the converted prediction model by a secret sharing method to obtain shared prediction models while concealing an input data.
Abstract:
A driving management system includes an authentication server, and a vehicle capable of switching between a manual driving mode and an automatic driving mode. The vehicle includes multiple electronic control processors connected to a network inside the vehicle, a first processor that detects switching between the manual driving mode and the automatic driving mode, based on messages issued by one or more electronic control processors of the multiple electronic control processors, and the first processor generates first transaction data including information indicating the detected switching, and a first identifier indicating the vehicle, and transmitting the first transaction data to the authentication server. The authentication server includes a second processor that judges the validity of transaction data including the first transaction data obtained from the vehicle, and the second processor records the transaction data, of which the validity has been verified by the second processor, in a storage device.
Abstract:
Provided is a fraud detection rule updating method enabling the updating of rules that serve as the basis for detecting malicious frames as necessary in an on-board network system. In an on-board network system equipped with multiple electronic control units (ECUs) that communicate via buses and fraud detecting ECUs that determine, based on fraud detection rules, whether messages transmitted on the buses conform to the rules, a fraud detection rule updating method is used in which delivery data including updated fraud detection rules is received from a server external to the on-board network system, and if a certain update condition is satisfied, the fraud detection rules in a fraud detecting ECU are updated to the updated fraud detection rules.
Abstract:
An update management method causes an external tool, capable of transmitting an update message to update data such as shared keys within electronic control units (ECUs) making up an onboard network, to update shared keys and the like within the ECUs, while reducing the risk of all ECUs being unauthorizedly rewritten in a case where secret information given to the external tool is leaked. The update management method receives and verifies update authority information indicating authority of the external tool. In a case that an update message instructing updating of shared keys or the like of one or multiple ECUs has been transmitted from the external tool, if the verification is successful and the update authority information indicates that the transmission of the update message is within the range of authority of the external tool, the update is executed at the ECU, and otherwise, update at the ECU is inhibited.
Abstract:
Included is identifying a location of a user; determining that transmission of notification information to the user is appropriate in a case where information included in management information held in the information collection database satisfies a predetermined condition, and a current location of the user identified in the identifying is a predetermined location; specifying, out of one or more presentation devices, a presentation device at which the notification information is to be displayed; generating the notification information of a content according to the identified location of the user, in a case where determination has been made in the determining that transmission of the notification information is appropriate; and performing communication to transmit the notification information that has been generated in the generating to the presentation device that has been specified in the specifying.
Abstract:
A control method causes a computer of an information terminal apparatus to perform a process including: receiving, from a first server, first display data causing a user of the information terminal apparatus to confirm the purpose of use of recipe information and asking for the permission to collect the recipe information; accessing a second server and receiving selected recipe information and control data for a cooker for preparation based on the selected recipe information; and when it is selected to permit collecting the recipe information for a purpose of use related to health care, and it is determined that selected recipe information corresponding to the set control data has an identifier indicating that the recipe is for food related to a specific constitution, disorder, disease, or allergy, transmitting the selected recipe information with the identifier, in association with a user ID of the information terminal apparatus, to the first server.