Communication log aggregation device and communication log aggregation method

    公开(公告)号:US11929895B2

    公开(公告)日:2024-03-12

    申请号:US17854182

    申请日:2022-06-30

    IPC分类号: H04L43/026 G07C5/08 H04L67/12

    摘要: A communication log aggregation device includes: a communicator that obtains flow information including one or more flow records and first statistical information for each flow from each of collection devices, the one or more flow records each including flow identification information included in a message received by at least one observer that is disposed in a control network system, the flow being classified based on the flow identification information, the collection devices each collecting the one or more flow records and the first statistical information for each flow from the message received by the observer; and a flow aggregator that generates aggregated flow information by performing at least one of the following: (i) selecting at least one of the one or more flow records, (ii) adding second statistical information, and (iii) deleting at least one of the one or more flow records, and outputs the aggregated flow information.

    Anomalous vehicle detection server and anomalous vehicle detection method

    公开(公告)号:US11829472B2

    公开(公告)日:2023-11-28

    申请号:US17380228

    申请日:2021-07-20

    IPC分类号: G06F21/14 G06F21/56 G06F21/55

    CPC分类号: G06F21/56 G06F21/552

    摘要: An anomalous vehicle detection server includes an anomaly score calculator that detects a suspicious behavior different from a predetermined driving behavior based on pieces of vehicle information that are received from a plurality of vehicles, respectively, and are each based on a vehicle log including the content of an event that has occurred in a vehicle system provided in the vehicle, and acquires an anomaly score of each of the plurality of vehicles that indicates a likelihood that reverse engineering is performed on the vehicle; and an anomalous vehicle determiner that determines whether one vehicle of the plurality of vehicles is an anomalous vehicle based on the anomaly score of the one vehicle and a statistical value of the anomaly scores of two or more vehicles of the plurality of vehicles.

    Method for handling case of detecting unauthorized frame transmitted over onboard network

    公开(公告)号:US10896616B2

    公开(公告)日:2021-01-19

    申请号:US16413035

    申请日:2019-05-15

    摘要: An anomaly handling method using a roadside device is disclosed. The method includes receiving, from a vehicle, an anomaly detection notification, which includes level information indicating a level affecting safety, and a location of the vehicle. The method also includes obtaining a location of the roadside device and determining whether a distance between the location of the vehicle and the location of the roadside device is within a predetermined range. When the distance is within the predetermined range and shorter than a first predetermined distance, transmitting the received anomaly detection notification externally from the roadside device. When the distance is within the predetermined range and is longer than or equal to the first predetermined distance, changing to decrement a level indicated by the level information, and transmitting changed anomaly detection notification. When the distance is not within the predetermined range, not transmitting the received anomaly detection notification.