-
公开(公告)号:US20240364727A1
公开(公告)日:2024-10-31
申请号:US18766200
申请日:2024-07-08
Inventor: Takahiro ADACHI , Yoshihiro UJIIE , Takeshi KISHIKAWA
IPC: H04L9/40
CPC classification number: H04L63/1425
Abstract: An anomaly detection device detects an anomaly in an in-vehicle network system including two or more electronic control units and one or more networks and includes: ECU attribute storage in which attributes of the two or more electronic control units each of which has been set for a corresponding one of the two or more electronic control units are stored; a communicator that transmits and receives a message on the one or more networks; and an anomaly detector that detects anomalous communication by using an attribute of a message source electronic control unit or an attribute of a message destination electronic control unit among the attributes stored in the ECU attribute storage. The attribute stored in the ECU attribute storage indicates the function of the electronic control unit including the attribute or the type of information that is handled by the electronic control unit including the attribute.
-
2.
公开(公告)号:US20240236115A1
公开(公告)日:2024-07-11
申请号:US18584704
申请日:2024-02-22
Inventor: Yoshihiro UJIIE , Jun ANZAI , Yoshihiko KITAMURA , Masato TANABE , Hideki MATSUSHIMA , Tomoyuki HAGA , Takeshi KISHIKAWA , Ryota SUGIYAMA
IPC: H04L9/40 , B60R16/023 , H04L12/40 , H04L67/12
CPC classification number: H04L63/123 , B60R16/023 , H04L12/40 , H04L63/08 , H04L63/102 , H04L63/20 , H04L67/12 , H04L2012/40215 , H04L2012/40273
Abstract: An electronic control unit is connected to a network in an in-vehicle network system. The electronic control unit includes a first control circuit that operates on a first operating system and a second control circuit that operates on a second operating system. The first control circuit is connected to the network via the second control circuit. The second control circuit performs a first determination process on frames to determine conformity of the frames with a first rule. Upon determining that the frames conform to the first rule, the second control circuit transmits contents of the frames to the first control circuit. The first control circuit performs a second determination process on the contents of the frames to determine conformity with a second rule. The second rule is different from the first rule.
-
公开(公告)号:US20240232316A1
公开(公告)日:2024-07-11
申请号:US18609846
申请日:2024-03-19
Inventor: Yoshihiro UJIIE , Hideki MATSUSHIMA , Makoto FUJIWARA
Abstract: An authentication method is used by an automated driving system that includes a vehicle and an external device, the external device communicating with the vehicle to cause the vehicle to implement automated driving. The vehicle holds a first certificate that certifies validity of the vehicle. The external device holds a second certificate that certifies validity of the external device. The authentication method includes: validating a third certificate that certifies validity of a combination of the vehicle and the external device, in accordance with a result of device authentication performed between the vehicle and the external device by reference to the first certificate and the second certificate.
-
公开(公告)号:US20240086290A1
公开(公告)日:2024-03-14
申请号:US18519690
申请日:2023-11-27
Inventor: Ryo HIRANO , Yoshihiro UJIIE , Takeshi KISHIKAWA , Tomoyuki HAGA , Jun ANZAI , Yoshiharu IMAMOTO
CPC classification number: G06F11/301 , B60W50/04
Abstract: A monitoring device includes three or more monitors each monitoring, as a monitoring target, at least one of software and a communication log. The three or more monitors include a first monitor operating with a first execution privilege, a second monitor operating with a second execution privilege having a reliability level lower than the first execution privilege, and a third monitor operating with a third execution privilege having a reliability level that is the same as the second execution privilege or that is lower than the second execution privilege. The first monitor monitors software of the second monitor, and at least one of the first monitor or the second monitor monitors software of the third monitor.
-
公开(公告)号:US20230205181A1
公开(公告)日:2023-06-29
申请号:US18112311
申请日:2023-02-21
Inventor: Takeshi KISHIKAWA , Yoshihiro UJIIE , Ryo HIRANO
IPC: G05B19/4155 , G05D1/00
CPC classification number: G05B19/4155 , G05D1/0038 , G05D1/0061 , G05B2219/50391
Abstract: A control mode switching apparatus switches a control mode of a robot. The control mode includes at least two of a remote control mode, a manual control mode, and an autonomous control mode. The control mode switching apparatus includes: an anomaly detector that, based on a communication message on a control network in the robot and the control mode, obtains a detection result of at least one anomaly among a user anomaly caused by user control, a robot anomaly caused by the control network, an operating environment anomaly caused by an operating environment of the robot, and an application anomaly caused by an application; and a switcher that calculates, for each type of anomaly detected, a score indicating a likelihood that the type is a cause of the anomaly in the robot, and switches the control mode based on the score calculated.
-
公开(公告)号:US20210051090A1
公开(公告)日:2021-02-18
申请号:US17089277
申请日:2020-11-04
Inventor: Takeshi KISHIKAWA , Yoshihiro UJIIE , Ryo HIRANO
IPC: H04L12/755 , H04L12/717 , H04L12/44 , H04L12/40 , H04L12/46
Abstract: A secure star coupler in a communication network adopting a time-triggered protocol based on a time slot include: transceivers each of which is connected to one of branches and transmits and receives signals; a routing table holder that holds a predetermined rule indicating a correspondence between a time slot and a branch; and a router that routes a signal received from a first branch to another branch unless a no-transfer condition is satisfied. The no-transfer condition includes a condition that the predetermined rule is not followed by the first branch and a condition that routing of a signal received from a second branch different from the first branch has started in the time slot.
-
公开(公告)号:US20200344116A1
公开(公告)日:2020-10-29
申请号:US16915187
申请日:2020-06-29
Inventor: Manabu MAEDA , Hideki MATSUSHIMA , Tomoyuki HAGA , Yoshihiro UJIIE , Takeshi KISHIKAWA
IPC: H04L12/24 , B60R16/023 , G06F11/00 , B60R16/02 , G06F11/36 , G06F8/654 , G06F8/71 , H04L12/46 , H04L12/40 , H04L12/66
Abstract: A gateway device connected to a network used in communication by multiple electronic control units provided on-board a vehicle. The gateway device performs operations including receiving firmware update information that includes updated firmware for one electronic control unit among the electronic control units, and acquiring system configuration information indicating a function of each of the electronic control units connected to the network. The gateway device further performs a controlling operation to update firmware of the one electronic control unit, for which updated firmware is received by the receiving, on a basis of the updated firmware, after an operation verification of the updated firmware is performed in an operating environment appropriately. The operating environment being configured with electronic control units of the same functions as each of the electronic control units indicated by the system configuration information.
-
8.
公开(公告)号:US20200274883A1
公开(公告)日:2020-08-27
申请号:US15930093
申请日:2020-05-12
Inventor: Yoshihiro UJIIE , Jun ANZAI , Yoshihiko KITAMURA , Masato TANABE , Hideki MATSUSHIMA , Tomoyuki HAGA , Takeshi KISHIKAWA , Ryota SUGIYAMA
IPC: H04L29/06 , H04L29/08 , H04L12/40 , B60R16/023
Abstract: An electronic control unit is connected to a network in an in-vehicle network system. The electronic control unit includes a first control circuit and a second control circuit. The first control circuit is connected to the network via the second control circuit. The second control circuit performs a first determination process on a frame to determine conformity of the frame with a first rule. Upon determining that the frame conforms to the first rule, the second control circuit transmits the frame to the first control circuit. The first control circuit performs a second determination process on the frame to determine conformity of the frame with a second rule. The second rule is different from the first rule.
-
公开(公告)号:US20200186552A1
公开(公告)日:2020-06-11
申请号:US16788641
申请日:2020-02-12
Inventor: Manabu MAEDA , Hideki MATSUSHIMA , Tomoyuki HAGA , Yuji UNAGAMI , Yoshihiro UJIIE , Takeshi KISHIKAWA
IPC: H04L29/06 , B60R16/023 , H04L12/28
Abstract: A fraud detecting method for use in an in-vehicle network system including a plurality of electronic control units that communicate with each other via a network includes detecting whether a state of a vehicle satisfies a first condition or a second condition, and switching, upon detecting that the state of the vehicle satisfies the first condition or the second condition, an operation mode of a fraud-sensing electronic control unit connected to the network between a first mode in which a first type of detecting process for detecting a fraudulent message in the network is performed and a second mode in which the first type of detecting process is not performed.
-
10.
公开(公告)号:US20190124091A1
公开(公告)日:2019-04-25
申请号:US16217460
申请日:2018-12-12
Inventor: Yoshihiro UJIIE , Jun ANZAI , Yoshihiko KITAMURA , Masato TANABE , Hideki MATSUSHIMA , Tomoyuki HAGA , Takeshi KISHIKAWA , Ryota SUGIYAMA
IPC: H04L29/06 , H04L29/08 , B60R16/023 , H04L12/40
Abstract: An electronic control unit is connected to an in-vehicle network bus in an in-vehicle network system. The electronic control unit includes a first control circuit and a second control circuit. The first control circuit is connected to the in-vehicle network bus via the second control circuit over wired communication and/or wireless communication. The first control circuit performs a first determination process on a frame to determine conformity of the frame with a first rule. The second control circuit performs a second determination process on the frame to determine conformity of the frame with a second rule, and, upon determining that the frame conforms to the second rule, transmits the frame to the in-vehicle network bus.
-
-
-
-
-
-
-
-
-