ANOMALY DETECTION DEVICE, ANOMALY DETECTION METHOD, AND RECORDING MEDIUM

    公开(公告)号:US20230164159A1

    公开(公告)日:2023-05-25

    申请号:US18090018

    申请日:2022-12-28

    CPC classification number: H04L63/1425 H04L63/101

    Abstract: An anomaly detection device is located between a network and a first ECU in the plurality of ECUs, and includes: a communication circuit; a processor; and a memory including a set of instructions that, when executed, causes the processor to perform operations including: receiving a message from the first ECU and transmitting the message to the network, and receiving a message from the network and transmitting the message to the first ECU, using the communication circuit; holding, in the memory, a received ID list; when an ID of the message received by the communication circuit from the network is not included in the received ID list, adding the ID to the received ID list; and when an ID of the message received by the communication circuit from the first ECU is included in the received ID list, causing the communication circuit not to transmit the message to the network.

    INFORMATION PROCESSING DEVICE, INFORMATION PROCESSING METHOD, AND RECORDING MEDIUM

    公开(公告)号:US20210240838A1

    公开(公告)日:2021-08-05

    申请号:US17225495

    申请日:2021-04-08

    Abstract: An information processing device comprising: a processor; and a memory including at least one set of instructions that, when executed by the processor, causes the processor to perform operations. The operations include: obtaining incident information about an incident of a cyberattack that occurred in a vehicle; obtaining second vehicle information about a state of a second vehicle via communication with the second vehicle; determining a risk level of a vehicle function of the second vehicle based on a degree of matching between the incident information and the second vehicle information; generating a function restriction command for restricting a vehicle function of a first vehicle corresponding to the vehicle function of the second vehicle, when the risk level is higher than a first criterion, the vehicle function of the first vehicle being one among one or more vehicle functions of the first vehicle; and outputting the function restriction command.

    INFORMATION PROCESSING DEVICE, INFORMATION PROCESSING METHOD, AND RECORDING MEDIUM

    公开(公告)号:US20210232687A1

    公开(公告)日:2021-07-29

    申请号:US17230496

    申请日:2021-04-14

    Abstract: An information processing device includes: a processor; and a memory including at least one set of instructions that, when executed by the processor, causes the processor to perform operations. The operations include: obtaining incident information about an incident of a cyberattack that occurred in a vehicle; obtaining first vehicle information about a state of a first vehicle; storing, in the memory, the incident information and the first vehicle information; determining a risk level of a vehicle function of the first vehicle, based on a degree of matching between the incident information and the first vehicle information stored in the memory, the vehicle function of the first vehicle being one among one or more vehicle functions of the first vehicle; generating a function restriction command for restricting the vehicle function, when the risk level is higher than a first criterion; and outputting the function restriction command.

    DATA ANALYSIS APPARATUS
    4.
    发明申请

    公开(公告)号:US20200053113A1

    公开(公告)日:2020-02-13

    申请号:US16656051

    申请日:2019-10-17

    Abstract: A data analysis apparatus includes: a processor; and a memory including a set of instructions that, when executed by the processor causes the processor to perform operations including: obtaining anomaly analysis results each including information identifying anomaly data of first and second vehicles provided with an in-vehicle network including one or more networks; identifying, for each of the first and second vehicles, a primary ECU having higher relevance to the anomaly data among ECUs connected to the in-vehicle network; identifying, for each of the first and second vehicles, ECUs connected to a network in the one or more networks to which the primary ECU is connected as a secondary ECU set; and identifying an ECU included in both of the secondary ECU set identified for the first vehicle and the secondary ECU set identified for the second vehicle and satisfying a predetermined condition as an anomaly-relevant ECU.

Patent Agency Ranking