公开(公告)号：EP2397964A4

公开(公告)日：2014-08-13

申请号：EP10741112

申请日：2010-02-15

Applicant: PANASONIC CORP

Inventor： UNAGAMI YUJI ,  MAEDA MANABU ,  FUTA YUICHI ,  MATSUZAKI NATSUME ,  NONAKA MASAO ,  SHIZUYA HIROKI ,  SAKAI MASAO ,  ISOBE SHUJI ,  KOIZUMI EISUKE ,  HASEGAWA SHINGO ,  MIYAUCHI MAKOTO CARLOS

IPC: G06F11/00 ,  G06F21/55

CPC classification number: G06F21/554

公开(公告)号：EP2352109A4

公开(公告)日：2014-01-01

申请号：EP09828811

申请日：2009-11-20

Applicant: PANASONIC CORP

Inventor： MAEDA MANABU ,  UNAGAMI YUJI ,  FUTA YUICHI ,  MATSUZAKI NATSUME ,  NONAKA MASAO ,  SHIZUYA HIROKI ,  SAKAI MASAO ,  ISOBE SHUJI ,  KOIZUMI EISUKE ,  HASEGAWA SHINGO

IPC: G06F21/10 ,  G06F11/00 ,  G06F21/57

CPC classification number: G06F21/57 ,  G06F21/55

Abstract: To aim to provide a monitoring system and a program execution apparatus that are capable of maintaining the security intensity even in the case where an unauthentic install module is invalidated. Install modules 131 to 133 included in an apparatus 100 each monitor an install module, which is a monitoring target indicated by a monitoring pattern included therein, as to whether the install module performs malicious operations. An install module that performs malicious operations is invalidated in accordance with an instruction from an update server 200. The monitoring patterns are restructured by the update server 200 such that the install modules except the invalidated install module are each monitored by at least another one of the install modules. The restructured monitoring patterns are distributed to the install modules except the invalidated install module.

公开(公告)号：EP2479701A4

公开(公告)日：2017-03-29

申请号：EP10816887

申请日：2010-09-16

Applicant: PANASONIC CORP

Inventor： UNAGAMI YUJI ,  FUTA YUICHI ,  MATSUZAKI NATSUME ,  SHIZUYA HIROKI ,  SAKAI MASAO ,  ISOBE SHUJI ,  KOIZUMI EISUKE ,  HASEGAWA SHINGO ,  IWAZAKI JUNYA

IPC: G06F11/16 ,  G06F21/12 ,  G06F21/44 ,  G06F21/55 ,  H04L9/32

CPC classification number: H04L63/1416 ,  G06F11/16 ,  G06F21/121 ,  G06F21/44 ,  G06F21/556 ,  G06F2221/2103 ,  G06F2221/2107 ,  G06F2221/2129 ,  H04L9/085 ,  H04L9/0891 ,  H04L9/3234 ,  H04L9/3242 ,  H04L9/3263 ,  H04L9/3273 ,  H04L63/126

Abstract: The present invention aims to perform tamper detection on a protection control module without having detection modules come to know the key data and functions thereof. The detection modules of the present invention perform tamper detection by verifying whether or not the correspondence between the input and output data of the application decryption process performed by the protection control module is correct. Furthermore, the present invention offers improved security against leaks of the application output data by the detection modules by having a plurality of detection modules verify different data blocks.

Abstract translation: 本发明的目的，而不必检测模块来认识密钥数据和其功能进行的保护控制模块的篡改检测。 本发明的检测模块通过验证由所述保护控制模块所执行的应用程序的解密处理的输入和输出数据之间的对应关系是否为正确执行篡改检测。 进一步地，本发明通过具有检测模块一个多元化验证不同的数据块提供针对由所述检测模块的应用程序输出数据的泄漏改进的安全性。

公开(公告)号：EP2565812A4

公开(公告)日：2015-07-15

申请号：EP11774586

申请日：2011-04-15

Applicant: PANASONIC CORP

Inventor： FUTA YUICHI ,  UNAGAMI YUJI ,  MATSUZAKI NATSUME ,  SHIZUYA HIROKI ,  SAKAI MASAO ,  ISOBE SHUJI ,  KOIZUMI EISUKE ,  HASEGAWA SHINGO

IPC: G06F21/57 ,  G06F21/55

CPC classification number: G06F21/55 ,  G06F21/57 ,  G06F2221/2123 ,  G06F2221/2143

公开(公告)号：JP2010152877A

公开(公告)日：2010-07-08

申请号：JP2009264534

申请日：2009-11-20

Applicant: Panasonic Corp ,  パナソニック株式会社

Inventor： KAIJO YUJI ,  MAEDA MANABU ,  FUDA YUICHI ,  MATSUZAKI NATSUME ,  NONAKA MASAO ,  SHIZUTANI HIROKI ,  SAKAI MASAO ,  ISOBE SHUJI ,  KOIZUMI EISUKE ,  HASEGAWA SHINGO

IPC: G06F21/22 ,  G06F11/00

CPC classification number: G06F21/57

Abstract: PROBLEM TO BE SOLVED: To provide a software update system for updating software more securely by enhancing reliability to software update processing in an apparatus. SOLUTION: An update server 200 obtains from the apparatus 100 a verification result relating to alteration of each update module included in a protection control module 120 and an update module group 130. The update server 200 determines a processing sequence of the apparatus 100 in accordance with an obtained verification apparatus. Concretely, when it is determined that both the protection control module 120 and the update module are improper, the update server 200 transmits an instruction to update the improper protection control module 120 to the apparatus 100 giving priority to the invalidation of the improper update module. COPYRIGHT: (C)2010,JPO&INPIT

Abstract translation: 要解决的问题：提供一种软件更新系统，用于通过增强设备中的软件更新处理的可靠性来更安全地更新软件。 解决方案：更新服务器200从装置100获得与包括在保护控制模块120和更新模块组130中的每个更新模块的改变有关的验证结果。更新服务器200确定装置100的处理顺序 根据获得的验证装置。 具体地说，当确定保护控制模块120和更新模块都不正确时，更新服务器200将不正确的保护控制模块120的指令发送给优先权不正确的更新模块的无效的装置100。 版权所有（C）2010，JPO＆INPIT

公开(公告)号：JP2011248865A

公开(公告)日：2011-12-08

申请号：JP2011089302

申请日：2011-04-13

Applicant: Panasonic Corp ,  パナソニック株式会社

Inventor： KAIJO YUJI ,  FUTA YUICHI ,  MATSUZAKI NATSUME ,  SHIZUYA HIROKI ,  SAKAI MASAO ,  ISOBE HIDEJI ,  KOIZUMI EISUKE ,  HASEGAWA SHINGO

IPC: G06F21/22

CPC classification number: G06F11/3048 ,  G06F11/3065 ,  G06F21/12 ,  G06F21/552 ,  G06F21/6281 ,  G06F2221/2103 ,  G06F2221/2143

Abstract: PROBLEM TO BE SOLVED: To provide an alteration monitoring system with which an altered monitoring module can be identified without having increased amount of operations.SOLUTION: An information security apparatus 100c has a plurality of monitoring modules monitoring the alteration. A management device 200c includes a reception part 230c receiving monitoring results with respect to other monitoring modules by each monitoring module from the information security apparatus 100c, a detection part 220c detecting the abnormality using a part of monitoring results from the monitoring results received, a monitoring module of generation source of the monitoring results relating to the abnormality detected in the case in which the abnormality is detected, and a identification part 210c identifying the altered monitoring module from the monitoring modules identified by successively tracking the monitoring results from the corresponding monitoring module as the starting point to the generation source.

Abstract translation: 要解决的问题：提供一种改变监控系统，通过该系统可以识别出改变的监控模块，而不增加操作量。 解决方案：信息安全装置100c具有多个监视模块的监视模块。 管理装置200c包括从信息安全装置100c接收各监视模块对其他监视模块的监视结果的接收部230c，检测部220c，根据接收到的监视结果，使用监视结果的一部分来检测异常;监视 在检测到异常的情况下检测到的与异常相关的监视结果的发生源的模块，以及通过从相应的监视模块连续地跟踪监视结果而识别的监视模块的识别部分210c， 起源于生成源。 版权所有（C）2012，JPO＆INPIT