Abstract:
A monitoring server of an in-vehicle control network system includes a threat information generator that obtains first threat information pertaining to a threat that has occurred in a vehicle of a first vehicle type, a threat information abstractor that generates abstracted threat information by deleting information specific to the first vehicle type from the first threat information, and a display that outputs second threat information generated based on the abstracted threat information and including a risk value indicating a risk level of the threat to a second vehicle type different from the first vehicle type.
Abstract:
A module for a vehicle includes: a first communication module that transmits and receives first data to and from a first in-vehicle module; a second communication module that transmits and receives second data to and from a second in-vehicle module; and a control module that controls relay of third data among the first communication module and the second communication module. In a case where reception data received by the control module from the first or second communication module is unauthorized, the control module stops relaying the third data in accordance with a traveling state of the vehicle satisfying a predetermined condition, The traveling state includes: the vehicle being stopped; a vehicle speed being at or below a predetermined speed; brakes being applied; a hazard indicator being on; a driver being in a state capable of driving; and/or self-driving functions being in an off state.
Abstract:
An anomaly detection device is located between a network and a first ECU in the plurality of ECUs, and includes: a communication circuit; a processor; and a memory including a set of instructions that, when executed, causes the processor to perform operations including: receiving a message from the first ECU and transmitting the message to the network, and receiving a message from the network and transmitting the message to the first ECU, using the communication circuit; holding, in the memory, a received ID list; when an ID of the message received by the communication circuit from the network is not included in the received ID list, adding the ID to the received ID list; and when an ID of the message received by the communication circuit from the first ECU is included in the received ID list, causing the communication circuit not to transmit the message to the network.
Abstract:
A gateway that notifies a fraud detection server located outside a vehicle of information about an in-vehicle network system including an in-vehicle network includes: a priority determiner that determines a priority using at least one of: a state of the vehicle including the in-vehicle network system; an identifier of a message communicated on the in-vehicle network; and a result of fraud detection performed on the message; a frame transmitter-receiver that transmits and receives the message communicated on the in-vehicle network; a frame interpreter that extracts information about the in-vehicle network based on the message received by the frame transmitter-receiver; and a frame uploader that notifies the fraud detection server of notification information including the priority and the information about the in-vehicle network.
Abstract:
In an anomaly detection method that determines whether each frame in observation data constituted by a collection of frames sent and received over a communication network system is anomalous, a difference between a data distribution of a feature amount extracted from the frame in the observation data and a data distribution for a collection of frames sent and received over the communication network system, obtained at a different timing from the observation data, is calculated. A frame having a feature amount for which the difference is predetermined value or higher is determined to be an anomalous frame. An anomaly contribution level of feature amounts extracted from the frame determined to be an anomalous frame is calculated, and an anomalous payload part, which is at least one part of the payload corresponding to the feature amount for which the anomaly contribution level is at least the predetermined value, is output.
Abstract:
An anomaly detection electronic control unit connected to an in-vehicle network includes: a communicator that receives a first communication message indicating speed information of a vehicle including the in-vehicle network and a second communication message indicating peripheral information of the vehicle; a processor; and a memory including at least one set of instructions that, when executed by the processor causes the processor to perform operations including: (A) determining a first traveling state of the vehicle based on the speed information and a second traveling state of the vehicle based on the peripheral information; (B) determining, by comparing the first traveling state with the second traveling state, that the first communication message is anomalous when the first traveling state is different from the second traveling state; and (C) executing processing to handle an anomaly when the first communication message is determined to be anomalous.
Abstract:
An electronic control unit connected to a bus of a first network where first-type frames are transmitted following a first communication protocol and a second network where second-type frames are transmitted following a second communication protocol in an onboard network system. The electronic control unit sequentially receives the first-type and the second-type frames from the bus and the second network respectively, and stores in first and second reception buffers, respectively. The electronic control unit sequentially generates first-type data and second-type data by referencing the contents of the first reception buffer and the second reception buffer, and stores the first-type and second-type data in first and second transmission buffers, respectively. The first-type data is traveling control data for a vehicle, and the second-type data is other data. The first-type or second-type data that is priority type data is transmitted with priority.
Abstract:
A control method according to the present disclosure causes a computer of an information apparatus to: display on a display a display screen representing a floor plan including one or more rooms; and using at least one memory that associates first information indicating a type of each of one or more device icons representing one or more target devices with second information indicating an attribute of each of the one or more rooms, display a device icon having a room that corresponds to a type of a device icon among the one or more device icons in a region on the display screen corresponding to a room that corresponds to the device icon and display a device icon not having a room that corresponds to the type of the device icon among the one or more device icons in a prescribed region on the display screen.
Abstract:
When selection of a device icon representing one target device among one or more target devices is sensed in a region corresponding to one room included in a floor plan, a control screen for operating, or confirming a state of, the one target device corresponding to the sensed device icon is displayed on a display as overlapped on a display screen representing the floor plan, and device icons representing the target devices installed in the one room are moved out of a display region of the control screen.
Abstract:
A control method according to the present disclosure causes a computer of an information apparatus to: display on a display a display screen representing a floor plan of a building; display on the display screen device icons respectively representing one or more target devices, the device icons being movable when dragged and including a humidifier icon that represents a humidifier; and when it is sensed that the humidifier icon is selected, and is moved on the floor plan, display an effect range in which an effect of the humidifier extends, in a region corresponding to a room in the floor plan where a drop of the humidifier icon is sensed.