Electronic control device, recording medium, and gateway device

A non-transitory computer-readable recording medium for use in a computer, the non-transitory computer-readable recording medium having a computer program recorded thereon for causing the computer to execute:

• acquiring state information indicating at least one state of a state of a movable body or a state of an external environment in which the movable body is moving, and a control instruction indicating at least one instruction of a steering control instruction for steering the movable body or an acceleration control instruction for adjusting acceleration of the movable body;
• and
• determining whether the control instruction is a false control instruction by comparing the at least one state indicated by the state information with control indicated by the control instruction, the false control instruction being made by an attacker and being different from a normal control instruction transmitted by at least one of the computer or an electronic control unit,
• wherein, in the determining, the control instruction is determined to be the false control instruction when the state indicated by the state information is inconsistent with the control indicated by the control instruction.

A gateway device, comprising:

• an acquisition unit configured to acquire state information indicating at least one state of a state of a movable body or a state of an external environment in which the movable body is moving, and a control instruction indicating at least one instruction of a steering control instruction for steering the movable body or an acceleration control instruction for adjusting acceleration of the movable body;
• a determining unit configured to determine whether the control instruction is a false control instruction by comparing the at least one state indicated by the state information with control indicated by the control instruction, the false control instruction being made by an attacker and being different from a normal control instruction transmitted by at least one of the gateway device or an electronic control unit;
• and
• a disabling unit configured to avoid transferring the control instruction in a case where the determining unit determines that the control instruction is the false control instruction,
• wherein the determining unit determines that the control instruction is the false control instruction when the state indicated by the state information is inconsistent with the control indicated by the control instruction.