Information processing device and information processing method

An information processing method, comprising:

• obtaining items of information, the items of information including an item of frame information regarding a communication frame transmitted on an in-vehicle network of each of a plurality of vehicles;
• generating, using the items of information, an integrated rule that is suitable for the plurality of vehicles and that is for anomaly detection processing in the in-vehicle network of each of the plurality of vehicles;
• and
• outputting the integrated rule to the plurality of vehicles via a network, wherein
• the obtaining obtains, as the item of frame information regarding the communication frame transmitted on the in-vehicle network of each of the plurality of vehicles, individual rules generated based on communication frames transmitted on the in-vehicle network of each of the plurality of vehicles,
• the generating generates the integrated rule as a rule obtained by integrating the individual rules,
• the obtaining further obtains reliability information together with the individual rules, the reliability information indicating reliability of the individual rules, and
• when generating the integrated rule, the information processing method further generates the integrated rule with the reliability information obtained together with the individual rules to adjust a degree of contribution of each of the individual rules to the integrated rule.

An information processing device, comprising:

• a processor;
• and
• a memory including a program that, when executed by the processor, causes the processor to perform operations, the operations including:
• obtaining items of information, the items of information including an item of frame information regarding a communication frame transmitted on an in-vehicle network of each of a plurality of vehicles;
• generating, using the items of information, an integrated rule that is suitable for the plurality of vehicles and that is for anomaly detection processing in the in-vehicle network of each of the plurality of vehicles;
• and
• outputting the integrated rule to the plurality of vehicles via a network, wherein
• the processor obtains, as the item of frame information regarding the communication frame transmitted on the in-vehicle network of each of the plurality of vehicles, individual rules generated based on communication frames transmitted on the in-vehicle network of each of the plurality of vehicles,
• the processor generates, as the integrated rule, a rule obtained by integrating the individual rules obtained by the obtainer,
• when obtaining the items of information including the individual rules, the processor obtains reliability information together with the individual rules, the reliability information indicating reliability of the individual rules, and
• when generating the integrated rule, the processor generates the integrated rule with the reliability information obtained together with the individual rules to adjust a degree of contribution of each of the individual rules to the integrated rule.