# US 12,113,817 B2 · Information processing device and information processing method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,113,817 B2
- Document ID: US12113817B2
- Status: Granted
- Kind: B2
- Application number: 17/724,039
- Filed: 2022-04-19
- Published: 2022-07-28
- Granted: 2024-10-08
- Earliest claimed: 2019-11-01
- Assignees: Panasonic Automotive Systems Co., Ltd.
- Applicants: Panasonic Intellectual Property Management Co., Ltd.
- Inventors: Kento Tamura; Toshihisa Nakano; Kaoru Yokota
- Web page: https://patentgrep.com/patent/US12113817B2

## CPC

- H04L 63/1425: {Traffic logging, e.g. anomaly detection}
- B60W 40/04: Traffic conditions
- B60W 40/09: Driving style or behaviour
- B60W 50/0205: {Diagnosing or detecting failures; Failure detection models}
- G07C 5/02: Registering or indicating driving, working, idle, or waiting time only (apparatus forming part of taximeters G07B13/00)
- H04L 12/12: Arrangements for remote connection or disconnection of substations or of equipment thereof
- H04L 12/66: Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04W 4/48: for in-vehicle communication
- H04W 12/121: Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
- B60W 2554/408: Traffic behavior, e.g. swarm
- B60W 2556/10: Historical data
- B60W 2556/20: Data confidence level
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- B60W: CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A server includes: an obtainer that obtains items of information including an item of frame information regarding a communication frame transmitted on an in-vehicle network of each of a plurality of vehicles; and a generator that generates an integrated rule that is suitable for the items of information obtained by the obtainer and is for anomaly detection processing in the in-vehicle network of one of the vehicles; and a provider that outputs the integrated rule generated by the generator. For example, the obtainer obtains condition information indicating a condition pertaining to each of the plurality of vehicles at a time when the communication frame is transmitted on the in-vehicle network, and the generator generates the integrated rule using the items of frame information associated with the condition information.

## Claims

### Claim 1

An information processing device, comprising:
an obtainer that obtains items of information, the items of information including an item of frame information regarding a communication frame transmitted on an in-vehicle network of each of a plurality of vehicles;
a generator that generates, using the items of information, an integrated rule that is suitable for the plurality of vehicles and that is for anomaly detection processing in the in-vehicle network of each of the plurality of vehicles; and
an outputter that outputs the integrated rule generated by the generator to the plurality of vehicles via a network, wherein
the obtainer obtains, as the item of frame information regarding the communication frame transmitted on the in-vehicle network of each of the plurality of vehicles, individual rules generated based on communication frames transmitted on the in-vehicle network of each of the plurality of vehicles,
the generator generates, as the integrated rule, a rule obtained by integrating the individual rules obtained by the obtainer,
when obtaining the items of information including the individual rules, the obtainer obtains reliability information together with the individual rules, the reliability information indicating reliability of the individual rules, and
when generating the integrated rule, the generator generates the integrated rule with the reliability information obtained together with the individual rules to adjust a degree of contribution of each of the individual rules to the integrated rule.

### Claim 2 (depends on 1)

The information processing device according to claim 1, wherein
the obtainer obtains condition information indicating a condition pertaining to each of the plurality of vehicles at a time when the communication frame is transmitted on the in-vehicle network of each of a plurality of vehicles, and associates the condition information with the item of frame information,
the generator generates the integrated rule using the item of frame information associated with the condition information of each of the plurality of vehicles, among the items of information obtained by the obtainer, and
the outputter outputs the condition information together with the integrated rule.

### Claim 3 (depends on 1)

The information processing device according to claim 1, wherein
the obtainer obtains, as the item of frame information transmitted on the in-vehicle network of each of the plurality of vehicles, (i) communication data indicating the communication frame transmitted on the in-vehicle network or (ii) log data of an in-vehicle device connected to the in-vehicle network, and
the generator generates, as the integrated rule, a rule stipulating a condition to be satisfied by the communication data or the log data obtained by the obtainer.

### Claim 4 (depends on 1)

The information processing device according to claim 1, wherein
the reliability information includes (i) a total number of items of data used in generating the individual rules or (ii) a total mileage of a vehicle, a total travel time of the vehicle, or a total amount of data transmitted by the vehicle.

### Claim 5 (depends on 1)

The information processing device according to claim 1, wherein
the reliability information is generated based on (i) a total number of items of data used in generating the individual rules or (ii) a total mileage of a vehicle, a total travel time of the vehicle, or a total amount of data transmitted by the vehicle.

### Claim 6

An information processing method, comprising:
obtaining items of information, the items of information including an item of frame information regarding a communication frame transmitted on an in-vehicle network of each of a plurality of vehicles;
generating, using the items of information, an integrated rule that is suitable for the plurality of vehicles and that is for anomaly detection processing in the in-vehicle network of each of the plurality of vehicles; and
outputting the integrated rule to the plurality of vehicles via a network, wherein
the obtaining obtains, as the item of frame information regarding the communication frame transmitted on the in-vehicle network of each of the plurality of vehicles, individual rules generated based on communication frames transmitted on the in-vehicle network of each of the plurality of vehicles,
the generating generates the integrated rule as a rule obtained by integrating the individual rules,
the obtaining further obtains reliability information together with the individual rules, the reliability information indicating reliability of the individual rules, and
when generating the integrated rule, the information processing method further generates the integrated rule with the reliability information obtained together with the individual rules to adjust a degree of contribution of each of the individual rules to the integrated rule.

### Claim 7

An information processing device, comprising:
a processor; and
a memory including a program that, when executed by the processor, causes the processor to perform operations, the operations including:
obtaining items of information, the items of information including an item of frame information regarding a communication frame transmitted on an in-vehicle network of each of a plurality of vehicles;
generating, using the items of information, an integrated rule that is suitable for the plurality of vehicles and that is for anomaly detection processing in the in-vehicle network of each of the plurality of vehicles; and
outputting the integrated rule to the plurality of vehicles via a network, wherein
the processor obtains, as the item of frame information regarding the communication frame transmitted on the in-vehicle network of each of the plurality of vehicles, individual rules generated based on communication frames transmitted on the in-vehicle network of each of the plurality of vehicles,
the processor generates, as the integrated rule, a rule obtained by integrating the individual rules obtained by the obtainer,
when obtaining the items of information including the individual rules, the processor obtains reliability information together with the individual rules, the reliability information indicating reliability of the individual rules, and
when generating the integrated rule, the processor generates the integrated rule with the reliability information obtained together with the individual rules to adjust a degree of contribution of each of the individual rules to the integrated rule.

### Claim 8 (depends on 7)

The information processing device according to claim 7, wherein
the processor obtains condition information indicating a condition pertaining to each of the plurality of vehicles at a time when the communication frame is transmitted on the in-vehicle network of each of a plurality of vehicles, and associates the condition information with the item of frame information,
the processor generates the integrated rule using the item of frame information associated with the condition information of each of the plurality of vehicles, among the items of information obtained, and
the processor outputs the condition information together with the integrated rule.

### Claim 9 (depends on 7)

The information processing device according to claim 7, wherein
the processor obtains, as the item of frame information transmitted on the in-vehicle network of each of the plurality of vehicles, (i) communication data indicating the communication frame transmitted on the in-vehicle network or (ii) log data of an in-vehicle device connected to the in-vehicle network, and
the processor generates, as the integrated rule, a rule stipulating a condition to be satisfied by the communication data or the log data obtained.

### Claim 10 (depends on 7)

The information processing device according to claim 7, wherein
the reliability information includes (i) a total number of items of data used in generating the individual rules or (ii) a total mileage of a vehicle, a total travel time of the vehicle, or a total amount of data transmitted by the vehicle.

### Claim 11 (depends on 7)

The information processing device according to claim 7, wherein
the reliability information is generated based on (i) a total number of items of data used in generating the individual rules or (ii) a total mileage of a vehicle, a total travel time of the vehicle, or a total amount of data transmitted by the vehicle.