On-vehicle security measure device, on-vehicle security measure method, and security measure system

An on-vehicle security measurement method performed by at least an on-vehicle security measurement device and comprising:

• collecting communication logs;
• analyzing the communication logs that have been collected;
• determining whether or not an error occurrence frequency exceeds a predetermined threshold value, based on an analysis result of the communication logs that have been collected;
• cause an alert to be issued when having determined that the error occurrence frequency exceeds the predetermined threshold value;
• blocking a communication path where an error has occurred when a state where the error occurrence frequency exceeds the predetermined threshold value continues after the alert has been caused to be issued;
• and
• preventing an engine of a vehicle from being started when the state where the error occurrence frequency exceeds the predetermined threshold value continues after the alert has been caused to be issued.

An on-vehicle security measurement system comprising a cloud server and an on-vehicle system that is configured to communicate with the cloud server through a communication network,

• wherein the on-vehicle system includes:
• at least one first memory storing first instructions;
• and
• at least one first processor configured to execute the first instructions to:
• collect communication logs;
• analyze the communication logs that have been collected;
• determine whether or not an error occurrence frequency exceeds a predetermined threshold value, based on an analysis result of the communication logs that have been collected;
• cause an alert to be issued when having determined that the error occurrence frequency exceeds the predetermined threshold value;
• and
• transmit an indication that the error occurrence frequency has exceeded the predetermined threshold to the cloud server through the communication network when a state where the error occurrence frequency exceeds the predetermined threshold value continues after the alert has been caused to be issued, and
• wherein the cloud server includes:
• at least one second memory storing second instructions;
• and
• one or more second processors configured to execute the second instructions to:
• transmit an instruction to the on-vehicle system to block a communication path where an error has occurred when the indication has been received;
• and
• transmit an instruction to the on-vehicle system to prevent an engine of a vehicle from being started when the indication has been received.