# US 2021/0240838 A1 · Information processing device, information processing method, and recording medium > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0240838 A1 - Document ID: US20210240838A1 - Status: Published application - Kind: A1 - Application number: 17/225,495 - Filed: 2021-04-08 - Published: 2021-08-05 - Earliest claimed: 2018-10-17 - Assignees: Panasonic Intellectual Property Corporation of America - Applicants: Panasonic Intellectual Property Corporation of America - Inventors: Takamitsu SASAKI; Ryota TAKAHASHI - Web page: https://patentgrep.com/patent/US20210240838A1 ## CPC - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - B60R 25/01: operating on vehicle systems or fittings, e.g. on doors, seats or windscreens - B60R 25/102: a signal being sent to a remote location, e.g. a radio signal being transmitted to a police station, a security company or the owner - G06F 21/552: {involving long-term monitoring or reporting} - G06F 21/629: {to features or functions of an application} - G08G 1/0112: {from the vehicle, e.g. floating car data [FCD]} - G08G 1/0133: {for classifying traffic situation} - G08G 1/0141: {for traffic information dissemination} - G08G 1/052: with provision for determining speed or overspeed {(speed measuring in general G01P)} - G08G 1/096725: {where the received information generates an automatic action on the vehicle control} - H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - G06F 2221/033: Test or assess software - H04L 2209/84: Vehicles - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - B60R: VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR - G08G: TRAFFIC CONTROL SYSTEMS (guiding railway traffic, ensuring the safety of railway traffic B61L; arrangement of road signs or traffic signals E01F9/00; radar or analogous systems, sonar systems, lidar systems specially adapted for traffic control G01S13/91, G01S15/88, G01S17/88; {radar or analogous systems, sonar systems, lidar systems specially adapted for anti-collision purposes G01S13/93, G01S15/93, G01S17/93}) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An information processing device comprising: a processor; and a memory including at least one set of instructions that, when executed by the processor, causes the processor to perform operations. The operations include: obtaining incident information about an incident of a cyberattack that occurred in a vehicle; obtaining second vehicle information about a state of a second vehicle via communication with the second vehicle; determining a risk level of a vehicle function of the second vehicle based on a degree of matching between the incident information and the second vehicle information; generating a function restriction command for restricting a vehicle function of a first vehicle corresponding to the vehicle function of the second vehicle, when the risk level is higher than a first criterion, the vehicle function of the first vehicle being one among one or more vehicle functions of the first vehicle; and outputting the function restriction command. ## Claims ### Claim 1 An information processing device that processes information about a first vehicle and information about a second vehicle, the information processing device comprising: a processor; and a memory including at least one set of instructions that, when executed by the processor, causes the processor to perform operations including: obtaining incident information about an incident of a cyberattack that occurred in a vehicle; obtaining second vehicle information about a state of the second vehicle via communication with the second vehicle; storing, in the memory, the incident information and the second vehicle information; determining a risk level of a vehicle function of the second vehicle based on a degree of matching between the incident information and the second vehicle information; generating a function restriction command for restricting a vehicle function of the first vehicle corresponding to the vehicle function of the second vehicle, when the risk level is higher than a first criterion, the vehicle function of the first vehicle being one among one or more vehicle functions of the first vehicle; and outputting the function restriction command. ### Claim 2 (depends on 1) The information processing device according to claim 1, wherein the generating of function restriction command includes generating, as the function restriction command, a function invalidation command for invalidating the vehicle function of the first vehicle corresponding to the vehicle function of the second vehicle, when the risk level is higher than a second criterion that is higher than the first criterion. ### Claim 3 (depends on 1) The information processing device according to claim 1, wherein the operations further include: generating a function restriction cancellation command for cancelling a restriction on the vehicle function of the first vehicle corresponding to the vehicle function of the second vehicle, when the risk level of the vehicle function of the second vehicle is lower than the first criterion, and the outputting includes outputting the function restriction cancellation command. ### Claim 4 (depends on 3) The information processing device according to claim 3, wherein the determining of risk level includes predetermining the risk level of the vehicle function of the second vehicle, when a traveling state of the second vehicle indicated by the second vehicle information changes. ### Claim 5 (depends on 4) The information processing device according to claim 4, wherein, when the traveling state of the second vehicle changes from a moving state to a stopped state, the generating of function restriction cancellation command includes generating the function restriction cancellation command for cancelling a restriction on a communication-related function among the one or more vehicle functions of the first vehicle. ### Claim 6 (depends on 3) The information processing device according to claim 3, wherein, when the incident information stored in the memory includes incident information about an incident that occurred in the second vehicle, the determining of risk level includes determining the risk level of the vehicle function of the second vehicle to be higher than the first criterion. ### Claim 7 (depends on 3) The information processing device according to claim 3, wherein, when the risk level of the vehicle function of the second vehicle is higher than a third criterion, and a distance between a traveling position of the first vehicle and a traveling position of the second vehicle is less than or equal to a predetermined distance, the generating of risk countermeasure command includes generating a function restriction command for restricting a traveling system function among the one or more vehicle functions of the first vehicle. ### Claim 8 (depends on 7) The information processing device according to claim 7, wherein, when the distance between the traveling position of the first vehicle and the traveling position of the second vehicle is greater than the predetermined distance, the generating of function restriction cancellation command includes generating the function restriction cancellation command for cancelling a restriction on the traveling system function of the first vehicle. ### Claim 9 (depends on 1) The information processing device according to claim 1, wherein the vehicle function of the first vehicle is a function related to traveling of the first vehicle, the function related to the traveling of the first vehicle is one of an automated driving function and a driving support function, and the function restriction command for restricting the vehicle function is a command for stopping the function related to the traveling of the first vehicle. ### Claim 10 (depends on 1) The information processing device according to claim 1, wherein the vehicle function of the first vehicle is a function related to traveling of the first vehicle, the function restriction command for restricting the vehicle function of the first vehicle is one of a command for setting an upper speed limit of the first vehicle to a predetermined speed and a command for setting a distance between the first vehicle and another vehicle to be greater than or equal to a predetermined distance. ### Claim 11 (depends on 1) The information processing device according to claim 1, wherein the vehicle function of the first vehicle is a function related to communication involving the first vehicle, and the function related to the communication involving the first vehicle is at least one of communication between devices of the first vehicle, communication between the first vehicle and a device of an occupant of the first vehicle, or communication between the first vehicle and a device external to the first vehicle. ### Claim 12 (depends on 1) The information processing device according to claim 1, wherein the vehicle function of the first vehicle is a communication function of the first vehicle, and the function restriction command for restricting the vehicle function of the first vehicle is one of a command for stopping the communication function of the first vehicle and a command for restricting a communication bandwidth of the communication function of the first vehicle to a predetermined bandwidth. ### Claim 13 An information processing method performed by a processor included in an information processing device that processes information about a first vehicle and information about a second vehicle, the information processing method comprising: obtaining incident information about an incident of a cyberattack that occurred in a vehicle; obtaining second vehicle information about a state of the second vehicle via communication with the second vehicle; determining a risk level of a vehicle function of the second vehicle based on a degree of matching between the incident information and the second vehicle information; and generating and outputting a function restriction command for restricting a vehicle function of the first vehicle corresponding to the vehicle function of the second vehicle, when the risk level is higher than a first criterion. ### Claim 14 A non-transitory computer-readable recording medium having a program for use in an information processing device that includes a processor and a memory, the information processing device processing information about a first vehicle and information about a second vehicle, the program, when executed by the processor using the memory, causing the processor to execute: obtaining incident information about an incident of a cyberattack that occurred in a vehicle; obtaining second vehicle information about a state of the second vehicle via communication with the second vehicle; determining a risk level of a vehicle function of the second vehicle based on a degree of matching between the incident information and the second vehicle information; and generating and outputting a function restriction command for restricting a vehicle function of the first vehicle corresponding to the vehicle function of the second vehicle, when the risk level is higher than a first criterion.