Verification method, verification apparatus, and storage medium including program stored therein

Patent metadata

Field	Value
Publication number	US-12355896-B2
Application number	US-202318131448-A
Country	US
Kind code	B2
Filing date	Apr 6, 2023
Priority date	May 15, 2017
Publication date	Jul 8, 2025
Grant date	Jul 8, 2025

Abstract

A method for verifying content data to be used in a vehicle is provided. The method includes acquiring content data, acquiring, from partial data divided from the content data, a respective plurality of first hash values, acquiring a signature generated by using the first hash values and a key, acquiring state information that indicates a state of a vehicle, determining an integer N that is greater than or equal to one based on the acquired state information, generating, from N pieces of partial data included in the partial data, respective second hash values, verifying the content data by using each of (a) a subset of the plurality of first hash values respectively generated from partial data other than the N pieces of partial data, (b) the second hash values, and (c) the signature, and outputting information that indicates a result of the verifying.

First claim

What is claimed is:

1. A verification method for verifying content data to be used in a mobility entity, the verification method comprising:
acquiring the content data, the content data including main content data, a plurality of first hash values respectively generated from a first plurality of pieces of partial data obtained by dividing the main content data, and a signature generated using the plurality of first hash values and a secret key;
extracting, from the content data, the respective plurality of first hash values;
extracting, from the content data, the signature;
acquiring state information that indicates a state of the mobility entity;
determining an integer N that is greater than or equal to one based on the acquired state information, in a case where a size of the content data is greater than a predetermined size;
determining the integer N as a number of all pieces of partial data, in a case where a size of the content data is less than or equal to the predetermined size;
generating, from N pieces of partial data included in the first plurality of pieces of partial data, respective second hash values;
verifying the content data by using each of (a) a subset of the extracted plurality of first hash values which are those respectively corresponding to partial data other than the N pieces of partial data, (b) the generated second hash values, and (c) the extracted signature; and
outputting information that indicates a result of the verifying.

2. The verification method according to claim 1 , wherein
the state information indicates whether the mobility entity is running or not running, and
in the determining,
in response to a determination that the mobility entity is running, a value of the integer N is determined so as to be equal to a first value, and
in response to a determination that the mobility entity is not running, the value of the integer N is determined so as to be equal to a second value that is greater than the first value, and
the value of the integer N is determined based on a type or a size of the content data.

3. The verification method according to claim 1 , wherein
the generating includes:
randomly selecting the N pieces of partial data from the first plurality of pieces of partial data, and
generating a corresponding one of the respective second hash values from each of the selected N pieces of partial data.

4. The verification method according to claim 1 , wherein
the state information indicates, as the state of the mobility entity, a processing load imposed on an apparatus that executes the verification method, and
in the determining,
a value of the integer N is determined such that the higher the processing load is, the smaller the value of the integer Nis.

5. The verification method according to claim 1 , wherein
the state information indicates, as the state of the mobility entity, an amount of communication data included in a communication performed by an apparatus that executes the verification method, and
in the determining,
a value of the integer N is determined such that the greater the amount of communication data is, the smaller the value of the integer Nis.

6. The verification method according to claim 1 , wherein
the determining includes determining, based on a type of the content data, which pieces of the first plurality of pieces of partial data are selected as the N pieces of partial data.

7. The verification method according to claim 1 , wherein
the type of the content data includes a measure that indicates an update interval of the content data.

8. The verification method according to claim 1 , wherein the key is a secret key.

9. A verification apparatus that verifies content data to be used in a mobility entity, comprising:
a processor; and
a memory that includes at least one set of instructions that, when executed by the processor, causes the processor to execute operations including:
acquiring the content data, the content data including main content data, a plurality of first hash values respectively generated from a first plurality of pieces of partial data obtained by dividing the main content data, and a signature generated using the plurality of first hash values and a secret key;
extracting, from the content data, the respective plurality of first hash values;
extracting, from the content data, the signature;
acquiring state information that indicates a state of the mobility entity;
determining an integer N that is greater than or equal to one based on the acquired state information, in a case where a size of the content data is greater than a predetermined size;
determining the integer N as a number of all pieces of partial data, in a case where a size of the content data is less than or equal to the predetermined size;
generating, from N pieces of partial data included in the first plurality of pieces of partial data, respective second hash values;
verifying the content data by using each of (a) a subset of the extracted plurality of first hash values which are those respectively corresponding to partial data other than the N pieces of partial data, (b) the generated second hash values, and (c) the extracted signature; and
outputting information that indicates a result of the verifying.

10. A non-transitory computer-readable recording medium storing a program for verifying content data to be used in a mobility entity, the program causing, when executed by a computer, the computer to implement a method, the method comprising:
acquiring the content data, the content data including main content data, a plurality of first hash values respectively generated from a first plurality of pieces of partial data obtained by dividing the main content data, and a signature generated using the plurality of first hash values and a secret key;
extracting, from the content data, the respective plurality of first hash values;
extracting, from the content data, the signature;
acquiring state information that indicates a state of the mobility entity;
determining an integer N that is greater than or equal to one based on the acquired state information, in a case where a size of the content data is greater than a predetermined size;
determining the integer N as a number of all pieces of partial data, in a case where a size of the content data is less than or equal to the predetermined size;
generating, from N pieces of partial data included in the first plurality of pieces of partial data, respective second hash values;
verifying the content data by using each of (a) a subset of the extracted plurality of first hash values which are those respectively corresponding to partial data other than the N pieces of partial data, (b) the generated second hash values, and (c) the extracted signature; and
outputting information that indicates a result of the verifying.

11. A verification method for verifying content data to be used in a mobility, comprising:
acquiring the content data, the content data including main content data, a plurality of first hash values respectively generated from a first plurality of pieces of partial data obtained by dividing the main content data, and a signature generated using the plurality of first hash values and a secret key;
extracting, from the content data, the respective plurality of first hash values;
extracting, from the content data, the signature;
acquiring state information that indicates a state of the mobility;
determining an integer N that is greater than or equal to one based on the acquired state information, in a case where a size of the content data is greater than a predetermined size;
determining the integer N as a number of all pieces of par

Assignees

• Panasonic Ip Corp America

Inventors

• Unagami Yuji
• Maeda Manabu
• Haga Tomoyuki
• Matsushima Hideki
• Anzai Jun

Classifications

• H04L2209/84

  Vehicles · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• G08G1/09

  Arrangements for giving variable traffic instructions ({railroad crossing signals B61L; reflectors E01F, G08B}; indicating arrangements for variable information by selection or combination of individual elements G09F9/00) · CPC title