Granted Patent B2

US 12,355,896 · App. 18/131,448 · Granted Jul 8, 2025

Inventors: Yuji Unagami (Osaka, JP); Manabu Maeda (Osaka, JP); Tomoyuki Haga (Nara, JP); Hideki Matsushima (Tokyo, JP); Jun Anzai (Kanagawa, JP)

Assignee: PANASONIC INTELLECTUAL PROPERTY CORPORATION OF AMERICA

H04L9/3247G06F21/6236G06F21/64H04L9/3242H04L63/123H04L67/12G08G1/09H04L2209/84

Abstract

Claims (65)

1. A verification method for verifying content data to be used in a mobility entity, the verification method comprising:

acquiring the content data, the content data including main content data, a plurality of first hash values respectively generated from a first plurality of pieces of partial data obtained by dividing the main content data, and a signature generated using the plurality of first hash values and a secret key;

extracting, from the content data, the respective plurality of first hash values;

extracting, from the content data, the signature;

acquiring state information that indicates a state of the mobility entity;

determining an integer N that is greater than or equal to one based on the acquired state information, in a case where a size of the content data is greater than a predetermined size;

determining the integer N as a number of all pieces of partial data, in a case where a size of the content data is less than or equal to the predetermined size;

generating, from N pieces of partial data included in the first plurality of pieces of partial data, respective second hash values;

verifying the content data by using each of (a) a subset of the extracted plurality of first hash values which are those respectively corresponding to partial data other than the N pieces of partial data, (b) the generated second hash values, and (c) the extracted signature; and

outputting information that indicates a result of the verifying.

2. The verification method according to claim 1 , wherein

the state information indicates whether the mobility entity is running or not running, and

in the determining,

in response to a determination that the mobility entity is running, a value of the integer N is determined so as to be equal to a first value, and

in response to a determination that the mobility entity is not running, the value of the integer N is determined so as to be equal to a second value that is greater than the first value, and

the value of the integer N is determined based on a type or a size of the content data.

3. The verification method according to claim 1 , wherein

the generating includes:

randomly selecting the N pieces of partial data from the first plurality of pieces of partial data, and

generating a corresponding one of the respective second hash values from each of the selected N pieces of partial data.

4. The verification method according to claim 1 , wherein

the state information indicates, as the state of the mobility entity, a processing load imposed on an apparatus that executes the verification method, and

in the determining,

a value of the integer N is determined such that the higher the processing load is, the smaller the value of the integer Nis.

5. The verification method according to claim 1 , wherein

the state information indicates, as the state of the mobility entity, an amount of communication data included in a communication performed by an apparatus that executes the verification method, and

in the determining,

a value of the integer N is determined such that the greater the amount of communication data is, the smaller the value of the integer Nis.

6. The verification method according to claim 1 , wherein

the determining includes determining, based on a type of the content data, which pieces of the first plurality of pieces of partial data are selected as the N pieces of partial data.

7. The verification method according to claim 1 , wherein

the type of the content data includes a measure that indicates an update interval of the content data.

8. The verification method according to claim 1 , wherein the key is a secret key.

9. A verification apparatus that verifies content data to be used in a mobility entity, comprising:

a processor; and

a memory that includes at least one set of instructions that, when executed by the processor, causes the processor to execute operations including:

acquiring the content data, the content data including main content data, a plurality of first hash values respectively generated from a first plurality of pieces of partial data obtained by dividing the main content data, and a signature generated using the plurality of first hash values and a secret key;

extracting, from the content data, the respective plurality of first hash values;

extracting, from the content data, the signature;

acquiring state information that indicates a state of the mobility entity;

determining an integer N that is greater than or equal to one based on the acquired state information, in a case where a size of the content data is greater than a predetermined size;

determining the integer N as a number of all pieces of partial data, in a case where a size of the content data is less than or equal to the predetermined size;

generating, from N pieces of partial data included in the first plurality of pieces of partial data, respective second hash values;

verifying the content data by using each of (a) a subset of the extracted plurality of first hash values which are those respectively corresponding to partial data other than the N pieces of partial data, (b) the generated second hash values, and (c) the extracted signature; and

outputting information that indicates a result of the verifying.

10. A non-transitory computer-readable recording medium storing a program for verifying content data to be used in a mobility entity, the program causing, when executed by a computer, the computer to implement a method, the method comprising:

acquiring the content data, the content data including main content data, a plurality of first hash values respectively generated from a first plurality of pieces of partial data obtained by dividing the main content data, and a signature generated using the plurality of first hash values and a secret key;

extracting, from the content data, the respective plurality of first hash values;

extracting, from the content data, the signature;

acquiring state information that indicates a state of the mobility entity;

determining an integer N that is greater than or equal to one based on the acquired state information, in a case where a size of the content data is greater than a predetermined size;

determining the integer N as a number of all pieces of partial data, in a case where a size of the content data is less than or equal to the predetermined size;

generating, from N pieces of partial data included in the first plurality of pieces of partial data, respective second hash values;

verifying the content data by using each of (a) a subset of the extracted plurality of first hash values which are those respectively corresponding to partial data other than the N pieces of partial data, (b) the generated second hash values, and (c) the extracted signature; and

outputting information that indicates a result of the verifying.

11. A verification method for verifying content data to be used in a mobility, comprising:

acquiring the content data, the content data including main content data, a plurality of first hash values respectively generated from a first plurality of pieces of partial data obtained by dividing the main content data, and a signature generated using the plurality of first hash values and a secret key;

extracting, from the content data, the respective plurality of first hash values;

extracting, from the content data, the signature;

acquiring state information that indicates a state of the mobility;

determining an integer N that is greater than or equal to one based on the acquired state information, in a case where a size of the content data is greater than a predetermined size;

determining the integer N as a number of all pieces of partial data, in a case where a size of the content data is less than or equal to the predetermined size;

generating, from N pieces of partial data included in the first plurality of pieces of partial data, respective second hash values;

verifying the content data by using each of (a) a subset of the extracted plurality of first hash values which are those respectively corresponding to partial data other than the N pieces of partial data, (b) the generated second hash values, and (c) the extracted signature; and

outputting information that indicates a result of the verifying.

Priority Claims (2)

Continuity (4)

References Cited (35)