公开(公告)号：US20210264026A1

公开(公告)日：2021-08-26

申请号：US16973898

申请日：2019-06-07

Applicant: PANASONIC INTELLECTUAL PROPERTY MANAGEMENT CO., LTD.

Inventor： Hiroshi AMANO ,  Narumi ATSUTA ,  Noriaki HAMADA ,  Yosuke TAJIKA ,  Nobutaka KAWAGUCHI ,  Yuichi HIGUCHI ,  Taichi SHIMIZU

IPC: G06F21/55

Abstract: An unauthorized communication detection device that detects unauthorized communication in a manufacturing system that manufactures products includes: an obtainer that obtains operation information of the manufacturing system; a storage that stores element information indicating one or more target elements among a plurality of elements related to manufacturing of the products; a specifier that specifies, for each of a plurality of communications performed in the manufacturing system, an element corresponding to the communication, based on the operation information; a calculator that calculates an abnormal degree of each of one or more communications, which satisfy that the element specified by the specifier is included in the one or more target elements indicated by the element information, among the plurality of communications; and a determiner that determines that, when an abnormal degree calculated by the calculator is larger than a threshold value, a communication corresponding to the abnormal degree is the unauthorized communication.

公开(公告)号：US20200021610A1

公开(公告)日：2020-01-16

申请号：US16580853

申请日：2019-09-24

Applicant: Panasonic Intellectual Property Management Co., Ltd.

Inventor： Hiroshi AMANO ,  Yosuke TAJIKA ,  Yuichi HIGUCHI

IPC: H04L29/06 ,  H04L29/12

Abstract: An abnormality in a manufacturing system is detected without extensive modification to the existing manufacturing systems. The data analysis device includes: a receiver configured to receive a packet transmitted between a manufacture control device and a manufacturing device; an analyzer configured to obtain the type of data included in a payload of the received packet from an IP address and a port number included in a header of the packet; a selector configured to select, based on the type of the data obtained by the analyzer, a syntax or rule corresponding to the type of the data; and a determiner configured to determine that the manufacturing system has an abnormality if the data included in the payload does not follow the syntax or rule corresponding to the type of the data.