  !  "    $+%) '(# *!+'(# +&"+& "+& 1    90

2018
IT&  IoT  "  !

( ")$#!%IC'



CGW

%%
ECU1

ECU2
2ECU3

     IoT• 80MdYO36A@IoT<+:• IoT! <.\aGHD• MiraiGFaO• IoT%<ITNVXFO3DRTKMdZHO;

M[_FSHdc•  :'>4<ZHdPB =LbdXa
• ]W(<9?1>7C3QJ^`UE*/• ":, <#&3 /; 

IoTITNVXFO;25@QJ^`UE$<-)

3-MUM

S R-3 ITHTA P,is xtvYc[e~tq oZ.]XYfYc`X
logd`\XC)

o
8

NR&#E:O'Q`F!

`4

,350'Q`F!

,350& :#E
EAMD

u s?JIr{vjkhCPUKD6
*/: 1/100

ITU-T SG172017H+

zp wJI%V
201711(ISO/IEC 11770-4(2nd edition)

y wjkhUP 7*/: 1.5P

ISO/IEC JTC1 SC272012H+

y wjkh1LT*/: 1/10

ISO/IEC JTC1 SC272013H+

ISO/IEC 20009-4
9B>azp
 wJI%V20178(9B>r{vjkh8/16-bit H8
S

RAM:R*/: 82ISO/IEC JTC1 SC272016H+

y wjkh<MH*/: 1/10

r{vjkh32-bit ARMCPUKD6
*/: 1/10

|tm&
CLEFIA,PRESENTu s?

pv }&
EnocoroytnS$
Lesamnta-LW

u sJIV
$8"VCV;JI

ytnS$
Spongent, Photon
MAC %
Chaskey,LightMAC

u sJI

9B>

9B>

9B>aGAJI%9B>

ISO/IEC 117704:2017 Amendment
2

ISO/IEC JTC1 SC27
2020H+MAC: ~tq oJI@W~tq ogJI^e_ba=X 4

((,,)
O,

*S,2S

US
3.
CUH

U

1C

* www.nedo.go.jp/content/100863674.pdf
5 CH/ITI
P
SI

VT

7O=:

1OM

EW o W:W
W T
9:ISO/IEC 15408 CC(Common Criteria)
••7
70/60E  

:231IoT 71• IC+*#(*  • ! )"-*• 8;712/439:50 (HWS) [1]• CHES [2], CARDIS('• JIL(Joint Interpretation Library)
• SOGIS(*CC)*JIWG[3] ),$%

[1] https://www.ieice.org/ess/hws/[2] https://ches.iacr.org/[3] https://www.sogis.org/uk/detail_operation_en.html
852 1)(K••••••( E 8B

BRg:D:B

CH:D128 "$128

E B,oM( E8 k:I E .BE DGA:B E
DDC8:EECD)CD :Ii Pe
Srlmi nRhOTdR aWuf strwc

P"$"$ 321)"$"$"$"$"$"$ x'&"$B JE E

!%#
9"$C    ••((1z x•:ARE

P-08IbA S
I S 8o Cx•• M•••)
DHU G
https://www.cryptoexperts.com/ches2015/slides/day3/session3/talk1.pdf
10)($3?+v-9%*ICPN@`ksdZsePN@*tHardware AVA_VLAuN0

4.1

Physical Attacks

4.2

Overcoming sensors and filters

4.3

Perturbation Attacks

4.4

Retrieving keys with DFA

4.5

Side-channel Attacks – Non-invasive
retrieving of secret data

4.6

Exploitation of Test features

4.7

Attacks on RNG

4.8

Ill-formed Java Card applications

4.9

Software Attacks

4.10

Applet isolation* wCC Supporting Document CCDB-2013-05-002 Version 2.9
Application of Attack Potential to Smartcardsx

4M: D1LILOLAC
0D;&
.T67HSQK 2Cy
HWNois`Xq_gUoq\* *r>]qdn`drjYdqXlc^mqrGJMEr(IC8NSWbVqpse!
NU[a`Oy" <,)RMBFS' ICNAOy**hseVWUN/5N# 0
M=HSalfs IPA
https://www.ipa.go.jp/security/jisec/seminar/documents/hw_semi_20151203.pdf

11

2()+.
/,21)'*&01+#! (JASO TP15002 [1]" )*&01+#
[1] 3 *&01+#%$12     -6L!

-6! IOQ3;F]_dlE@ICOQHsUnw
0H4"HTghudw^x_kwfXwg≒IC•

ICJH1ICKD1•ICH:JH1M >Uu`wiWw_APHTjtwb

  0H4"HTghudw^x•+?N GOQ(FQ@mer<•ehcZ&HUu`wiWw_Qow_[w_•\ujrH•#$Uu`wiWU_M&NW.'EaVutwg@SG•qwapU`S&CR%I=5pUi\UYr/•279*EM•Uu`wiWw_x-6! &ICH @•8&B ),vqmwfSW(OTA)aVutwgx

13zvJ

?<.

•

Ei•0g)2^#.
CRSS, RSMAJASO TP15002

_•JO(ToE)iIT?Z4IT?>o?

@R16ICiC~?iMY|ur?iF^ WamlD [k}z^/=hc\^[k(zt)

5A:iP3",;~s

ITU-T X.1373
XG-ITU-T X.1373 ”Secure software update
capability for intelligent transportation
system communication devices”

XN(A Study on Quantitative Risk
Assessment Methods in Security Designfor Industrial Control Systems.
DASC/PiCom/DataCom/CyberSciTech
2018: 62-69

XN(Detailed Analysis of Security Evaluationof Automotive Systems Based on JASO
TP15002. SAFECOMP Workshops 2017:211-224

71^K
oQ`d&$B^!8hSw
o%bp

wi
0^n]ef\lUiVa^9\*qx{^HLaml

y^I>^ zodl

y^TdlG^'ef\g\Attack Tree hjl
14+3NUXF2^; $\SCU*F VQW[Y]M'=BNUX?. #M"B@C=K>
; $F3 ^5 E+I6HLB; $?(9FJFD<K>

PP*: ProtectionProfileRPWXTO. PICT

ST: SecurityTarget
RPWXTO
0/*15

ITRPWXTO2G31E:AK4 2017317%),!  &7 -8RPWXTORZS[   

JISEC (Japan Information Security Evaluation and Certification Scheme)*:)ISO/IEC 15408(Common Criteria: CC)NKHIT5S;9IR 
CC: Common Criteria for Information Technology Security Evaluation(4a5bXU\]ZT:OJQO @))
=C1
F2'_V`[W1->1& !
PPXU\]ZT
6&$*#('5A1F IT51;9STXU\]ZT87$IPA;
9  $/% )).
0$" .1, # .)-+:

:,9?

01:L.M;9SG;9%E::%E
ECSEC, ITSC,MHIR, TUViT,Brightsight*ITXU\]ZT: P;9 NEIR< 20173!17 */3(  +B%# 4"DXU\]ZTX^Y`

16C
•SSA

•••

E

**IC
•6VV2 O**2O M (, *(,/ /22():3C
EMV: Europay InternationalMasterCard InternationalVisa International IC17B;9º ¡¨¯­´¦»¹76S{¬»¢s¸»ª¶.u»«¡&y3 ~IoT"c1
:g? L°©U2v*Ly£²µ¨_m£²µ¨ \¡»¯IKH8j 9je(ys£²µ¨ \%VG- s]^\k8> |.£²µ¨%Vbcx JWº ¡¨¯'a}
!Np7`CºAC¹¤»¬»¡oD+)SZ@xsT#QRF4º]}s+)nlM
qWdSy=z£²µ¨Y /<]9jy0T#]/<js%VFw$PzF5[r¦§­®¹¥x­µ» ³¹OSX,·±»yj7tIoThf£²µ¨ \¡»¯IKiE18