Authentication and access control method for CAN (Controller Area Network) bus

Abstract

The invention relates to an authentication and access control method for a CAN (Controller Area Network) bus, which is characterized by particularly comprising the following steps of: (1) completing functional partitioning of a vehicle system, and defining each function as a logic functional region; (2) based on functional partitioning of the vehicle system in the step (1), partitioning nodes of the vehicle system into each logic functional region according to functions to which the nodes belong; (3) based on partitioning of each node logic functional region in the step (2), allocating a secret key to each logic functional region; (4) based on each secret key in the step (3), generating a session secret key of the corresponding logic functional region after a vehicle is started up every time; (5) based on each session secret key in the step (4), completing authentication and encryption of CAN data, and based on each secret key in the step (3), implementing secret key resetting on updated nodes. According to the authentication and access control method disclosed by the invention, based on a cryptography technology, a node authentication and encryption protocol of the CAN bus is constructed by utilizing a cryptographic algorithm, and resource access control on the integral CAN bus is implemented.

Description

technical field [0001] The invention relates to a CAN bus authentication and access control method, in particular to a CAN bus network security framework and corresponding security measures, belonging to the vehicle network information security technology. Background technique [0002] CAN is the abbreviation of Controller Area Network, that is, Controller Area Network. CAN bus is a bus technology commonly used in vehicles now. Nodes in the CAN bus are all connected to the same shared line. The CAN bus is connected by twisted pair, 0 is the dominant signal, 1 is the invisible signal, and the signal uses the CSMA / CA scheme to solve the conflict problem. The arbitration mechanism uses priority to decide which node is allowed to transmit data on the bus. The smaller the ID of the node, that is, the more dominant 0 signals the node sends in the arbitration, the higher its priority. Using this mechanism makes the CAN bus suitable for real-time communication. [0003] Accordi...

AI Technical Summary

Problems solved by technology

But this protection is not enough to ensure safety

First of all, since the CAN bus is an open broadcast data, attackers can access the bus by bypassing the location of the firewall

Secondly, the firewall can only intercept illegal data from the outside, but not the data sent from the inside, so it is ineffective against passive information acquisition attacks

Images