A fine-grained authorized access method for in-vehicle network based on ECU identity attribute

Abstract

The invention discloses an in-vehicle network fine-granularity authorized access method based on ECU identity attributes. The method comprises the following steps: (1) establishing an in-vehicle network fine-granularity access control model based on electronic control unit (ECU) attributes; (2) performing fine-granularity depiction according to the service attribute of the in-vehicle electronic control unit ECU; (3) designing the access permission among different sub-nets in the in-vehicle network; (4) designing a legal node private key attribute set and ECU ciphertext access structure matching strategy according to the constructed in-vehicle network fine-granularity access control model based on the ECU attribute; and (5) constructing an encryption algorithm of the legal node private key set based on the ECU attributes matched with the ciphertext access structure. Combining with the characteristics of the in-vehicle network, the encryption scheme and the access control model are combined, an in-vehicle network fine-granularity authorized access method based on the ECU identity attributes is proposed, and a privacy protection problem of the in-vehicle network communication protocol application layer is effectively solved.

Description

Technical field [0001] The invention relates to the fields of intelligent networked vehicles, intra-vehicle networks, encryption, access control, etc., and particularly relates to the secure communication field of electronic control units in vehicles. Background technique [0002] With the rapid development of emerging technologies such as cloud computing, big data, Internet of Things, and quantum computing, information system network security is facing a series of new threats and challenges. The in-vehicle network system of the intelligent networked car is a typical information system. The information interacts between the internal ECUs (in-vehicle electronic control units) through the in-vehicle network bus (CAN, LIN, etc.), and in the vehicle ECU through wireless communication Interaction between nodes and external access devices; not only has the general characteristics of information systems, but also has limited software and hardware resources unique to embedded systems, so...

AI Technical Summary

Problems solved by technology

The purpose of the present invention is to propose a fine-grained authorization access method for in-vehicle networks based on ECU identity attributes, to solve the security problem of illegal nodes accessing in-vehicle data, and to prevent attackers from injecting malicious information into ECUs

Images