Vehicle CAN bus encryption method

Abstract

The invention provides a vehicle CAN bus encryption method. The method comprises the following steps: firstly performing IMMO authentication on T-box, wherein the T-box sends a message to a gateway through a bus CAN under the condition that the IMMO authentication is passed; performing hardware encryption and decryption on the message sent by the T-box through a HSM of the T-box and the HSM of thegateway, wherein the a message counter is arranged on the T-box to count the sent message, and the gateway detects the message counter; judging that the message is legal when the message conforms tothe set rule, and decrypting the message when the message is legal, and then sending the decrypted message to other CAN branches of the vehicle. The vehicle CAN bus encryption method provided by the invention has the advantages that the triple encryption method of IMMO authentication, the HSM hardware encryption and the message counter judgment is applied by adopting the way of combining the software encryption and hardware encryption, the security of the vehicle CAN bus is greatly improved, the Hacker intrusion is prevented, and the travelling security is improved.

Description

technical field [0001] The invention relates to an encryption method, in particular to a vehicle CAN bus encryption method. Background technique [0002] At present, the encryption of the CAN bus of the vehicle mainly adopts the confidentiality of the CAN bus protocol and the access firewall of the CAN bus. These two encryption methods have the following defects: [0003] 1. Because of the openness of the CAN bus, it is easy for attackers to obtain a large amount of bus data from the vehicle. Through comparative analysis of the data, the CAN bus data format can be easily analyzed. Due to the limited length of bus data and the relatively simple data format it contains, the private protocol of CAN bus cannot prevent external attacks well. In fact, there have been a large number of external access devices targeting the CAN bus. Although such devices are used to display auxiliary information for drivers, they may also be used to launch attacks against the CAN bus. [0004] 2...

AI Technical Summary

Problems solved by technology

But this protection is not enough to ensure security

The attacker may bypass the location of the firewall to access the bus. The firewall can only intercept illegal data from the outside, but cannot intercept data sent from the inside.

Images