A vehicle Ethernet information security protection method

Abstract

The invention relates to a vehicle-mounted Ethernet information security protection method, and belongs to an Ethernet information security protection method. The method comprises: key allocation, wherein the gateway ECU has a set of digital certificates including an identifier, a public key and a private key of each legal ECU in the network, and meanwhile, the gateway ECU has an encryption key EKand an authentication key AK required by communication, and in the starting stage, the gateway ECU allocates the encryption key and the authentication key to each legal ECU in the network in sequence; and safe communication, wherein after the key distribution process in the starting stage is completed, each legal ECU in the network already has an encryption key and an authentication key, and thenencryption, decryption and authentication operation can be conducted on messages in the normal running process of the vehicle. The method has the advantages that safe and stable protection measures are provided for the vehicle from the starting stage to the communication stage, beneficial conditions are provided for safe communication between ECUs, practicability is achieved, compared with an existing information safety protection method, the method has higher real-time performance, and the requirements of the vehicle-mounted Ethernet for real-time performance and safety can be met at the same time.

Description

technical field [0001] The invention relates to an Ethernet information security protection method, which is used to ensure the security and stability of the key distribution process in the start-up phase and the confidentiality, authenticity and freshness of messages in the communication phase. Background technique [0002] With the continuous development of science and technology, the emergence of smart cars has changed people's understanding of transportation tools and lifestyles. The development of in-vehicle information systems and the improvement of people's demand for vehicle functions make more and more electronic control units (ECUs) need to be used in cars. The required cost is getting higher and higher. At the same time, in-vehicle Ethernet is regarded as the future in-vehicle backbone network due to its advantages of high throughput, high bandwidth, high standardization, and low cost. Compared with traditional buses such as CAN and FlexRay, the data length that...

AI Technical Summary

Problems solved by technology

[0006] The present invention provides a vehicle-mounted Ethernet information security protection method to solve the problems that the vehicle-mounted Ethernet information security cannot be guaranteed, communication messages are easily leaked, and system functions are easily affected.

Images