A security communication system and method for in-vehicle network

Abstract

The present invention provides a safety communication system and method in a vehicle, comprising: a TSP platform, a central gateway, a domain controller and an ECU device; the TSP platform is connected to the central gateway through a network, and the central gateway is connected to one or more domain controllers through a network Connection, the domain controller and one or more ECU devices are connected through the vehicle bus; after the first identity authentication and key negotiation between the TSP platform and the central gateway, the first secure channel is established, and the TSP platform communicates with the central gateway through the first secure channel Encrypted communication; after the second identity authentication and key distribution between the central gateway and the domain controller, the second secure channel is constructed, and the central gateway conducts encrypted communication with the domain controller through the second secure channel; between the domain controller and the ECU device The third security channel is constructed after the third identity authentication and key distribution are performed, and the domain controller performs encrypted communication with the ECU device through the third security channel.

Description

technical field [0001] The invention relates to technical fields such as in-vehicle network, security authentication and encryption, and in particular to a secure communication system and method for an in-vehicle network. Background technique [0002] With the development of automobile intelligence and networking, the traditional automobile electronic network structure mainly includes a central gateway and multiple ECU devices. The automobile bus network mainly adopts CAN bus network, LIN bus network and FlexRay bus network. Mount multiple ECU devices. However, the processing capability of ECU equipment itself is limited, the bus transmission speed is slow, the bandwidth is not enough and there are many ECU equipment units in the car. In order to solve these problems in ECU equipment, a domain controller is proposed, which has a multi-core CPU / GPU, with modularization, integration, and platform unification, can relatively centrally control multiple ECU devices involved in ...

AI Technical Summary

Problems solved by technology

However, the processing capability of ECU equipment itself is limited, the bus transmission speed is slow, the bandwidth is not enough and there are many ECU equipment units in the car. In order to solve these problems in ECU equipment, a domain controller is proposed, which has a multi-core CPU / GPU, with modularization, integration, and platform unification, can relatively centrally control multiple ECU devices involved in several domains such as automotive powertrain, vehicle safety, body electronics, smart cockpit, and smart driving, replacing traditional Distributed Automotive Electronics and Electrical Architecture

[0003] However, since the data involved in the in-vehicle network is mostly sensitive information, and the design of the domain controller, central gateway and ECU equipment does not consider security issues, for example: when the in-vehicle central gateway, domain controller and ECU equipment are When attacking through the in-vehicle network, it will directly threaten the life safety of the car user; when the in-vehicle network transmits sensitive information without encryption and authentication technology, once it is maliciously stolen and tampered with, it will affect the overall operation of the car

Images