A method for enhancing the security of CAN bus communication information based on CRC check

Abstract

The invention proposes a method for enhancing the security of CAN bus communication information based on CRC check. The method designs a dedicated additional parameter table and frame counter for each key data frame. At the sending end, intercept the low byte part Cnt_L of the first frame counter and put it in the data field, then select the first parameter X from the first additional parameter table, synthesize a data string together with Cnt_L and the protocol data unit PDU, and calculate the The CRC check code of the data string is placed in the data field. At the receiving end, the frame counter information in the data field is extracted, synthesized with the high byte part Cnt_h of the second frame counter to obtain a complete frame counter value, and the value is checked to prevent replay attacks; after the check is passed, the second frame counter is generated The second CRC code is compared with the first CRC code to verify the integrity and origin of the data. The present invention greatly enhances the security of CAN bus communication without upgrading the hardware of the controller, and is a highly cost-effective CAN communication information security upgrading scheme in the vehicle.

Description

Technical field [0001] The present invention relates to a vehicle CAN bus network communication, particularly relates to a CAN bus communication method of enhancing information security based on the CRC check. Background technique [0002] As the car gradually net-linked, in recent years, there have been more than hacker attacks on network-linked vehicles, not only affect people's travel safety, but also hindered the car's Network of development. The CAN bus is currently the most widely used automotive internal communication bus, the respective components can be directly controlled car through the CAN message. However, the information security issues CAN bus has not attracted attention, a serious lack of information security technology and tools. [0003] In response to the automotive industry demand for data encryption and authentication, AUTOSAR organization made a series of communications encryption and authentication standards. Currently more recognized within the industry is...

AI Technical Summary

Problems solved by technology

However, the information security of the CAN bus has not been paid attention to, and there is a serious lack of information security protection technologies and means.

However, there are two biggest problems in the application of SecOC. One is that SecOC needs to adopt a 128-bit symmetric encryption algorithm. If the encryption algorithm is realized by software, the overhead of MCU computing resources will be too large. If it is implemented by a hardware encryption module, It is necessary to upgrade the existing hardware and increase the hardware cost

Second, even if the 128-bit message authentication code adopts the method of data truncation, it is still a large data field resource overhead for the classic CAN bus

Images