Extensible CAN bus safety communication method and device for large-scale in-vehicle network

Abstract

The invention discloses an extensible CAN (Controller Area Network) bus safety communication method and device for a large-scale in-vehicle network, and the method covers the safety scenes of initial key distribution, key updating, data confidentiality and integrity protection, external equipment access and the like in a bus. A broadcasting mechanism and a cryptographic group authentication mechanism of the bus are properly utilized, so that the communication process in the initial key distribution stage is effectively simplified, the lightweight design of key initialization is realized, and good expandability is achieved for the increasing number of equipment on the CAN bus; the vulnerability of a data encryption communication face to a delay attack is solved by using a global counter; a cross-subnet data transmission module is introduced to solve the defect that the encrypted message cannot be transmitted in a cross-network manner; in addition, an authentication process for external equipment access is designed based on a certificateless signature mechanism without bilinear pairing, dependence on a public key infrastructure mechanism is eliminated, communication overhead is reduced, complex bilinear pairing operation is avoided, and the real-time requirement is met.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an expandable CAN bus security communication method and device for a large-scale in-vehicle network. Background technique [0002] The modern car has evolved from a mere means of transportation to a computing platform for multiple connectivity methods. In modern vehicles, various types of buses and hundreds of ECUs (Electronic Control Units) are connected through in-vehicle gateways to ensure normal safety operations such as collision prediction and anti-lock braking systems. These ECUs communicate through the CAN (Controller Area Network, Controller Area Network) bus, and use sensors, actuators and controllers to ensure driving safety and provide users with a more comfortable driving experience. With the increase of sensor nodes, the functions of automobiles become more and more complex, and more and more ECUs need to be connected to the bus. On luxury cars, even ...

AI Technical Summary

Problems solved by technology

However, session keys are different across subnets, and there is no direct secure communication capability between ECUs from different subnets

In addition, the access protocol for external devices has not been specially optimized for CAN bus scenarios before, and using a certificate system that relies on PKI (Public Key Infrastructure) for identity authentication will significantly increase the communication overhead on the CAN bus

Images