Vehicle-mounted network security protection system and application method thereof

Abstract

The invention relates to a vehicle-mounted network information security protection system, which comprises a security engine module, an application program interface module, an authentication module, a security communication module, a data encryption module, an attack protection module, an intrusion detection module and a log system module,wherein the security engine module is a dispatching center of the vehicle-mounted network information security protection system, and is used for establishing a processing flow and a management rule set of the vehicle-mounted network message; the application program interface module is used for providing data encryption and decryption services for an application program; the secure communication module is used for realizing network transmission encryption based on a vehicle-mounted network transmission layer communication protocol and an SSL / TSL encryption transmission protocol; the data encryption module provides algorithm support for data encryption and decryption; the intrusion detection module is used for collecting necessary data and information through methods of real-time mapping, redundant backup and the like of vehicle-mounted network messages; and the log system module is responsible for recording system operation, network flow and operation behaviors.

Description

technical field [0001] The invention relates to a vehicle-mounted network information security protection system, in particular to a vehicle-mounted network information security protection system of an intelligent networked vehicle. Background technique [0002] As automobiles become more and more intelligent and connected, the security threats they face are also greatly increasing. Each connection path of a connected car may be exploited to enable remote attack and control of the car. Intelligent networked vehicles usually face the following information security issues: [0003] 1) The traditional automobile bus realizes inter-node communication based on message broadcasting and priority-based arbitration mechanism; the intruder monitors the bus message and cracks the protocol by dismantling the vehicle; after that, it can remotely invade the same type of vehicle through the vehicle network; obtain After managing authority, impersonate communication nodes, send illegal co...

AI Technical Summary

Problems solved by technology

[0003] 1) The traditional automobile bus realizes inter-node communication based on message broadcasting and priority-based arbitration mechanism; the intruder monitors the bus message and cracks the protocol by dismantling the vehicle; after that, it can remotely invade the same type of vehicle through the vehicle network; obtain After managing authority, impersonate communication nodes, send illegal commands or monopolize the bus bandwidth with high priority to implement flooding attacks; bring great safety hazards to the safe driving of cars;

[0004] 2) A car contains a large number of automotive electronic control units (ECUs) and vehicle information system units, each of which undertakes different functional responsibilities. The supplier system is huge. Although it follows a unified functional safety standard, there is no corresponding information security implementation specification ;

[0005] 3) The technical field of automotive embedded systems has its own uniqueness and specialization; the methods and practices in the traditional Internet security field cannot be copied as they are, and the information security implementation of automotive embedded systems lacks reference methods and reusable resources;

[0006] At present, in the field of in-vehicle network information security technology, various technical solutions are only aimed at a specific business requirement, such as data encryption, system and application reinforcement, OTA, encrypted communication protocols, etc., and there is no systematic system for in-vehicle network information security protection. , comprehensive network information security methods and systems; there are also some technical solutions that copy the methods and systems in the field of Internet information security technology, but do not take into account the professionalism and particularity of the automotive embedded system technology ecology. The dilemma of low level, few available resources, and difficult implementation of the plan