Information security transmission method, device, equipment and medium

Abstract

The invention relates to the technical field of automotive electronics, in particular to an information security transmission method, device and equipment and a medium. And both the PDU sending end ECU and the PDU receiving end ECU realize SecOC modules. When a safe PDU needs to be sent, PDU information of an upper layer application is forwarded to the SecOC module through the PDUR module, the SecOC module processes the PDU information, authentication information is added, and then an API provided by the PDUR is called to send out the safe PDU through a lower layer communication interface. And when the lower-layer communication module receives the security PDU, the security PDU information is forwarded to the SecOC module by the PDUR module, the SecOC module verifies the PDU information, and if the verification is passed, the API provided by the PDUR module is called to forward the PDU information to the upper-layer application. The present disclosure provides necessary functions for verifying the integrity and freshness of PDU-based communication between ECUs in a vehicle architecture, and provides authentication for transmitted data, and attack means for preventing replay attacks, cheating, tampering and the like.

Description

Technical Field

[0001] The present disclosure relates to the field of automotive electronic technology, and in particular to a method, device, equipment and medium for secure information transmission. Background Art

[0002] In the existing technology, vehicle manufacturers should prove that the processes used in the network security management system ensure that security is fully considered, including untrusted messages, man-in-the-middle attacks / session hijacking, and replay attacks. The vehicle should verify the validity or uniqueness of the key command data received. Key command data refers to command data that may affect driving and property safety, including but not limited to vehicle control command data. For vehicle control commands sent by the remote control server, the vehicle end can verify the validity or uniqueness of the command through the gateway.

[0003] In summary, according to relevant requirements, there is an urgent need for a security mechanism to protect in-vehicle network communication data. Summary of the invention

[0004] In order to solve the above problems, the present invention provides a method, device, equipment and medium for secure information transmission.

[0005] In a first aspect, a method for secure information transmission is provided, the method comprising:

[0006] Add the encrypted communication SecOC (Security onboard Communication, referred to as SecOC) module to the ECU at the PDU sending end;

[0007] When a secure PDU needs to be sent, the original PDU information is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module processes the original PDU information, adds authentication information to obtain a secure PDU, and then calls the API provided by the PDUR module to send the secure PDU out.

[0008] Furthermore, the authentication information includes: a message authentication code MAC value and a freshness value.

[0009] Furthermore, the freshness value is obtained through a freshness value management module, and the freshness value is a monotonic count used to ensure the freshness of the security PDU.

[0010] Furthermore, the MAC value is calculated as follows:

[0011] After the data identifier, original PDU information and complete freshness value of the secure PDU are concatenated together in sequence, a MAC value is generated using the AES-128-CMAC algorithm.

[0012] Further, the security PDU includes: original PDU information, an intercepted freshness value, and an intercepted MAC value connected in sequence;

[0013] The intercepted freshness value is obtained by intercepting the less significant 16 bits of the complete freshness value;

[0014] The intercepted MAC value is obtained by intercepting the high-significant 64 bits of the complete MAC value.

[0015] In a second aspect, a method for securely receiving information is provided, the method comprising: using the above-mentioned method for securely transmitting information,

[0016] Add SecOC module to the PDU receiving ECU;

[0017] When receiving a safety PDU, the safety PDU is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module verifies the safety PDU. If the verification passes, the API provided by the PDUR module is called to forward the original PDU information contained in the safety PDU to the upper-layer application.

[0018] Validation includes:

[0019] Parse the original PDU information, the intercepted freshness value and the intercepted MAC value;

[0020] Obtaining a freshness value corresponding to the ID of the security PDU from the freshness value management module;

[0021] After the data identifier, original PDU information and complete freshness value of the secure PDU are sequentially connected together, a MAC value is generated using the AES-128-CMAC algorithm;

[0022] The verification is successful when the intercepted MAC value is consistent with the high-significant bit of the generated MAC value.

[0023] In a third aspect, an information security transmission device includes: an ECU and a SecOC module;

[0024] Add SecOC module to the ECU at the PDU sending end;

[0025] When a secure PDU needs to be sent, the original PDU information is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module processes the original PDU information, adds authentication information to obtain a secure PDU, and then calls the API provided by the PDUR module to send the secure PDU out.

[0026] In a fourth aspect, a car comprises: adopting one of the above-mentioned information security transmission methods, or adopting one of the above-mentioned information security receiving methods.

[0027] In a fifth aspect, an electronic device includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other via the communication bus;

[0028] a memory storing a computer program;

[0029] The processor is used to implement the above-mentioned information security transmission method or the above-mentioned information security receiving method when executing the computer program stored in the memory.

[0030] In a sixth aspect, a computer-readable storage medium stores a computer program, which, when executed by a processor, implements the above-mentioned method for securely transmitting information or the above-mentioned method for securely receiving information.

[0031] The present disclosure at least includes the following beneficial effects:

[0032] The present disclosure provides the necessary functions to verify the integrity and freshness of PDU-based communications between ECUs within a vehicle architecture, provide authentication for transmitted data, and prevent attacks such as replay attacks, spoofing, and tampering.

[0033] Other features and advantages of the present disclosure will be described in the following description, and partly become apparent from the description, or be understood by implementing the present disclosure. The purpose and other advantages of the present disclosure can be realized and obtained by the structures indicated in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0035] Figure 1 This is a schematic diagram of the transmission method flow in an embodiment of the present disclosure;

[0036] Figure 2 This is a schematic diagram of the operating mechanism of the SecOC module in the embodiment of the present disclosure;

[0037] Figure 3 This is a schematic diagram of the structure of the security PDU content in an embodiment of the present disclosure;

[0038] Figure 4 A schematic diagram of extracting the freshness value of the MAC value in the security PDU according to an embodiment of the present disclosure;

[0039] Figure 5This is a schematic diagram of the MAC value verification process flow in an embodiment of the present disclosure;

[0040] Figure 6 A schematic diagram of transmitting an original PDU in a secure PDU through a SecOC module according to an embodiment of the present disclosure;

[0041] Figure 7 It is a schematic diagram of the structure of an electronic device according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0042] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present disclosure.

[0043] like Figure 1 As shown, a method for secure information transmission, the method comprising:

[0044] Add SecOC module to the ECU at the PDU sending end;

[0045] When a secure PDU needs to be sent, the original PDU information is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module processes the original PDU information, adds authentication information to obtain a secure PDU, and then calls the API provided by the PDUR module to send the secure PDU out.

[0046] The specific implementation is as follows:

[0047] Both the PDU sending ECU and the PDU receiving ECU implement the SecOC module. The SecOC modules on both sides interact with the PDUR module and are integrated into the ECU system through the API provided by the PDUR module.

[0048] When a secure PDU needs to be sent, the PDU information of the upper-layer application is forwarded by the PDUR module to the SecOC module. The SecOC module processes the PDU information, adds authentication information, and then calls the API provided by the PDUR to send the secure PDU through the lower-layer communication interface.

[0049] When the lower-layer communication module receives the security PDU, the security PDU information is forwarded by the PDUR module to the SecOC module. The SecOC module verifies the PDU information. If the verification passes, the API provided by the PDUR module is called to forward the PDU information to the upper-layer application.

[0050] The operating mechanism is as follows Figure 2 As shown, at the sender, the SecOC module creates a secure PDU by adding authentication information to the PDU to be sent. The authentication information includes a MAC value (message authentication code) and freshness value information.

[0051] In order to provide message freshness, the SecOC modules of the PDU sender and receiver obtain the freshness value (Freshness Value, FV for short) of each secure PDU from the freshness value management module.

[0052] At the receiving end, the SecOC module checks the freshness and integrity of the security PDU by verifying the authentication information attached by the sending SecOC module. In order to verify the freshness and integrity of the security PDU, the security PDU data provided to the receiving SecOC should be the security PDU data generated by the sending SecOC, and the security PDU data should not be modified by other modules during the transmission and processing process. The PDU can be processed only after the verification is passed, and the PDUR module forwards the PDU to the application layer for use; if the verification fails, the PDU will no longer be routed and will be rejected.

[0053] like Figure 3 As shown, the payload of the security PDU should include the real PDU (original PDU), freshness value information and MAC value information.

[0054] The MAC value is a unique authentication data string generated by the AES-128-CMAC algorithm using the key, the data identifier of the secure PDU (the PDU data identifier of the CAN FD protocol is CANID), the real payload (original PDU) and the freshness value.

[0055] The original freshness value data length is 8 bytes; the original MAC value data length is 16 bytes. The definition of the freshness value information and MAC value information length of the CANFD protocol security PDU is as follows: Figure 4 shown.

[0056] The freshness value information and MAC value information length of the CANFD protocol are defined as follows:

[0057] By intercepting, the length of the freshness value and the MAC value in the security PDU is shortened, that is, the intercepted freshness value and the intercepted MAC value are stored in the security PDU. The interception is shown as follows Figure 4 shown.

[0058] When intercepting the MAC value, the high-significant bits of the original MAC value are intercepted, and the intercepted length SecOCAuthInfoTruncLength is 64 bits.

[0059] When truncating the freshness value, the low significant bits of the original freshness value are truncated, and the truncated length SecOCFreshnessValueTruncLength is 16 bits.

[0060] All SecOC data (i.e., freshness value, MAC value, data identifier) ​​sent directly or indirectly to the other side of the communication link should be encoded in Big Endian byte order so that each SecOC module parses the data in the same way.

[0061] The data used to calculate the MAC value includes the data identifier (CAN ID) of the secure PDU, the original PDU data, and the complete freshness value. The data identifier of the secure PDU, the original PDU data, and the complete freshness value are concatenated together to form the data passed to the MAC value generation\verification algorithm (this specification uses the AES-128-CMAC algorithm).

[0062] Data used for MAC value generation\verification algorithm = PDU data identifier | PDU original data | complete freshness value; where “|” represents connection.

[0063] The freshness value needs to be obtained from the freshness value management module (FVM).

[0064] Each security PDU needs to be configured with a freshness value. The freshness value FV is a monotonic counter used to ensure the freshness of the security PDU. The freshness value should come from the freshness value management module.

[0065] Note: The security PDU contains a truncated freshness value (a portion of the complete freshness value), which is divided into two parts, the high-significant bit and the low-significant bit. The truncated freshness value part contained in the security PDU payload is called the low-significant bit of the freshness value, and the remaining part is called the high-significant bit of the freshness value.

[0066] Creating a secure PDU from an original PDU consists of the following six steps:

[0067] (1) Prepare to build a secure PDU,

[0068] During preparation, necessary buffers should be allocated to hold the intermediate and final results of the authentication process.

[0069] (2) Construct data for generating MAC value,

[0070] The SecOC module constructs the data DataToAuthenticator used to generate the MAC value. DataToAuthenticator consists of the PDU data identifier (the PDU data identifier of the CANFD protocol is CAN ID), the original PDU, and the complete freshness value corresponding to the PDU. The PDU data identifier and freshness value should be encoded in Big Endian byte order.

[0071] (3) Generate MAC value,

[0072] The SecOC module passes DataToAuthenticator and the length of DataToAuthenticator to the authentication algorithm (AES-128-CMAC) to generate a MAC value.

[0073] The SecOC module truncates the generated MAC value according to the specified length (SecOCAuthInfoTruncLength).

[0074] (4) Build a secure PDU,

[0075] The SecOC module shall construct a secure PDU by adding the intercepted freshness value information and the intercepted MAC value information to the original PDU.

[0076] The structure and order of the content in the security PDU shall meet the following requirements:

[0077] Security PDU = original PDU | intercepted freshness value (length is SecOCFreshnessValueTruncLength) | intercepted MAC value (length is SecOCAuthInfoTruncLength);

[0078] (5) Update the freshness value,

[0079] The freshness value management module needs to be notified to update the freshness value corresponding to the security PDU.

[0080] (6) Send security PDU.

[0081] A method for securely receiving information, the method comprising: using the above-mentioned method for securely transmitting information,

[0082] Add SecOC module to the PDU receiving ECU;

[0083] When receiving a safety PDU, the safety PDU is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module verifies the safety PDU. If the verification passes, the API provided by the PDUR module is called to forward the original PDU information contained in the safety PDU to the upper-layer application.

[0084] Validation includes:

[0085] Parse the original PDU information, the intercepted freshness value and the intercepted MAC value;

[0086] Obtaining a freshness value corresponding to the ID of the security PDU from the freshness value management module;

[0087] After the data identifier, original PDU information and complete freshness value of the secure PDU are sequentially connected together, a MAC value is generated using the AES-128-CMAC algorithm;

[0088] The verification is successful when the intercepted MAC value is consistent with the high-significant bit of the generated MAC value.

[0089] The specific implementation is as follows:

[0090] Verifying a safety PDU consists of the following six steps:

[0091] (1) Parsing security PDU,

[0092] After receiving the security PDU, the SecOC module parses the original PDU, the intercepted freshness value, and the intercepted MAC value.

[0093] (2) Obtain the freshness value from the freshness value management module,

[0094] The SecOC module obtains the freshness value corresponding to the PDU ID from the freshness value management module.

[0095] (3) Construct data to verify the MAC value,

[0096] The SecOC module constructs data used to calculate the recipient's MAC value (DataToAuthenticator).

[0097] The DataToAuthenticator data consists of the PDU data identifier, the original PDU data, and the freshness value (FreshnessVerifyValue) used for verification.

[0098] (4) Verify the authentication information in the security PDU,

[0099] The SecOC module passes DataToAuthenticator, the length of DataToAuthenticator, the MAC value parsed from the security PDU and its length SecOCAuthInfoTruncLength to the authentication algorithm (AES-128-CMAC) to verify the MAC value.

[0100] If the MAC value verification passes (that is, the MAC value calculated by the local authentication algorithm is consistent with the MAC value intercepted in the PDU), the secure PDU passes the verification. If the MAC value verification fails, Figure 5 Process as shown.

[0101] Determine whether the number of verification attempts exceeds the maximum number of verification attempts SecOCFreshnessValueSyncAttempts, and the maximum number of verification attempts is set to 3. (Taking into account the possibility of packet loss on the network during message transmission, which will cause inconsistency in the high-order part of the freshness value between the sender and the receiver, the maximum number of verification attempts is set to ensure the smooth reception of legal messages.) If it does not exceed, the high-significant bit of the message counter in the freshness value to be verified is incremented, and the MAC value verification is continued. If it exceeds, it is determined that the verification of the security PDU has failed.

[0102] (5) Update freshness value

[0103] If the security PDU passes the verification, the local freshness value is updated to the freshness value of the successful verification.

[0104] (6) Pass the original PDU to the upper layer application

[0105] If the verification of the security PDU is successful, the SecOC module shall pass the original PDU to the upper layer application module using the interface provided by the PDUR module.

[0106] like Figure 6 As shown, an information security transmission device includes: an ECU and a SecOC module;

[0107] Add SecOC module to the ECU at the PDU sending end;

[0108] When a secure PDU needs to be sent, the original PDU information is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module processes the original PDU information, adds authentication information to obtain a secure PDU, and then calls the API provided by the PDUR module to send the secure PDU out.

[0109] The specific implementation is as follows:

[0110] When the upper-layer application needs to send data, the upper-layer application transmits the original PDU information to the PDUR module, and then the PDUR module determines whether the PDU needs to implement the SecOC mechanism through the PDU identifier. If so, the PDUR module forwards the PDU information to the SecOC module, which authenticates it and forms a secure PDU. The SecOC module then transmits the secure PDU to the PDUR module for forwarding and then to the lower-layer communication module.

[0111] When the lower-layer communication module receives data, the lower-layer communication module transmits the PDU information to the PDUR module, and then the PDUR module determines whether the PDU needs to implement the SecOC mechanism through the PDU identifier. If so, the PDUR module forwards the PDU information to the SecOC module, which verifies it. After the verification is passed, the SecOC module transmits the original PDU to the PDUR module for forwarding and transmission to the upper-layer application.

[0112] The PDUR module should implement two interfaces for the SecOC module:

[0113] 1)PDU sending interface,

[0114] When the security PDU is constructed, SecOC needs to call the PDU sending interface function PduR_SecOCTransmit provided by PDUR to send the security PDU.

[0115] The definition of the PduR_SecOCTransmit function is shown in Table 1:

[0116] Table 1

[0117]

[0118] After the SecOC module calls the PduR_SecOCTransmit function, if the PDUR receives a sending result notification (successful sending or failed sending) from the underlying communication module, it should notify the SecOC module of the sending result.

[0119] 2)PDU receiving interface,

[0120] When the security PDU verification is completed, SecOC needs to call the upper-layer application PDU receiving interface function PduR_SecOCRxIndication provided by PDUR to send the original PDU to the upper-layer application.

[0121] The definition of the PduR_SecOCRxIndication function is shown in Table 2:

[0122] Table 2

[0123]

[0124] The SecOC module provides an initialization function (SecOC_Init), which should be called after the system is powered on and before there is a need to send or receive communication data. This function initializes all internal global variables and buffers to store security PDUs and all intermediate results. Before calling any other functions of the SecOC module except SecOC_GetVersionInfo, SecOC_Init should be called first. If other API functions are called before the module is initialized, SecOC_E_UNINIT should be returned.

[0125] The SecOC module supports authentication and verification of secure PDUs routed from a source bus to one or more target buses.

[0126] When the gateway receives a message to be forwarded and the SecOC mechanism is applied to the message:

[0127] (1) If the gateway needs to process the data of the message, including changing the PDU data identifier and PDU data, the gateway needs to verify the received message through the SecOC module. After the verification is passed and the message data processing is completed, the gateway needs to add authentication information to the message again through the SecOC module, and then forward the authenticated message.

[0128] (2) If the gateway does not need to process the data of the message, but directly forwards the message, and the PDU data identifier does not change, then the SecOC module does not need to process the message in any way.

[0129] For the following errors, a unified error code is used. The error definition table is shown in Table 3. There is no unified requirement for other errors.

[0130] Table 3

[0131]

[0132] When any error in the table occurs, it should be recorded as a DTC to indicate that an operation error has occurred in the SECOC software module.

[0133] The SecOC module should implement the following type definitions, and should also implement other necessary type definitions to support the implementation of the entire function. There is no unified requirement for other type definitions.

[0134] As shown in Table 4, SecOC_ConfigType is a structure used to represent the configuration of the SecOC mechanism interception, and is used as an input parameter when calling the SecOC_Init function (the definition of the structure members is for reference only and can be implemented according to actual conditions).

[0135] Table 4

[0136]

[0137] As shown in Table 5, SecOC_StateType is used to indicate the initialization state of the SecOC module. When SecOC_Init is called successfully, the state of the SecOC module should be SECOC_INIT, otherwise it should be SECOC_UNINIT.

[0138] Table 5

[0139]

[0140]

[0141] The SecOC module should implement the following function definitions. In addition, it should also implement other necessary functions to support the implementation of the entire function. There is no unified requirement for the definition of other functions.

[0142] As shown in Table 6, SecOC_Init is the function initialization function of the SecOC module.

[0143] Table 6

[0144]

[0145] As shown in Table 7, SecOC_DeInit is the function exit function of the SecOC module.

[0146] Table 7

[0147]

[0148] As shown in Table 8, SecOC_GetVersionInfo is a function for obtaining the version information of the SecOC module.

[0149] Table 8

[0150]

[0151] As shown in Table 9, SecOC_IfTransmit is a function that authenticates the PDU and transmits it to the lower-layer communication module, and is called by the PDUR module.

[0152] Table 9

[0153]

[0154] As shown in Table 10, SecOC_TxConfirmation is a function used to notify the SecOC module whether the transmission of the PDU is successful, and is called by the PDUR module.

[0155] Table 10

[0156]

[0157] As shown in Table 11, SecOC_RxIndication is a function that verifies the security PDU and transmits it to the upper layer application, and is called by the PDUR module.

[0158] Table 11

[0159]

[0160] A car, comprising: using one of the above-mentioned information security transmission methods, or using one of the above-mentioned information security receiving methods.

[0161] like Figure 7 As shown, the present disclosure provides an electronic device, including a processor 701, a communication interface 702, a memory 703 and a communication bus 704, wherein the processor 701, the communication interface 702 and the memory 703 communicate with each other through the communication bus 704;

[0162] Memory 703, storing computer programs;

[0163] The processor 701 is used to implement the above-mentioned information security transmission method or the above-mentioned information security receiving method when executing the computer program stored in the memory 703.

[0164] The present disclosure provides a computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the computer program implements the above-mentioned method for securely transmitting information or the above-mentioned method for securely receiving information.

[0165] The computer-readable storage medium may be included in the device / apparatus described in the above embodiment; or it may exist independently without being assembled into the device / apparatus. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0166] According to an embodiment of the present disclosure, a computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in conjunction with an instruction execution system, apparatus, or device.

[0167] Although the present disclosure has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present disclosure.

Claims

1. A method for secure information transmission, characterized in that: The method comprises: Add an encrypted communication SecOC module to the ECU at the PDU sending end; When a secure PDU needs to be sent, the original PDU information is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module processes the original PDU information, adds authentication information to obtain a secure PDU, and then calls the API provided by the PDUR module to send the secure PDU out.

2. A method for secure information transmission according to claim 1, characterized in that: Authentication information, including: message authentication code MAC value and freshness value.

3. The information security transmission method according to claim 2, characterized in that: The freshness value is obtained through the freshness value management module, and the freshness value is a monotonic count used to ensure the freshness of the security PDU.

4. The information security transmission method according to claim 2, characterized in that: The MAC value is calculated as follows: After the data identifier, original PDU information and complete freshness value of the secure PDU are concatenated together in sequence, a MAC value is generated using the AES-128-CMAC algorithm.

5. The method for secure information transmission according to claim 2, characterized in that: The security PDU includes: the original PDU information connected in sequence, the intercepted freshness value and the intercepted MAC value; The intercepted freshness value is obtained by intercepting the less significant 16 bits of the complete freshness value; The intercepted MAC value is obtained by intercepting the high-significant 64 bits of the complete MAC value.

6. A method for securely receiving information, characterized in that: The method comprises: adopting an information security transmission method according to any one of claims 1 to 5, Add SecOC module to the PDU receiving ECU; When receiving a safety PDU, the safety PDU is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module verifies the safety PDU. If the verification passes, the API provided by the PDUR module is called to forward the original PDU information contained in the safety PDU to the upper-layer application. Validation includes: Parse the original PDU information, the intercepted freshness value and the intercepted MAC value; Obtaining a freshness value corresponding to the ID of the security PDU from the freshness value management module; After the data identifier, original PDU information and complete freshness value of the secure PDU are sequentially connected together, a MAC value is generated using the AES-128-CMAC algorithm; The verification is successful when the intercepted MAC value is consistent with the high-significant bit of the generated MAC value.

7. An information security transmission device, characterized in that: include: ECU and SecOC module; Add SecOC module to the ECU at the PDU sending end; When a secure PDU needs to be sent, the original PDU information is forwarded to the SecOC module through the ECU's PDUR module. The SecOC module processes the original PDU information, adds authentication information to obtain a secure PDU, and then calls the API provided by the PDUR module to send the secure PDU out.

8. A car, characterized in that: include: A method for securely transmitting information as described in any one of claims 1 to 5 is adopted, or a method for securely receiving information as described in claim 6 is adopted.

9. An electronic device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus; a memory storing a computer program; A processor, when used to execute a computer program stored in a memory, implements a method for securely transmitting information as described in any one of claims 1 to 5, or implements a method for securely receiving information as described in claim 6.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, it implements a method for securely transmitting information as described in any one of claims 1 to 5, or implements a method for securely receiving information as described in claim 6.

Images