SOA service-based vehicle-mounted network security communication method and system

Abstract

The invention provides a vehicle-mounted network safety communication method and system based on SOA service, and belongs to the technical field of safety communication of intelligent automobiles. According to the embodiment of the invention, the second service application data is generated by performing cryptography and hash value calculation on the first service application data of the service sender. And generating third service application data of the service sender through a TCP / IP protocol stack and a security tunnel of the operating system, and sending the third service application data to the service receiver. And the MAC layer of the service receiver receives the third service application data of the service sender, the third service application data is processed by the TCP / IP protocol stack and the security tunnel of the operating system, whether stealing, counterfeiting and tampering exist in the Ethernet frame transmission process is judged, and safe fourth service application data is guaranteed to be obtained. And the service receiver performs integrity verification and cryptographic decryption calculation on the fourth service application data, and judges whether the SOA service application data is stolen, counterfeited and tampered by the malicious application of the operating system, so that the security of the SOA service application data is ensured.

Description

Technical Field

[0001] The present invention relates to the field of information security of smart cars, and in particular to a method and system for secure vehicle network communication based on SOA services. Background Art

[0002] The trend of electrification and intelligence of automobiles is unstoppable. In the future, automobiles will not only be means of transportation, but also mobile smart terminals, providing passengers with a safer, more efficient, convenient and environmentally friendly travel experience. The automotive electronic and electrical architecture continues to develop and evolve with the increase of in-vehicle functions, and puts forward higher requirements for ensuring the continuity and scalability of in-vehicle functions and services. The SOA service (service-oriented architecture) of smart cars refers to the encapsulation and provision of various functions inside the vehicle, such as driving assistance, entertainment system, vehicle diagnosis, etc., in the form of services, providing users with more personalized and customized services. When implementing a type of function, there may be multiple optional sub-services, which can be classified into a service level. Obviously, compared with a single service, the service level has more choice space, and better vehicle performance can be achieved by selecting more suitable sub-services under different environmental conditions. Existing smart cars usually use fixed algorithms and hardware in various links of autonomous driving. Although the stability of operation is maintained, it may significantly reduce efficiency in some scenarios. By selecting the most suitable sub-service in each service level under the current environment through service scheduling in multiple service levels, the overall performance and efficiency of the system can be improved.

[0003] SOME / IP is a service-oriented message exchange protocol. It is a lightweight, modular, and scalable communication protocol for network communication. At present, most SOA-based communication protocols are implemented through the SOME / IP protocol of automotive Ethernet. The SOME / IP protocol is based on message passing, where each message contains a service identifier, a method identifier, and a data part. The service provider responds to the client's request by publishing the service; the client calls the service by sending a message, and the service provider returns a response.

[0004] Smart car SOA services based on SOME / IP bring a more flexible and open service architecture, but also introduce network security issues. Smart cars involve a large number of vehicle networks, sensors, control systems, etc., which may become targets of hacker attacks. Unprotected smart car networks may face security threats such as remote intrusion, data leakage, and remote control. The communication and interaction between smart car SOA services based on SOME / IP are carried out through the vehicle Ethernet network and the operating systems of the sender and the service provider. Therefore, a vehicle network security communication method is needed to ensure the confidentiality, integrity, and non-tamperability of the vehicle Ethernet frames and SOME / IP service application data during the SOA service communication process. Summary of the invention

[0005] In order to ensure the confidentiality, integrity and non-tamperability of vehicle Ethernet frames and SOME / IP service application data during SOA service communication, the present invention provides a vehicle network security communication method and system based on SOA service.

[0006] The objective of the present invention is achieved through the following technical solutions:

[0007] The first service application data of the service sender is encrypted by cryptographic methods, including but not limited to symmetric encryption methods such as DES, AES and asymmetric encryption methods such as RSA; the integrity check value is calculated for the encrypted application data and message header by cryptographic methods, including but not limited to integrity authentication methods such as MD5, SHA1, SHA256, etc., to obtain a hash value of fixed length. After the first service application data of the service sender is encrypted and the integrity check value is calculated, the message header and payload data of the application data of the data sender are redefined according to the SOME / IP message structure, the payload data segment contains the encrypted data and the hash value, and the second service application data is generated and transmitted to the TCP / IP layer of the service sender.

[0008] The second service application data is encapsulated through the Ethernet protocol stack and the secure tunnel. The second service application data message that needs to be packaged and encapsulated is obtained; a secure tunnel between the sender and the receiver is established using IPSEC or MACSEC; the second service application data message is encapsulated according to the communication protocol and the secure tunnel using the TCP / IP or LWIP Ethernet protocol stack, and the third service application data is generated and transmitted to the MAC layer. The third service application data, i.e., the Ethernet frame, is sent from the MAC layer of the service sender to the MAC layer of the service receiver through the pre-established secure tunnel;

[0009] The third service application data received by the MAC layer of the service receiver is verified by using a secure tunnel. The receiver verifies the third service application data received by the MAC layer through a secure tunnel to determine whether there is an error; if there is an error, the third service application data is not received, and the corresponding SOA service is not provided; if there is no error, the third service application data is received, and the content of the TCP / IP layer data segment is obtained through the Ethernet protocol stack to obtain the fourth service application data of the receiver.

[0010] Decrypt and verify the integrity of the fourth service application data, determine whether there is an error, and perform corresponding processing. Calculate a hash value for the fourth service application data using a cryptographic method corresponding to the sender, and compare it with the transmitted hash value to determine whether there is an error in the SOME / IP application layer data; if there is an error in the integrity check, do not accept the fourth service application data, and do not provide the corresponding SOA service; if there is no error in the integrity check, receive the fourth service application data; decrypt the fourth service application data using a cryptographic method corresponding to the sender, obtain the SOME / IP message content, and provide the relevant SOA service content.

[0011] The present invention describes an in-vehicle network security communication system based on SOA service, comprising: a first protection path unit, a second protection path unit, a third protection path unit, a fourth protection path unit and a fifth protection path unit.

[0012] The first protection path unit is used to encrypt the first service application data of the service sender and calculate the integrity check value to ensure the confidentiality and integrity of the application data, and at the same time generate the second service application data, and transmit it from the application layer of the service sender to the TCP / IP layer of the service sender. Specifically, the data encryption and integrity check calculation module is used to encrypt the first service application data of the service sender by cryptographic methods, and add verification redundancy information to generate the second service application data. Specifically, the first path sending module is used to transmit the second service application data from the application layer of the service sender to the TCP / IP layer of the service sender.

[0013] The second protection path unit is used to package and encapsulate the second service application data through the Ethernet protocol stack and the secure tunnel to generate the third service application data, and transmit it to the MAC layer of the service sender. Specifically, it includes a full Ethernet protocol stack TCP / IP or a lightweight Ethernet protocol stack LWIP, which is used to package and encapsulate the second service application data through the Ethernet protocol to generate the third service application data.

[0014] The third protection path unit is used to send the third service application data to the MAC layer of the service receiver through a pre-established secure tunnel. Specifically, the secure tunnel module is used to perform secure tunnel protocol packaging and encapsulation on the second service application data to generate the third service application data.

[0015] The fourth protection path unit is used to verify the third service application data through a secure tunnel. If there is no error, it is transmitted to the TCP / IP layer of the service receiver to generate the fourth service application data. Specifically, the judgment verification module is used to perform a secure tunnel verification on the third service application data to determine whether there is an error. If there is an error, the third service application data content is not received; if there is no error, it is transmitted to the TCP / IP layer of the receiver to generate the fourth service application data.

[0016] The fifth protection path unit is used to decrypt and verify the integrity of the fourth service application data, and provide the corresponding SOA service if there is no error. Specifically, the judgment and verification module is used to perform a hash value integrity check on the fourth service application data to determine whether there is an error. Specifically, the judgment and processing module is used to not receive the content of the fourth service application data when there is an error; if there is no error, decrypt the corresponding data segment and provide the corresponding SOA service.

[0017] Compared with the prior art, the in-vehicle network security communication method and system based on SOA service provided by the present invention have the following beneficial effects:

[0018] The in-vehicle network security communication method and system based on SOA service provided by the present invention has a double-layer protection function, which can simultaneously ensure the confidentiality, integrity and non-tamperability of the in-vehicle network communication Ethernet frame and SOA service application data during the SOA service process. The method and system provided by the present invention have a layer of protection based on the Ethernet protocol stack and the security tunnel to ensure the security of Ethernet frame transmission during the in-vehicle network communication. The other layer of protection is based on the improved SOME / IP implementation, which ensures the confidentiality, integrity and non-tamperability of the SOA service application data by encrypting and decrypting the data in the SOME / IP data segment and performing integrity verification, and ensures that the SOA service application data is not tampered with by malicious software after the operating system receives the Ethernet frame. The present invention effectively improves the information security of application data and services during the in-vehicle network SOA service process through two layers of protection. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art; obviously, the drawings in the following description are merely implementation cases of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on the provided drawings without creative work.

[0020] Figure 1 A flow chart of a vehicle network security communication method based on SOA service provided by an embodiment of the present invention;

[0021] Figure 2 An application architecture diagram of an in-vehicle network security communication system based on SOA services provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0022] In order to make the above-mentioned objects, features and advantages of the present invention more clearly understood, the specific embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0023] Obviously, the SOA service of smart cars based on SOME / IP brings a more flexible and open service architecture, but it also introduces network security issues. Smart cars involve a large number of vehicle networks, sensors, control systems, etc., which may become targets of hacker attacks. Unprotected smart car networks may face security threats such as remote intrusion, data leakage, and remote control. The communication and interaction between smart car SOA services based on SOME / IP are carried out through the vehicle Ethernet network and the operating systems of the sender and the service provider. Therefore, a vehicle network security communication method is needed to ensure the confidentiality, integrity and non-tamperability of the vehicle Ethernet frames and SOME / IP service application data during the SOA service communication process.

[0024] In order to solve the above problems, the present invention provides a method and system for secure communication of an in-vehicle network based on SOA services, which has a double-layer protection function and can simultaneously ensure the confidentiality, integrity and non-tamperability of the in-vehicle network communication Ethernet frames and SOA service application data during the SOA service process. The method and system provided by the present invention have a layer of protection based on the Ethernet protocol stack and the secure tunnel to ensure the security of Ethernet frame transmission during the in-vehicle network communication. The other layer of protection is based on the improved SOME / IP implementation, which ensures the confidentiality, integrity and non-tamperability of the SOA service application data by encrypting and decrypting the data in the SOME / IP data segment and performing integrity verification, and ensures that the SOA service application data is not tampered with by malicious software after the operating system receives the Ethernet frame. The present invention effectively improves the information security of application data and services during the SOA service of the in-vehicle network through two layers of protection.

[0025] Figure 1 A flow chart of a vehicle-mounted network security communication method based on SOA service provided by an embodiment of the present invention, specifically, includes the following steps.

[0026] Step S100, encrypt the first service application data of the service sender and calculate the integrity check value, generate the second service application data, and transmit it to the TCP / IP layer of the service sender. In this embodiment, the AES symmetric encryption method and the SHA256 integrity authentication method are used to encrypt the first service application data of the service sender and calculate the 256-bit hash value. The message header and payload data are redefined according to the SOME / IP message structure. The payload data segment contains encrypted data and hash value, and the length of the valid data segment should be less than the maximum frame length minus the hash value. The generated second service application data is transmitted to the TCP / IP layer of the service sender.

[0027] Step S200, encapsulate the second service application data through the Ethernet protocol stack and the secure tunnel to generate the third service application data of the service sender, and further transmit it to the MAC layer. In this embodiment, the ESP mode of IPSEC is used to establish a secure tunnel between the sender and the receiver, encrypt and authenticate the second service application data, and the function is realized by adding a new ESP header before the payload of the IP datagram. The ESP header contains the necessary parameters and data for encryption and authentication. The generated third service application data is transmitted to the MAC layer.

[0028] Step S300, the third service application data is sent from the MAC layer of the service sender to the MAC layer of the service receiver through a pre-established secure tunnel. In this embodiment, an in-vehicle Ethernet PHY chip and a twisted pair are used, and the in-vehicle Ethernet switch is used for addressing, and the data is transmitted from the MAC layer of the service sender to the MAC layer of the service receiver.

[0029] Step S400, the third service application data received by the MAC layer of the service receiver is verified by using a secure tunnel to determine whether there is an error, and corresponding processing is performed. In this embodiment, the service receiver verifies the third service application data through a secure tunnel in the ESP mode of IPSEC established with the service sender to determine whether there is an error. If there is an error, the third service application data is not received, and the corresponding SOA service is not provided; if there is no error, the third service application data is received and processed by the Ethernet protocol stack.

[0030] Step S500, for the third service application data of the receiving party that has passed the secure tunnel verification, obtain the content of the TCP / IP layer data segment to obtain the fourth service application data of the receiving party. In this embodiment, the content of the TCP / IP layer data segment is obtained through the TCP / IP Ethernet protocol stack to obtain the fourth service application data of the receiving party.

[0031] Step S600, decrypt and perform integrity check on the fourth service application data, determine whether there is an error, and perform corresponding processing. In this embodiment, the hash value of the fourth service application data is calculated by the SHA256 integrity authentication method corresponding to the sender, and compared with the hash value of the SOME / IP data segment to determine whether there is an error in the SOME / IP application layer data. If there is an error in the integrity check, the fourth service application data is not accepted and the corresponding SOA service is not provided; if there is no error in the integrity check, the fourth service application data is received. The fourth service application data segment is decrypted by the AES symmetric encryption method to obtain the SOME / IP message content, and the relevant SOA service content is provided to the service sender.

[0032] Furthermore, Figure 2 An application architecture diagram of an in-vehicle network security communication system based on SOA service provided in an embodiment of the present invention includes: a first protection path unit, a second protection path unit, a third protection path unit, a fourth protection path unit and a fifth protection path unit.

[0033] In this embodiment, the first protection path unit 100 is used to encrypt the first service application data of the service sender and calculate the integrity check value to ensure the confidentiality and integrity of the application data, and at the same time generate the second service application data, and transmit it from the application layer of the service sender to the TCP / IP layer of the service sender. Specifically, the data encryption and integrity check calculation module is used to encrypt the first service application data of the service sender by cryptographic methods, and add verification redundancy information to generate the second service application data. Specifically, the first path sending module is used to transmit the second service application data from the application layer of the service sender to the TCP / IP layer of the service sender.

[0034] In this embodiment, the second protection path unit 200 is used to package and encapsulate the second service application data through the Ethernet protocol stack and the security tunnel to generate the third service application data, and transmit it to the MAC layer of the service sender. Specifically, the full Ethernet protocol stack TCP / IP or the lightweight Ethernet protocol stack LWIP is used to package and encapsulate the second service application data through the Ethernet protocol to generate the third service application data.

[0035] In this embodiment, the third protection path unit 300 is used to send the third service application data to the MAC layer of the service receiver through a pre-established secure tunnel. Specifically, the secure tunnel module is used to perform secure tunnel protocol packaging and encapsulation on the second service application data to generate the third service application data.

[0036] In this embodiment, the fourth protection path unit 400 is used to check the third service application data through a secure tunnel. If there is no error, it is transmitted to the TCP / IP layer of the service receiver to generate the fourth service application data. Specifically, the judgment and verification module is used to perform a secure tunnel check on the third service application data to determine whether there is an error. If there is an error, the third service application data content is not received; if there is no error, it is transmitted to the TCP / IP layer of the receiver to generate the fourth service application data.

[0037] In this embodiment, the fifth protection path unit 500 is used to decrypt and verify the integrity of the fourth service application data, and if there is no error, provide the corresponding SOA service. Specifically, the judgment and verification module is used to perform a hash value integrity check on the fourth service application data to determine whether there is an error. If there is an error, the content of the fourth service application data is not received; if there is no error, the corresponding data segment is decrypted and the corresponding SOA service is provided.

[0038] In this article, relational terms such as first and second, etc. are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0039] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A vehicle network security communication method and system based on SOA service, characterized in that: The methods described include: Encrypting the first service application data of the service sender and calculating the integrity check value, generating the second service application data, and transmitting the second service application data to the TCP / IP layer of the Ethernet protocol stack; Encapsulating the second service application data through the Ethernet protocol stack and the secure tunnel to generate third service application data of the service sender, and further transmitting the third service application data to the MAC layer; Sending the third service application data from the MAC layer of the service sender to the MAC layer of the service receiver through a pre-established secure tunnel; Verify the third service application data received by the MAC layer of the service receiver by using a secure tunnel, determine whether there is an error, and perform corresponding processing; For the third service application data of the receiving party that has passed the security tunnel verification, obtain the content of the TCP / IP layer data segment to obtain the fourth service application data of the receiving party; The fourth service application data is decrypted and integrity checked to determine whether there is an error, and corresponding processing is performed.

2. The method according to claim 1, characterized in that The described method of encrypting the first service application data of the service sender and calculating the integrity check value to generate the second service application data and transmit it to the TCP / IP layer of the Ethernet protocol stack specifically includes the following steps: Encrypting the first service application data of the service sender by cryptographic methods, including but not limited to using symmetric encryption methods such as DES and AES and asymmetric encryption methods such as RSA; Calculate the integrity check value of the encrypted application data and message header through cryptographic methods, including but not limited to using integrity authentication methods such as MD5, SHA1, SHA256, etc. to obtain a hash value of fixed length; The message header and payload data of the data sender's application data are redefined according to the SOME / IP message structure. The payload data segment contains encrypted data and a hash value to generate second service application data, which is then transmitted to the TCP / IP layer of the service sender.

3. The method according to claim 1, characterized in that The described method of encapsulating the second service application data through the Ethernet protocol stack and the secure tunnel to generate the third service application data of the service sender, and further transmitting the third service application data to the MAC layer specifically includes the following steps: Obtaining a second service application data message that needs to be packaged and encapsulated; Use IPSEC or MACSEC to establish a secure tunnel between the sender and the receiver; The second service application data message is encapsulated according to the communication protocol and the secure tunnel using the TCP / IP or LWIP Ethernet protocol stack to generate the third service application data and transmit it to the MAC layer.

4. The method according to claim 1, characterized in that: The described method of verifying the third service application data received by the MAC layer of the service receiver using a secure tunnel, determining whether there is an error, and performing corresponding processing specifically includes the following steps: The receiver verifies the third service application data received by the MAC layer through the secure tunnel to determine whether there is an error; If there is an error, the third service application data is not received, and the corresponding SOA service is not provided; If there is no error, the third service application data is received, processed through the Ethernet protocol stack, the TCP / IP layer data segment content is obtained, and the fourth service application data of the receiving party is obtained.

5. The method according to claim 1, characterized in that The decrypting and integrity checking of the fourth service application data, determining whether there is an error, and performing corresponding processing specifically include the following steps: Calculate a hash value for the fourth service application data by a cryptographic method corresponding to the sender, and compare it with the transmitted hash value to determine whether there is an error in the SOME / IP application layer data; If there is an error in the integrity check, the fourth service application data is not accepted and the corresponding SOA service is not provided; If there is no error in the integrity check, receiving the fourth service application data; The fourth service application data is decrypted by a cryptographic method corresponding to the sender to obtain the SOME / IP message content and provide related SOA service content.

6. A vehicle network security communication method and system based on SOA service, characterized in that: The described system includes: a first protection path unit, a second protection path unit, a third protection path unit, a fourth protection path unit and a fifth protection path unit, specifically: The first protection path unit is used to encrypt the first service application data of the service sender and calculate the integrity check value to ensure the confidentiality and integrity of the application data, and at the same time generate the second service application data and transmit it from the application layer of the service sender to the TCP / IP layer of the service sender; A second protection path unit is used to package and encapsulate the second service application data through the Ethernet protocol stack and the security tunnel, generate third service application data, and transmit it to the MAC layer of the service sender; a third protection path unit, configured to send the third service application data to a MAC layer of a service receiver through a pre-established secure tunnel; a fourth protection path unit, configured to verify the third service application data through a secure tunnel, and if no error exists, transmit the data to a TCP / IP layer of a service receiver to generate fourth service application data; The fifth protection path unit is used to decrypt and verify the integrity of the fourth service application data, and provide corresponding SOA services if there is no error.

7. The system according to claim 6, characterized in that The first protection path unit described specifically includes: A data encryption and integrity verification calculation module, used to encrypt the first service application data of the service sender through a cryptographic method, and to add verification redundancy information to generate second service application data; The first path sending module is used to transmit the second service application data from the application layer of the service sender to the TCP / IP layer of the service sender.

8. The system according to claim 6, characterized in that The second protection path unit described specifically includes: The complete Ethernet protocol stack TCP / IP or the lightweight Ethernet protocol stack LWIP is used to perform Ethernet protocol packaging and encapsulation on the second service application data to generate third service application data.

9. The system according to claim 6, characterized in that The third protection path unit described specifically includes: The secure tunnel module is used to package and encapsulate the second service application data using a secure tunnel protocol to generate third service application data.

10. The system according to claim 6, characterized in that The fourth protection path unit described specifically includes: A judgment and verification module, used to perform a security tunnel verification on the third service application data to determine whether there is an error; The judgment processing module is used for not receiving the third service application data content when there is an error; and transmitting to the TCP / IP layer of the receiver to generate fourth service application data when there is no error.

11. The system according to claim 6, characterized in that The fifth protection path unit described specifically includes: A judgment and verification module, used to perform a hash value integrity check on the fourth service application data to determine whether there is an error; The judgment processing module is used for not receiving the fourth service application data content when there is an error; when there is no error, decrypting the corresponding data segment and providing the corresponding SOA service.

Images