Vehicle cross-domain one-way irreversible pure hardware secure communication channel and method

Abstract

The application discloses a vehicle cross-domain one-way irreversible pure hardware security communication channel and method, and belongs to the technical field of vehicle communication security. The channel is a pure hardware circuit without firmware design, and comprises a one-way physical isolation unit, a hardware verification unit and an anti-replay unit. The channel only allows one-way transmission of signals, and the reverse path is physically blocked. The method generates a verification code and a sequence identifier through hardware, and directly discloses an abnormal frame through double verification. The application is different from the existing bidirectional software communication scheme, and is free of a protocol stack and a cache. The application can reduce tampering and replay risks, solve the problems of easy hijacking and easy tampering of vehicle cross-domain communication, and is suitable for transmission of high-security-level control instructions of vehicles.

Description

Technical Field

[0001] This invention relates to the field of vehicle communication security technology, specifically to a vehicle cross-domain unidirectional irreversible pure hardware secure communication channel and method. Background Technology

[0002] Cross-domain vehicle communication commonly employs a bidirectional bus combined with software protocols. This allows communication data to be transmitted back in reverse and tampered with via software, posing three main security risks: command hijacking, replay attacks, and data tampering. Existing communication encryption is largely implemented using software algorithms, making keys readable and protocols parsable, which is insufficient to meet the high-security communication requirements of critical domains such as the chassis and powertrain. The industry lacks purely hardware-based unidirectional irreversible communication channels, and the security flaws of software communication are difficult to effectively mitigate. Summary of the Invention

[0003] This invention provides a unidirectional, irreversible, purely hardware-based secure communication channel and method. It employs a physical isolation unit to achieve unidirectional signal transmission, physically cutting off the reverse path and eliminating electrical connections. Data verification, sequence generation, and timeliness detection are completed through purely hardware circuitry. The key fuse is permanently fixed and unreadable, and abnormal frames are directly discarded by hardware without buffering. The entire process involves no protocol stack and no software computation, thus enhancing the security of cross-domain vehicle communication.

[0004] Comparison with existing technologies and competing products 1. Existing competing products all use bidirectional software communication with algorithm encryption, which has problems such as reverse path, protocol parsing, and key export; this invention is physically unidirectional with no reverse pin, pure hardware verification without algorithm, and the key is fixed and cannot be read.

[0005] 2. This solution blocks data backhaul and tampering paths, reduces the software attack surface, and has better security performance than existing industry solutions.

[0006] 3. This technology differs from existing software communication architectures, possessing clear technological differentiation and innovation. Beneficial effects

[0007] 1. Anti-tampering protection: The reverse path is physically cut off, reducing the data backhaul path and lowering the risk of command tampering; 2. Anti-replay protection: Sequence identifiers are generated in hardware, and duplicate frames are discarded directly to resist replay attacks; 3. Low attack risk: No software, no protocol stack, no cache, reducing the probability of vulnerability exploitation; 4. Key Security: The fuse is fixed with no read interface, and the key never leaves the chip, reducing the risk of leakage; 5. Real-time transmission: Parallel hardware verification with low latency, adapting to high-speed transmission of critical control commands. Detailed Implementation

[0008] This invention is applied to the transmission of control commands from the vehicle intelligent driving domain and cockpit domain to the chassis domain and power domain. The two ends of the communication are equipped with a unidirectional physical isolation array. The isolation device is completely electrically disconnected, allowing only the control commands to be transmitted unidirectionally from the upper domain to the lower domain. There are no reverse copper foil pins and data paths.

[0009] The transmitting end has a built-in multi-entropy source physical random number circuit to generate a native random sequence as a frame identifier. Hardware parallel processing generates a check tag and binds it to the instruction frame, without algorithm iteration processing. The receiving end integrates a timeliness check circuit. Timeout instructions are directly discarded by hardware, without software parsing or caching.

[0010] The communication key and verification threshold are fixed in the hardware at the factory in one go, with no external erase or write interface, and the key is not exposed throughout the entire operation; the entire link is hardwired for transmission, the data frame is processed directly without queue buffering, and the circuit directly blocks the data when the verification is abnormal, without any relay link.

[0011] This channel is compatible with the transmission of vehicle steering, braking, and power control commands, and is compatible with various vehicle hardware buses. It is executed entirely in hardware and is suitable for high-security communication scenarios in intelligent vehicles.

Claims

1. A unidirectional, irreversible, purely hardware-secure communication channel for cross-domain vehicle collaboration, characterized in that, It consists of pure hardware logic circuits and contains no executable software, firmware, or microcode; including: a unidirectional physical isolation unit, which allows only unidirectional signal transmission between the two functional domains and physically blocks the reverse path; a hardware integrity verification unit, which performs hardware verification on the instruction frame using a fixed key; and a hardware anti-replay unit, in which the transmitting end hardware generates a sequence identifier binding frame, and the receiving end hardware discards the frame if it detects an anomaly.

2. A one-way, irreversible, purely hardware-secure communication method, applied to the channel described in claim 1, characterized in that, Pure hardware execution without firmware; including: a unidirectional physical isolation channel between the two domains; hardware generation of verification tags and sequence identifiers binding frames at the sending end; hardware double verification at the receiving end, and direct hardware discarding of abnormal frames without processing.

3. The channel according to claim 1 or the method according to claim 2, characterized in that, It integrates hardware timeliness verification, two-way dynamic authentication, and multi-entropy source true random number circuit, and discards timeout instructions directly in hardware.

4. The channel according to claim 1 or the method according to claim 2, characterized in that, The sending domain includes the intelligent driving domain, cockpit domain, and body domain; the receiving domain includes the chassis domain and power domain. After the sequence identifier is woken up, the hardware automatically recovers without software intervention.

5. The channel according to claim 1 or the method according to claim 2, characterized in that, The key and threshold are fixed in hardware once, and abnormal frames are not cached, not parsed by software, and are directly discarded by hardware.

6. The channel or method according to any one of claims 1-5, characterized in that, The entire transmission link is hardwired, with no reverse pins and no data return, physically blocking the tampering path.

7. The channel or method according to any one of claims 1-5, characterized in that, The verification operation is a pure combinational logic parallel processing, with no iterative operation and no scheduling delay.

8. The channel or method according to any one of claims 1-5, characterized in that, The random numbers are generated natively from physical noise, without any algorithmic computation or pseudo-random sequences.

9. The channel or method according to any one of claims 1-8, characterized in that, The entire process is executed directly at the level, without a communication protocol stack or data frame buffer.

10. A vehicle, characterized in that, It can be equipped with the channel according to any one of claims 1-9, or perform the method according to any one of claims 2-9.