The present application relates to the technical field of in-vehicle
network communication, and discloses a lightweight and
secure communication method and
system between ECUs in an in-vehicle network. The communication method comprises an ECU identity
authentication phase: each ECU interacts with a CAN gateway, and the CAN gateway performs batch identity
authentication to verify the legality of all ECUs; a
data classification phase: according to the data sensitivity, the data to be transmitted is classified as confidential data or non-confidential data; a
data transmission phase: if the data to be transmitted is confidential data, the sender ECU uses a
session key and an ASCON
encryption algorithm to encrypt and authenticate the
plaintext of the confidential data, generates
ciphertext and
authentication parameters, and sends a data packet containing the
ciphertext and authentication parameters to the
receiver ECU; if it is non-confidential data, the sender ECU uses a
session key and an ASCON
encryption algorithm to only sign but not encrypt the
plaintext, generates an authentication tag, and sends a data packet containing the
plaintext and the authentication tag to the
receiver ECU. The present application takes into account the security and computational overhead of in-vehicle ECU communication.