CAN Message Authentication for Real-Time ECU Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing CAN message communication systems in vehicles lack efficient security measures without requiring specialized hardware or altering the CAN protocol, and there is a need for real-time authentication to prevent unauthorized access and data manipulation.
Innovation Solution
Implementing a cryptographic engine on each ECU with a dedicated processor and secure memory to compute authentication tags, using hardware accelerators for efficient and robust security, and prioritizing high-priority messages to ensure timely delivery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication tags or encryption are incorporated on CAN packets, then security is improved, but computational burden increases and real-time relay requirement may not be met
Solution Approach 1:
The system pre-computes and stores authentication tags in a lookup table before message transmission. When a message needs to be authenticated, the system retrieves the pre-computed tag from the table rather than computing it in real-time, thus maintaining security while meeting real-time relay requirements
Solution Approach 2:
The patent creates a copy of the authentication mechanism by implementing a lightweight verification process at the receiving end that checks message integrity without requiring full cryptographic verification, enabling fast validation while maintaining security
2Reliability
If specialized hardware is used for secure communication, then security is improved, but system complexity and cost increase
Solution Approach 1:
The patent implements a universal authentication framework that works with existing CAN bus hardware and protocol. The system uses software-based authentication tags that can be implemented on any ECU without requiring specialized security hardware, making the solution universally applicable across different vehicle systems
Solution Approach 2:
The patent introduces authentication tags as an intermediary layer between the existing CAN communication protocol and security requirements. These tags act as a mediator that provides security functionality without modifying or replacing the underlying CAN hardware, thus avoiding increased device complexity
3Reliability
If authentication tags are added to CAN packets, then unauthorized access is prevented, but message transmission time increases
Solution Approach 1:
Authentication tags are pre-computed and stored in lookup tables before transmission. The receiving ECU simply retrieves and compares the pre-stored tag with the received message, eliminating real-time computation delays and minimizing message transmission time while maintaining access control
Solution Approach 2:
The system uses a lightweight authentication tag verification process that performs only the essential check needed for security (comparing pre-computed tags) rather than full cryptographic verification. This partial verification approach provides sufficient security while minimizing the time added to message transmission
Data Source
AI summary
In various examples, a technique for securely transmitting CAN (Controller Area Network) messages is disclosed that includes receiving, using a cryptographic engine, a message from an application to be transmitted over a CAN (Controller Area Network) bus, wherein the cryptographic engine executes a secure firmware and is implemented on an on-die discrete processor. The technique further includes accessing, using the secure firmware, a key from a plurality of keys associated with an authentication process from a secure memory associated with the cryptographic engine. Additionally, the technique includes computing an authentication tag using the key and the message and transmitting the message with the authentication tag over the CAN bus to a destination address.