Composite Authentication for Secure CAN Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing in-vehicle communication systems face inefficiencies due to the need for reserving space for Message Authentication Codes (MAC) in each CAN frame, leading to bandwidth waste and low processing efficiency of Hardware Security Modules (HSMs, especially in high-frequency data exchanges.
Innovation Solution
A method where multiple messages are transmitted separately, with a composite authentication code generated for the group, eliminating the need for individual authentication codes in each message and reducing HSM invocation frequency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a fixed space is reserved in each CAN frame to store the MAC, then security verification can be performed for each message, but frame utilization is limited and bandwidth resources are wasted
Solution Approach 1:
The patent segments the authentication mechanism from the message transmission. Instead of embedding MAC in every message frame, the authentication function is separated into a独立 verification process where multiple messages are collected and verified together as a batch, eliminating the need for reserved MAC space in each individual frame.
Solution Approach 2:
The patent merges multiple individual message transmissions into a single batch verification operation. By accumulating multiple messages and performing one-time authentication verification for the entire batch, the system combines what would otherwise be separate authentication operations, thereby reducing overall bandwidth consumption for authentication data.
2Reliability
If individual MACs are generated for each message, then each message can be verified independently, but HSM processing efficiency is low and system performance becomes a bottleneck
Solution Approach 1:
The patent implements periodic batch verification instead of continuous individual verification. Messages are accumulated over a period and then verified together in batches, creating a periodic verification rhythm that reduces the frequency of HSM operations while maintaining security coverage for all transmitted messages.
Solution Approach 2:
The patent performs preliminary message accumulation before verification. Instead of verifying each message immediately upon transmission, the system preliminarily collects multiple messages into a batch, then performs the actual authentication operation once the batch is complete, thereby reducing total HSM invocation frequency.
3Reliability
If frequent data exchanges are required among ECUs, then communication reliability is improved, but the low efficiency of HSMs creates a performance bottleneck
Solution Approach 1:
The patent creates a copy mechanism where message content is transmitted separately from authentication verification. The actual message data can be freely exchanged without triggering HSM operations, while authentication is performed on copied/batched versions of the data, thereby decoupling communication frequency from security processing frequency.
Data Source
AI summary
A method for secure communication includes (S1) generating a sender composite authentication code based on multiple messages to be transmitted, the sender composite authentication code being used for the overall security verification of a plurality of messages to be transmitted as a whole, (S2) transmitting the plurality of messages to be transmitted to the receiver as first transmission messages, wherein the first transmission messages do not contain any form of authentication code, and (S3) transmitting the sender composite authentication code to the receiver as a second transmission message, wherein the second transmission message is transmitted separately from the first transmission message. A communication device and a computer program product associated with this method is also disclosed.