Intra-vehicle Network Encryption for ECU Packet Confidentiality
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing CAN bus communication protocols in vehicles are vulnerable to eavesdropping and replay attacks, with current security mechanisms like SecOC failing to prevent attackers from intercepting and modifying packets.
Innovation Solution
Implementing an intra-vehicle network-based communication method that uses encryption and integrity protection through keystream generation and message authentication codes to secure packet transmission between ECUs, ensuring confidentiality and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If CAN bus protocol is used for communication between ECUs, then simplicity and practicability are improved, but vulnerability to eavesdropping and replay attacks increases
Solution Approach 1:
The patent applies preliminary anti-action by implementing encryption and integrity protection mechanisms before data transmission. The encryption module encrypts the data payload using a key and initialization vector, while the integrity protection module generates an authentication code, preventing attackers from successfully executing eavesdropping or replay attacks even though the CAN bus protocol itself remains unchanged.
Solution Approach 2:
The patent introduces an intermediary security processing module between the application layer and the CAN bus communication layer. This intermediary module performs encryption, integrity protection, and authentication operations on data packets, acting as a mediator that protects the communication without requiring changes to the underlying CAN bus protocol, thus maintaining simplicity while adding security.
2Reliability
If SecOC mechanism is implemented for authentication, then modification and replay attacks are prevented, but eavesdropping protection remains insufficient
Solution Approach 1:
The patent merges multiple security functions into a unified security processing module. It combines encryption (for confidentiality), integrity protection via authentication codes (for detecting tampering), and authentication (for verifying identities) into a single integrated system that processes data packets comprehensively, addressing the eavesdropping vulnerability that SecOC alone cannot prevent.
Solution Approach 2:
The patent uses a composite security approach by combining different security mechanisms: encryption algorithms (such as AES), integrity protection algorithms (such as HMAC), and authentication protocols. This composite security layer works together to provide comprehensive protection against eavesdropping, modification, and replay attacks, overcoming the limitations of any single mechanism.
3Reliability
If encryption and integrity protection are added to CAN communication, then confidentiality and integrity are improved, but system complexity increases
Solution Approach 1:
The patent segments the security processing into distinct functional modules: an encryption module that handles confidential data, an integrity protection module that generates authentication codes, and an authentication module that verifies identities. Each module performs a specific function, making the overall complex security system more manageable and maintainable while providing comprehensive protection.
4Reliability
If authentication mechanisms are implemented, then communication security is improved, but communication overhead increases
Solution Approach 1:
The patent implements partial action by selectively applying different security measures to different types of data packets. Not all packets require the same level of security processing; the system can adjust the extent of encryption and authentication based on the sensitivity and importance of the data, reducing unnecessary overhead while maintaining security for critical communications.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An intra-vehicle network-based communication method and an apparatus are provided, to resolve a problem in the conventional technology that a packet is easy to be eavesdropped on when an ECU transmits the packet. In this application, a first ECU performs an operation using a first key and a first fresh value to generate a keystream; performs an exclusive OR operation using the keystream and a to-be-transmitted first plaintext packet to generate a first ciphertext packet; and sends the first ciphertext packet to a second ECU. The first fresh value is a value generated by a counter in the first ECU when the first ECU transmits a packet, and the counter is configured to record a quantity of packets transmitted by the first ECU. The first ECU transmits the first ciphertext packet to the second ECU. This can prevent the first packet transmitted by the first ECU from being eavesdropped on, and help improve confidentiality of the packet transmitted by the first ECU.