Gateway Node Ranking for CAN Bus Side-Channel Leakage

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Side-channel attacks pose a significant threat to secure communication in CAN bus systems, where adversaries can determine which node transmits logical 0 or 1 signals by measuring electrical signal properties, compromising the security of cryptographic key exchanges.

Innovation Solution

A method using a gateway node to estimate and minimize leakage through physical modeling and learning-based methods, optimizing the order of node operations to reduce data leakage during group cryptographic key exchanges, and communicating this order in a privacy-preserving manner to prevent adversaries from identifying bit transmissions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If nodes transmit cryptographic key data simultaneously on CAN bus to prevent third party detection, then security against eavesdropping is improved, but side-channel leakage to adversaries increases due to electrical signal property variations

Engineering Contradiction:
Improvesecurity against eavesdroppingVSAvoidside-channel leakage
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The gateway node performs preliminary actions by estimating the leakage function for each node pair before the actual key exchange occurs. It generates a ranking of node pairs based on this pre-computed leakage information and distributes the ranking to participating nodes. This preliminary preparation enables the system to select optimal node pairs for key exchange that minimize side-channel leakage, resolving the contradiction between security and leakage by proactively identifying the best transmission pairs before any cryptographic operations begin.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback through the gateway node's continuous monitoring and estimation of electrical signal properties during node operations. The gateway observes voltage levels, signal characteristics, and timing information to dynamically update its understanding of leakage patterns. This feedback loop allows the system to adaptively adjust node operation ordering and select node pairs that minimize observable side-channels, thereby maintaining security while reducing information leakage to adversaries.

Inventive Principle:
Principle #23Feedback

2Ease of operation

If standard CAN bus transceivers are used for node transmission, then ease of operation and compatibility are improved, but measurement precision of electrical signals by adversaries increases enabling side-channel attacks

Engineering Contradiction:
Improvetransmission operationVSAvoidsignal measurement precision
Core Design Contradiction:
Ease of operationVSMeasurement precision

Solution Approach 1:

The gateway node serves as an intermediary between the CAN bus transceivers and the key exchange process. It introduces a layer of abstraction that monitors and controls node operations, using its observation capabilities to estimate leakage functions and determine optimal transmission ordering. This intermediary layer mitigates the measurement precision problem by actively managing which nodes transmit when, based on real-time or pre-computed leakage assessments, thereby reducing the effectiveness of adversary measurements while maintaining compatibility with standard transceivers.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system changes operational parameters by dynamically adjusting the ordering and timing of node transmissions based on estimated leakage functions. Instead of using fixed transmission schedules, the gateway node modifies transmission parameters such as which node pairs exchange keys and in what sequence, based on their measured or estimated electrical signal characteristics. This parameter adaptation reduces side-channel leakage by avoiding transmission patterns that produce highly distinguishable electrical signatures, while still using standard CAN bus hardware.

Inventive Principle:
Principle #35Parameter changes

3Productivity

If nodes exchange cryptographic keys through simultaneous transmission on shared medium, then communication efficiency is improved, but data leakage to adversaries occurs through observable signal characteristics

Engineering Contradiction:
Improvekey exchange efficiencyVSAvoiddata leakage
Core Design Contradiction:
ProductivityVSLoss of information

Solution Approach 1:

The gateway node performs preliminary estimation of leakage functions for all possible node pairs before the key exchange process begins. It computes a ranking that identifies which node pairs will produce the least observable side-channel leakage. This pre-computation enables the system to efficiently select optimal node pairs for simultaneous transmission, maintaining high productivity while minimizing information loss to adversaries through informed selection of transmission pairs.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system changes the parameters of key exchange by dynamically selecting which node pairs perform simultaneous transmission based on their estimated leakage characteristics. Instead of using a fixed or random ordering, the gateway node adjusts transmission parameters to favor node pairs with lower measured or estimated side-channel leakage. This parameter optimization maintains communication efficiency by enabling parallel key exchange operations while reducing data leakage through intelligent selection of transmission participants.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP3593486B1Methods for minimizing side channel leakage for group key agreement for controller area network
Publication Date: 2022.10.12 ROBERT BOSCH GMBH
  • EP3593486B1 patent drawingFigure 1
  • EP3593486B1 patent drawingFigure 2
  • EP3593486B1 patent drawingFigure 3

AI summary

A method for operation of a communication network reduces leakage of data to an adversary that can observe signals transmitted through the communication network. The method includes generating a ranking to order operation of a plurality of nodes that exchange data in a group cryptographic key exchange process based on a leakage map of the nodes. The ranking minimizes leakage of data through a shared communication medium during the group cryptographic key exchange process. The method includes transmitting the ranking to the plurality of nodes through the shared communication medium, and performing, with the plurality of nodes, the group cryptographic key exchange process in an order of operation specified in the ranking to enable the plurality of nodes to exchange a shared cryptographic key through the shared communication medium while minimizing leakage of data.