In-Vehicle MAC Key Update Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-vehicle networks using the CAN protocol face security risks due to the limited length of the Message Authentication Code (MAC) data field, making them vulnerable to brute force attacks from fraudulent nodes.
Innovation Solution
An update processing method for the MAC key is introduced, which synchronizes the update of the MAC key among electronic control units based on the vehicle's state, ensuring the MAC key is updated only when the vehicle is in a predetermined state, such as parking, to enhance security against brute force attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the MAC key update is performed at any time, then security is improved, but communication errors occur during high traffic conditions
Solution Approach 1:
The update trigger parameter is changed from an arbitrary time parameter to a vehicle state parameter. The system monitors the vehicle state (e.g., driving state vs. parking state) and only triggers MAC key updates when the vehicle is in a predetermined low-traffic state. This parameter change eliminates communication errors during high-traffic periods while maintaining security through timely updates.
Solution Approach 2:
The system implements feedback by continuously monitoring the vehicle state and using this information to control the MAC key update timing. The vehicle state acts as feedback that informs when it is safe to perform updates without causing communication errors, creating a closed-loop control system that adapts to real-time conditions.
Data Source
AI summary
A method for use in an in-vehicle network system is provided. The in-vehicle network system includes a plurality of electronic control units that communicate a data frame having a message authentication code (MAC) added thereto with one another via a bus in accordance with the Controller Area Network (CAN) protocol. The method includes detecting the state of a vehicle having the in-vehicle network system mounted therein and updating a MAC key used to generate the MAC under the condition that the detected state of the vehicle is a predetermined state.