Automotive ethernet controller authentication method based on national cryptographic algorithms

Hui GUO; Yong LUO; Xiaolu GUO

doi:10.11959/j.issn.2096-109x.2022079

您当前的位置：

首页 >

文章列表页 >

Automotive ethernet controller authentication method based on national cryptographic algorithms

Topic: Techniques and applications of cryptography | 更新时间：2024-06-03

- Automotive ethernet controller authentication method based on national cryptographic algorithms
- Chinese Journal of Network and Information Security Vol. 8, Issue 6, Pages: 20-28(2022)
- 作者机构：
  
  1. 清华大学车辆与运载学院，北京 100084
  2. 智己汽车科技有限公司，上海 201804
  3. 联合汽车电子有限公司，上海 201206
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2022079
  CLC： TP393
- Online First：2022-12，
  
  Published：15 December 2022
- 稿件说明：
移动端阅览
Hui GUO, Yong LUO, Xiaolu GUO. Automotive ethernet controller authentication method based on national cryptographic algorithms[J]. Chinese Journal of Network and Information Security, 2022, 8(6): 20-28.
DOI：

Hui GUO, Yong LUO, Xiaolu GUO. Automotive ethernet controller authentication method based on national cryptographic algorithms[J]. Chinese Journal of Network and Information Security, 2022, 8(6): 20-28. DOI： 10.11959/j.issn.2096-109x.2022079.

摘要

随着智能网联汽车的发展，车载以太网的信息安全成为汽车行业关注的重点。安全认证是保证车载以太网信息安全的关键技术之一。现有的车载以太网认证技术难以兼顾安全性和车载控制器性能要求。国密算法在车载网络信息安全的应用逐渐成为趋势，但在车载以太网领域的应用研究还处于起步阶段。为了满足车载控制器相对较低的性能和车载以太网的安全要求，提出了基于国密算法的两阶段信任链车载以太网控制器身份认证方法。该身份认证方法可适用于车载以太网不同的网络拓扑架构，通过基于认证凭证的信任链将车载以太网控制器身份认证的初始化阶段和车辆使用阶段进行关联。初始化阶段认证在整车下线首次安装控制器或售后更换控制器时，由整车厂诊断仪触发。在初始化阶段，基于复杂的 SM2 国密算法和身份证书建立完整认证。车辆使用阶段认证在每次车辆重新上电或网络唤醒时，由以太网网关触发。在车辆使用阶段，基于 SM4 对称国密算法和认证凭证信任链建立快速认证。认证凭证通过认证凭证函数生成，并且每一次认证凭证都基于之前成功认证的随机会话编号动态产生，形成信任链。基于车载以太网控制器进行了测试验证，测试结果表明，该方法资源占用较低并具有较高的安全性，能够同时满足车载以太网控制器身份认证性能和安全两方面的需求。

Abstract

With the development of intelligent and connected cars

cyber security of automotive ethernet becomes the focus of automotive industry.Authentication is one of the key technologies for automotive ethernet security.The existing authentication methods have shortcomings to meet the requirements of both safety and electronic controllers’ performance.Besides

national cryptographic algorithms are becoming a trend for automotive network security

while the related research in automotive ethernet area is still in starting phase.In order to balance the limited computing performance of electronic controllers and high security requirements of automotive ethernet

a two-stage trust chain authentication method based on national cryptographic algorithms was proposed.The method can be used in different automotive ethernet topologies.A trust chain was built up based on authentication credentials

which linked the two authentication stages

namely the initial stage and the vehicle using stage.The initial stage was triggered by diagnosis instrument at end of line or controller replacement.It deployed complete authentication based on SM2 algorithm and certificates in the initial stage.The vehicle using stage was triggered by ethernet gateway at vehicle power-on or network wakeup.In this stage

the method deployed fast authentication based on SM4 algorithm and authentication credential trust chain.The authentication credentials for trust chain were generated by credential functions.In order to ensure security

each credential was generated based on last successful authentication parameters dynamically.The test results on automotive ethernet controllers show that the method has lower computing cost and higher security level

and it can guarantee both performance and security.

关键词

Keywords

references

MATHEUS K . Automotive ethernet [M ] . Cambridge : Cambridge University Press , 2015 .

呼布钦 , 秦贵和 , 刘颖 , 等 . 下一代汽车网络:车载以太网技术现状与发展 [J ] . 计算机工程与应用 , 2016 ( 24 ): 29 - 36 .

HU B Q , QIN G H , LIU Y , et al . Next generation automotive network:technology status and development of automotive ethernet in-vehicle network [J ] . Computer Engineering and Applications , 2016 ,( 24 ): 29 - 36 .

李克强 , 戴一凡 , 李升波 , 等 . 智能网联汽车(ICV)技术的发展现状及趋势 [J ] . 汽车安全与节能学报 , 2017 , 8 ( 1 ): 1 - 14 .

LI K Q , DAI Y F , LI S B , et al . State-of-the-art and technical trends of intelligent and connected vehicles [J ] . Automotive Safety and Energy . 2017 , 8 ( 1 ): 1 - 14 .

LIN C W , YU H . Cooperation or competition? Coexistence of safety and security in next-generation ethernet-based automotive networks [C ] // IEEE Design Automation Conference . 2016 .

RAY S , WEN C , BHADRA J , et al . Extensibility in automotive security:current practice and challenges [C ] // Proceedings of the Design Automation Conference , 2017 .

罗超 . 面向联网汽车车内网络的防御技术研究与实现 [D ] . 成都:电子科技大学 , 2020 .

LUO C . Research and implementation of defense technology for in-vehicle network of connected vehicle [D ] . Chengdu:UESTC , 2020 .

IEEE standard for local and metropolitan area networks [R ] . 2004 .

FUNK P , BLAKEWILSON S . EAP tunneled TLS authentication protocol (EAP-TTLS) [R ] . 2004 .

ZELLE D , CHRISTOPH K , HUBERT S , et al . On using TLS to secure in-vehicle networks [P ] . Availability,Reliability and Security , 2017 .

KOHL J , NEUMAN C . The kerberos network authentication service (V5) [S ] . RFC Editor , 1993 .

MUNDHENK P , PAVERD A , MROWCA A , et al . Security in automotive networks [J ] . ACM Transactions on Design Automation of Electronic Systems , 2017 .

程安宇 . 乘用车网络控制系统中调度算法的研究与实现 [D ] . 武汉:武汉大学 , 2014 .

CHENG A Y . The research and implementation of scheduling algorithm in passenger vehicle network control system [D ] . Wuhan:WHU , 2014 .

GB/T 32918-2016 . 信息安全技术 SM2 椭圆曲线公钥密码算法 [S ] . 北京:中国质检出版社 , 2016 .

GB/T 32918-2016 . Information security technology— public key cryptographic algorithm SM2 based on elliptic curves [S ] . Beijing:China Quality Press , 2016 .

GB/T 32905-2016 . 信息安全技术SM3 密码杂凑算法 [M ] . 北京 : 中国质检出版社 , 2016 .

GB/T 32905-2016 . Information security technology— SM3 cryptographic hash algorithm [S ] . Beijing:China Quality Press , 2016 .

GB/T 32907-2016 . 信息安全技术 SM4 分组密码算法 [M ] . 北京 : 中国质检出版社 , 2016 .

GB/T 32907-2016 . Information security technology— SM4 block cipher algorithm [S ] . Beijing:China Quality Press , 2016 .

吴志红 , 赵建宁 , 朱元 , 等 . 国密算法和国际密码算法在车载单片机上应用的对比研究 [J ] . 信息网络安全 , 2019 ( 8 ): 68 - 75 .

WU J H , ZHAO J N , ZHU Y , et al . Comparative study on application of chinese cryptographic algorithms and international cryptographic algorithms in vehicle microcontrollers [J ] . Netinfo Security , 2019 ( 8 ): 68 - 75 .

修佳鹏 , 田超宇 , 杨正球 , 等 . SecOC 安全机制中国密算法应用方案研究 [J ] . 信息安全研究 , 2020 , 6 ( 9 ): 775 - 782 .

XIU J P , TIAN C Y , YANG Z Q , et al . Research on application scheme of national secret algorithm SecOC security mechanism [J ] . Journal of Information Security Research . 2020 , 6 ( 9 ): 775 - 782 .

AL-JARRAH O Y , MAPLE C , DIANATI M , et al . Intrusion detection systems for intra-vehicle networks:a review [J ] . IEEE Access , 2019 : 1 - 10 .

胡鑫鑫 , 刘彩霞 , 刘树新 , 等 . 移动通信网鉴权认证综述 [J ] . 网络与信息安全学报 , 2018 , 4 ( 12 ): 1 - 15 .

HU X X , LIU C X , LIU S X , et al . Overview of mobile communication network authentication [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 12 ): 1 - 15 .

Views

557

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Issues of identity verification of typical applications over mobile terminal platform

Lightweight authentication protocol for security vehicle network of railway freight train

Related Author

Xiaolin ZHANG

Dawu GU

Chi ZHANG

Congdong LYU

Yucai LI

Related Institution

School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University

School of Cyber Engineering, Xidian University

School of Information Engineering,Nanjing Audit University

Information Technology Centre of Ministry of Railways

⁰