基于一次性密码本的车内网身份认证协议

Identity Authentication Protocol for Intra-vehicle Network Based on One-time Pad

针对车内网控制器局域网(CAN)总线中电子控制单元(ECU)易被篡改、假冒等安全问题,提出一种基于一次性密码本的身份认证协议。该协议利用网关ECU(GECU)中的安全存储模块TA验证ECU的合法身份,根据车载电源电压变化得到随机数,生成会话密钥并且使ECU节点间共享会话密钥,简化TA对ECU的密钥管理,周期性地更新连接和释放外部设备时的会话密钥,以防止重放攻击。仿真结果表明,该协议可有效减少总线负载,提高通信效率。

To solve the problem of Electronic Control Unit（ECU） in the Controller Area Network（CAN） bus of intra-vehicle network,which is easy to be tampered and faked,this paper puts forward an authentication protocol based on one-time pad in the vehicle network.Firstly,it uses secure storage module TA in the Gateway ECU（GECU） to verify the legal identity of the ECU.Then according to the vehicle power supply voltage,it achieves the random number,generates the session key,and simplifies the key management of TA to ECU.At last,it periodically updates the session key when connecting and releasing external devices and effectively prevents the replay attack.The experimental result shows that this protocol can be applied to the vehicle environment efficiently,which significantly reduces the bus load and improves the communication efficiency.