基于互联网设备的车辆安全空中下载通信协议方案

A Solution of Secure Over-The-Air Communication Protocol for Vehicle by Using Internet Device

针对车辆空中下载(OTA)更新技术的数据安全传输问题,提出了基于互联网设备的安全通信协议方案,实现在不安全的网络环境及有风险的互联网设备条件下的数据安全传输,同时提出了基于密钥组的简明密钥泄露保护方案。通过理论分析、密钥泄露影响分析,并结合形式化验证工具Scyther建模的结果表明,此方案可以在大部分情况下保证车辆OTA过程的信息安全。

For the secure data transmission of Over-The-Air(OTA)technology in automobile,this paper proposes a secure communication protocol using internet device to achieve secure data transmission under the condition of unsafe network environment or a risky device.A simple countermeasure for key compromise based on key group is also proposed.By theoretical analysis of key transmission and key compromise,combined with modeling by Scyther,a formal verification tool,the protocol can guarantee the information security requirements of OTA transmission in most cases.