摘要
智能网联汽车具备高速网联、复杂环境感知、智能决策、协同控制等功能.随着车联网的飞速发展,智能网联汽车在车联网中可获得更多智能服务,但同时也面临着更多的安全威胁.目前,车辆内部基于CAN总线的ECU之间通信缺乏安全通信机制,一旦车外网的攻击进入车辆内网,车辆就会被黑客控制,所以对车内网安全通信机制的研究十分重要.详细介绍了AUTOSAR规范中SecOC安全通信机制原理,对其中MAC生成的对称加密算法进行研究,考虑我国汽车产业未来的健康发展,推荐采用国密SM4算法对SecOC安全框架进行实现,对SM4加密算法的实现原理进行了说明,考虑到车内网通信的高实时性要求,重点对SM4算法的应用方案进行了讨论,对SM4的软件实现性能进行了测试和分析,对支持国密SM4的硬件实现机制进行了讨论,并对该方案未来的应用进行了展望.
Intelligent connected vehicles have functions such as high-speed network connection,complex environment perception,intelligent decision-making,and collaborative control.With the rapid development of the Internet of Vehicles,intelligent connected vehicles can obtain more intelligent services in the Internet of Vehicles,but they also face more security threats.At present,the communication between ECUs based on the CAN bus in the vehicle lacks a secure communication mechanism,once an attack from the external network of the vehicle enters the internal network of the vehicle,the vehicle will be controlled by hackers.,therefore,the research on the secure communication mechanism of the vehicle internal network is very important.This paper introduces the principle of the SecOC secure communication mechanism in the AUTOSAR specification in detail,studies the symmetric encryption algorithm for generating MAC,considering the healthy development of China's automobile industry in the future,it is recommended to use the national secret SM4 algorithm to implement the SecOC security framework,the paper explains the implementation principle of the SM4 encryption algorithm,taking into account the high real-time requirements of the in-vehicle network communication,the paper focuses on the application of the SM4 algorithm,testing and analyzing the performance of the SM4 software,and discussing the hardware implementation mechanism supporting the national secret SM4,and prospects the future application of the program.
作者
修佳鹏
田超宇
杨正球
王志龙
Xiu Jiapeng;Tian Chaoyu;Yang Zhengqiu;Wang Zhilong(Beijing University of Posts and Telecommunications,Beijing 100876)
出处
《信息安全研究》
2020年第9期775-782,共8页
Journal of Information Security Research
基金
国家重点研发计划项目(2017YFB01025002017YFB0102502)。