一种基于安全性的CAN-FD信号打包方法

A Security-based CAN-FD Signal Packing Method

现代车辆配备的大量电子设备可能成为黑客侵入车载网络系统的途径.为了防范攻击,需要为CAN-FD车载总线引入安全机制.建立了一种通过区分信号、帧、ECU层面安全等级、基于帧AES加密与添加MAC消息认证码的CAN-FD分层安全模型,并在此基础上提出一种可以有效降低ECU安全设计硬件成本的信号打包安全约束.通过将贪婪算法引入遗传算法的交叉算子与变异算子,设计了一种基于安全性的混合遗传算法,对具有不同安全等级的CAN-FD信号进行打包优化.实验表明,混合遗传算法可以获得比贪婪算法更低的带宽利用率,并通过实验分析了此安全设计对带宽利用率的影响.

Modern vehicles are equipped with a large number of electronic devices,which may become a way for hackers to invade the vehicle network system.In order to prevent attacks,it is necessary to introduce a security mechanism for the CAN-FD vehicle bus.A CAN-FD hierarchical security model was established to distinguish signal,frame,and ECU-level security levels,based on frame AES encryption and adding MAC message authentication codes.According to the proposed model,a signal packaging safety constraint that can effectively reduce the hardware cost of ECU safety design was developed.By introducing the greedy algorithm into the crossover operator and mutation operator of the genetic algorithm,a safety-based hybrid genetic algorithm was designed to package and optimize CAN-FD signals with different safety levels.Experiments show that the hybrid genetic algorithm can achieve lower bandwidth utilization than the greedy algorithm,and the impact of this security design on bandwidth utilization is analyzed through experiments.