电动汽车CAN协议的重放攻击与防御方法

Replay Attack and Defense Method of CAN Protocol for Electric Vehicle Charging

当前能源互联网中电动汽车与充电桩之间采用的通信协议是控制器局域网(CAN)协议,但该协议缺乏加密功能,存在着遭到黑客重放攻击的可能。为了验证CAN通信协议存在的安全问题,采用STM32F767单片机、USB CAN转化器和PC机搭建有关CAN通信的硬件环境。为了增强CAN协议的安全性,提出了一种加随机数抵御重放攻击的算法。在Eclipse Neon(v4.6)及JDK1.8+版本的实验环境下模拟电动汽车正常充电、对其进行重放攻击以及加随机数防御重放攻击的3种模式过程。实验结果表明,所提方法可以有效增强CAN总线抵御重放攻击的能力。

The CAN protocol is used to communicate data between electric vehicles and the charger adopts.However,the protocol lacks encryption function,which causing it possible for hackers to carry out replay attack.In order to verify the security problems of CAN communication protocol,this paper uses STM32F767,USB-CAN converter and PC to build the hardware environment of CAN communication.In order to enhance the security of CAN protocol,an algorithm of adding random numbers to resist replay attack is proposed.Under the experimental environment of Eclipse Neon(v4.6)and JDK1.8+,the normal charging,replay attack and defense by adding random Numbers of electric vehicles are simulated.Experimental results show that this method can effectively enhance the ability of CAN bus to resist replay attack.