一种基于认证授权框架的车载应用转换算法

A Conversion Algorithm for In-vehicle Applications Based on an Authentication Authorization Framework

车载网络安全框架LASAN通过实施电子控制单元认证和消息流授权对所有通信组件进行身份验证,只有经过认证的通信组件才能发送和接收消息,进而保障消息在CAN FD总线上传输的安全性.为了适应LASAN的运行逻辑,车载应用必须经过一系列的转换才能匹配框架承诺的安全性能.基于LASAN框架,提出一种车载应用转换算法,将车载应用转换成契合LASAN框架的安全应用,配合框架实现安全提升.

The in-vehicle network security framework LASAN authenticates all communication components by implementing electronic control unit authentication and message flow authorization,so that only authenticated communication components send and receive messages,thereby securing the transmission of messages over the CAN FD bus.In order to adapt to the operational logic of LASAN,in-vehicle applications must undergo a series of transformations to match the security promised by the framework.Therefore,based on the LASAN framework,we propose an in-vehicle application conversion algorithm that converts in-vehicle applications into secure applications that fit into the LASAN framework and work with the framework to achieve security enhancements.