汽车诊断系统信息安全TARA分析及测试评价研究

Research on TARA Analysis and Test Evaluation of Information Security of Automotive Diagnostic System

随着中国车辆智能化、信息化发展,信息安全的理念在汽车研发生产中的地位越来越重要。为解决目前行业诊断系统中零部件诊断信息安全开发缺少参考依据的现状,以及满足R155、ISO 21434法规要求,文章开展诊断功能组信息安全TARA分析及测试评价研究。此方法论从功能清单及网络安全相关性确认、诊断功能组TARA分析、网络安全概念设计开展汽车诊断系统信息安全研究,并设计汽车诊断系统测试评价标准和问题等级,通过对黄板车某域控制器进行诊断信息安全测试,测试结果可识别此控制器对于诊断系统信息安全的满足程度。研究结果显示,此方法论可以识别诊断功能组的潜在信息安全风险点,基于风险点进行安全目标设计,并可设计网络安全需求用以指导零部件的诊断信息安全开发。

With the development of intelligent information technology,the concept of information security is becoming more and more important in automobile research and development and production.In order to solve the current situation that the information security development system of industrial diagnostic system and the diagnostic information security development of parts lacks reference basis,meet the requirement of R155,ISO 21434 regulations,and test evaluation of information security.The paper carries out the information security TARA analysis of diagnostic function group,and carries out the information security research of automotive diagnostic system from three stages:function list and network security correlation confirmation,diagnostic function group TARA analysis and network security concept design.The test evaluation standard and problem level of the automobile diagnostic system are designed,and the diagnostic information security test is carried out by a certain controller.The test results can identify the controller’s satisfaction with the information security of the diagnostic system.The results show that this analysis process can identify the potential information security risk points of the diagnostic function group,design security targets for the risk points,and design network security requirements to guide the development of diagnostic information security of parts.