Practical Sender Authentication Scheme for In-Vehicle CAN With Efficient Key Management

Samuel Woo,Yousik Lee,Taek-Young Youn

doi:10.1109/access.2020.2992112

Samuel Woo, Yousik Lee + Show 1 more

Open Access

https://doi.org/10.1109/access.2020.2992112

Copy DOI

Abstract

Recently, Various security techniques are developed to provide security for In-vehicle CAN, but the limited characteristics of CAN protocol make it hard to apply them to a real vehicle. In this paper, we propose a sender authentication and key management schemes considering the limitations of In-vehicle CAN. Our proposed security scheme is designed considering the computing power of automotive ECU and the limited-size CAN data frame. Further, we suggest an efficient key management scheme causing no communication overhead in a session key update process. The security scheme has a structure that may be implemented without change of CAN standards. To evaluate the performance and security of the proposed scheme, we conduct hardware and network simulator based evaluation. Finally, through the analysis on the security and performance, we prove that our proposed scheme is suitable for solving the problem of In-vehicle CAN authentication.

Highlights

Various types of electronic control units (ECUs) are being loaded into modern vehicles for safety and convenience [1]
We proved that our proposed security scheme ensures both security and availability through the results from the evaluation
We examine the security of our scheme under the security model. It suggests the efficient key management scheme considering the limitations of In-vehicle controller area network (CAN) and ECU

Summary

INTRODUCTION

Various types of electronic control units (ECUs) are being loaded into modern vehicles for safety and convenience [1]. 3) Tradeoff between security and availability: a countermeasure transmitting MAC was proposed using the Extended-ID (EXID) field in order to solve problems 1 and 2. When using a small sized MAC, a key update protocol has to be implemented frequently to enhance security, which results in rapidly increasing communication overhead. Youn et al.: Practical Sender Authentication Scheme for In-Vehicle CAN With Efficient Key Management TABLE 1. A secured and efficient session key update scheme shall be provided. Our proposed key management scheme is very efficient in preventing both communication overheads and increases of the bus load. It suggests the efficient key management scheme considering the limitations of In-vehicle CAN and ECU. The scheme does not require additional communication to update the session key and the key updating operations are sufficiently efficient to be implemented without influencing the performance of In-vehicle CAN communication. The CANoe is the most used SW in vehicular network simulations

BACKGROUND

RELATED WORK

Findings

CONCLUSION