Today’s vehicles rely on multiple interconnected networks of Electronic Control Units (ECUs) that govern almost every automotive function - from engine timing and traction control to side-mirror adjustment and GPS. In-vehicle networks used for inter-ECU communication, most commonly the CAN bus, were not designed with cybersecurity in mind, and as a result, communication by corrupt devices connected to the bus is not authenticated.A multitude of attack vectors allow attackers to control a device on the bus; reports abound of successful hacking of vehicles, by exploiting vulnerable devices and by spoofing messages.Such remote-connectivity and physical-access exploit types must be prevented, to mitigate the threats of impersonation, eavesdropping, replay and reversing.We present the IVAS, In-Vehicle Authentication Scheme. IVAS is an in-place cryptographic scheme: the first CAN messaging solution to ensure both authentication and confidentiality without additional data such as authentication tags.When adequate encryption is used, an adversary’s chances of successfully injecting a spoofed message are equal to the chances for a random message. There is a need for a validation method that deterministically differentiates between random messages and legitimate CAN commands.We take advantage of both static and dynamic redundancy existing in CAN bus traffic, eliminating the need for extra bandwidth.A mathematical proof of the security level of our AE (Authenticated Encryption) scheme is presented, showing that both confidentiality and authenticity are included.No changes to the application code, protocol or chipset are entailed, and runtime key exchange is not required. In addition, any type of serial data bus can be secured by IVAS, so that varied ECUs can work together.The IVAS solution for securing the CAN bus stands out in its ability to authenticate sender integrity and data integrity, blocking malicious messages without adding payloads.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Optimizing CAN Bus Security with In-Place Cryptography


    Additional title:

    Sae Technical Papers


    Contributors:

    Conference:

    SAE Connected and Automated Vehicle Conference Israel ; 2019



    Publication date :

    2019-01-16




    Type of media :

    Conference paper


    Type of material :

    Print


    Language :

    English




    Optimizing CAN Bus Security with In-Place Cryptography

    Harel, Assaf / Hezberg, Amir | British Library Conference Proceedings | 2019


    Information Technology Security using Cryptography

    Sanchez-Reillo, R. | Online Contents | 2003


    Information technology security using cryptography

    Sanchez-Reillo, R. / Lopez-Ongil, C. / Entrena-Arrontes, L. et al. | IEEE | 2003


    Automotive security: Cryptography for Car2X communication

    Schütze, Torsten | Tema Archive | 2011


    NFC Car Keys By Using RSA Cryptography In WSN Security

    Satapathy, Priyabrata / Pandey, Nitin / Khatri, Sunil Kumar | IEEE | 2019