应用于CAN总线的广播认证系统

车联网的发展要求车内网安全可靠,控制器局域网是车内网最常用的通信协议.为增强控制器局域网总线的安全,提出一种适用于控制器局域网总线通信特点的广播认证算法,并描述了认证系统的结构.该算法采用序列加密的方式在所有电子控制单元中建立起相同的消息认证码列表,数据帧发送者只需要将相应的消息认证码序列插入数据域,其他电子控制单元会在接收到数据帧后将其中的消息认证码序列与消息认证码表中的消息认证码序列进行比较.最后分析了算法的安全性能、漏检率、延时和总线开销.

A Broadcast Authentication System Applied in Controller Area Network

The development of vehicular Ad hoc networks ( VANETs) require a secure in-vehicle net-work. Controller area network (CAN) is a popular protocol applied in in-vehicle network. In order to en-hance CAN bus security, abroadcast authentication algorithm, which establishesthe samemessage authen-tication code( MAC) list among all the electronic control unit ( ECUs) with stream ciphers, was pro-posed. The senderjust needs to attach a MAC sequence to the data frame and the receiver compares the received MAC sequence with the corresponding one in the established list. This algorithm can be adapt to the characteristic ofthe CAN bus communication. The structure of the authentication system was described in detail. Finally,the security and delay performance was analyzed. The probability of miss and the bus overhead was provided.