应用于CAN 总线的广播认证系统 - 北京邮电大学学报.PDF

2015年8月 北 京 邮 电 大 学 学 报 Aug.2015 第38卷 第4期 Journal of Beijing University of Posts and Telecommunications Vol.38 No.4 摇 摇 文章编号:1007鄄5321(2015)04鄄0019鄄05 DOI:10.13190/ j.jbupt.2015.04.006 应用于CAN 总线的广播认证系统 王摇 剑,摇 张子键,摇 袁摇 坚 (清华大学 电子工程系,北京 100084) 摘要:车联网的发展要求车内网安全可靠,控制器局域网是车内网最常用的通信协议. 为增强控制器局域网总线 的安全,提出一种适用于控制器局域网总线通信特点的广播认证算法,并描述了认证系统的结构. 该算法采用序列 加密的方式在所有电子控制单元中建立起相同的消息认证码列表,数据帧发送者只需要将相应的消息认证码序列 插入数据域,其他电子控制单元会在接收到数据帧后将其中的消息认证码序列与消息认证码表中的消息认证码序 列进行比较. 最后分析了算法的安全性能、漏检率、延时和总线开销. 关摇 键摇 词:车联网;控制器局域网;广播认证 中图分类号:TN911郾22摇 摇 摇 摇 文献标志码:A A Broadcast Authentication System Applied in Controller Area Network WANGJian,摇 ZHANGZi鄄jian,摇 YUANJian (Department of Electronic Engineering,Tsinghua University,100084,China) Abstract:The development of vehicular Ad hoc networks (VANETs) require a secure in鄄vehicle net鄄 work. Controller areanetwork (CAN)isapopularprotocolappliedinin鄄vehiclenetwork. Inordertoen鄄 hance CAN bussecurity,abroadcast authentication algorithm,which establishesthe samemessage authen鄄 tication code(MAC) list among all the electronic control unit (ECUs) with stream ciphers,was pro鄄 posed. The senderjust needs to attach a MAC sequence to the data frame and the receiver compares the received MAC sequencewiththecorrespondingoneintheestablishedlist. Thisalgorithmcanbeadaptto thecharacteristicofthe CANbuscommunication. Thestructureoftheauthenticationsystemwasdescribed in detail. Finally,the security and delay performance was analyzed. The probability of miss and the bus overhead was provided. Key words:vehicular Ad hoc networks;controller area network;broadcast authentication 摇 摇 车联网(VANETs,vehicular Adhoc networks)是 认证技术[5-8] ,但异常检测的方法不适应快速变化 构建智能