A secure protocol for session keys establishment between ECUs in the CAN bus

Fassak, Samir; Idrissi, Younes El Hajjaji El; Zahid, Noureddine; Jedra, Mohamed

doi:10.1109/wincom.2017.8238149

Cited by 34 publications

(10 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Once an attacker succeeds in injecting messages, the attacker can take over control. Hence, the use of CAN imposes a security risk on vehicles as Fassak et al [32] have already shown. This is why road vehicles should face strong requirements when it comes to security, in order to protect passengers and surrounding traffic participants.…”

Section: Securitymentioning

confidence: 99%

UNICARagil – Disruptive Modular Architectures for Agile Automated Vehicle Concepts

Woopen¹,

Kempen²,

Lampe³

et al. 2022

Fahrerassistenzsysteme Und Automatisiertes Fahren

View full text Add to dashboard Cite

This paper introduces UNICARagil, a collaborative project carried out by a consortium of seven German universities and six industrial partners, with funding provided by the Federal Ministry of Education and Research of Germany. In the scope of this project, disruptive modular structures for agile, automated vehicle concepts are researched and developed. Four prototype vehicles of different characteristics based on the same modular platform are going to be build up over a period of four years. The four fully automated and driverless vehicles demonstrate disruptive architectures in hardware and software, as well as disruptive concepts in safety, security, verification and validation. This paper outlines the most important research questions underlying the project.

show abstract

Section: Securitymentioning

confidence: 99%

UNICARagil – Disruptive Modular Architectures for Agile Automated Vehicle Concepts

Woopen¹,

Kempen²,

Lampe³

et al. 2022

Fahrerassistenzsysteme Und Automatisiertes Fahren

View full text Add to dashboard Cite

show abstract

“…Integrity and authenticity can be ensured with authentication and encryption methods suitable for IVNs [9], [44], across all communication systems, such as CAN [45], FlexRay [46], and Ethernet, e.g. MACSec (IEEE 802.1AE [47]) on the MAC layer.…”

Section: In-vehicle Network Securitymentioning

confidence: 99%

Secure Time-Sensitive Software-Defined Networking in Vehicles

Häckel,

Meyer,

Korf

et al. 2022

Preprint

View full text Add to dashboard Cite

Current designs of future In-Vehicle Networks (IVN) prepare for switched Ethernet backbones, which can host advanced LAN technologies such as IEEE Time-Sensitive Networking (TSN) and Software-Defined Networking (SDN). In this work, we present an integrated Time-Sensitive Software-Defined Networking (TSSDN) architecture that simultaneously enables control of synchronous and asynchronous real-time and besteffort traffic for all IVN traffic classes using a central SDN controller. We validate that the control overhead of SDN can be added without a delay penalty for TSN traffic, provided protocols are properly mapped. Based on our TSSDN concept, we demonstrate adaptable and reliable network security mechanisms for in-vehicle communication. We systematically investigate different strategies for integrating in-vehicle control flows with switched Ether-networks and analyze their security implications for a software-defined IVN. We discuss embeddings of control flow identifiers on different layers, covering a range from a fully exposed mapping to deep encapsulations. We experimentally evaluate these strategies in a production vehicle which we map to a modern Ethernet topology. Our findings indicate that visibility of automotive control flows on lower network layers is essential for providing isolation and access control throughout the network infrastructure. Such a TSSDN backbone can establish and survey trust zones within the IVN and reduce the attack surface of connected cars in various attack scenarios.

show abstract

“…King proposed a solution that uses the HMAC algorithm and timestamping mechanism against denial of service attacks or replay attacks [19]. Fassak proposed a protocol based on ECC for ECU authentication and the session key establishment in CAN bus networks, then derived symmetric keys from the established session key for authenticating CAN frames [20].…”

Section: Related Workmentioning

confidence: 99%

A Provable Secure Session Key Distribution Protocol Based on NSSK for In-Vehicle CAN Network

et al. 2022

View full text Add to dashboard Cite

Many CAN-based session key sharing approaches are based on the group key scheme, which can easily lead advanced adversaries to infiltrate all ECUs (electronic control units) in the network if the sharing key is leaked. To address the above problem, we propose a provable secure session key distribution protocol based on the improved NSSK (Needham–Schroeder shared key) protocol for the in-vehicle CAN network. We applied the mechanisms of message authentication and digital signature to fix the defects of the original NSSK regarding its lack of resistance to the Denning–Sacco attack. Then, we analyzed the provable security of the proposed protocol on the random oracle model and verified the security goals of the protocol by using the simulation tools AVISPA and Tamarin Prover; the results reflect that the protocol met the security requirements for key distribution such as session key secrecy, injective agreement, and known key secrecy. Finally, we compared our new protocol with other key distribution protocols in CAN bus communication to evaluate the performance of the new protocol in actual scenarios. The result shows that the protocol is secure against many payload-based attacks and is practical for in-vehicle CAN networks.

show abstract

A secure protocol for session keys establishment between ECUs in the CAN bus

Cited by 34 publications

References 4 publications

UNICARagil – Disruptive Modular Architectures for Agile Automated Vehicle Concepts

UNICARagil – Disruptive Modular Architectures for Agile Automated Vehicle Concepts

Secure Time-Sensitive Software-Defined Networking in Vehicles

A Provable Secure Session Key Distribution Protocol Based on NSSK for In-Vehicle CAN Network

Contact Info

Product

Resources

About