应用于CAN总线的广播认证系统  

A Broadcast Authentication System Applied in Controller Area Network

作　　者：王剑[1] 张子键[1] 袁坚[1] 

机构地区：[1]清华大学电子工程系,北京100084

出　　处：《北京邮电大学学报》2015年第4期24-27,32,共5页Journal of Beijing University of Posts and Telecommunications

基　　金：国家自然科学基金项目(61371079)

摘　　要：车联网的发展要求车内网安全可靠,控制器局域网是车内网最常用的通信协议.为增强控制器局域网总线的安全,提出一种适用于控制器局域网总线通信特点的广播认证算法,并描述了认证系统的结构.该算法采用序列加密的方式在所有电子控制单元中建立起相同的消息认证码列表,数据帧发送者只需要将相应的消息认证码序列插入数据域,其他电子控制单元会在接收到数据帧后将其中的消息认证码序列与消息认证码表中的消息认证码序列进行比较.最后分析了算法的安全性能、漏检率、延时和总线开销.The development of vehicular Ad hoc networks（ VANETs） require a secure in-vehicle network. Controller area network（ CAN） is a popular protocol applied in in-vehicle network. In order to enhance CAN bus security,abroadcast authentication algorithm,which establishesthe samemessage authentication code（ MAC） list among all the electronic control unit（ ECUs） with stream ciphers,was proposed. The senderjust needs to attach a MAC sequence to the data frame and the receiver compares the received MAC sequence with the corresponding one in the established list. This algorithm can be adapt to the characteristic ofthe CAN bus communication. The structure of the authentication system was described in detail. Finally,the security and delay performance was analyzed. The probability of miss and the bus overhead was provided.

关 键 词：车联网 控制器局域网 广播认证 

分 类 号：TN911.22[电子电信—通信与信息系统]