电子不停车收费系统车载单元安全性测评  

Security Evaluation of the On Board Unit in the Electronic Toll Collection

作　　者：王颉 胡涛 麦润锋 时瑞浩 李民锋 WANG Jie;HU Tao;MAI Runfeng;SHI Ruihao;LI Minfeng(Shenzhen Kaiyuan Internet Security Technology Company Limited,Shenzhen 518000,China;Shenzhen Smart City Topway Communication Company Limited,Shenzhen 430074,China;School of Optical and Electronic Information,Huazhong University of Science and Technology,Wuhan 430074,China;Automotive Engineering Research Institute,Guangzhou Automobile Group Company Limited,Guangzhou 511434,China)

机构地区：[1]深圳开源互联网安全技术有限公司,广东深圳518000 [2]深圳市智城天威通信有限公司,广东深圳430074 [3]华中科技大学光学与电子信息学院,湖北武汉430074 [4]广州汽车集团股份有限公司汽车工程研究院,广东广州511434

出　　处：《汽车实用技术》2023年第3期33-38,共6页Automobile Applied Technology

基　　金：深圳市技术攻关面上项目(JSGG20201102170601003)。

摘　　要：随着电子不停车收费系统的广泛使用,其面临的信息安全风险也不断增加。为了解决电子不停车收费(ETC)系统中车载单元的信息安全风险评估问题,论文提出了一种针对ETC车载单元的信息安全评估框架。该框架利用威胁分析对车载单元面临的潜在威胁进行系统性分析,利用风险评估对车载单元的面临的潜在威胁进行等级评定,利用测试用例对车载单元的信息安全风险进行验证。实验表明,该信息安全评估框架可以对ETC车载单元进行有效的信息安全评估,发现潜在的信息安全风险,为后续产品优化与安全防护提供有效参考。With the widespread use of electronic toll collection(ETC)systems,the cybersecurity risks are also increasing.In order to solve the problem of cybersecurity risk assessment of on-board units in ETC,the paper proposes a cybersecurity assessment framework for on-board units.The framework uses threat analysis to systematically analyze the potential threats faced by on-board units.Risk assessment is used to grade the potential threats.While,test cases are utilized to identify and verify the cybersecurity risk.Experiments show that the cybersecurity assessment framework can perform effective cybersecurity assessment on on-board units in ETC to identify potential cybersecurity risks,which provides an effective reference for protecting subsequent product.

关 键 词：ETC 车载单元 威胁分析 风险评估 信息安全 安全测评 

分 类 号：U495[交通运输工程—交通运输规划与管理]