抽样校验和编译优化的车载MCU安全启动方案  

Research on the Secure Boot Scheme of Automotive MCU

作　　者：张平[1] 余卓平[1] 张佩 ZHANG Ping;YU Zhuoping;ZHANG Pei(College of Automotive Studies,Tongji University,Shanghai 201804,China;SAIC TTTECH Auto Technology Co.,Ltd.,Shanghai 201206,China)

机构地区：[1]同济大学汽车学院,上海201804 [2]上海创时汽车科技有限公司,上海201206

出　　处：《同济大学学报（自然科学版）》2024年第S01期176-184,共9页Journal of Tongji University:Natural Science

基　　金：国家科学自然基金(52072268)。

摘　　要：随着网联技术的发展,针对车辆的网络攻击事件频发,黑客可将恶意软件刷入车载微控制单元(MCU),实现恶意控制车辆或窃取重要信息的目的。针对上述攻击场景,需在车载MCU中加入安全启动功能进行防护,以保证只有合法的软件能被运行。为此,本文对当前主流车载MCU安全启动方案进行研究,总结它们在安全性、稳定性、低耗时方面的性能表现和存在的不足,然后针对低耗时性能提出优化方案,最后通过搭建实物系统对优化方案的可行性和有效性进行验证。结果表明,采用抽样校验和编译优化的方案可以在满足低耗时要求的同时保护尽可能多的重要代码。With the development of Internet technology,attacks against vehicles occur frequently.Hackers can flash malware into the automotive MCU to maliciously control the vehicle or steal important information.For the above attack scenarios,it is necessary to add secure boot to the automotive MCU.Functions are protected to ensure that only legitimate software can be run.This paper first conducts an in-depth study of the current mainstream secure boot schemes,summarizes their performance and shortcomings in terms of safety,stability,and low time-consuming,and then proposes an optimization scheme for low-time-consuming performance,and finally verified the feasibility and effectiveness of the optimization scheme through the built physical system.The results show that sampling verification and compilation optimization can protect as much important code as possible while satisfying the time-consuming verification.

关 键 词：微控制单元 硬件安全模块 消息认证码 链接器 

分 类 号：U461.91[机械工程—车辆工程]