Abstract:With the increasing amount of interconnections between vehicles, the attack surface of internal vehicle networks is rising steeply. Although these networks are shielded against external attacks, they often do not have any internal security to protect against malicious components or adversaries who breach the network perimeter. To secure the in-vehicle network, all communicating components must be authenticated, and only authorized components should be allowed to send and receive messages. This is achieved using an authentication framework. Cryptography is widely used to authenticate communicating parties and provide secure communication channels (e.g., Internet communication). However, the real-time performance requirements of in-vehicle networks restrict the types of cryptographic algorithms and protocols that may be used. In particular, asymmetric cryptography is computationally infeasible during vehicle operation. In this work, we address the challenges of designing authentication protocols for automotive systems. We present Lightweight Authentication for Secure Automotive Networks (LASAN), a full lifecycle authentication approach. We describe the core LASAN protocols and show how they protect the internal vehicle network while complying with the real-time constraints and low computational resources of this domain. Unlike previous work, we also explain how this framework can be integrated into all aspects of the automotive lifecycle, including manufacturing, vehicle maintenance, and software updates. We evaluate LASAN in two different ways: First, we analyze the security properties of the protocols using established protocol verification techniques based on formal methods. Second, we evaluate the timing requirements of LASAN and compare these to other frameworks using a new highly modular discrete event simulator for in-vehicle networks, which we have developed for this evaluation.

Enhancing Security in Automotive Unified Diagnostic Services: A Lightweight Certificate Validation Verification Approach

Towards Automatically Reverse Engineering Vehicle Diagnostic Protocols

Lightweight Secure Communication Protocols for In-Vehicle Sensor Networks

Vehicle Authentication via Monolithically Certified Public Key and Attributes

Authenticated and Secure Automotive Service Discovery with DNSSEC and DANE

DCS: An Efficient Distributed-Certificate-Service Scheme for Vehicular Networks

Secure and Efficient Lightweight Protocol for Emergency Vehicle Avoidance Based on Cloud

An Enhanced Secure Identity-Based Certificateless Public Key Authentication Scheme for Vehicular Sensor Networks

Security in Automotive Networks: Lightweight Authentication and Authorization

Cybersecurity Testing for Automotive Domain: A Survey

Improved RSA dynamic cryptographic accumulator-based anonymous batch authentication scheme for Internet of Vehicles

Authentication Methods for Internet of Vehicles based on Trusted Connection Architecture

Troubleshooting Mechanism and Strategies of Automotive Communication Based on UDS

A provably secure and lightweight mutual authentication protocol in fog-enabled social Internet of vehicles

A Digital Watermark Method for In-Vehicle Network Security Enhancement

A Survey and Comparative Analysis of Security Properties of CAN Authentication Protocols

Towards a New Configurable and Practical Remote Automotive Security Testing Platform

Enhancing Communication Security an In-Vehicle Wireless Sensor Network

A Semi-centralized Security Framework for In-Vehicle Networks

EXT-TAURUM P2T: an Extended Secure CAN-FD Architecture for Road Vehicles

Secure and Lightweight Conditional Privacy-Preserving Authentication for Securing Traffic Emergency Messages in VANETs