arrow
返回

TrinitySec: Trinity-Enabled and Lightweight Security Framework for CAN-FD Communication

delete2024-07-01
delete0
PRE
AI
鲁睿其 封面图
鲁睿其 (Ruiqi Lu)
G
Guoqi Xie *
李仁发 封面图
李仁发 (Renfa Li)
W
Wei Xu
J
Jianmei Lei
DOI:10.1109/TDSC.2023.3314908delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Controller Area Network with Flexible Data-rate (CAN-FD) is a promising industrial embedded network because of its high bandwidth and long data field length. However, CAN-FD does not deploy any security protection mechanisms, leaving it vulnerable to network attacks. In recent years, authentication and authorization frameworks have often been deployed in industrial embedded networks (e.g., automotive networks) to provide secure CAN/CAN-FD communication. However, these frameworks cannot simultaneously enhance confidentiality, integrity, and availability; moreover, these frameworks are mainly based on a distributed security management mechanism, resulting in large computation, communication,and memory overhead. This article proposes a trinity-enabled and lightweight security framework called TrinitySec based on cryptographic algorithms for CAN-FD communication. TrinitySec ensures the availability of ECU and CAN-FD messages through authentication and authorization, as well as the confidentiality and integrity of CAN-FD messages through a symmetric-key algorithm and Hash-based Message Authentication Code (HMAC) function. TrinitySec proposes a low-overhead centralized security management mechanism instead of the existing distributed management mechanism. We formally verify the security of TrinitySec using the ProVerif tool. We implement TrinitySec on STM32H743IIT Micro Controller Units (MCUs) with ARM Cortex M7 core and evaluate that TrinitySec outperforms other state-of-the-art security frameworks in terms of computation, communication, memory, and storage overhead.
Keyword:
Security
Authorization
Authentication
Security management
Law
Random access memory
Program processors
Authentication and authorization
controller area network with flexible data-rate (CAN-FD)
secure communication

期刊

IEEE Transactions on Dependable and Secure Computing 封面图
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
论文数:
2.6K
被引数:
9.6K

机构

H
hunan university
学者数:
4.5W
论文数: 3.3W
被引数: 70
引用论文

引用论文

err分享
err收藏
Effects of an Exercise Intervention in Frail Older Patients with Chronic Obstructive Pulmonary Disease Hospitalized due to an Exacerbation: A Randomized Controlled Trial
err2016-08-11
err0
PREAI
errIrene Torres-Sánchez; Marie Carmen Valenza; Irene Cabrera-Martos; Isabel López-Torres; Ángela Benítez-Feliponi; Alicia Conde-Valero
err分享
err收藏
Identifying Pauli spin blockade using deep learning
err2023-08-08
err0
errOAAI
errJonas Schuff; Dominic T. Lennon; Simon Geyer; David L. Craig; Federico Fedele; Florian Vigneau; Leon C. Camenzind; Andreas V. Kuhlmann; G. Andrew D. Briggs; Dominik M. Zumbühl; Dino Sejdinovic; Natalia Ares
err分享
err收藏
err分享
err收藏
Open Data and Data Analysis Preservation Services for LHC Experiments
err2015-12-23
err0
errOAAI
errJ Cowton; S Dallmeier-Tiessen; P Fokianos; L Rueda; P Herterich; J Kunčar; T Šimko; T Smith
err分享
err收藏
Antiresonant Fabry-Pérot cavity with ultralow finesse
err2023-02-22
err0
PREAI
errTiantian Shi; Jianxiang Miao; Jia Zhang; Jingbiao Chen
err分享
err收藏
学者 查看更多内容