Research on vehicle CAN communication cybersecurity

With the development of intelligent and connected vehicles, automotive Cybersecurity has received widespread attention. The in-vehicle communication system, as an essential part of smart vehicles, poses significant security concerns. Currently, the CAN (Controller Area Network) bus transmits messages in plaintext without identity authentication and information encryption mechanisms, and a single CAN frame only has an 8-byte data field. Therefore, adding protective mechanisms for CAN messages is of great research significance. Based on this, we first propose a CAN message authentication mechanism. When the receiving party receives a message, it verifies the authenticity and integrity of the message. Secondly, we design a security log recording strategy for MCU controllers based on UDS (Unified Diagnostic Services) services. When a security event occurs, the event content can be recorded quickly. Finally, under a service-oriented architecture, we conduct a service-oriented analysis of automotive information security, designing an information security SOA (ServiceOriented Architecture) service composed of two foundational services and four atomic services, and detailing the standard interfaces for each service. Ultimately, we validate the secure communication strategy by deploying it on the NXP S32K146 chip. The validation results indicate that the proposed secure communication strategy effectively defends against spoofing attacks, tampering attacks, and replay attacks. It addresses the deficiency of lacking identity authentication in traditional CAN networks, ensuring the information security of intelligent connected vehicles.