Automotive Security的一些资料和心得（4）：Automotive Safeguards

通常一辆汽车会包括超过80个ECUs。所有软件代码大小正在快速增加，将会超过1GB。软件protection是必不可少的。

1. 软件保护

1.1. 安全boot

Software violating the integrity cannot be loaded.

目标：Integrity and authenticity of the firmware and OS

解决方案：hash value, digital signatures, physical protection

Root of trust: HSM/SHE security anchor or OTP memory

1.2. 安全update

User signature, User certificate

算法：AES-128, RSA with >= 2048 bit key length, RSA-SSA from PKCS#1 v2.1, CV certificates

1.3. 安全diagnosis and unlock

Online, Offline

2. 安全通讯

V2V, V2D, V2I

"Connected Vehicles: Solutions and Challenges"

2.1 In-Vehicle

In-car network分为4个groups：

- LIN, K-Line, I2C

- CAN, VAN, PLC

- FlexRay, TTP, TTCAN

- MOST, D2B, GigaStar

Gateway with secure rules

Firewall

2.2. Vehicle to Device

2.3. Vehicle to Infrastructure

3. Passive Keyless Entry Systems

版权所有，侵权必究，如需使用请与作者本人联系。