Vehicle electronics safe communication system and communication means
Technical field
The present invention relates to on-vehicle information safe transmission field, be specifically related to a kind of vehicle electronics safe communication system and communication
Method, it is possible to realize and the confidentiality of automobile services platform data transmission, improve the peace of the electronic control unit ECU of control system
Quan Xing.
Background technology
Along with the development of in-vehicle electronic system, its function provided also more sophisticated, providing convenient to car owner
While there is also many leaks, hacker can by network remote invade onboard system, by control onboard system send refer to
Order, little personal information and the vehicle condition of then reading, the most then sent by in-vehicle electronic system and instruct, control wiper, power
System and brake system etc. so that automobile throttle and brake during travelling occur malfunctioning, and challenge automotive networking safety is also
And the personal safety of car owner is difficult to be protected.It is thus desirable to ensure the safety of data during communication, it is to avoid outside is attacked
Hit, thus illegally handle in-vehicle electronic system.
Existing technical scheme can be realized in-vehicle electronic system by vehicle-mounted access gateway and increase security module
Controlling, but do not have clear and definite algorithm and safe procedures, some is only with simple password code, is easier to attacked by the external world
Hit;Along with gradually increasing of ECU control system, automobile controller LAN CAN is used to realize each control unit
Connection, build overall in-vehicle network.Therefore, hacker can be by attacking vehicle-mounted access network pass, car networking module and indigo plant
The communication interface such as tooth, USB so that CAN network error of transmission order thus realize attack to ECU control system, cause
The illegal operation of automobile control unit.
In order to solve with present on problem, people are seeking a kind of preferably technical solution always.
Summary of the invention
It is an object of the invention to for the deficiencies in the prior art, thus provide a kind of vehicle electronics safe communication system and
Communication means, it is achieved that in-vehicle electronic system and the safety certification of automobile services platform, has ensured the safe transmission of data, it is to avoid
Hacker remotely controls vehicle, improves the security performance of automobilism.
To achieve these goals, the technical solution adopted in the present invention is: a kind of vehicle electronics safe communication system, should
System includes safety chip, in-vehicle electronic system and automobile services platform,
Described in-vehicle electronic system and described automobile services platform carry out bidirectional identity authentication;
Described in-vehicle electronic system includes ECU control system, and described ECU control system is by described safety chip and described automobile
Service platform carries out two-way signature checking;
After two-way signature is proved to be successful, described automobile services platform and described ECU control system coded communication.
Based on above-mentioned, described in-vehicle electronic system also includes the vehicle-mounted access being built-in with automobile firmware signature and AES
Gateway, described automobile services platform is connected with described in-vehicle electronic system by described vehicle-mounted access gateway.
Based on above-mentioned, described ECU control system includes that Infotainment ECU, transmission control ECU, security control ECU and car
Body controls ECU.
A kind of communication means of vehicle electronics safe communication system, the method comprises the following steps:
Step 1, in-vehicle electronic system and automobile services platform carry out bidirectional identity authentication;
Step 2, after bidirectional identity authentication is proved to be successful, the ECU control system of described in-vehicle electronic system by safety chip with
Described automobile services platform carries out two-way signature checking;
Step 3, after two-way signature is proved to be successful, the session key that described automobile services platform is exported by described safety chip with
Described ECU control system coded communication.
Based on above-mentioned, concretely comprising the following steps of described step 1:
Step 1-1, the public and private key of preset in-vehicle electronic system and the public and private key of automobile services platform;
Step 1-2, described in-vehicle electronic system uses the private key encryption in described in-vehicle electronic system public and private key described vehicle-mounted
Electronic system ID authentication request, by the described in-vehicle electronic system after described in-vehicle electronic system ID authentication request and encryption
ID authentication request ciphertext is sent simultaneously to described automobile services platform;
Step 1-3, described automobile services platform uses the institute that the public key decryptions in described in-vehicle electronic system public and private key receives
State in-vehicle electronic system ID authentication request ciphertext and by the information after deciphering and the described in-vehicle electronic system identity received
Certification request contrasts, thus completes the authentication of described in-vehicle electronic system;
Step 1-4, described automobile services platform uses the private key in described automobile services platform public and private key to encrypt described automobile
Service platform ID authentication request, by the described automobile services platform after described automobile services platform identity certification request and encryption
ID authentication request ciphertext is sent simultaneously to described in-vehicle electronic system;
Step 1-5, described in-vehicle electronic system uses the institute that the public key decryptions in described automobile services platform public and private key receives
State automobile services platform identity certification request ciphertext and by the information after deciphering and the described automobile services platform identity received
Certification request contrasts, thus completes the authentication of described automobile services platform.
Based on above-mentioned, concretely comprising the following steps of described step 2:
Step 2-1, described ECU control system sends access request to described automobile services platform, and described automobile services platform rings
Should access request and to described ECU control system send checking request;
Step 2-2, generates the signature of described ECU control system
After described ECU control system receives the checking request of described automobile services platform, the identity of described ECU control system is believed
Breath is sent to described safety chip;According to this identity information, described safety chip generates summary info by summarization generation algorithm,
And encrypt described summary info to obtain described ECU control system by the private key in described in-vehicle electronic system public and private key
Signature;Described ECU control system identity information, described signature and described summarization generation algorithm are passed through institute by described safety chip
Described automobile services platform is returned to after stating the public key encryption in automobile services platform public and private key;
Step 2-3, verifies the signature of described ECU control system
Described automobile services platform deciphers the described ECU after this encryption by the private key in described automobile services platform public and private key
Control system identity information, described signature and described summarization generation algorithm, it is thus achieved that the identity information of described ECU control system,
Signature and summarization generation algorithm;According to this ECU control system identity information, described automobile services platform passes through described summarization generation
Algorithm generates summary info, by this summary info with described automobile services platform by described in-vehicle electronic system public and private key
Public key decryptions described in the summary info that obtains after signature contrast, thus verify the signature of described ECU control system;
Step 2-4, verifies the signature of described automobile services platform
After being proved to be successful, described automobile services platform returns the signature of described automobile services platform to described ECU control system, institute
It is transferred to described safety chip, described safety chip after stating the signature of the ECU control system described automobile services platform of reception
Verify that described automobile services are put down by the public and private key of described automobile services platform and the public and private key of described in-vehicle electronic system
The result is also returned to described ECU control system by the signature of platform.
Based on above-mentioned, the AES that in described step 1 or described step 2, ciphering process uses is asymmetric class algorithm
RSA or SM2 elliptic curve.
Based on above-mentioned, in described step 2-2 and described step 2-3, the generating algorithm of summary info is MD5 algorithm, Hash calculation
Method SHA-256, SM3 hash algorithm or randomizer.
Based on above-mentioned, in described step 3, the AES of encrypted data communications is symmetry classes algorithm SM4 algorithm.
Hinge structure of the present invention has substantive distinguishing features and progress, and specifically, the present invention passes through described vehicle mounted electric
Subsystem and the bidirectional identity authentication process of automobile services platform and the ECU control system of described in-vehicle electronic system are with described
The two-way signature proof procedure of automobile services platform, it is achieved that in-vehicle electronic system and the safety certification of automobile services platform;This
Invention adds safety chip, the cryptographic calculation of described ECU control system and deciphering computing and all performs inside safety chip, protects
The safe transmission of barrier data, it is to avoid hacker remotely controls vehicle, improves the security performance of automobilism.
Accompanying drawing explanation
Fig. 1 is that the secure communication of in-vehicle electronic system of the present invention realizes block diagram.
Fig. 2 is bidirectional identity authentication flow chart of the present invention.
Fig. 3 is that two-way signature of the present invention verifies flow chart.
In figure, 1. automobile services platform;2. in-vehicle electronic system;3. safety chip;4.ECU control system.
Detailed description of the invention
Below by detailed description of the invention, technical scheme is described in further detail.
As it is shown in figure 1, a kind of vehicle electronics safe communication system, this system includes safety chip 3, in-vehicle electronic system 2
With automobile services platform 1,
Described in-vehicle electronic system 2 carries out bidirectional identity authentication with described automobile services platform 1;
Described in-vehicle electronic system 2 includes that ECU control system 4, described ECU control system 4 pass through described safety chip 3 with described
Automobile services platform 1 carries out two-way signature checking;
After two-way signature is proved to be successful, described automobile services platform 1 and the coded communication of described ECU control system 4.
Concrete, described ECU control system 4 includes that Infotainment ECU, transmission control ECU, security control ECU and car
Body controls ECU.
Described in-vehicle electronic system 2 also includes the vehicle-mounted access gateway being built-in with automobile firmware signature and AES, institute
State automobile services platform 1 to be connected with described in-vehicle electronic system 2 by described vehicle-mounted access gateway.
In a particular embodiment, described safety chip 3 is embedded in described vehicle electronics in the way of SD card, USB and SM card
In system 2, not affecting in car in the case of electronics overall routing, described safety chip 3 is total by SPI, CAN and LIN
The ECU unit that line is different in connecting car, thus read information needed or write control command, it is achieved to described in-vehicle electronic system
The security control of 2.
A kind of communication means of vehicle electronics safe communication system, the method comprises the following steps:
Step 1, in-vehicle electronic system 2 and automobile services platform 1 carry out bidirectional identity authentication;
Step 2, after bidirectional identity authentication is proved to be successful, the ECU control system 4 of described in-vehicle electronic system 2 is by safety chip 3
Two-way signature checking is carried out with described automobile services platform 1;So can verify and communicate with described automobile services platform 1
The concrete identity of described ECU control system 4 is Infotainment ECU, transmission control ECU, security control ECU or Body Control
ECU, and checking whether communicate with described ECU control system 4 be described automobile services platform 1, thus prevent assault
Described ECU control system 4, causes the illegal operation of automotive control system;
Step 3, after two-way signature is proved to be successful, the described automobile services platform 1 session key by the output of described safety chip 3
With the coded communication of described ECU control system 4;Wherein, in described step 3, the AES of encrypted data communications is symmetry classes algorithm
SM4 algorithm.
In communication process, predeterminable regular time threshold value or packet threshold value, when cumulative time or accumulative packet
When quantity reaches predetermined threshold value, the bidirectional identification re-starting described in-vehicle electronic system 2 and described automobile services platform 1 is recognized
Card, ECU control system 4 and the described automobile services platform 1 of described in-vehicle electronic system 2 carry out two-way signature checking and described
Safety chip 3 exports new session key, so may insure that between described automobile services platform 1 and described ECU control system 4 logical
The safety of letter.
Concrete, as in figure 2 it is shown, the step of described step 1 is:
Step 1-1, the public and private key of preset in-vehicle electronic system 2 and the public and private key of automobile services platform 1;Different communication loops
Border, described in-vehicle electronic system 2, as described in automobile services platform 1, CAN, LIN bus and USB interface, correspond to difference
Public and private key;
Step 1-2, described in-vehicle electronic system 2 uses the private key in described in-vehicle electronic system 2 public and private key to encrypt described car
Carry electronic system 2 ID authentication request, by the described vehicle electronics after described in-vehicle electronic system 2 ID authentication request and encryption
System 2 ID authentication request ciphertext is sent simultaneously to described automobile services platform 1;
Step 1-3, described automobile services platform 1 uses the public key decryptions in described in-vehicle electronic system 2 public and private key to receive
Described in-vehicle electronic system 2 ID authentication request ciphertext by the information after deciphering and the described in-vehicle electronic system 2 that receives
ID authentication request contrasts, thus completes the authentication of described in-vehicle electronic system 2;
Step 1-4, described automobile services platform 1 uses the private key in described automobile services platform 1 public and private key to encrypt described vapour
Car service platform 1 ID authentication request, by the described automobile services after described automobile services platform 1 ID authentication request and encryption
Platform 1 ID authentication request ciphertext is sent simultaneously to described in-vehicle electronic system 2;
Step 1-5, described in-vehicle electronic system 2 uses the public key decryptions in described automobile services platform 1 public and private key to receive
Described automobile services platform 1 ID authentication request ciphertext by the information after deciphering and the described automobile services platform 1 that receives
ID authentication request contrasts, thus completes the authentication of described automobile services platform 1.
Because the content that described in-vehicle electronic system 2 is encrypted with the private key in described in-vehicle electronic system 2 public and private key, by
And can only be decrypted by the PKI in described in-vehicle electronic system 2 public and private key, in described in-vehicle electronic system 2 public and private key
Private key only have described in-vehicle electronic system 2 to hold, if so the content that described automobile services platform 1 decrypts is can
With the cleartext information of the described in-vehicle electronic system 2 received to going up, that descriptive information must be from described vehicle mounted electric subsystem
System 2 sends, thus demonstrates the identity of described in-vehicle electronic system 2.In like manner can also verify described automobile services platform 1
Identity.
Concrete, as it is shown on figure 3, the step of described step 2 is:
Step 2-1, described ECU control system 4 sends access request, described automobile services platform 1 to described automobile services platform 1
Respond this access request and send checking request to described ECU control system 4;
Step 2-2, generates the signature of described ECU control system 4
After described ECU control system 4 receives the checking request of described automobile services platform 1, by the body of described ECU control system 4
Part information is sent to described safety chip 3;According to this identity information, described safety chip 3 is generated by summarization generation algorithm and plucks
Want information, and encrypt described summary info to obtain described ECU control by the private key in described in-vehicle electronic system 2 public and private key
The signature of system 4 processed;Described safety chip 3 is raw by described ECU control system 4 identity information, described signature and described summary
Become algorithm by returning to described automobile services platform 1 after the public key encryption in described automobile services platform 1 public and private key;
Step 2-3, verifies the signature of described ECU control system 4
Described automobile services platform 1 by the private key in described automobile services platform 1 public and private key decipher after this encryption described
ECU control system 4 identity information, described signature and described summarization generation algorithm, it is thus achieved that the identity of described ECU control system 4
Information, signature and summarization generation algorithm;According to this ECU control system 4 identity information, described automobile services platform 1 is by described
Summarization generation algorithm generates summary info, by this summary info with described automobile services platform 1 by described in-vehicle electronic system 2
The summary info obtained after signature described in public key decryptions in public and private key contrasts;
If described ECU control system 4 identity information is modified in network transmission process, according to this identity information, described
Automobile services platform 1 will calculate different summary infos by the described summarization generation algorithm obtained after deciphering, so described
Automobile services platform 1 it may determine that described ECU control system 4 identity information Zi signature to reception whether be modified,
Whether described ECU control system 4 identity information is complete;So during communication, hacker just cannot intercept and distort institute
State ECU control system 4 identity information, send falseness order;
Step 2-4, verifies the signature of described automobile services platform 1
After being proved to be successful, described automobile services platform 1 returns the signature of described automobile services platform 1 to described ECU control system
4, described ECU control system 4 is transferred to described safety chip 3, described peace after receiving the signature of described automobile services platform 1
Full chip 3 verifies described vapour by the public and private key of described automobile services platform 1 and the public and private key of described in-vehicle electronic system 2
The result is also returned to described ECU control system 4 by the signature of car service platform 1.
After above-mentioned bidirectional identification is verified, described automobile services platform 1 and described ECU control system 4 mutual authentication
The identity of the other side, it is to avoid hacker pretends to be described automobile services platform 1 to send pseudo-command to described ECU control system 4, it is ensured that
The safe transmission of data.
Concrete, the AES used in ciphering process in described step 1 or described step 2 is asymmetric class algorithm
RSA or SM2 elliptic curve.
Concrete, in described step 2-2 and described step 2-3, the generating algorithm of summary info is MD5 algorithm, hash algorithm
SHA-256, SM3 hash algorithm or randomizer.
Finally should be noted that: above example is only in order to illustrate that technical scheme is not intended to limit;To the greatest extent
The present invention has been described in detail by pipe with reference to preferred embodiment, and those of ordinary skill in the field are it is understood that still
The detailed description of the invention of the present invention can be modified or portion of techniques feature is carried out equivalent;Without deviating from this
The spirit of bright technical scheme, it all should be contained in the middle of the technical scheme scope that the present invention is claimed.