KR101558976B1 - System and method for transmitting and receiving data using ethernet network - Google Patents

Abstract

The present invention proposes a system and a method for transmitting and receiving data using an Ethernet network in which payloads are mixed and transmitted based on a security code and the payload is decoded in the opposite order based on the security code. A data transmission / reception system according to the present invention includes: a data transmission unit for encoding the data based on sequence information between data and transmitting a signal including encoded data; And a data receiver for receiving the signal through the Ethernet network and decoding the data contained in the received signal using the sequence information.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and method for transmitting and receiving data using an Ethernet network,

The present invention relates to a system and method for transmitting and receiving data. More particularly, the present invention relates to a system and method for transmitting and receiving data between ECUs (Electronic Control Units) in a vehicle using an Ethernet network.

Although Ethernet network has many advantages in terms of cost and performance compared to other network technologies, it is vulnerable to security since it is a technology based on network sharing.

In recent years, Ethernet networks have become increasingly sought after as a vehicle communication medium.

In the conventional home / industrial Ethernet network, SSL (Secure Socket Layer) is used as a security protocol. However, this protocol is very complicated to calculate when used as an encryption algorithm, consuming a lot of power and is not suitable for a car environment requiring low power due to heavy load.

In addition, since the above protocol is used in the TCP / IP layer, a header is added to a payload, thereby increasing the amount of data and increasing the network bandwidth.

Also, the protocol has a problem in that it takes a long time to encrypt or decrypt data due to a slow processing speed. In addition, the protocol transmits a message other than a message to be originally transmitted, such as a hanashake message, There are also disadvantages.

Korean Patent Publication No. 2013-0093811 describes an automotive Ethernet network system. However, this system describes an Ethernet switch that relays data communication between ECUs, but does not describe a data security method. Thus, this system can not solve the above-mentioned problem.

SUMMARY OF THE INVENTION The present invention is conceived to solve the problems described above, and it is an object of the present invention to provide an Ethernet network that transmits payloads based on a security code, decodes the payload in the opposite order based on the security code, And a data transmission / reception system using the same.

However, the objects of the present invention are not limited to those mentioned above, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

According to an aspect of the present invention, there is provided a data transmission apparatus including: a data transmission unit that encodes data based on sequence information between data and transmits a signal including the encoded data; And a data receiving unit receiving the signal through the Ethernet network and decoding the data included in the received signal using the sequence information. The data transmitting / receiving system using the Ethernet network do.

Preferably, the data transmission unit uses the start position of data conversion, the position of data to be converted, and the number of conversions as the sequence information.

Preferably, the data transmitter inserts the sequence information at a predetermined position in the signal.

Preferably, the data receiving unit shares information on the position with the data transmitting unit.

Preferably, the data transmitter uses an interval between a type and a payload in the Ethernet frame to the location.

Preferably, the data receiver stores sequence information identical to the sequence information stored in the data transmitter.

Preferably, the data transmitter encodes the data at the data link layer.

Preferably, the data receiving unit controls driving of the vehicle using the data when the data is decoded.

According to another aspect of the present invention, there is provided a method of encoding data, the method comprising: encoding the data based on sequence information between the data; Transmitting a signal including the encoded data; Receiving the signal over an Ethernet network; And decoding the data included in the received signal using the sequence information. The present invention also provides a method of transmitting / receiving data using an Ethernet network.

Preferably, the encoding step uses the start position of data conversion, the position of data to be converted, and the number of conversions as the sequence information.

Preferably, the encoding step inserts the sequence information at a predetermined position in the signal.

Preferably, the decoding step shares information on the position with the data transmission unit.

Advantageously, the encoding step uses an interval between a type and a payload in the Ethernet frame to the location.

Preferably, the decrypting step may previously store sequence information identical to the sequence information stored in the data transmission unit.

Advantageously, the encoding step encodes the data at a data link layer.

Preferably, after the decrypting step, controlling the driving of the vehicle using the data when the data is decrypted is further included.

According to the present invention, payloads are mixed and transmitted based on a security code, and a payload is decoded in the reverse order of mixing based on the security code, thereby obtaining the following effects.

First, since the present invention does not use an upper layer (eg, TCP / IP layer) like the SSL protocol but merely changes the sort order of data, unnecessary headers are not added to improve the processing speed and efficient use of network bandwidth It becomes.

Secondly, since the payload is read based on the security code stored in each ECU of the vehicle, a complicated calculation formula is unnecessary and power consumption is low. In addition, traffic can be reduced because messages other than essential data such as handshake messages are not needed.

Third, the present invention can enhance the security of the Ethernet protocol more than before, and is suitable for vehicle communication requiring security.

1 is a block diagram schematically showing a data transmission / reception system according to a preferred embodiment of the present invention.
2 is a conceptual diagram illustrating a structure of an Ethernet frame according to the present invention.
3 is a reference diagram for explaining a security code table according to the present invention.
4 is a diagram illustrating an encoding method using packet obfuscation according to an embodiment of the present invention.
5 is a diagram illustrating a decoding method according to an embodiment of the present invention.
6 is a conceptual diagram illustrating a security code field according to the present invention.
FIG. 7 is a flowchart schematically illustrating a data transmission / reception method according to a preferred embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the drawings, the same reference numerals are used to designate the same or similar components throughout the drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. In addition, the preferred embodiments of the present invention will be described below, but it is needless to say that the technical idea of the present invention is not limited thereto and can be variously modified by those skilled in the art.

1 is a block diagram schematically showing a data transmission / reception system according to a preferred embodiment of the present invention.

The data transmission and reception system 100 shown in FIG. 1 is a data transmission and reception system using an Ethernet network. The data transmission and reception system 100 transmits a payload in a mixed manner based on a security code, Decode the payload.

1, the data transmission / reception system 100 includes a data transmission unit 110, a data reception unit 120, a power supply unit 130, and a main control unit 140.

The power supply unit 130 functions to supply power to each configuration of the data transmission / reception system 100.

The main control unit 140 performs a function of controlling the overall operation of each configuration of the data transmission / reception system 100.

The data transmission unit 110 encodes the data based on the sequence information between the data. The data transmission unit 110 then transmits a signal including the encoded data to the data reception unit 120. In this case, the sequence information defines the order in which data is to be arranged, for example, information on the order in which data is to be encrypted among the data.

The data transmission unit 110 may use a security code table as the sequence information and may use the starting position of the data conversion, the location of the data to be converted, the number of converting times, and the like.

The data transmission unit 110 transmits a signal composed of an Ethernet frame to the data reception unit 120. At this time, the data transmission unit 110 can insert the sequence information at a predetermined position in the Ethernet frame. For example, the data transmission unit 110 may insert sequence information in an interval between a type and a payload in an Ethernet frame.

Meanwhile, the data transmission unit 110 encodes data in the data link layer.

The data receiving unit 120 receives a signal containing data from the data transmitting unit 110 through the Ethernet network. The data receiving unit 120 then decodes the data included in the received signal using the sequence information.

Sequence information is necessary for the data receiving unit 120 to decode the data. Therefore, it is preferable that the data receiving unit 120 share the information about the position where the sequence information is inserted in the received signal with the data transmitting unit 110.

Meanwhile, it is also possible that the sequence information is not inserted into the received signal, and the data receiving unit 120 uses the pre-determined information with the data transmitting unit 110. In this case, the data receiving unit 120 stores sequence information identical to the sequence information stored in the data transmitter 110 in advance.

Meanwhile, the data receiving unit 120 controls driving of the vehicle using the data when the data are decoded.

Next, the configuration of Fig. 1 will be described with an embodiment.

The present invention relates to an Ethernet protocol obfuscation algorithm that is vulnerable to security, and more particularly to an Ethernet protocol obfuscation algorithm that can be handled at Layer 2.

The present invention adds a security code to a frame when a transmission ECU having a security code table transmits a message and transmits payload data in a sequence corresponding to the security code, ; And a step in which the receiving ECU having the same security code table as the sending ECU analyzes and decodes the payload data in the reverse order of the mixed code when the message is received from the sending ECU.

In recent years, as the issue of vehicle communication security has become a hot topic, security for automobile Ethernet network is also urgently required. The present invention uses an obfuscation technique and a packet converting technique for this purpose. The present invention also newly adds the following features.

First, each ECU (Electronic Control Unit) has a security code table.

Second, the transmitting ECU adds a security code to a frame when sending a message. At this time, the payload data is mixed and transmitted in the order corresponding to the codes.

Third, the ECU receiving the data analyzes and decodes the payload in the reverse order of mixing, by looking at the security code.

Fourth, the decrypted data is used for each application.

In the present invention, a security code field is inserted in an Ethernet frame based on the above-described features, and the payload is mixed and transmitted in the order corresponding to the security code. When decrypting, the security code is reported Analyze the payload in reverse order of mixing.

2 is a conceptual diagram illustrating a structure of an Ethernet frame according to the present invention.

The preamble 210 is a first field of the Ethernet MAC frame, and includes seven bytes that repeat 0 and 1, and informs the receiving ECU of the arrival of the frame. The preamble 210 also allows the receiving ECU to be synchronized with the input timing.

A destination address field 220 is a field for receiving a destination of a packet, that is, a physical (MAC) address of the receiving ECU.

The source address field 230 is a field containing the physical (MAC) address of the sender of the packet, that is, the sending ECU.

The Ethernet type field 250 is a field in which a length of a data field is defined (for example, when the field value is smaller than 1,518), and is encapsulated in a frame under a specific condition (when the field value is greater than 1,536) It also defines the type of PDU packet.

The security code field 260 is located between the Ethernet type field 250 and the payload field 270, and a security code is inserted in the field.

The payload field 270 is a field into which data is inserted.

The Cyclic Redundancy Check (CRC) field 280 includes a field for determining an error by calculating an area of a destination address field 220, a source address field 230, an Ethernet type field 250, a payload field 270, to be. When the transmitting ECU adds CRC to the frame when transmitting data, the receiving ECU checks the CRC and discards the frame if it is determined to be an error frame.

3 is a reference diagram for explaining a security code table according to the present invention. ECUs in the vehicle have the same security code table. 3 (a) is a layout diagram of ECUs provided in the vehicle A (A car), and FIG. 3 (b) is a layout diagram of ECUs provided in the vehicle B (B car). (c) shows the security code table of the vehicle A, and its unique information is No.120040345067. ECUs provided in the vehicle A all have the same security code table as in (c). (d) shows the security code table of the vehicle B, and its unique information is No. 78304950000002. The ECUs provided in the vehicle B likewise have the same security code table as in all (d).

4 is a diagram illustrating an encoding method using packet obfuscation according to an embodiment of the present invention.

In the case of 0xAE in FIG. 3 (c), it is promised to generate 16-byte obfuscated data 320 by mixing 16-byte raw data 310 as shown in FIG. 4 (a). Only ECUs of vehicle A are known.

When the sending ECU generates a packet for transmitting data to the receiving ECU, the payload field 270 stores the second data 330 obfuscated from the first data 330 in 8-byte units as shown in FIG. 4 (b) It is also possible that the data 340 is inserted and transmitted.

5 is a diagram illustrating a decoding method according to an embodiment of the present invention.

The receiving ECU checks the security code in the packet received from the sending ECU and decodes the obfuscated data 350 into the original message 360.

6 is a conceptual diagram illustrating a security code field according to the present invention.

A 'field 410 is the first byte to use for data conversion. For example, if the value of the A 'field 410 is 3 (011), data conversion is performed from the data m located in the third byte of the payload.

The 'B' field 420 indicates the location of data to be converted with the data m defined in the A 'field 410. For example, if the value of the B 'field 420 is 3, conversion is performed with data n which is 3 bytes away from m.

In the present embodiment, conversion of data m and data n is defined as one conversion.

The C 'field 430 indicates the number of conversion attempts. For example, if the value of the C 'field 430 is 2, the conversion is performed twice. If the data m is the third byte data, the data to be converted next is the fourth data.

The features of the present invention described above are summarized as follows.

First, obfuscate ethernet frames in Layer 2.

Second, put a security code table in the ECU and shuffle the frame order in that order.

[0040] The embodiments of the present invention have been described with reference to Figs. Next, a method according to a preferred embodiment of the present invention will be described.

FIG. 7 is a flowchart schematically illustrating a data transmission / reception method according to a preferred embodiment of the present invention. The following description refers to Fig. 1 and Fig.

First, the data transmission unit 110 encodes data based on the sequence information between the data (S510).

Thereafter, the data transmission unit 110 transmits a signal including the encoded data to the data reception unit 120 (S520).

Thereafter, the data receiving unit 120 receives a signal from the data transmitting unit 110 through the Ethernet network (S530).

Thereafter, the data receiving unit 120 decodes the data included in the received signal using the sequence information (S540).

When the data are decoded, the data receiving unit 120 controls driving of the vehicle using the data (S550).

It is to be understood that the present invention is not limited to these embodiments, and all elements constituting the embodiment of the present invention described above are described as being combined or operated in one operation. That is, within the scope of the present invention, all of the components may be selectively coupled to one or more of them. In addition, although all of the components may be implemented as one independent hardware, some or all of the components may be selectively combined to perform a part or all of the functions in one or a plurality of hardware. As shown in FIG. In addition, such a computer program may be stored in a computer readable medium such as a USB memory, a CD disk, a flash memory, etc., and read and executed by a computer to implement an embodiment of the present invention. As the recording medium of the computer program, a magnetic recording medium, an optical recording medium, a carrier wave medium, and the like can be included.

Furthermore, all terms including technical or scientific terms have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined in the Detailed Description. Commonly used terms, such as predefined terms, should be interpreted to be consistent with the contextual meanings of the related art, and are not to be construed as ideal or overly formal, unless expressly defined to the contrary.

It will be apparent to those skilled in the art that various modifications, substitutions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims. will be. Therefore, the embodiments disclosed in the present invention and the accompanying drawings are intended to illustrate and not to limit the technical spirit of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments and the accompanying drawings . The scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of equivalents should be construed as falling within the scope of the present invention.

Claims (12)

Encoding the data based on sequence information between data, and transmitting a signal including the encoded data, wherein the payload constituting the signal is mixed using the security code table as the sequence information, A data transmission unit for transmitting the data; And
A data receiving unit receiving the signal through an Ethernet network and decoding the data included in the received signal using the sequence information,
And a data transmission / reception system using the Ethernet network. The method according to claim 1,
Wherein the data transmission unit uses the start position of data conversion, the position of data to be converted, and the number of conversions as the sequence information. 3. The method of claim 2,
Wherein the data transmission unit inserts the sequence information at a predetermined position in the signal. The method of claim 3,
Wherein the data receiving unit shares information on the location with the data transmitting unit. The method of claim 3,
Wherein the data transmitter uses an interval between a type and a payload in the Ethernet frame to the location. 3. The method of claim 2,
Wherein the data receiving unit previously stores the same sequence information as the sequence information stored in the data transmitting unit. The method according to claim 1,
Wherein the data transmission unit encodes the data in the data link layer. The method according to claim 1,
Wherein the data receiving unit controls driving of the vehicle using the data when the data is decoded. Encoding the data based on sequence information between data and transmitting a signal including the encoded data, the method comprising: transmitting a payload constituting the signal using the security code table as the sequence information, Mixing and transmitting;
Receiving the signal over an Ethernet network; And
Decoding the data included in the received signal using the sequence information,
And transmitting the data to the Ethernet network. 10. The method of claim 9,
Wherein the transmitting step uses the start position of data conversion, the position of data to be converted, and the number of converting times as the sequence information. 11. The method of claim 10,
Wherein the transmitting step inserts the sequence information at a predetermined position in the signal. 10. The method of claim 9,
Controlling the driving of the vehicle using the data when the data is decoded
And transmitting the data to the Ethernet network.

Images