In-vehicle networking
A system and method for securing communication across an in-vehicle bus, includes establishing a connection between a gateway in a vehicle and the in-vehicle bus; generating a session key at the gateway within the vehicle; transmitting a public key certificate and ephemeral key to the gateway and an electronic control unit of the vehicle; generating a shared secret at the gateway and the electronic control unit, respectively; encrypting the session key with the shared secret at the gateway; receiving the encrypted session key through the in-vehicle bus at the electronic control unit; and decrypting the encrypted session key based on the shared secret generated at the electronic control unit.
1. A system to secure a communication across an in-vehicle network, comprising:
a gateway within a vehicle, the gateway to generate a session key and send a cryptographic certificate and an ephemeral key to the in-vehicle network; and
an electronic control unit within the vehicle, the electronic control unit to send a cryptographic certificate and an ephemeral key to the in-vehicle network,
wherein the gateway generates a shared secret in response to the cryptographic certificate and the ephemeral key sent by the electronic control unit,
wherein the electronic control unit generates the shared secret in response to the cryptographic certificate and the ephemeral key sent by the gateway, and
wherein the gateway, in response to validation of the cryptographic certificate sent by the electronic control unit, encrypts the session key with the shared secret, and sends the encrypted session key to the electronic control unit.
2. The system of claim 1 , wherein the gateway includes a cryptographic processor.
3. The system of claim 1 , wherein the in-vehicle network comprises a Controller Area Network bus utilizing more than one bit-rate and packet size provisioned by an in-vehicle bus protocol.
4. The system of claim 1 , wherein the shared secret is generated in response to a hash based method authentication code.
5. The system of claim 1 , wherein different cryptographic certificates are provided to the gateway and the electronic control unit, respectively.
6. The system of claim 1 , wherein the gateway establishes a connection with the in-vehicle network.
7. The system of claim 1 , wherein the electronic control unit:
receives the encrypted session key over the in-vehicle network, and
decrypts the encrypted session key based on the shared secret generated at the electronic control unit.
8. The system of claim 1 , wherein the session key is valid during only one communication session that occurs during an ignition cycle of the vehicle.
9. The system of claim 1 , wherein the session key is valid during only one communication session that occurs during a power cycle.
10. The system of claim 1 , wherein the in-vehicle network is encrypted end-to-end.
11. The system of claim 1 , wherein the electronic control unit transmits data encrypted by the session key over the in-vehicle network.
12. The system of claim 1 , wherein the electronic control unit communicates with a second vehicle using the session key.
13. The system of claim 1 , wherein the gateway comprises a Root of Trust to securely store the cryptographic certificate and the ephemeral key of the gateway.
14. A vehicle, comprising:
an in-vehicle network;
a gateway within the vehicle, the gateway to generate a session key and send a cryptographic certificate and an ephemeral key across the in-vehicle network;
an electronic control unit within the vehicle, the electronic control unit to send a cryptographic certificate and an ephemeral key across the in-vehicle network,
wherein the gateway generates a shared secret in response to the cryptographic certificate and the ephemeral key sent by the electronic control unit,
wherein the electronic control unit generates the shared secret in response to the cryptographic certificate and the ephemeral key sent by the electronic control unit, and
wherein the gateway, in response to validation of the cryptographic certificate sent by the electronic control unit, encrypts the session key with the shared secret, and sends the encrypted session key across the in-vehicle network to the electronic control unit.
15. The vehicle of claim 14 , wherein the electronic control unit:
receives the encrypted session key over the in-vehicle network from the gateway, and
decrypts the encrypted session key based on the shared secret generated at the electronic control unit.
16. The vehicle of claim 14 , wherein the session key is valid during only one communication session that occurs during an ignition cycle of the vehicle.
17. The vehicle of claim 14 , wherein the session key is valid during only one communication session that occurs during a power cycle.
18. The vehicle of claim 14 , wherein the electronic control unit transmits data encrypted by the session key across the in-vehicle network.
19. The vehicle of claim 14 , wherein the electronic control unit communicates with a second vehicle using the session key.
20. The vehicle of claim 14 , wherein the gateway comprises a Root of Trust to securely store the cryptographic certificate and the ephemeral key of the gateway.