Vehicle security system
A security system for a vehicle network of a vehicle is provided. The vehicle network includes a gateway and domain controllers for specific areas of the vehicle. The security system may validate messages sent from the gateway. The security system may also utilize split decryption keys in order to decrypt messages in the vehicle network. The security system may also utilize asymmetrical encryption keys in order to secure data within the vehicle network.
1 . A computer-implemented method when executed on a processor of a domain controller of a vehicle network for a vehicle causes the processor to perform operations comprising: receiving, from a gateway of the vehicle network that is in communication with the domain controller, a first message and a second message, the first message received via one of a CAN bus or a first Ethernet connection and the second message received via the other one of the CAN bus or the first Ethernet connection; determining that the first message and the second message match by determining that the first message and the second message contain identical data; determining that the first message and the second message are received within a designated period; based on determining that the first message and the second message match and are received within the designated period, processing the first message and the second message to control elements of a vehicle network; and transmitting, from the domain controller, via an additional CAN bus, a third message to another domain controller of the vehicle network, wherein the domain controller and the another domain controller are each configured to control a different respective system of the vehicle.
2 . The computer-implemented method 1 , wherein the operations further comprise:
determining that the first message and the second message match,
wherein processing the first message and the second message to control elements of the vehicle network is further based on determining that the first message and the second message match.
3 . The computer-implemented method of claim 1 , wherein the gateway of the vehicle network is in communication with the domain controller through the first Ethernet connection and the CAN bus.
4 . The computer-implemented method of claim 3 , wherein the CAN bus directly connects at least one electronic control unit to the domain controller and the gateway.
5 . The computer-implemented method of claim 3 , wherein the CAN bus comprises a CAN-FD.
6 . The computer-implemented method of claim 1 , wherein the third message when received by the another domain controller causes the another domain controller to control one or more functions of the respective system of the vehicle controlled by the another domain controller.
7 . The computer-implemented method of claim 1 , wherein:
the respective system of the vehicle controlled by the domain controller comprises one of a powertrain system, an Advance Driver Assistance System (ADAS), a chassis system, or a safety system; and
the respective system of the vehicle controlled by the another domain controller comprises a different one of the powertrain system, the ADAS, the chassis system, or the safety system.
8 . A computer-implemented method when executed on a processor of a domain controller of a vehicle network causes the processor to perform operations comprising:
receiving a first message from a gateway of the vehicle network via one of a CAN bus or an Ethernet connection, the first message comprising a first portion of an authentication key;
receiving a second message from the gateway via the other one of the CAN bus or the Ethernet connection, the second message comprising a second portion of the authentication key;
determining that the first message comprises the first portion of the authentication key and that the second message comprises the second portion of the authentication key; and
based on the first message comprising the first portion of the authentication key and the second message comprising the second portion of the authentication key, decrypting the first message and the second message.
9 . The computer-implemented method of claim 8 , wherein the first portion of the authentication key and the second portion of the authentication key are combinable into a complete authentication key.
10 . The computer-implemented method of claim 8 , wherein the CAN bus directly connects at least one electronic control unit to the domain controller and the gateway.
11 . The computer-implemented method of claim 8 , wherein the CAN bus comprises a CAN-FD.
12 . The computer-implemented method of claim 8 , wherein:
the operations further comprise transmitting, from the domain controller, via an additional CAN bus, a third message to another domain controller of the vehicle network; and
the domain controller and the another domain controller are each configured to control a different respective system of the vehicle.
13 . The computer-implemented method of claim 12 , wherein the third message when received by the another domain controller causes the another domain controller to control one or more functions of the respective system of the vehicle controlled by the another domain controller.
14 . The computer-implemented method of claim 12 , wherein:
the respective system of the vehicle controlled by the domain controller comprises one of a powertrain system, an Advance Driver Assistance System (ADAS), a chassis system, or a safety system; and
the respective system of the vehicle controlled by the another domain controller comprises a different one of the powertrain system, the ADAS, the chassis system, or the safety system.