基于车载CAN网关的实体认证技术研究
发布时间：2018-07-14 20:07
【摘要】：近年来,随着物联网技术的快速发展,各行各业都在经历着被物联网冲刷的浪潮。小到一块手表一部手机,大到一个工厂的自动化生产线,都在越来越智能化,人们的生活变的越来越轻松和便捷。而汽车作为人们日常生活的重要组成部分,人们对它的需求已不再是简单的交通工具,而是一个集出行,娱乐及社交等功能于一身的智能体。因此,为了满足人们对汽车功能性需求的增长,在物联网的推动下车联网及辅助驾驶技术得到了迅猛的发展,汽车正在变的越来越强大,越来越智能,但与此同时,车载网络也在变的越来越庞大,越来越复杂。如今,车载网络中通常有超过上百个节点,近亿行代码,且不同的节点根据功能性的差别被划分到不同的子网中,这些使得如今的汽车成为了一个非常庞大而又复杂的计算系统。但是在如今的车载系统中却没有形成一套成熟完善的安全体制,来保障车载网络的节点及节点间通信的安全,这就使得车载网络,尤其是被广泛应用的CAN网络,显得异常脆弱,常常成为攻击者入侵车载系统的入口。本文设计的CAN网关与关键实体间的认证策略,就是为了确保CAN网络中通信节点的身份的安全可靠性,避免恶意切点伪装成合法节点窃取车内敏感信息,从而对车载网络造成危害。本文采用融合改进的AES算法和HMAC-SHA256算法来完成网关与关键实体节点间的认证过程,采用Challenge-Response机制,并由网关节点协调该认证过程;通过AES算法保证认证过程通信的机密性,而改进的AES算法能更好的发挥基于32位处理器的CAN节点的性能;采用HMAC-SHA256算法来确保消息的完整性,并对消息的来源进行确认。本文搭建了基于MPC5646C开发板的硬件平台,包括CAN驱动代码的开发,通信协议的实现,认证算法的开发及测试,以验证本文设计的认证策略的有效性。
[Abstract]:In recent years, with the rapid development of the Internet of things technology, various industries are experiencing a wave washed away by the Internet of things. As small as a watch, a mobile phone, a factory automation line, are becoming more intelligent, people's lives become more and more relaxed and convenient. As an important part of people's daily life, automobile is no longer a simple means of transportation, but an agent with the functions of travel, entertainment and social interaction. Therefore, in order to meet the growth of people's functional requirements, the Internet of things to promote the Internet of things and auxiliary driving technology has been rapid development, cars are becoming more and more powerful, more intelligent, but at the same time, Car-borne networks are also becoming more and more large, more and more complex. Nowadays, there are usually more than a hundred nodes, nearly 100 million lines of code, and different nodes are divided into different subnets according to their functional differences. This makes today's cars a very large and complex computing system. However, in today's vehicle system, there is not a mature and perfect security system to ensure the security of the nodes and the communication between the nodes of the vehicle network, which makes the vehicular network, especially the widely used can network, seem extremely fragile. It is often used as an entry point for attackers to invade vehicular systems. The authentication strategy between the can gateway and the key entities designed in this paper is to ensure the security and reliability of the identity of the communication node in the can network, and to avoid the malicious point of cutting off as a legitimate node to steal the sensitive information in the vehicle. Thus, it causes harm to the vehicular network. In this paper, we use the improved AES algorithm and HMAC-SHA256 algorithm to complete the authentication process between the gateway and the key entity nodes, adopt Challenge-Response mechanism, and coordinate the authentication process by the gateway nodes. The improved AES algorithm can improve the performance of can node based on 32-bit processor, and use HMAC-SHA256 algorithm to ensure the integrity of the message and confirm the source of the message. This paper builds a hardware platform based on MPC5646C development board, including the development of can driver code, the implementation of communication protocol, the development and testing of authentication algorithm, to verify the effectiveness of the authentication strategy designed in this paper.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：U463.6;TP309
本文编号：2122804
[Abstract]:In recent years, with the rapid development of the Internet of things technology, various industries are experiencing a wave washed away by the Internet of things. As small as a watch, a mobile phone, a factory automation line, are becoming more intelligent, people's lives become more and more relaxed and convenient. As an important part of people's daily life, automobile is no longer a simple means of transportation, but an agent with the functions of travel, entertainment and social interaction. Therefore, in order to meet the growth of people's functional requirements, the Internet of things to promote the Internet of things and auxiliary driving technology has been rapid development, cars are becoming more and more powerful, more intelligent, but at the same time, Car-borne networks are also becoming more and more large, more and more complex. Nowadays, there are usually more than a hundred nodes, nearly 100 million lines of code, and different nodes are divided into different subnets according to their functional differences. This makes today's cars a very large and complex computing system. However, in today's vehicle system, there is not a mature and perfect security system to ensure the security of the nodes and the communication between the nodes of the vehicle network, which makes the vehicular network, especially the widely used can network, seem extremely fragile. It is often used as an entry point for attackers to invade vehicular systems. The authentication strategy between the can gateway and the key entities designed in this paper is to ensure the security and reliability of the identity of the communication node in the can network, and to avoid the malicious point of cutting off as a legitimate node to steal the sensitive information in the vehicle. Thus, it causes harm to the vehicular network. In this paper, we use the improved AES algorithm and HMAC-SHA256 algorithm to complete the authentication process between the gateway and the key entity nodes, adopt Challenge-Response mechanism, and coordinate the authentication process by the gateway nodes. The improved AES algorithm can improve the performance of can node based on 32-bit processor, and use HMAC-SHA256 algorithm to ensure the integrity of the message and confirm the source of the message. This paper builds a hardware platform based on MPC5646C development board, including the development of can driver code, the implementation of communication protocol, the development and testing of authentication algorithm, to verify the effectiveness of the authentication strategy designed in this paper.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：U463.6;TP309
【相似文献】
相关期刊论文 前7条
1 曹晨磊;张茹;钮心忻;周琳娜;张振涛;;3G实体认证协议及技术规范的综述与安全分析[J];清华大学学报(自然科学版);2009年S2期
2 林四川;季新生;;CDMA实体认证机制分析[J];电子技术应用;2007年10期
3 许峰;黄皓;王志坚;;Web服务会话实体认证协议的改进[J];计算机应用与软件;2008年11期
4 张倩;;一种WSNs中的强实体认证协议[J];传感器与微系统;2012年03期
5 林四川;季新生;;CDMA实体认证机制分析[J];现代通信;2007年Z3期
6 苏之阳;马皓;张晓军;张蓓;;基于实体认证的安全DHCPv6系统实现[J];广西大学学报(自然科学版);2011年S1期
7 李俊青;;JAAS+JXTA实体认证模型的研究[J];计算技术与自动化;2005年04期
相关博士学位论文 前1条
1 李清玉;普及计算环境中安全技术的研究[D];中国科学院研究生院（计算技术研究所）;2004年
相关硕士学位论文 前2条
1 郭森;基于车载CAN网关的实体认证技术研究[D];吉林大学;2017年
2 刘辉洲;WTLS分析与设计[D];山东大学;2010年
，本文编号：2122804
本文链接：https://www.wllwen.com/kejilunwen/ruanjiangongchenglunwen/2122804.html
