车载FlexRay总线安全协议的设计与实现
Design and Implementation of Security Protocol for In？？Vehicle FlexRay Buses

针对智能车、网联车的高速发展所引发的车载信息安全问题设计了车载FlexRay总线安全协议。该协议包含两个模块:节点身份认证模块和网络安全加密模块。节点身份认证模块采用密钥交换算法以及非对称加密算法保证连入总线节点身份的合法性;网络安全加密模块采用对称加密算法以及哈希算法保证总线传输数据的机密性、真实性和新鲜性。与其他协议相比,该协议既能够提供节点的身份认证,又能在不影响总线实时通信的基础上保护总线的信息安全。实验结果表明,该协议能够在满足实时通信的基础上为汽车提供从启动到运行全方位的信息安全防护,提升了车载FlexRay总线的信息安全防护级别。
A security protocol for in？？vehicle FlexRay buses is proposed in allusion to the in？？vehicle information security issue caused by the rapid development of intelligent vehicles and networked vehicles. The protocol contains two modules: a node identity authentication module and a network security encryption module. The node identity authentication module uses a key exchange algorithm and a asymmetric encryption algorithm to ensure the identity legality of the connected node, and the network security encryption module uses the symmetric encryption algorithm and a hash algorithm to guarantee the confidentiality, authenticity and freshness of the data transmitted by a bus. Compared with previous protocols, the proposed protocol provides node identity authentication and protects the information security of the on？？board bus without affecting the real？？time communication of the bus. Experimental results show that the protocol provides all？？round information security guarantee for buses from start？？up to operation on the basis of real？？time communication, and greatly improves the security level of the FlexRay bus information