Browse Publications Technical Papers 2021-01-5077

A Controller Area Network Bus Identity Authentication Method Based on Hash Algorithm 2021-01-5077

With the development of vehicle intelligence and the Internet of Vehicles, how to protect the safety of the vehicle network system has become a focus issue that needs to be solved urgently. The Controller Area Network (CAN) bus is currently a very widely used vehicle-mounted bus, and its security largely determines the degree of vehicle-mounted information security. The CAN bus lacks adequate protection mechanisms and is vulnerable to external attacks such as replay attacks, modifying attacks, and so on. On the basis of the existing work, this paper proposes an authentication method that combines Hash-based Message Authentication Code (HMAC)-SHA256 and Tiny Encryption Algorithm (TEA) algorithms. This method is based on dynamic identity authentication in challenge/response made and combined with the characteristics of the CAN bus itself as it achieves the identity authentication between the gateway and multiple electronic control units (ECUs). In the authentication process, dynamic passwords are used to complete the identity authentication. In order to verify the validity of the authentication method proposed in this article, we built the authentication model in Matlab/Simulink and analyzed the authentication process in Matlab/canTool. Through data stream recording, busload analysis, and attack experiments using network attack models, it is shown that the authentication method proposed in this paper has a low busload, and it can achieve multi-node verification. Through comparison with Message Authentication Code (MAC) and Challenge/Response method, it can effectively deal with the replay attacks and modifying attacks. This method is a safe and reliable authentication method, which improves the safety of the CAN bus.


Subscribers can view annotate, and download all of SAE's content. Learn More »


Members save up to 16% off list price.
Login to see discount.
Special Offer: Download multiple Technical Papers each year? TechSelect is a cost-effective subscription option to select and download 12-100 full-text Technical Papers per year. Find more information here.
We also recommend:

Real-Time Network Defense of SAE J1939 Address Claim Attacks


View Details


Securing the On-Board Diagnostics Port (OBD-II) in Vehicles


View Details


Assuring Vehicle Update Integrity Using Asymmetric Public Key Infrastructure (PKI) and Public Key Cryptography (PKC)


View Details