Security Scheduling Algorithm of CAN Bus Based on Dynamic ID Hopping

doi:10.12068/j.issn.1005-3026.2022.03.007

Abstract

Abstract: CAN(controller area network) bus is the most widely used field bus. Due to the lack of authentication and message checking mechanism， CAN bus has great security risks， so it is necessary to design a defense mechanism for CAN bus. In this paper， a priority hopping mechanism is designed， which introduces the dynamic hopping of identifiers by Hash function into a real-time scheduling algorithm. The fixed priority is calculated by a genetic algorithm， and the compromise range of priority is found out. Each frame is grouped， and the ID segment of data frame is segmented and reconstructed. The former part of the ID segment determines the priority and performs priority hopping， while the latter part of the ID segment hops dynamically at one time. Experimental results show that using dynamic priority and one-time ID Hopping to hop has a greater security improvement than the existing ID Hopping mechanism.

Key words: CAN(controller area network)bus; genetic algorithm; ID reconstruction; dynamic ID Hopping; real-time scheduling

CLC Number:

TP393

DING Shan， ZANG Shi-yi， CAO Dian-ming， SHE Li-huang. Security Scheduling Algorithm of CAN Bus Based on Dynamic ID Hopping[J]. Journal of Northeastern University(Natural Science), 2022, 43(3): 350-358.

References

[1]Wolf M，Weimerskirch A，Paar C.Security in automotive bus systems［C］//Workshop on Embedded Security in Cars.Bochum:IEEE，2004:1-13.
[2]吴尚则.基于车载CAN总线网络的身份认证方法研究［D］.长春:吉林大学，2018.(Wu Shang-ze.Research on identity authentication method based on CAN bus network ［D］.Changchun:Jilin University，2018.)
[3]Groza B，Murvay S.Efficient protocols for secure broadcast in controller area networks［J］.IEEE Transactions on Industrial Informatics，2013，9(4):2034-2042.
[4]Larson U E，Nilsson D K，Jonsson E.An approach to specification-based attack detection for in-vehicle networks［C］//2008 IEEE Intelligent Vehicles Symposium.Eindhoven:IEEE，2008:220-225.
[5]Humayed A，Luo B.Using ID-hopping to defend against targeted DoS on CAN［C］//Proceedings of the 1st International Workshop on Safe Control of Connected and Autonomous Vehicles.Pittsburgh，PA:ACM，2017:19-26.
[6]Lukasiewycz M，Mundhenk P，Steinhorst S.Security-aware obfuscated priority assignment for automotive CAN platforms［J］.ACM Transactions on Design Automation of Electronic Systems，2016，21(2):1-27.
[7]Wu W，Kurachi R，Zeng G，et al.IDHCC:a security-enhanced ID hopping CAN controller design to guarantee real-time［C］//Proceedings of the 2nd Workshop Security Dependability Criterion Embedded Real-Time System.Paris:ACM，2017:14-21.
[8]Di Natale M，da Silva C L M，Santos M M D.On the applicability of an MILP solution for signal packing in CAN-FD［C］//2016 IEEE 14th International Conference on Industrial Informatics(INDIN).Poitiers:IEEE，2016:1202-1205.
[9]Kleberger P，Olovsson T，Jonsson E.Security aspects of the in-vehicle network in the connected car［C］//2011 IEEE Intelligent Vehicles Symposium(IV).Baden-Baden:IEEE，2011:528-533.
[10]Kang K D，Baek Y，Lee S，et al.An attack-resilient source authentication protocol in controller area network［C］//2017 ACM/IEEE Symposium on Architectures for Networking and Communications Systems(ANCS).Beijing:IEEE，2017:109-118.
[11]Jiang S，Zhu X，Wang L.An efficient anonymous batch authentication scheme based on HMAC for VANETs［J］.IEEE Transactions on Intelligent Transportation Systems，2016，17(8):2193-2204.
[12]Greene K，Rodgers D，Dykhuizen H，et al.A defense mechanism against replay attack in remote keyless entry systems using timestamping and XOR logic［J］.IEEE Consumer Electronics Magazine，2020，10(1):101-108.
[13]An Y H.Security improvements of dynamic ID-based remote user authentication scheme with session key agreement［C］//15th International Conference on Advanced Communications Technology(ICACT).Pyeong Chang:IEEE，2013:1072-1076.

[1]	ZHANG Lu-wen， LIU Hong-juan. Modeling and Analysis of Infectious Disease Transmission Considering Protection and Isolation [J]. Journal of Northeastern University(Natural Science), 2023, 44(4): 486-494.
[2]	LI Zhen-ni, LI Jing-jiao, WANG Jiao, YANG Dan. Deadlock-Free Routing Algorithm of 2D-Torus Network-on-Chip Based on FPGA [J]. Journal of Northeastern University(Natural Science), 2021, 42(1): 1-6.
[3]	LIU Zhen-yu， SONG Xiao-ying. An Applicable Multivariate Decision Tree Algorithm for Categorical Attribute Data [J]. Journal of Northeastern University Natural Science, 2020, 41(11): 1521-1527.
[4]	ZENG Rong-fei， ZHANG De-yong， WANG Xing-wei， HUANG Min. A Customized Routing Backup Mechanism for IPv6 [J]. Journal of Northeastern University Natural Science, 2020, 41(10): 1369-1376.
[5]	ZHAO Hai， ZHENG Chun-yang， WANG Jin-fa， SI Shuai-zong. Network Anomaly Detection Method for Intentional Attack [J]. Journal of Northeastern University Natural Science, 2020, 41(10): 1376-1381.
[6]	JING Yuan-wei， QI Xue-lei， SHEN Jin-dong， JING Jiang-shan. H_∞ Congestion Tracking Control for TCP/AWM Network Systems [J]. Journal of Northeastern University Natural Science, 2020, 41(10): 1388-1393.
[7]	ZENG Rong-fei， GAO Yuan， WANG Xing-wei， ZHANG Bang. Efficient Joint Detection and Defense Mechanism for DDoS Attack in SDN [J]. Journal of Northeastern University Natural Science, 2020, 41(9): 1217-1222.
[8]	YAO Wei， ZHAO Hai， ZHU Jian， CHEN Xiang-yi. Multi-characteristic Subnets Discovery and Analysis Based on Traceroute [J]. Journal of Northeastern University Natural Science, 2020, 41(8): 1075-1082.
[9]	YANG Wang， JIANG Yong-han， ZHANG San-feng. A Web Spam Link Detection Method Based on Web Page Structure and Text Features [J]. Journal of Northeastern University Natural Science, 2020, 41(8): 1091-1096.
[10]	LI Zhen-ni， WANG Jiao， LI Jing-jiao， WANG Ze-kun. A New Stereo Image Disparity Algorithm Based on FPGA [J]. Journal of Northeastern University Natural Science, 2020, 41(6): 778-783.
[11]	JIANG Xu-yan， YAN Jin-li， QUAN Wei， SUN Zhi-gang. SSA:CQF-oriented Scheduling Algorithm in Time-Sensitive Networking [J]. Journal of Northeastern University Natural Science, 2020, 41(6): 784-791.
[12]	WU Gang， WU Cheng-dong. Location Algorithm of Wireless Sensor Network Nodes Based on Semi-definite Programming [J]. Journal of Northeastern University Natural Science, 2019, 40(10): 1381-1385.
[13]	JING Yuan-wei， LI Zan-hua， LIU Ting. Minimax Congestion Control for a Class of TCP Network Systems [J]. Journal of Northeastern University Natural Science, 2019, 40(8): 1065-1069.
[14]	RU Jing-yu， JIA Zi-xi， WU Cheng-dong. A Sunshine-Based Trajectory Simplification Algorithm [J]. Journal of Northeastern University Natural Science, 2019, 40(8): 1070-1075.
[15]	YE Zheng-wang， WEN Tao， LIU Zhen-yu， FU Chong-guo. An Algorithm of Trust-based Secure Data Aggregation for Wireless Sensor Networks [J]. Journal of Northeastern University Natural Science, 2019, 40(6): 789-794.