Search Results

Modern vehicles utilize various functionalities that require security solutions such as secure in-vehicle communication and ECU authentication. Cryptographic keys are the basis for such security solutions. We propose two approaches for secure and efficient invehicle key management. In both approaches, an ECU acting as a Key Master in the vehicle is required. The first approach is based on SHE. The Key Master generates and distributes new keys to all ECU based on the SHE key update protocol. The second approach performs key establishment based on key derivation. The Key Master sends a trigger in form of a counter and all ECUs derive new keys based on the received counter value and pre-shared keys. It is thus possible to handle in-vehicle key management without the need for an OEM backend to manage all keys. This reduces cost and complexity of the solution.

In this paper, we outline past, present and future applications of automotive security for engine ECUs. Electronic immobilizers and anti-tuning countermeasures have been used for several years. Recently, OEMs and suppliers are facing more and more powerful attackers, and as a result, have introduced stronger countermeasures based on hardware security. Finally, with the advent of connected cars, it is expected that many things that currently require a physical connection will be done remotely in a near future. This includes remote diagnostics, reprogramming and engine calibration.