CANASTA: Controller Area Network Authentication Schedulability Timing Analysis
CANASTA: Controller Area Network Authentication Schedulability Timing Analysis
复制标题
DOI：
10.1109/tvt.2023.3258746
复制
发表时间：
2023-08
影响因子：
6.8
通讯作者：
Omolade Ikumapayi;Habeeb Olufowobi;J. Daily;T. Hu;I. Bertolotti;Gedare Bloom
中科院分区：
文献类型：
--
作者：
Omolade Ikumapayi;Habeeb Olufowobi;J. Daily;T. Hu;I. Bertolotti;Gedare Bloom
控制器局域网 (CAN) 在现代车辆的车载网络系统中占据主导地位。 CAN 的设计以低延迟和可靠性为关键特性。设计中没有考虑 CAN 帧的真实性，因此，大多数车载网络节点本质上都相信收到的消息来自合法来源。因此，对网络节点进行编程（或破解）来欺骗流量是很简单的。由于帧大小有限和总线利用率高，CAN 和相关协议（例如 SAE J1939）的身份验证具有挑战性。添加消息身份验证代码 (MAC) 作为单独的消息可能会过度强调安全关键消息的实时传递。尽管这种压力源众所周知，但身份验证协议对 CAN 中实时消息传递的影响尚未得到彻底研究。在本文中，我们首次对应用于 CAN、CAN 灵活数据速率 (CAN FD) 和 CAN 超长有效负载 (CAN XL) 认证方案的实时可调度性分析进行全面分析。我们制定了添加 MAC 和定期传输 MAC 的响应时间分析，并检查了它们对两个案例研究的影响，并通过对各种消息集进行随机可调度性实验进行评估。
The Controller Area Network (CAN) dominates in-vehicle networking systems in modern vehicles. CAN was designed with low-latency and reliability as key features. Authenticity of a CAN frame was not considered in the design, thus, most in-vehicle network nodes inherently trust received messages as coming from a legitimate source. As a result, it is trivial to program (or hack) a network node to spoof traffic. Authentication is challenging for CAN and related protocols, such as SAE J1939, due to limited frame sizes and high bus utilization. Adding a message authentication code (MAC) as a separate message can unduly stress the real-time delivery of safety-critical messages. Although this stressor is well-known, the impact of authentication protocols on real-time message delivery in CAN has not yet been thoroughly examined. In this paper, we provide the first comprehensive analysis of real-time schedulability analysis applied to authentication schemes for CAN, CAN Flexible Data-rate (CAN FD), and CAN extra long payload (CAN XL). We formulate the response time analysis for addition of MACs and periodic transmission of MACs, and we examine their impact on two case studies and through evaluation with randomized schedulability experiments over a wide range of message sets.