为了提升车联网技术的网络安全防护水平,保障车联网系统安全,需要使用密码技术实现车联网系统的身份认证、安全通信及数据安全保护。本报告首先介绍了汽车密钥学的应用场景,包括通信加密、信息校验、身份认证、数字证书等;其次,对典型的加密算法实现技术、国密算法、国际算法做了简介,阐述了密钥生命周期管理,包括密钥签发、密钥存储、密钥更新三个过程;最后,分析了车载网络对安全机制的要求和限制,列举了车辆内部网络的密钥分配方法,对ECU之间加密通信方法的特点做了分析。
<<In order to improve the network security protection level of the Internet of vehicles technology and ensure the security of the Internet of vehicles system,it is necessary to use cryptography to realize the identity authentication,secure communication and data security protection of the internet of vehicles system. This section first introduces the application scenarios of automotive keyology,including communication encryption,information verification,identity authentication,and digital certificates. Secondly,the typical encryption algorithm implementation technology,national secret algorithm,and international algorithm are introduced. This paper describes the key lifecycle management,including key issuance,key storage,and key update. Finally,the requirements and restrictions of the on-board network on the security mechanism are analyzed,the key allocation methods of the vehicle’s internal network are summarized,and the characteristics of the encryption communication method between ECUs are analyzed.
<<