Background
With the development of smart connected vehicles, the issue of vehicle network communication security has become increasingly prominent. Establishing a trust system for vehicle networks based on cryptographic technology is an important means to address communication security issues in vehicle networks, serving as the foundation for the safe operation of smart connected vehicles. National regulations clearly state that the development of a self-controllable information technology system should prioritize cryptography, building a new network security system centered on cryptographic technology and integrating various technologies, while constructing a new network security environment supported by cryptographic infrastructure.
However, there are still many pain points in the application of cryptography in vehicle networks: first, the lack of standards, as there are no unified standards for cryptographic applications in vehicle networks, with each company building according to its own business situation, resulting in a lack of commonality; second, current applications of cryptography in vehicle networks often use solutions from other industries, lacking dedicated cryptographic products and technologies developed according to the characteristics of smart connected vehicles. To ensure communication security in vehicle networks, it is urgent to establish a self-controllable cryptographic system and application solutions based on domestic cryptographic algorithms.
Industry Applications
In the field of vehicle networks, cryptographic technology is applied to achieve functions such as identity authentication, sensitive information protection, and secure access. When using digital keys for remote vehicle control, the owner manages the vehicle’s status and performs remote control through a mobile smart terminal, establishing a TLS/TLCP secure channel based on X509 certificates between the terminal and the vehicle to ensure the authenticity, integrity, confidentiality, and non-repudiation of remote control commands. In the scenario of vehicle OTA upgrades, the OTA service platform uses X509 certificates to establish a TLS/TLCP secure channel to issue signed software upgrade packages to the TBOX, ensuring authenticity and integrity verification during the OTA process, thereby safeguarding negOTA security. In vehicle-road coordination scenarios, cryptographic technology is also widely used to ensure the security and reliability of communication processes and to authenticate the identities of both parties in communication.
Digital Key Usage Scenarios
Research Progress
Based on its research foundation in policy research, standard formulation, and platform construction, the China Automotive Data Corporation has conducted research and practice around the application of cryptographic technology in vehicle networks, focusing on terminal integration, platform construction, and application implementation.
In terms of terminal integration, the China Automotive Data Corporation has developed a secure middleware for vehicle network terminals. This middleware can interface with CA platforms to facilitate the application, download, and use of certificates, while also providing certificate management services and secure data processing services such as encryption, decryption, signing, and verification for vehicle-to-vehicle, vehicle-to-road, and vehicle-to-cloud communications. By integrating with the vehicle’s TBOX or OBU, it empowers cryptographic applications at the vehicle end.
Structure of Vehicle Network Terminal Security Middleware
In terms of platform construction, based on domestic cryptographic algorithms such as SM2, SM3, and SM4, the China Automotive Data Corporation has built a comprehensive trust support system for vehicle networks based on PKI CA technology, centered on the X509 certificate service for vehicle-cloud communication and V2X certificate service for vehicle-to-vehicle and vehicle-to-road communication. From basic encryption, decryption, signing, and verification services to the compliant use of cryptographic products, from end-to-end protection of data collection, storage, and application to multi-faceted protection of communication networks, and from comprehensive support of certificate services to secure operation and maintenance of cryptographic applications, the China Automotive Data Corporation is committed to creating an ecological chain that supports communication security in vehicle networks.
China Automotive Data Corporation’s Vehicle Network Communication Security Assurance System
In terms of application implementation, the China Automotive Data Corporation has collaborated with multiple automakers such as Shangtong Five, Xiamen Jinlong, and Great Wall Motors to realize the application of solutions. In numerous scenarios such as OTA upgrades, digital keys, remote vehicle control, vehicle key injection, and data encryption protection, cryptographic technology has been utilized to ensure communication security in vehicle networks, relying on the Tianjin Xiqing vehicle network pilot area and conducting a series of safety testing and verification activities.
Outlook
In the face of frequent information security incidents involving smart connected vehicles both domestically and internationally, the China Automotive Data Corporation will continuously follow the latest requirements of policies, regulations, and standards related to communication security in smart connected vehicles, providing customers with compliant cryptographic service platforms, data security control platforms, and cryptographic products such as signature verification servers and key management systems. Meanwhile, the China Automotive Data Corporation is also expanding the ecological chain of communication security products in vehicle networks to enrich the product line and provide the most comprehensive and compliant solutions for communication security in smart connected vehicles.
In addition to the communication security assurance system for vehicle networks, the China Automotive Data Corporation is also committed to building an ecological circle for vehicle network security monitoring and early warning. Through a basic data collection platform for smart connected vehicles and scenario analysis models, combined with the vehicle vulnerability database of the China Automotive Data Corporation, it researches technologies for monitoring and discovering abnormal vehicle behaviors and early warning. With dual approaches of security assurance and monitoring early warning, it constructs a protective circle for communication security in vehicle networks that is both offensive and defensive.
China Automotive Data Corporation
In response to the industrial development trends and innovative development needs of carbon neutrality, digital transformation, and the “new four modernizations,” the China Automotive Data Corporation operates within a framework of “one foundation and two wings,” deeply engaging in energy conservation, low carbon, green ecology, market research, and judicial identification, precisely positioning itself in innovative fields such as smart connectivity, intelligent cockpits, and industrial internet (industrial software), forming a business positioning centered around the “national-level automotive industry data center, national-level decision support institution for the automotive industry chain, and national-level digital support institution for the automotive industry.”
Click the original text for more information!