Visible to the public Hardware-Assisted Security in Electronic Control Units: Secure Automotive Communications by Utilizing One-Time-Programmable Network on Chip and Firewalls

TitleHardware-Assisted Security in Electronic Control Units: Secure Automotive Communications by Utilizing One-Time-Programmable Network on Chip and Firewalls
Publication TypeJournal Article
Year of Publication2018
AuthorsKornaros, Georgios, Tomoutzoglou, Othon, Coppola, Marcello
JournalIEEE Micro
Volume38
Pagination63—74
ISSN1937-4143
Keywordsadvanced driver assistance systems, authentication, automotive communications, automotive controller area network-bus communications, automotive electronics, Automotive engineering, controller area networks, cyber-enabled automotive system, data privacy, driver information systems, electronic control units, enjoyable driving, firewalls, Firewalls (computing), Hardware, hardware firewalling, hardware-assisted security, Metrics, network on chip security, network-on-chip, off-chip networking techniques, on-chip network physical isolation, one-time-programmable network, pubcrawl, resilience, Resiliency, Scalability, Secure Automotive Communications, secure execution environments, smart automotive technologies, software-dominated enhancements, system-level countermeasures, system-on-chip, system-wide cryptographic techniques, threat models, Trusted Electronic Control Units, vehicle-to-vehicle communications
AbstractWith emerging smart automotive technologies, vehicle-to-vehicle communications, and software-dominated enhancements for enjoyable driving and advanced driver assistance systems, the complexity of providing guarantees in terms of security, trust, and privacy in a modern cyber-enabled automotive system is significantly elevated. New threat models emerge that require efficient system-level countermeasures. This article introduces synergies between on- and off-chip networking techniques to ensure secure execution environments for electronic control units. The proposed mechanisms consist of hardware firewalling and on-chip network physical isolation, whose mechanisms are combined with system-wide cryptographic techniques in automotive controller area network (CAN)-bus communications to provide authentication and confidentiality.
DOI10.1109/MM.2018.053631143
Citation Keykornaros_hardware-assisted_2018