采用可信平台度量的车辆远程诊断授权协议

doi:10.3969/j.issn.1001-2400.2017.03.009

西安电子科技大学学报

采用可信平台度量的车辆远程诊断授权协议

刘佼;孙聪;马建峰;焦政达

(西安电子科技大学网络与信息安全学院，陕西西安 710071)

收稿日期:2016-05-26 出版日期:2017-06-20 发布日期:2017-07-17
通讯作者: 孙聪(1982-)，男，副教授，E-mail: suncong@xidian.edu.cn
作者简介:刘佼(1991-)，女，西安电子科技大学硕士研究生，E-mail: 3357278821@qq.com
基金资助:
国家自然科学基金资助项目(61303033)；国家高技术研究发展计划(863计划)资助项目(2015AA017203)；陕西省自然科学基础研究计划资助项目(2016JM6034)；航空科学基金资助项目(2013ZC31003, 20141931001)；工业和信息化部某专项科研资助项目(MJ-2014-S-37)

Remote authorization protocol for vehicle diagnosis using trusted platform measurements

LIU Jiao;SUN Cong;MA Jianfeng;JIAO Zhengda

(School of Cyber Engineering, Xidian Univ., Xi'an 710071, China)

Received:2016-05-26 Online:2017-06-20 Published:2017-07-17

摘要/Abstract

摘要：

针对当前车辆远程诊断授权协议无法确定车辆软硬件环境完整性的问题，提出一种新的车辆远程诊断授权协议，通过车载可信平台模块提供的度量机制对车辆软硬件信息进行完整性度量，并将度量过程与现有远程诊断授权协议相结合，实现了可信第三方对被诊断车辆的强身份认证，并保证车辆当前软硬件完整可信．通过工具自动证明了新协议满足安全目标，并分析说明了协议开销增长处于合理范围．

关键词: 安全协议, 认证, 授权, 车辆远程诊断, 可信计算

Abstract:

The state-of-art remote authorization protocol for vehicle diagnosis cannot ensure the validation of vehicle hardware and software. We propose a new remote authorization protocol for vehicle diagnosis. We use the measurement mechanism provided by the in-vehicle trusted platform module (TPM) to measure the hardware and software of tne vehicle for validation. Embedding this measurement process into the current remote authorization protocol can achieve a strong authentication to the diagnosed vehicle for the trusted-third-party and ensure the validation on the current status of vehicular hardware and software. The new protocol is automatically proved to comply with the security objectives and the increase in computation and communication costs is moderate.

Key words: security protocol, authentication, authorization, remote vehicle diagnosis, trusted computing

刘佼;孙聪;马建峰;焦政达. 采用可信平台度量的车辆远程诊断授权协议[J]. 西安电子科技大学学报, 2017, 44(3): 49-54+119.

LIU Jiao;SUN Cong;MA Jianfeng;JIAO Zhengda. Remote authorization protocol for vehicle diagnosis using trusted platform measurements[J]. Journal of Xidian University, 2017, 44(3): 49-54+119.

参考文献

［1］ CHAUDHRY H, BOHN T. Security Concerns of a Plug-in Vehicle ［C］//Proceedings of the 2012 IEEE PES Innovative Smart Grid Technologies. Piscataway: IEEE, 2012: 1-6.
［2］ KLEBERGER P, OLOVSSON T. Protecting Vehicles Against Unauthorised Diagnostics Sessions Using Trusted Third Parties ［C］//Lecture Notes in Computer Science: 8153. Heidelberg: Springer Verlag, 2013: 70-81.
［3］ KLEBERGER P, OLOVSSON T. Secure Vehicle Diagnostics in Repair Shops ［C］//Lecture Notes in Computer Science: 8666. Heidelberg: Springer Verlag, 2014: 93-108.
［4］焦政达, 马建峰, 孙聪, 等. 新的车辆远程诊断授权协议［J］. 通信学报, 2014, 35(11): 146-153.
JIAO Zhengda, MA Jianfeng, SUN Cong, et al. New Remote Authorization Protocol for Vehicle Diagnosis ［J］. Journal on Communications, 2014, 35(11): 146-153.
［5］ KARUMANCHI S, SQUICCIARINI A, LIN D. Privacy-aware Access Control for Message Exchange in Vehicular Ad Hoc Networks ［J］. Telecommunication Systems, 2015, 58(4): 349-361.
［6］ ZHAO T Y, ZHANG C, WEI L B, et al. A Secure and Privacy-preserving Payment System for Electric Vehicles ［C］//Proceedings of the IEEE International Conference on Communications. Piscataway: IEEE, 2015: 7280-7285.
［7］ CHANNEL A. Toyota Motor Corporation Joins Trusted Computing Group (TCG) ［EB/OL］. ［2016-05-25］. http://www.theautochannel.com/news/2012/03/15/029016-toyota-motor-corporation-joins-trusted-computing-group-tcg.html.
［8］ TRUSTED COMPUTING GROUP. TCG Architecture Overview: Version 1.4 ［S］. TCG, 2007.
［9］ BLANCHET B. ProVerif: Cryptographic Protocol Verifier in the Formal Model ［EB/OL］. ［2016-05-25］. http://prosecco.gforge.inria.fr/personal/bblanche/proverif/.
［10］ IEEE Standard for Information Technology-local and Metropolitan Area Networks—Specific Requirements-Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications Amendment 6: Wireless Access in Vehicular Environments: 802.11p-2010 ［S］. IEEE, 2010.
［11］ WOLF M, GENDRULLIS T. Design, Implementation, and Evaluation of a Vehicular Hardware Security Module ［C］//Lecture Notes in Computer Science: 7259. Heidelberg: Springer Verlag, 2012: 302-318.
［12］ LIU J Z, DONG J M. Design and Implementation of an Efficient RSA Crypto-processor ［C］//Proceedings of the 2010 IEEE International Conference on Progress in Informatics and Computing. Piscataway: IEEE, 2010: 368-372.

[1]	李兴华,蔡觉平,李晓龙,王峰,闫振华. T-NTRU物联网动态接入认证技术[J]. 西安电子科技大学学报, 2021, 48(3): 188-196.
[2]	范美月,董庆宽,王蕾,杨灿. 无TTP带权重的多所有者RFID标签认证协议[J]. 西安电子科技大学学报, 2021, 48(1): 133-140.
[3]	李晓伟,杨邓奇,曾新,朱兴文,陈本辉,张玉清. 车联网环境下跨域间认证与密钥协商协议[J]. 西安电子科技大学学报, 2021, 48(1): 141-148.
[4]	叶涛,韦永壮,李灵琛. KNOT认证加密算法的零和区分器分析[J]. 西安电子科技大学学报, 2021, 48(1): 76-86.
[5]	司成祥,高峰,祝烈煌,巩国鹏,张璨,陈卓,李锐光. 一种支持动态标签的区块链数据隐蔽传输机制[J]. 西安电子科技大学学报, 2020, 47(5): 94-102.
[6]	陈矗. RFCcertDT:SSL/TLS中证书验证的测试工具[J]. 西安电子科技大学学报, 2019, 46(3): 20-25.
[7]	张紫楠;郭渊博;杨奎武;黄惠新;杨占海. 通用可组合认证密钥交换协议[J]. J4, 2014, 41(5): 185-191.
[8]	马国峻;裴庆祺;张红祥. 一种支持个性化共享的DRM模型[J]. J4, 2014, 41(3): 187-191.
[9]	王明伟;胡予濮. 一种前向-后向安全的数字签名方案[J]. J4, 2014, 41(2): 71-78.
[10]	许捷;党岚君;石光明. 一种高效的AAA下无对的无证书移动IP注册协议[J]. J4, 2014, 41(2): 51-57.
[11]	邓凡;陈平;张立勇;王献青;厉孙德;王彬. 授权服务中策略决策点的高效评估方法[J]. J4, 2013, 40(6): 105-110.
[12]	万涛;廖维川;马建峰. 面向多服务器架构的认证协议分析与改进[J]. J4, 2013, 40(6): 174-179.
[13]	同鸣;吴扬成;张建龙;栾英姿. 一种面向AVS的视频内容多重水印框架[J]. J4, 2013, 40(4): 6-13.
[14]	杨元原;马文平;刘维博;俞优;顾健. 带有异或运算安全协议的自动化检测[J]. J4, 2012, 39(4): 120-125+183.
[15]	李慧贤. 轻量级RFID双向认证协议设计与分析[J]. J4, 2012, 39(1): 172-178.

采用可信平台度量的车辆远程诊断授权协议

Remote authorization protocol for vehicle diagnosis using trusted platform measurements

PDF (PC)

赞

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

Metrics

本文评价

推荐阅读 10