首页> 外文期刊>ATZ Electronics Worldwide >Hardware-based Cybersecurity for Next-Generation Vehicles
【24h】

Hardware-based Cybersecurity for Next-Generation Vehicles

机译:基于硬件的网络安全的下一代车辆

获取原文
获取原文并翻译 | 示例
           

摘要

It is now ten years since the European research project Evita radically changed the nature of embedded cybersecurity for vehicles. On the whole, safety-critical electronic control units in today's vehicles come with chips featuring both a central processing unit and a dedicated trust anchor, mainly in the form of a hardware security module. Escrypt has analyzed whether this approach can survive the advent of new onboard E/E architectures with higher real-time requirements and the need for greater bandwidth. Ten years ago, the consortium behind Evita (E-Safety Vehicle Intrusion Protected Applications) project, funded by the European Commission, developed a new IT security architecture for automotive endpoints, covering the following versions: Evita Full, Evita Medium, and Evita Light. Despite being interpreted and implemented in various ways, the fundamental approach of Evita has proven to be extremely effective in practice and remains sound to this day: A dedicated, programmable on-chip hardware block that physically encapsulates the data to be protected, drives the related cryptographic operations while isolating them from the actual application side of the chip, thereby creating a dedicated security domain, also referred to as a Hardware Security Module (HSM) or Hardware Trust Anchor (HTA). Any data exchanged via the Electronic Control Unit (ECU) chip must cross a host-to-HSM bridge connecting these two domains. Typically, this bridge comprises interrupt signals, special function registers, and mailboxes in the form of shared memory or a software emulation thereof - for example using Interprocess Communication (IPC), FIGURE 1.
机译:现在欧洲研究以来的十年项目埃维塔彻底改变了性质嵌入式网络安全车辆。整体而言,安全性至关重要的电子控制单元在今天的汽车有芯片中中央处理单元和一个专用的信任锚,主要以硬件的形式安全模块。这种方法可以生存的出现在E / E和高实时架构需求和需要更大的带宽。十年前,埃维塔背后的财团(E-Safety车辆入侵保护应用程序)的项目,由欧盟资助的委员会,开发了一种新的安全汽车端点架构,覆盖以下版本:埃维塔,埃维塔介质,和埃维塔光。以不同的方式,基本实现埃维塔的方法已经被证明是非常有效的练习和保持稳健天:专用,可编程芯片上的硬件块物理封装了数据密码保护,驱动相关从实际操作而孤立他们应用程序的芯片,从而创建一个专用的安全域,也称为硬件安全模块(HSM)或硬件信任锚(HTA)。电子控制单元(ECU)芯片必须交叉host-to-HSM桥连接这两个领域。一般来说,这座桥由中断信号,特殊功能寄存器,邮箱的形式共享内存或软件仿真——例如使用进程间通信(IPC),图1所示。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号