Secure Intra-Vehicular Communication over CANFD

Recent documented remote hijacking attacks on vehicles have created a need for improving on-board vehicular network security. Electronic Control Units (ECUs) in a vehicle are resource constrained devices that are connected using network standard such as Controller Area Network (CAN). In our work, we demonstrate threat models of CANBus, and propose a secure and trusted framework that implements lightweight hardware based authentication and secure key exchange for enhanced security over the insecure CANFD standard. The scheme integrates a hardware based code isolation using Trusted Execution Environment that further restricts the access to crypto IN and resources at the time of device or network compromise. The paper discusses the overhead, performance and security analysis of our proposed framework