Fortifying Vehicular Security through Low Overhead Physically Unclonable Functions

• Published in: ACM journal on emerging technologies in computing systems Vol. 18; no. 1; pp. 1 - 18
• Main Authors: Labrado, Carson, Thapliyal, Himanshu, Mohanty, Saraju P.
• Format: Journal Article
• Language: English
• Published: New York, NY ACM 01.01.2022
• Subjects: Computer systems organization; Embedded and cyber-physical systems; Embedded systems; Embedded systems security; Hardware security implementation; Hardware-based security protocols; Security and privacy; Security in hardware; Physically unclonable function; lightweight cryptography; vehicular security; controller area network
• DOI: 10.1145/3442443
• ISSN: 1550-4832

Within vehicles, the Controller Area Network (CAN) allows efficient communication between the electronic control units (ECUs) responsible for controlling the various subsystems. The CAN protocol was not designed to include much support for secure communication. The fact that so many critical systems can be accessed through an insecure communication network presents a major security concern. Adding security features to CAN is difficult due to the limited resources available to the individual ECUs and the costs that would be associated with adding the necessary hardware to support any additional security operations without overly degrading the performance of standard communication. Replacing the protocol is another option, but it is subject to many of the same problems. The lack of security becomes even more concerning as vehicles continue to adopt smart features. Smart vehicles have a multitude of communication interfaces an attacker could exploit to gain access to the networks. In this work, we propose a security framework that is based on physically unclonable functions (PUFs) and lightweight cryptography (LWC). The framework does not require any modification to the standard CAN protocol while also minimizing the amount of additional message overhead required for its operation. The improvements in our proposed framework result in major reduction in the number of CAN frames that must be sent during operation. For a system with 20 ECUs, for example, our proposed framework only requires 6.5% of the number of CAN frames that is required by the existing approach to successfully authenticate every ECU.