论文标题
EC-SVC：根据边缘计算
EC-SVC: Secure CAN Bus In-Vehicle Communications with Fine-grained Access Control Based on Edge Computing
论文作者
论文摘要
车载通信不是为车辆和外部系统之间的消息交换而设计的。因此，消息保护的安全设计不足。此外，内部设备没有足够的资源来处理其他安全操作。但是，由于广播消息的车载网络的特征，必须确保安全消息传输到特定的接收器。考虑到上述事实，此工作通过将安全操作卸载到高性能设备上来解决资源问题，并使用基于属性的访问控制来确保攻击者和未经授权的用户的消息机密性。此外，我们重新配置了现有的基于访问控制的密码，以解决使用基于边缘计算和基于属性的访问控制而引起的新漏洞。因此，本文提出了一种基于边缘计算的安全协议，其基于良好的属性加密，使用哈希函数，基于对称的加密和重新配置的加密方案。此外，这项工作正式证明了重新配置的加密方案和安全协议，并使用独木舟软件在各个方面评估了所提出的安全协议的可行性。
In-vehicle communications are not designed for message exchange between the vehicles and outside systems originally. Thus, the security design of message protection is insufficient. Moreover, the internal devices do not have enough resources to process the additional security operations. Nonetheless, due to the characteristic of the in-vehicle network in which messages are broadcast, secure message transmission to specific receivers must be ensured. With consideration of the facts aforementioned, this work addresses resource problems by offloading secure operations to high-performance devices, and uses attribute-based access control to ensure the confidentiality of messages from attackers and unauthorized users. In addition, we reconfigure existing access control based cryptography to address new vulnerabilities arising from the use of edge computing and attribute-based access control. Thus, this paper proposes an edge computing-based security protocol with fine-grained attribute-based encryption using a hash function, symmetric-based cryptography, and reconfigured cryptographic scheme. In addition, this work formally proves the reconfigured cryptographic scheme and security protocol, and evaluates the feasibility of the proposed security protocol in various aspects using the CANoe software.
