Research On The Security Of Automotive Electronic System

With the development of technologies of electronic, computer, as well as communication, automotive electronic systems evolve into the harmonious of human, machine as well as environment step by step. The modern automotive is devoted to merging electronic information technology and mechanical technology and providing Telmatics, its safe problem is more complicated and difficult to solve than the past mechanical system.On one hand, since the architectures of automotive control will become ever more complex in the scenario of automotive electronic system, we have to reconsider the security of the system. On the other hand, with improving computation capability and storage, automotive have been facing increasing security threats. However, the current security architectures for automotive, do not take the preceding two factors into account and fail to harmonize the real time, scalability, compatibility, mobility and security within it. Moreover, most security architectures are really hard to solve the security risk caused by the original feature of mechanical system. Thus during the design of the automotive electronic system we must take the security as a critical issue into account with other core technologies and research it as a part of the future standard.In this master thesis, via discussing the security features of automotive electronic systems, the security threats, requirements, policies and mechanisms are proposed for the system according to its feature. Then the security architecture based on trusted automotive platform and PKI is presented to provide a considerable robust platform for automotive maintenance. More attention has been paid on the security of the automotive in the proposed security architecture in which user, automotive and MD (Maintenance Device) have been regarded as three separated entities. Using mainstream electronic control unit, a sample model of trusted automotive platform and the authentication scheme based on the combination of password and fingerprint are proposed to improve the security of the maintenance port.