Hyundai Motor Company

Snu Rdb Foundation

Industry-academic Cooperation Foundation, Chosun University

Kia Motors Corporation

Kia Motor Corporation

Jun Young Woo

Young Sik Kim

Jong Seon No

Hyun Soo Ahn

Ho Jin Jung

Chung Hi Lee

Ho Youn Kim

Byoung Wook Lee

Young Sik Moon

Kang Seok Lee

Ho Ryong Yoo

Hyun Cheol Bae

Chang Min Cho

Ji Youp Kim

Jong Yoon Yoon

A method of performing cross-authentication in a vehicle controller interworking with an external device includes: generating a random number S and transmitting the random number S to the external device according to an authentication request message received from the external device; generating a variable i using a first function having the random number S as a parameter; generating a first session key Ks using a second function having the variable i and a pre-stored secret key K as parameters; receiving a first response key from the external device; generating a second response key using a third function having the random number S, the variable i and the first session key Ks as parameters; and authenticating the external device based on whether the first response key is equal to the second response key.

Method and apparatus for performing cross-authentication based on secret information

A method and apparatus for authenticating packets in a controller area network (CAN) are disclosed. The method includes transmitting messages using a mixture of message authentication codes (MACs) in a controller area network (CAN). In addition, a first MAC is generated using a first message and the first MAC is divided into a first MAC part and a second MAC part. A second MAC is generated using a second message and the second MAC is divided into a third MAC part and a fourth MAC part. A linear operation is performed between the second MAC part and the third MAC part to generate a first authentication MAC. The first message is transmitted with the first MAC part and the second message is transmitted with the first authentication MAC.

Method of authenticating can packets using mixture of MACs and apparatus for implementing the same

A method of transmitting K messages using divided message authentication codes (MACs) in a controller area network (CAN) includes: generating a MAC using a first message and a specific MAC, performing a first operation with respect to j using j-th messages subsequent to the first message and a second MAC part of the generated MAC, performing a second operation with respect to j using a result of the performed first operation and a j-th subblock subsequent to a first MAC subblock among K MAC subblocks obtained by dividing a first MAC part of the generated MAC, transmitting the first message along with the first MAC subblock, and transmitting K-1 j-th messages in an order of j, each of the j-th messages being transmitted along with a j-th result of the performed second operation.

Method of sequentially authenticating CAN packets using divided MACS and apparatus for implementing the same

An apparatus for detecting an in-vehicle network attack, is configured to cumulatively count packets for each device that has a respective ID and is connected to an in-vehicle network bus. The apparatus is configured to cumulate a check value every time the packets are cumulatively counted to calculate a cumulated value, and determine that an attack is conducted when an average cumulated value obtained by dividing the cumulated value by a cumulative counted value does not exceed a first threshold value.

Apparatus and method for detecting in-vehicle network attack

Growing community of inventors

Seoul, South Korea

Jun Young Woo