Protecting SOME/IP Communication via Authentication Ticket

Area of Science:

• Automotive Engineering
• Network Security
• Embedded Systems

Background:

• Scalable service-Oriented MiddlewarE over IP (SOME/IP) is an AUTOSAR standard protocol for automotive Ethernet communication.
• Existing SOME/IP implementations lack security, making them vulnerable to attacks like man-in-the-middle (MITM).
• Research has highlighted significant security vulnerabilities in the SOME/IP protocol.

Purpose of the Study:

• To propose a robust security method for SOME/IP communication.
• To mitigate the prevalent SOME/IP man-in-the-middle (MITM) attack.
• To ensure secure and reliable data exchange in automotive systems.

Main Methods:

• Implementation of an authentication server (AS) for issuing tickets.
• Utilizing tickets to authenticate and authorize SOME/IP communication between nodes.
• Designing a lightweight and scalable security solution compatible with existing SOME/IP.

Main Results:

• The proposed method effectively mitigates SOME/IP MITM attacks through authenticated communication.
• Reliable data transfer is achieved between service-providing and consuming nodes via AS-issued tickets.
• The solution demonstrates operational efficiency, scalability, and freshness guarantees.

Conclusions:

• The authentication server and ticket-based approach provides a viable security enhancement for SOME/IP.
• This method offers a practical solution for securing automotive Ethernet communication within AUTOSAR.
• The proposed protection method ensures interoperability while enhancing the security posture of SOME/IP.