A domain key-based secure SOME/IP protocol

Area of Science:

• Automotive Cybersecurity
• In-vehicle Networking Protocols
• Middleware Security

Background:

• Advanced Driver Assistance Systems (ADAS) increase in-vehicle data, straining Controller Area Network (CAN) bandwidth.
• Automotive Ethernet and SOME/IP (Scalable Service-Oriented Middleware over IP) are emerging for high-speed data transmission.
• Existing SOME/IP security lacks robust protection against node compromise and single points of failure.

Purpose of the Study:

• To propose a novel domain key-based secure SOME/IP protocol.
• To address limitations of existing group key and pairwise key security approaches.
• To enhance the security of automotive middleware against sophisticated cyber threats.

Main Methods:

• Development of a domain key-based security protocol for SOME/IP.
• Analysis of security against node compromise and single point of failure vulnerabilities.
• Experimental evaluation of the proposed protocol's performance impact.

Main Results:

• The proposed domain key approach limits the impact of node compromise attacks.
• Eliminates the single point of failure issue inherent in authentication server-dependent methods.
• Demonstrates a modest increase in session establishment time (5-10 ms) and message transmission time (up to 115 ms) compared to group key methods.

Conclusions:

• The domain key-based secure SOME/IP protocol offers enhanced security for automotive networks.
• It effectively mitigates key vulnerabilities without introducing critical performance bottlenecks.
• This provides a more resilient and secure middleware solution for modern vehicles with ADAS.