Research Article
LaaCan: A Lightweight Authentication Architecture for Vehicle Controller Area Network
@INPROCEEDINGS{10.1007/978-3-030-63095-9_12, author={Syed Akib Anwar Hridoy and Mohammad Zulkernine}, title={LaaCan: A Lightweight Authentication Architecture for Vehicle Controller Area Network}, proceedings={Security and Privacy in Communication Networks. 16th EAI International Conference, SecureComm 2020, Washington, DC, USA, October 21-23, 2020, Proceedings, Part II}, proceedings_a={SECURECOMM PART 2}, year={2020}, month={12}, keywords={CAN bus In-vehicle network security AEAD}, doi={10.1007/978-3-030-63095-9_12} }- Syed Akib Anwar Hridoy
Mohammad Zulkernine
Year: 2020
LaaCan: A Lightweight Authentication Architecture for Vehicle Controller Area Network
SECURECOMM PART 2
Springer
DOI: 10.1007/978-3-030-63095-9_12
Abstract
Vehicle manufacturers are installing a large number of Electronic Control Units (ECU) inside vehicles. ECUs communicate among themselves via a Controller Area Network (CAN) to ensure better user experience and safety. CAN is considered as a de facto standard for efficient communication of an embedded control system network. However, it does not have sufficient built-in security features. The major challenges of securing CAN are that the hardware of the ECUs have limited computational power and the size of a CAN message is small. In this paper, a lightweight security solution, LaaCan is designed to secure CAN communication by adopting the Authenticated Encryption with Associated Data (AEAD) approach. The architecture ensures confidentiality, integrity, and authenticity of data transmission. The experimental results show that the delay of LaaCan can be reduced depending on hardware configurations. We consider it lightweight since it adds a low overhead regardless of performing encryption and authentication. We evaluate LaaCan using four metrics: communication overhead, network traffic load, cost of deployment, and compatibility with CAN specification. The evaluation results show that the proposed architecture keeps the network traffic unchanged, has low deployment cost, and is highly compatible with the specification of the protocol.
