Cyber Security Study for Automotive Ethernet in Japan Automotive Industry
Total Page:16
File Type:pdf, Size:1020Kb
Cyber Security Study for Automotive Ethernet in Japan Automotive Industry Japan Automotive Software JASPAR Next Generation High-Speed Network WG Architecture Team Leader Platform Mikio KATAOKA and Hitachi Automotive Systems, Ltd. Architecture Team, Requirement Definition Sub-team Leader Architecture Keisuke Terada Yazaki Corporation. 7th IEEE-SA Ethernet & IP Automotive Technology Day, San Jose, CA, USA, Nov. 2017 Agenda 1. About JASPAR - What’s JASPAR - Next Generation High-Speed Network WG - Activities of WG 2. Status of the Study About In-vehicle Ethernet Security - In-vehicle Network Security - Study Results - JASPAR Supposed Configuration - Priority Consideration Items - Filtering - SSL/TLS - VLAN 3. Future Activities - Documentation - Conclusion 2017/11/2 Japan Automotive Software Platform and Architecture 2/26 Agenda 1. About JASPAR - What’s JASPAR - Next Generation High-Speed Network WG - Activities of WG 2. Status of the Study About In-vehicle Ethernet Security - In-vehicle Network Security - Study Results - JASPAR Supposed Configuration - Priority Consideration Items - Filtering - SSL/TLS - VLAN 3. Future Activities - Documentation - Conclusion 2017/11/2 Japan Automotive Software Platform and Architecture 3/26 1-1. What is JASPAR ? JASPAR: Japan Automotive Software Platform and Architecture JASPAR was established to pursue increasing development efficiency and ensuring reliability by standardization and common use of electronic control system and in-vehicle network which are advancing and complexing. n Mission ü Improvements in development productivity and significantly contribute to the advancement of the world’s technology through standardization activity. ü Establish of the fair basis for competition of the whole automobile industry. n Achievements ü Represent a collective voice of the Japanese companies at the international standardization bodies. ü Contribute to development of global standards. 2017/11/2 Japan Automotive Software Platform and Architecture 4/26 1-2. JASPAR members List as of September, 2017 Semicon/ OEM Tier1 Soft/Tool Others Electronics 12 42 73 25 19B Board member HONDA R&D Toyota Nissan DENSO Tsusho TOYOTA Regular member ISUZU ADVICS Keihin ADC KPIT Harman International DNP Mazda AISIN AW Mitsubishi Electric APRESIA Mentor Graphics HRS DTRS AISIN SEIKI Nidec Elesys APTJ micware Infineon KDDI SUBARU Akebono Brake NIPPON SEIKI ATS NEC MegaChips SECOM SUZUKI Alpine NSK AUBASS Nihon Synopsys Microchip TOPPAN ALPS Panasonic Cadence OMRON MJKK TOYOTA CRDL Autoliv PIONEER CATS OTSL Murata Autoliv Nissin Brake Ricoh Change Vision SCSK NXP Semiconductors Bosch SHOWA eSOL STABILITY Renesas Calsonic Kansei Sumitomo Electric ETAS Sunny Giken TDK Clarion TOKAI RIKA FFRI Toshiba Information Systems TOSHIBA Continental Automotive Toyoda Gosei FTL TOYO Tyco Electronics FUJITSU TEN TOYOTA INDUSTRIES FUJI SOFT Trend Micro Furukawa Electric YAZAKI FUJITSU Vector Japan Hitachi AMS FUJITSU BSC WITZ JATCO Hitachi ICS JTEKT IBM Japan Assciate member DAIHATSU Delphi Automotive Systems A&D Eiwa TOKYO ELECTRON DEVICE ADI Allion Japan Hino Fujikura A&W Techonology Elektrobit Trillium ARM Biz3 KYB ACCEL JAPAN GAIO TTTech Cypress Innovates HAGIWARA HYUNDAI Magna International AIC HI CORP Ubiquitous HI-LEX Kyoei Sangyo Mitsubishi Motor MITSUBA AISIN COMCRUISE Hitachi High-Tech USE Hitachi ULSI MACNICA UD Trucks NGK SPARK PLUG ANRITSU Ixia Wind River Hosiden NTT DOCOMO Toyodenso Argus Cyber LAC Xilinx NTN OEC TRANSTRON Security Mamezou Yokogawa ROHM RENESAS Valeo Japan AXE MITO SOFT Sanden Automotive EASTON Yamaha Motor AZAPA NEC Solution Innovators Components Ryoden BITS Netagent SanDisk Ryosan Brison NTT DATA MSE Shindengen SANSHIN Canon ITS NTT DATA SBC Thine Shinko Shoji Digital Contents PCI Solutions YOKOWO DIT Systena dSPACE Takasaki Kyodo Eager Tata Consultancy 2017/11/2 Japan Automotive Software Platform and Architecture 5/26 1-3. JASPAR Organization ( as of September 2017) Auditor Executive Board Administrator Board Members Steering Committee Working Groups Next Dynamic Mobile Cyber Functional Intellectual AUTOSAR In-vehicle Bluetooth Generation Vehicle Device Security Safety Property Standardization LAN Conformance High-Speed Information Interface Promotion NETwork Sharing Cyber : In action OTA Security Technical : Out of Action Technical 2017/11/2 Japan Automotive Software Platform and Architecture 6/26 1-4. Next Generation High-Speed Network WG Define in-vehicle requirements for the next-generation high-speed network technology. Study certification/authentication mechanisms to ensure conformance and interoperability, as required. Keep close cooperation with associated domestic/international organizations and companies to accomplish stated goals. Next Generation High- Speed Network WG Leaders Meeting Architecture Team Hardware Team AUTOSAR Subcommittee OPEN Subcommittee Requirement Definition Software Switch Evaluation Sub-Team Sub-Team 2017/11/2 Japan Automotive Software Platform and Architecture 7/26 Agenda 1. About JASPAR - What’s JASPAR - Next Generation High-Speed Network WG - Activities of WG 2. Status of Study About In-vehicle Ethernet Security - In-vehicle Network Security - Study Result - JASPAR Supposed Configuration - Priority Consideration Items - Filtering - SSL/TLS - VLAN 3. Future Activities - Documentation - Conclusion 2017/11/2 Japan Automotive Software Platform and Architecture 8/26 2-1-1. Case of the Car Hacking Hacker trends Hacking level for cars has increased year by year FCA recall 1.4 million units <Target> FCA Jeep <Target> <Attack> Uconnect implemented car. Send the maintenance command <Attack> from the diagnosis connector. Control the display, steering and Impersonated a regular ECU and transmission. control the steering. (Accidents caused by a remote attack has not occurred.) ‘16 Control the car using maintenance mode ‘15 (When driving) Hacking from remote ‘13 (At low speed) Hacking in the car 2017/11/2 Japan Automotive Software Platform and Architecture 9/26 2-1-2. In-vehicle Ethernet Security There are the important issues that we discuss the security measures against cyber attacks. Also in the Next Generation High-Speed Network WG, the in-vehicle Ethernet security has been studied from 2015. V2P V2I Protect V2V Malicious attack 2017/11/2 Japan Automotive Software Platform and Architecture 10/26 2-2-1. JASPAR’s Presumed Security Configuration The gateway separates outside and inside of vehicle as a attack surface and filters illegal data for intrusion prevention. Data communicated with outside of vehicle should be encrypted. Message authentication code is adapted for communication data of in-vehicle. • Access Control List • Spoofing countermeasure • Communication monitoring • Access Control List • Server authentication • Mutual authentication • Communication monitoring • Mutual authentication • VLAN filtering • Electronic certification • VLAN filtering Mutual authentication Message authentication Data encryption (TLS) Gateway End-node IVI/NAVI ECU End-node FW (Switch) 1 FW Server TCU End-node 3 : FW ECU OBD (Switch) Tool 2 (DoIP) External DMZ Internal VLAN TCU: Telematics Control Unit FW: Firewall 2017/11/2 Japan Automotive Software Platform and Architecture 11/26 2-2-2. Ethernet Security Technologies Enumerate the security technologies related the Ethernet. 2017/11/2 Japan Automotive Software Platform and Architecture 12/26 2-2-3. Priority Consideration Items Priority consideration items are selected for in-vehicle Ethernet network. Decided by the interests of participating companies. The following 3 items are selected. VLAN, Filtering, SSL/TLS. Category Discussion items ・Usage of the VLAN as the network configuration. VLAN ・Routing using the VLAN. (consider domains) ・Scope of filter application as the in-vehicle systems. Filtering ・Performance of the automotive microcomputer / switch. Message ・This category is discussed by other WG in JASPAR. authentication So, exclude from discuss point in this WG. ・Investigate the specification and the compatibility with the in-vehicle systems. SSL/TLS ・Performance applied to automotive microcomputer. DPI ・Investigate the technologies. (what kind of attack can be detected) ・Feasibility based on required processing capacity MACSec, IPSec Performance in software / hardware. VLAN: Virtual LAN SSL: Secure Socket Layer TLS: Transport Layer Security DPI: Deep Packet Inspection 2017/11/2 Japan Automotive Software Platform and Architecture 13/26 2-3-1. Implementation Point of Filtering We discussed the implementation points of filtering. As a result, we presume the following points as implementation points. By matching between the filtering function set for each point and the received packet, it is selected whether the packet is passed or discarded End-node IVI/NAVI ECU End-node ( ) Gateway Switch Server TCU (switch) : End-node ECU OBD (Switch) Tool (DoIP) External DMZ Internal Filter function implementation point 2017/11/2 Japan Automotive Software Platform and Architecture 14/26 2-3-2. Security Technologies Applied to the Filtering Select the security technologies as a prerequisite to discuss the filtering function. Scope : Standardized or discussing technologies created by IEEE, IETF, etc. Security technologies Port-based VLAN Tagged VLAN Private VLAN Sub network based VLAN MAC filtering, Port security, IEEE802.1X, MAC authentication bypass Static MAC Table Dynamic ARP Inspection IP Source Guard IP filtering VLAN ACL NAT(Network Address Translation) NAPT(Network Address Port Translation) DDoS Open Threat Signaling (dots) OCSP (Online Certificate