主办：陕西省汽车工程学会
ISSN 1671-7988  CN 61-1394/TH
创刊：1976年
汽车实用技术

汽车实用技术 ›› 2024, Vol. 49 ›› Issue (15): 18-25,73.DOI: 10.16638/j.cnki.1671-7988.2024.015.004

• 智能网联汽车 • 上一篇    

基于可信执行环境的汽车域控系统安全研究

徐传康 1，李忠月 2，刘天宇 2，种统洪 2，杨发雪*2   

  1. 1.工业和信息化部装备工业发展中心；2.中汽智联技术有限公司
  • 发布日期:2024-08-12
  • 通讯作者: 杨发雪
  • 作者简介:徐传康（1990－），男，硕士，工程师，研究方向为车辆安全，E-mail:xuchuankang@eidc.org.cn。 通信作者：杨发雪（1995－），女，硕士，助理工程师，研究方向为网络安全，E-mail:yangfaxue@catarc.ac.cn。

Research on Security of Automotive Domain Control System Based on Trusted Execution Environment

XU Chuankang1, LI Zhongyue2, LIU Tianyu2, CHONG Tonghong2, YANG Faxue*2   

  1. 1.Ministry of Industry and Information Technology Equipment Industry Development Center; 2.CATARC Intelligent and Connected Technology Company Limited
  • Published:2024-08-12
  • Contact: YANG Faxue

PDF

摘要： 随着汽车技术的不断发展，汽车系统的安全性问题日益突出。传统的汽车系统存在着 许多潜在的安全隐患，如远程攻击、车辆数据泄露和未经授权的访问等。为了解决这些问题， 研究人员和汽车制造商开始关注可信执行环境的应用。可信执行环境是一种安全的计算环 境，它提供了硬件和软件级别的安全保护，可以保护敏感数据和执行关键任务。在汽车域控 制器中引入可信执行环境可以有效地提高系统的安全性和可靠性。文章旨在探究基于可信执 行环境的汽车域控系统的安全性，研究现有的可信执行环境技术，并分析其在汽车领域的应 用价值，以及探讨可信执行环境对汽车域控制器系统安全性的影响。通过深入研究在汽车领 域下可信执行环境的应用，可以为汽车制造商和研究人员提供有关如何提高汽车域控制器系 统安全性的指导和建议。最终目标是构建更安全、更可靠的汽车系统，保护用户的隐私和数 据安全。

关键词: 可信执行环境；纵深防御；智能网联汽车；汽车域控系统安全

Abstract: With the continuous development of automotive technology, the safety issues of automotive systems are becoming increasingly prominent. Traditional automotive systems have many potential security risks, such as remote attacks, vehicle data leaks, and unauthorized access. To address these issues, researchers and car manufacturers have begun to focus on the application of trusted execution environments. A trusted execution environment is a secure computing environment that provides hardware and software level security protection to protect sensitive data and perform critical tasks. Introducing a trusted execution environment into the automotive domain controller can effectively improve the security and reliability of the system. The paper aims to explore the security of automotive domain control systems based on trusted execution environments. This paper studies existing trusted execution environment technologies and analyzes their application value in the automotive field, and discusses the impact of trusted execution environments on the security of automotive domain controller systems. By conducting in-depth research on the application of trusted execution environments in the automotive field, it can provide guidance and suggestions for automobile manufacturers and researchers on how to improve the security of automotive domain controller systems. The ultimate goal is to build a safer and more reliable automotive system, protecting user privacy and data security.

Key words: Trusted execution environment; Defense in depth; Intelligent connected vehicles; Security of automotive domain controller systems