Abstract: In recent years, people have paid more and more attention to information security. The Internet of vehicles industry has developed rapidly. There are events called for by information security loopholes in the automobile market, causing significant economic losses and brand image damage. Automotive open system architecture has defined a component called secure onboard communication (SecOC), which introduces a set of communication encryption and verification standards for the on-board communication bus to protect the network communication between electronic control units in the vehicle. It can be said that SecOC is an effective information security scheme on the on-board network so far. SecOC test is mainly to test the function and performance of relevant components with SecOC module to verify whether the SecOC function of relevant components meets the requirements of SecOC network security design requirements. The SecOC automated test implementation scheme described in this article can automatically identify the changes in the requirements of the communication matrix according to the business needs, and testers do not need to update the test cases and related test scripts. The test script is written in CAPL, a C-like language developed by Vector company. Because it is widely used in the development of automotive electronics, it provides great convenience for the maintenance of the later test script. After the automated test of SecOC protocol is applied, the test system runs stably, the test time is shortened, and the tester can pay more attention to the software quality, thus greatly improving the test efficiency of SecOC protocol.

Key words: SecOC; Electronic control unit; Integrity; Authentication; Anti replay; Automated testing

摘要： 近年来信息安全越来越受到人们的重视，车联网行业迅速发展，汽车市场上出现因信 息安全漏洞而召唤的事件，造成重大的经济损失，品牌形象也遭受损害。汽车开放系统架构 组织定义了全称为车载安全通讯（SecOC）的组件，为车载通讯总线引入了一套通信加密和 验证的标准，用来保护车辆内电子控制单元之间的网络通信，可以说，SecOC 是目前为止车 载网络上一种有效的信息安全方案。SecOC 测试主要针对具备 SecOC 模块的相关零部件开展 功能、性能等测试，以验证相关零部件的 SecOC 功能是否符合 SecOC 网络安全设计需求规范 要求。论文描述的 SecOC 自动化测试实施方案，可以根据业务需要自动识别通信矩阵的需求 变更，测试人员不需要因此更新测试用例以及相关的测试脚本。测试脚本采用 Vector 公司开 发的类 C 语言 CAPL 语言编写，由于它在汽车电子开发中运行十分广泛，为后期的测试脚本 维护提供的极大的便利。SecOC 协议的自动化测试应用后，测试系统运行稳定，测试时间缩 短，测试人员可以更关注软件质量，从而大幅度提升了 SecOC 协议的测试效率。

关键词: SecOC；电子控制单元；完整性；可认证性；防重放性；自动化测试