車聯(lián)網(wǎng)安全加密的實(shí)施和管理

張人杰，BlackberryQNX大中華區(qū)總經(jīng)理ryConfidentialInternalOnlyryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.2ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.2通過各種方法黑掉某個(gè)22ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.3ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.3人駕駛是技術(shù)發(fā)展和市場(chǎng)要求的必然趨勢(shì)，但在這美好愿景的背后存在著大3344 ?2016BlackBerry.AllRights ?2016BlackBerry.AllRightsReserved.4ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.5ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.5?Passivekeylessentry?Remotelinkapp?DSRCReceiver(V2V)?SteeringandbrakingECU?EngineandtransmissionECU?AirbagECU?LightingECU?VehicleaccesssystemECU?OBDII?USB?Bluetooth?Smartphone55ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.6ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.6AESkeysizeECCkeyRSAkeysizeKeysize(bits)size(bits)(bits)ratioCOMMERCIALGRADE2563,0721:12CLASSIFIED3847,680GRADE25651215,36066ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.7ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.7?全球第一個(gè)ECC商用加密方案供應(yīng)商，多家OEM指定車聯(lián)網(wǎng)安全加密供應(yīng)商。?提供安全加密的管理和實(shí)施框架，從芯片、固件、操作系統(tǒng)到安全服務(wù)，完整的解決方案。?涵蓋了對(duì)芯片內(nèi)置加密引擎、密鑰存儲(chǔ)、硬件安全模塊和可信賴平臺(tái)模塊的管理框架?特別適合汽車電子和車聯(lián)網(wǎng)安全加密的管理和實(shí)施。77ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.8汽車衛(wèi)星廣播的安全加密應(yīng)用范例ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.8?加密管理系統(tǒng)對(duì)訂閱用戶進(jìn)行密鑰的生成和管理?每個(gè)安全芯片有唯一的標(biāo)識(shí)ID?在Radio被生產(chǎn)過程中被注入密鑰?汽車生產(chǎn)廠商在生產(chǎn)汽車時(shí)安裝Radio模塊?只有授權(quán)的訂閱用戶才可以接收衛(wèi)星廣播88ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.9ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.9密鑰，AugmentedbyAMS發(fā)布密鑰:產(chǎn)管理:自動(dòng)更新加密證書:遠(yuǎn)程監(jiān)控:99車機(jī)開機(jī)運(yùn)行系統(tǒng)初鑰加密的模塊清單，模塊間握手互相驗(yàn)證合法。Certicom密鑰注入Certicom資產(chǎn)管理ABS車機(jī)開機(jī)運(yùn)行系統(tǒng)初鑰加密的模塊清單，模塊間握手互相驗(yàn)證合法。Certicom密鑰注入Certicom資產(chǎn)管理ABS生產(chǎn)線汽車電子系統(tǒng)模塊-所有注入密鑰的子模塊被加密，數(shù)據(jù)不能被破解。-各子模塊ECU間通信加密，持續(xù)互相驗(yàn)證對(duì)方是否合法。-Telematics通信加密。-中央服務(wù)器監(jiān)控車輛單元狀態(tài)，所有電子設(shè)備，讓其成為廢鐵。車廠授權(quán)，被發(fā)布給供應(yīng)商提供的ABS模塊障ECU信息訪問的安全舉例：舉例：ABS模塊由生產(chǎn)線上的密鑰服務(wù)器進(jìn)行認(rèn)證，確認(rèn)裝。 ?2016BlackBerry.AllRights ?2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.通過TrustAnchor來鎖定汽車各個(gè)部件的訪問控制ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.CANBUS傳輸信息的加密ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.CANBUS傳輸信息的加密ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly?2016BlackBerry.AllRightsReserved.車聯(lián)網(wǎng)安全加密的擴(kuò)展應(yīng)用TelematicsSSL/TLS/IPSec)RC2,RC4,RC5,RSA,ECIES等)httpstechnologyihscomServicesteardown-automotive-intelligence-servic