IoT, Embedded and Hardware Security
Vehicle and CAN Bus Communication Security
We review message authentication and gateway separation in in-vehicle networks. We assess whether a path exists from the telematics unit to critical control units.
What it is
In-vehicle networks are structures where control units (ECUs) communicate over buses such as CAN. Most are designed without authenticating the message source. The review covers whether critical messages are authenticated and whether the gateway separates outward-facing units from critical ones. It also assesses if a path exists from the externally reachable telematics unit to units such as braking or steering.
Scope
- Authentication of critical messages on CAN and other in-vehicle networks
- Gateway separation of outward-facing units from critical ones
- Access paths from the telematics unit to critical control units
- Access control review through the diagnostic (OBD) interface
- Evaluation of message authentication and freshness implementation
The need
When organizations need it
- When a new vehicle or control unit design is assessed under cybersecurity engineering.
- When vehicle cybersecurity tests are required for type approval.
- Before a new telematics or infotainment unit connected to the vehicle is deployed.
Method
How we work
-
Mapping
We map the in-vehicle networks, units and gateways.
-
Testing
We assess authentication of critical messages and separation between units.
-
Path
We trace whether a path exists from an externally reachable unit to critical units.
Outcome
What you have at the end
You gain clear visibility of in-vehicle networks and unit separation. Recommendations to close paths from external access to critical control units are listed.
Frequently asked questions
Does CAN bus operate without authentication?
Classic CAN does not authenticate the message source. Protection relies on gateway separation and authentication added for critical messages.
Which standards do you refer to?
ISO/SAE 21434 is the basis for vehicle cybersecurity engineering, and UN R155 for type approval. For message authentication we refer to the AUTOSAR SecOC approach.
IoT, Embedded and Hardware Security
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting