On-the-fly secure group communication on CAN bus

Abstract

vatiCAN is a data link protocol which supports authentication and integrity for critical messages, thwarting masquerade and replay attacks on in-vehicle networks, such as CAN bus. Our extension to vatiCAN (called vatiCAN-G) supports on-the-fly secure group communications, improving security through separate 32-bit authentication for group mask, and 64-bit authentication for data. Experimental results from running vatiCAN-G on small CAN networks with Atmel AVR-based microprocessors indicate limited overhead compared to vatiCAN, in the ms range.