车联网安全加密的实施和管理

张人杰，BlackberryQNX大中华区总经理ryConfidentialInternalOnlyryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.2ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.2通过各种方法黑掉某个22ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.3ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.3人驾驶是技术发展和市场要求的必然趋势，但在这美好愿景的背后存在着大3344 ©2016BlackBerry.AllRights ©2016BlackBerry.AllRightsReserved.4ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.5ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.5•Passivekeylessentry•Remotelinkapp•DSRCReceiver(V2V)•SteeringandbrakingECU•EngineandtransmissionECU•AirbagECU•LightingECU•VehicleaccesssystemECU•OBDII•USB•Bluetooth•Smartphone55ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.6ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.6AESkeysizeECCkeyRSAkeysizeKeysize(bits)size(bits)(bits)ratioCOMMERCIALGRADE2563,0721:12CLASSIFIED3847,680GRADE25651215,36066ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.7ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.7•全球第一个ECC商用加密方案供应商，多家OEM指定车联网安全加密供应商。•提供安全加密的管理和实施框架，从芯片、固件、操作系统到安全服务，完整的解决方案。•涵盖了对芯片内置加密引擎、密钥存储、硬件安全模块和可信赖平台模块的管理框架•特别适合汽车电子和车联网安全加密的管理和实施。77ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.8汽车卫星广播的安全加密应用范例ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.8•加密管理系统对订阅用户进行密钥的生成和管理•每个安全芯片有唯一的标识ID•在Radio被生产过程中被注入密钥•汽车生产厂商在生产汽车时安装Radio模块•只有授权的订阅用户才可以接收卫星广播88ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.9ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.9密钥，AugmentedbyAMS发布密钥:产管理:自动更新加密证书:远程监控:99车机开机运行系统初钥加密的模块清单，模块间握手互相验证合法。Certicom密钥注入Certicom资产管理ABS车机开机运行系统初钥加密的模块清单，模块间握手互相验证合法。Certicom密钥注入Certicom资产管理ABS生产线汽车电子系统模块-所有注入密钥的子模块被加密，数据不能被破解。-各子模块ECU间通信加密，持续互相验证对方是否合法。-Telematics通信加密。-中央服务器监控车辆单元状态，所有电子设备，让其成为废铁。车厂授权，被发布给供应商提供的ABS模块障ECU信息访问的安全举例：举例：ABS模块由生产线上的密钥服务器进行认证，确认装。 ©2016BlackBerry.AllRights ©2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.通过TrustAnchor来锁定汽车各个部件的访问控制ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.CANBUS传输信息的加密ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.CANBUS传输信息的加密ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.ryConfidentialInternalOnly©2016BlackBerry.AllRightsReserved.车联网安全加密的扩展应用TelematicsSSL/TLS/IPSec)RC2,RC4,RC5,RSA,ECIES等)httpstechnologyihscomServicesteardown-automotive-intelligence-servic