Table of contents
1
Introduction and functional overview................................................................ 8
2
Acronyms, abbreviations and definitions........................................................ 10
2.1 Acronyms and abbreviations ....................................................................... 10
2.2
Definitions.................................................................................................... 10
3
Related documentation .................................................................................. 12
3.1
Input documents.......................................................................................... 12
3.2
Related standards and norms ..................................................................... 13
3.3
Related specification ................................................................................... 13
4
Constraints and assumptions......................................................................... 14
4.1 Applicability to car domains ......................................................................... 14
5
Dependencies to other modules .................................................................... 15
5.1
Dependencies to PduR................................................................................ 15
5.2
Dependencies to CSM................................................................................. 15
5.3
Dependencies to the RTE ........................................................................... 15
6
Requirements traceability............................................................................... 17
7
Functional specification.................................................................................. 29
7.1 Specification of the security solution............................................................ 29
7.1.1
Basic entities of the security solution .................................................... 30
7.1.2 Authentication of I-PDUs....................................................................... 39
7.1.3 Verification of I-PDUs............................................................................ 40
7.1.4 Adaptation in case of asymmetric approach ......................................... 42
7.2
Relationship to PduR................................................................................... 43
7.3
Initialization.................................................................................................. 44
7.4 Authentication of outgoing PDUs................................................................. 44
7.4.1 Authentication during direct transmission ............................................. 46
7.4.2 Authentication during triggered transmission ........................................ 48
7.4.3 Authentication during transport protocol transmission .......................... 50
7.4.4
Error handling and cancelation of transmission .................................... 51
7.5 Verification of incoming PDUs ..................................................................... 52
7.5.1 Verification during bus interface reception ............................................ 54
7.5.2 Verification during transport protocol reception..................................... 55
7.5.3 Skipping Authentication for Secured I-PDUs at SecOC........................ 57
7.5.4
Error handling and discarding of reception ........................................... 57
7.6 Gateway functionality .................................................................................. 59
7.7
Error Classification ...................................................................................... 59
7.7.1
Development Errors .............................................................................. 59
7.7.2
Runtime Errors...................................................................................... 59
7.7.3 Transient Faults .................................................................................... 60
7.7.4
Production Errors .................................................................................. 60
7.7.5
Extended Production Errors.................................................................. 60
7.8
Error detection............................................................................................. 60
7.9
Error notification .......................................................................................... 60
7.10
Security Profiles ....................................................................................... 61
7.10.1
Secured area within a Pdu................................................................. 61
7.10.2
Overview of security profiles.............................................................. 61
7.10.3
SecOC Profile 1 (or 24Bit-CMAC-8Bit-FV) ........................................ 62
7.10.4
SecOC Profile 2 (or 24Bit-CMAC-No-FV).......................................... 62
7.10.5
SecOC Profile 3 (or JASPAR) ........................................................... 63
8
API specification ............................................................................................ 64
8.1
Imported types............................................................................................. 64
8.2 Type definitions ........................................................................................... 64
8.2.1 SecOC_ConfigType .............................................................................. 64
8.2.2 SecOC_StateType................................................................................ 64
8.3
Function definitions...................................................................................... 65
8.3.1 SecOC_Init............................................................................................ 65
8.3.2 SecOC_DeInit....................................................................................... 65
8.3.3 SecOC_GetVersionInfo ........................................................................ 66
8.3.4 SecOC_IfTransmit ................................................................................ 66
8.3.5 SecOC_TpTransmit .............................................................................. 66
8.3.6 SecOC_CancelReceive ........................................................................ 67
8.3.7 SecOC_IfCancelTransmit ..................................................................... 67
8.3.8 SecOC_TpCancelTransmit ................................................................... 68
8.3.9 SecOC_ChangeParameter................................................................... 68
8.3.10
Optional Interfaces............................................................................. 69
8.4 Call-back notifications.................................................................................. 71
8.4.1 SecOC_RxIndication............................................................................. 71
8.4.2 SecOC_TpRxIndication ........................................................................ 71
8.4.3 SecOC_TxConfirmation ........................................................................ 71
8.4.4 SecOC_TpTxConfirmation.................................................................... 72
8.4.5 SecOC_TriggerTransmit ....................................................................... 72
8.4.6 SecOC_CopyRxData ............................................................................ 73
8.4.7 SecOC_CopyTxData ............................................................................ 73
8.4.8 SecOC_StartOfReception..................................................................... 75
8.4.9 CSM callback interfaces ....................................................................... 75
8.5 Callout Definitions........................................................................................ 76
8.5.1 SecOC_GetRxFreshness ..................................................................... 76
8.5.2 SecOC_GetRxFreshnessAuthData....................................................... 77
8.5.3 SecOC_GetTxFreshness...................................................................... 77
8.5.4 SecOC_GetTxFreshnessTruncData ..................................................... 78
8.5.5 SecOC_SPduTxConfirmation ............................................................... 79
8.6 Scheduled functions .................................................................................... 79
8.6.1 SecOC_MainFunctionRx ...................................................................... 79
8.6.2 SecOC_MainFunctionTx....................................................................... 80
8.7
Expected Interfaces..................................................................................... 81
8.7.1
Mandatory Interfaces ............................................................................ 81
8.7.2 Optional Interfaces................................................................................ 81
8.7.3 Configurable Interfaces......................................................................... 82
8.8 Service Interfaces........................................................................................ 83
8.8.1 Overview............................................................................................... 83
8.8.2 Sender Receiver Interfaces .................................................................. 83
8.8.3 Client Server Interfaces ........................................................................ 84
8.8.4
Ports ..................................................................................................... 91
8.8.5
Implementation Data Types .................................................................. 92
9
Sequence diagrams ....................................................................................... 95
9.1 Authentication of outgoing PDUs................................................................. 96
9.1.1 Authentication during direct transmission ............................................. 96
9.1.2 Authentication during triggered transmission ........................................ 97
9.1.3 Authentication during transport protocol transmission .......................... 98
9.2 Verification of incoming PDUs ................................................................... 100
9.2.1 Verification duringdirect reception....................................................... 100
9.2.2 Verification during transport protocol reception................................... 101
9.3
Re-authentication Gateway ....................................................................... 102
9.4
Freshness Handling................................................................................... 103
10
Configuration specification........................................................................... 104
10.1
Containers and configuration parameters .............................................. 104
10.1.1
SecOC............................................................................................. 106
10.1.2
SecOCGeneral ................................................................................ 108
10.1.3
SecOCSameBufferPduCollection .................................................... 112
10.1.4
SecOCRxPduProcessing................................................................. 112
10.1.5
SecOCRxSecuredPduLayer............................................................ 117
10.1.6
SecOCRxSecuredPdu..................................................................... 118
10.1.7
SecOCRxSecuredPduCollection ..................................................... 119
10.1.8
SecOCRxCryptographicPdu ............................................................ 120
10.1.9
SecOCRxAuthenticPduLayer .......................................................... 120
10.1.10 SecOCRxAuthenticPdu ................................................................... 121
10.1.11 SecOCTxPduProcessing................................................................. 122
10.1.12 SecOCTxAuthenticPduLayer........................................................... 125
10.1.13 SecOCTxSecuredPduLayer ............................................................ 127
10.1.14 SecOCTxSecuredPdu ..................................................................... 127
10.1.15 SecOCTxSecuredPduCollection...................................................... 128
10.1.16 SecOCTxAuthenticPdu.................................................................... 128
10.1.17 SecOCTxCryptographicPdu ............................................................ 129
10.1.18 SecOCUseMessageLink.................................................................. 130
10.1.19 SecOCTxPduSecuredArea.............................................................. 131
10.1.20 SecOCRxPduSecuredArea ............................................................. 132
10.2
Published Information............................................................................. 132
11
Annex A: Application hints for the development of SW-C Freshness Value
Manager....................................................................................................... 134
11.1
Overview of freshness value construction.............................................. 134
11.2
Freshness Value Based on Single Freshness Counter.......................... 134
11.3
Freshness Value Based on Single Freshness Timestamp..................... 135
11.4
Freshness Value Based on Multiple Freshness Counters...................... 137
11.4.1
Definition of Freshness Value.......................................................... 139
11.4.2
Synchronization Message Format ................................................... 143
11.4.3
Processing of FV Management Master............................................ 143
11.4.4
Processing of Slave ECUs............................................................... 144
A Not applicable requirements................................................................................ 151
翻译