Table of contents
1
Introduction and functional overview................................................................ 8
2
Acronyms, abbreviations and definitions........................................................ 10
2.1 Acronyms and abbreviations ....................................................................... 10
2.2
Definitions.................................................................................................... 10
3
Related documentation .................................................................................. 12
3.1
Input documents.......................................................................................... 12
3.2
Related standards and norms ..................................................................... 13
3.3
Related specification ................................................................................... 13
4
Constraints and assumptions......................................................................... 14
4.1 Applicability to car domains ......................................................................... 14
5
Dependencies to other modules .................................................................... 15
5.1
Dependencies to PduR................................................................................ 15
5.2
Dependencies to CSM................................................................................. 15
5.3
Dependencies to the RTE ........................................................................... 15
6
Requirements traceability............................................................................... 17
7
Functional specification.................................................................................. 29
7.1 Specification of the security solution............................................................ 29
7.1.1
Basic entities of the security solution .................................................... 30
7.1.2 Authentication of I-PDUs....................................................................... 39
7.1.3 Verification of I-PDUs............................................................................ 40
7.1.4 Adaptation in case of asymmetric approach ......................................... 42
7.2
Relationship to PduR................................................................................... 43
7.3
Initialization.................................................................................................. 44
7.4 Authentication of outgoing PDUs................................................................. 44
7.4.1 Authentication during direct transmission ............................................. 46
7.4.2 Authentication during triggered transmission ........................................ 48
7.4.3 Authentication during transport protocol transmission .......................... 50
7.4.4
Error handling and cancelation of transmission .................................... 51
7.5 Verification of incoming PDUs ..................................................................... 52
7.5.1 Verification during bus interface reception ............................................ 54
7.5.2 Verification during transport protocol reception..................................... 55
7.5.3 Skipping Authentication for Secured I-PDUs at SecOC........................ 57
7.5.4
Error handling and discarding of reception ........................................... 57
7.6 Gateway functionality .................................................................................. 59
7.7
Error Classification ...................................................................................... 59
7.7.1
Development Errors .............................................................................. 59
7.7.2
Runtime Errors...................................................................................... 59
7.7.3 Transient Faults .................................................................................... 60
7.7.4
Production Errors .................................................................................. 60
7.7.5
Extended Production Errors.................................................................. 60
7.8
Error detection............................................................................................. 60
7.9
Error notification .......................................................................................... 60
7.10
Security Profiles ....................................................................................... 61
7.10.1
Secured area within a Pdu................................................................. 61
7.10.2
Overview of security profiles.............................................................. 61
7.10.3
SecOC Profile 1 (or 24Bit-CMAC-8Bit-FV) ........................................ 62
7.10.4
SecOC Profile 2 (or 24Bit-CMAC-No-FV).......................................... 62
7.10.5
SecOC Profile 3 (or JASPAR) ........................................................... 63
8
API specification ............................................................................................ 64
8.1
Imported types............................................................................................. 64
8.2 Type definitions ........................................................................................... 64
8.2.1 SecOC_ConfigType .............................................................................. 64
8.2.2 SecOC_StateType................................................................................ 64
8.3
Function definitions...................................................................................... 65
8.3.1 SecOC_Init............................................................................................ 65
8.3.2 SecOC_DeInit....................................................................................... 65
8.3.3 SecOC_GetVersionInfo ........................................................................ 66
8.3.4 SecOC_IfTransmit ................................................................................ 66
8.3.5 SecOC_TpTransmit .............................................................................. 66
8.3.6 SecOC_CancelReceive ........................................................................ 67
8.3.7 SecOC_IfCancelTransmit ..................................................................... 67
8.3.8 SecOC_TpCancelTransmit ................................................................... 68
8.3.9 SecOC_ChangeParameter................................................................... 68
8.3.10
Optional Interfaces............................................................................. 69
8.4 Call-back notifications.................................................................................. 71
8.4.1 SecOC_RxIndication............................................................................. 71
8.4.2 SecOC_TpRxIndication ........................................................................ 71
8.4.3 SecOC_TxConfirmation ........................................................................ 71
8.4.4 SecOC_TpTxConfirmation.................................................................... 72
8.4.5 SecOC_TriggerTransmit ....................................................................... 72
8.4.6 SecOC_CopyRxData ............................................................................ 73
8.4.7 SecOC_CopyTxData ............................................................................ 73
8.4.8 SecOC_StartOfReception..................................................................... 75
8.4.9 CSM callback interfaces ....................................................................... 75
8.5 Callout Definitions........................................................................................ 76
8.5.1 SecOC_GetRxFreshness ..................................................................... 76
8.5.2 SecOC_GetRxFreshnessAuthData....................................................... 77
8.5.3 SecOC_GetTxFreshness...................................................................... 77
8.5.4 SecOC_GetTxFreshnessTruncData ..................................................... 78
8.5.5 SecOC_SPduTxConfirmation ............................................................... 79
8.6 Scheduled functions .................................................................................... 79
8.6.1 SecOC_MainFunctionRx ...................................................................... 79
8.6.2 SecOC_MainFunctionTx....................................................................... 80
8.7
Expected Interfaces..................................................................................... 81
8.7.1
Mandatory Interfaces ............................................................................ 81
8.7.2 Optional Interfaces................................................................................ 81
8.7.3 Configurable Interfaces......................................................................... 82
8.8 Service Interfaces........................................................................................ 83
8.8.1 Overview............................................................................................... 83
8.8.2 Sender Receiver Interfaces .................................................................. 83
8.8.3 Client Server Interfaces ........................................................................ 84
8.8.4
Ports ..................................................................................................... 91
8.8.5
Implementation Data Types .................................................................. 92
9
Sequence diagrams ....................................................................................... 95
9.1 Authentication of outgoing PDUs................................................................. 96
9.1.1 Authentication during direct transmission ............................................. 96
9.1.2 Authentication during triggered transmission ........................................ 97
9.1.3 Authentication during transport protocol transmission .......................... 98
9.2 Verification of incoming PDUs ................................................................... 100
9.2.1 Verification duringdirect reception....................................................... 100
9.2.2 Verification during transport protocol reception................................... 101
9.3
Re-authentication Gateway ....................................................................... 102
9.4
Freshness Handling................................................................................... 103
10
Configuration specification........................................................................... 104
10.1
Containers and configuration parameters .............................................. 104
10.1.1
SecOC............................................................................................. 106
10.1.2
SecOCGeneral ................................................................................ 108
10.1.3
SecOCSameBufferPduCollection .................................................... 112
10.1.4
SecOCRxPduProcessing................................................................. 112
10.1.5
SecOCRxSecuredPduLayer............................................................ 117
10.1.6
SecOCRxSecuredPdu..................................................................... 118
10.1.7
SecOCRxSecuredPduCollection ..................................................... 119
10.1.8
SecOCRxCryptographicPdu ............................................................ 120
10.1.9
SecOCRxAuthenticPduLayer .......................................................... 120
10.1.10 SecOCRxAuthenticPdu ................................................................... 121
10.1.11 SecOCTxPduProcessing................................................................. 122
10.1.12 SecOCTxAuthenticPduLayer........................................................... 125
10.1.13 SecOCTxSecuredPduLayer ............................................................ 127
10.1.14 SecOCTxSecuredPdu ..................................................................... 127
10.1.15 SecOCTxSecuredPduCollection...................................................... 128
10.1.16 SecOCTxAuthenticPdu.................................................................... 128
10.1.17 SecOCTxCryptographicPdu ............................................................ 129
10.1.18 SecOCUseMessageLink.................................................................. 130
10.1.19 SecOCTxPduSecuredArea.............................................................. 131
10.1.20 SecOCRxPduSecuredArea ............................................................. 132
10.2
Published Information............................................................................. 132
11
Annex A: Application hints for the development of SW-C Freshness Value
Manager....................................................................................................... 134
11.1
Overview of freshness value construction.............................................. 134
11.2
Freshness Value Based on Single Freshness Counter.......................... 134
11.3
Freshness Value Based on Single Freshness Timestamp..................... 135
11.4
Freshness Value Based on Multiple Freshness Counters...................... 137
11.4.1
Definition of Freshness Value.......................................................... 139
11.4.2
Synchronization Message Format ................................................... 143
11.4.3
Processing of FV Management Master............................................ 143
11.4.4
Processing of Slave ECUs............................................................... 144
A Not applicable requirements................................................................................ 151
翻译
2首字母缩写词、缩略语和定义................................................... .............................. 10
7.1.1安全解决方案的基本实体................................... ......................... 30
7.1.4非对称进近情况下的适应................................... ...... 42
7.4.1直接传输时的认证................................................... ............. 46
7.4.2触发传输期间的认证................................................................ ............ 48
7.4.3传输协议传输过程中的认证................................................................ 50
7.4.4错误处理和传输取消................................................... .... 51
7.5.1总线接口接收期间的验证................................... ............. 54
7.5.2传输协议接收期间的验证................................... .... 55
7.5.3在 SecOC 上跳过安全 I-PDU 的身份验证.................................................... 57
7.5.4错误处理和接收丢弃................................... ............. 57
7.10.1 Pdu 内的安全区域................................... ...................................... 61
7.10.3 SecOC Profile 1（或 24Bit-CMAC-8Bit-FV）....................... ..................... 62
7.10.4 SecOC Profile 2（或 24Bit-CMAC-No-FV）....................... ...................... 62
7.10.5 SecOC Profile 3（或 JASPAR）.......................... ..................................... 63
9.1.1直接传输时的认证................................................................ ............. 96
9.1.2触发传输期间的认证................................................................ ...... 97
9.1.3传输协议传输过程中的身份验证................................................... 98
9.2.1直接接收期间的验证................................................... ......................... 100
9.2.2传输协议接收期间的验证................................... .... 101
10配置规范................................................... .............................. 104
10.1容器和配置参数................................................... ............. 104
10.1.4 SecOCRxPdu 处理................................... ................................... 112
10.1.12 SecOCTxAuthenticPduLayer ................................... ...................... 125
10.1.17 SecOCTxCryptographicPdu ...................................... ............... 129
11附件A：SW-C Freshness Value Manager 134开发应用提示
11.1新鲜度值构建概述................................................... ............. 134
11.2基于单个新鲜度计数器的新鲜度值...................................................... 134
11.3基于单个新鲜度时间戳的新鲜度值................................................ 135
11.4基于多个新鲜度计数器的新鲜度值.......................... 137
11.4.2同步报文格式................................................... ..................... 143
574
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
