Abstract:

Under the service-oriented multi-domain electrical and electronic architecture， a large number of heterogeneous services are deployed in the vehicle for purposes such as autonomous driving， safety， comfort， and remote diagnosis. With the increasing interaction with the outside world， there are incremental security risks in the in-vehicle network. In this paper， a secure access control mechanism is proposed to prevent unauthenticated and unauthorized access requests to the in-vehicle domain controllers. Firstly， an access control architecture for attribute-based access control is proposed based on the analysis of security requirements of intelligent connected vehicle， which supports not only fine-grained and flexible authorization but also online permission detection based on per-stream filtering and policing. Secondly， a formal access control model is given in terms of a five-tuple， which mathematically describes the subject， object， policy and request， and proposes a hash-based policy evaluation engine. Finally， the secure access sequence guarantees confidentiality， integrity and availability of the access control process through session establishment and secure communication.

Key words: access control, SOME/IP, multi-domain EEA, security protocol