Asymmetric Key-Based Secure ECU Replacement Without PKI

Many threat cases for in-vehicle systems have been reported and various methods to enhance automotive security have been proposed in recent years. One of the methods proposed is a means for detecting possible CAN message spoofing by attaching a message authentication code (MAC) to controller area network (CAN) messages. It is expected, however, that MAC generation keys are compromised during the replacement of ECUs if malicious dealers or repair shops are attackers. For this reason, a secure ECU replacement method is proposed in this paper.