Abstract: An electronic control unit (ECU), or node, is configured to use a single key for generating requests from a security peripheral for a MAC. The security peripheral includes the stored shared key. The security peripheral may further include a policy enabling it to detect if a request from the V-ECU is valid, in which case it generates a MAC. The security peripheral is also used to store information in a MAC Generate Allow List (MGAL). In some embodiments, the receiving nodes in a network receive data based on a security peripheral's response to a transmit nodes requests for a MAC. The receiving nodes use this knowledge to avoid being spoofed.

Abstract: A system comprises a computer including a processor and a memory. The memory includes instructions such that the processor is programmed to: receive, at a device driver, an Ethernet frame from an Automotive Open System Architecture (AUTOSAR) communication stack, determine, at the device driver, whether the Ethernet frame is a spoofed Ethernet frame, and transmit a cancelation command to at least one layer of the AUTOSAR communication stack when the device driver determines the Ethernet frame is spoofed.

Abstract: A vehicle communication test system is described that includes a diagnostic computer having a computer program product stored thereon. The program product includes a non-transitory computer-readable medium for the diagnostic computer that includes an application software program stored on the computer-readable medium that includes instructions adapted to validate encrypted messages transmitted over a network connection in a vehicle. The instructions include: performing an initialization sequence that includes receiving initialization data at the diagnostic computer, wherein the initialization data is associated with a plurality of vehicle system modules (VSMs) which are coupled together via the vehicle network connection; receiving as a data input at the diagnostic computer an encrypted message transmitted over the network connection; and based on the initialization data, determining at the diagnostic computer whether the received encrypted message is valid.

Abstract: A vehicle communication test system is described that includes a diagnostic computer having a computer program product stored thereon. The program product includes a non-transitory computer-readable medium for the diagnostic computer that includes an application software program stored on the computer-readable medium that includes instructions adapted to validate encrypted messages transmitted over a network connection in a vehicle. The instructions include: performing an initialization sequence that includes receiving initialization data at the diagnostic computer, wherein the initialization data is associated with a plurality of vehicle system modules (VSMs) which are coupled together via the vehicle network connection; receiving as a data input at the diagnostic computer an encrypted message transmitted over the network connection; and based on the initialization data, determining at the diagnostic computer whether the received encrypted message is valid.