real-time integrity for vehicle black box system

13

Upload: hoangnga

Post on 30-Dec-2016

215 views

Category:

Documents


2 download

TRANSCRIPT

  • 19 6 , 2009. 12

    *

    , ,

    Real-time Integrity for Vehicle Black Box System*

    Yungyu Kim, Bum Han Kim, Dong Hoon Lee

    Graduate School of Information Management and Security, Korea University

    , ,

    .

    .

    . ,

    , .

    .

    , .

    ABSTRACT

    Recently, a great attention has been paid to a vehicle black box device in the auto markets since it provides an accident

    re-construction based on the data which contains audio, video, and some meaningful driving informations. It is expected that

    the device will get to promote around commercial vehicles and the market will greatly grow within a few years. Drivers who

    equips the device in their car believes that it can find the origin of an accident and help an objective judge. Unfortunately,

    the current one does not provide the integrity of the data stored in the device. That is the data can be forged or modified by

    outsider or insider adversary because it is just designed to keep the latest data produced by itself. This fact cause a great

    concern in car insurance and law enforcement, since the unprotected data cannot be trusted. To resolve the problem, in this

    paper, we propose a novel real-time integrity protection scheme for vehicle black box device. We also present the evaluation

    results by simulation using our software implementation.

    Keywords: Vehicle Black Box, Real-time Integrity, Integrity Protection

    (2009 10 7), (2009 11 9),

    (2009 11 30)

    * IT

    . (2009-F056

    -01, Car- )

    , [email protected]

    , [email protected]

  • 50

    I.

    ,

    , ,

    .

    (EDR,

    Event Data recorder)

    .

    .

    .

    .

    , ,

    2011 .

    .

    6

    6000( 120 ) 10

    ( 200 )

    [1]. ,

    ,

    .

    .

    .

    (DOT, Department of Transportation)

    2004 , (NHTSA,

    National Highway Traffic Safety Admin-

    istration) 2008 9

    [2],

    (SAE, Society of Automotive

    Engineers) (IEEE, Insti-

    tute of Electrical and Electronics Engineers)

    [3,4].

    (UNECE, United

    Nations Economic Commission for Europe)

    , (EU,

    European Union) 2009 EU

    .

    2008

    , ,

    2008

    [5].

    ,

    . ,

    ,

    .

    .

    .

    ,

    .

    .

    .

    .

    .

    .

    . 2

    , 3

    , 4

    . 5

    , 6

    , 7

    .

    II.

    ,

    .

  • (2009. 12) 51

    [ 1] MPEG

    2.1

    (DVR, Digital Video Recorder)

    .

    .

    . GPS(Global

    Positioning System)

    , , , ,

    .

    .

    1990 GM,

    ECU(Electronic Control Unit)

    EDR(Event Data Recorder)

    [6]. 1

    ,

    ,

    2

    . 2

    .

    2.2

    .

    , .

    ,

    .

    ,

    .

    .

    ,

    . (Integrity)

    . ,

    ,

    .

    .

    .

    2.3 MPEG

    .

    .

    .

    .

    .

    DV MPEG .

    MPEG

    . [ 1] MPEG

    [7]. Picture

    . I,

    B, P 3 I

    . I

    .

    .

  • 52

    2.4

    .

    .

    2.4.1 Vehicle Black Box System

    Abdallah Kassem Vehicle Black

    Box System[8]

    . ,

    .

    (Speed Sensor, Water Sensor, Lights Sensor

    ) .

    EEPROM

    . EEPROM

    .

    2.4.2

    (A Study of Using

    the Cars Black Box to generate Real-time

    Forensic Data)[9]

    IPv6 ,

    ,

    . IP

    IP

    .

    ,

    IP IP

    . IP

    IP

    . ,

    .

    2.4.3

    (A Design of Car Video

    Black box on Mobile Device)[10]

    GPS

    .

    (, DVR )

    . GPS

    ,

    .

    .

    .

    .

    .

    ,

    .

    III.

    .

    ,

    ,

    .

    3.1

    .

    1)

    .

    .

    2)

  • (2009. 12) 53

    , .

    ,

    .

    3)

    .

    .

    3.2

    3.2.1

    .

    3.2.2

    .

    3.2.3

    .

    3.2.4

    .

    3.2.5

    .

    3.2.6

    .

    3.2.7

    .

    3.3

    3.3.1

    ,

    .

    (: , )

    ,

    .

    3.3.2

    .

    .

    3.3.3

    .

    (: , )

    .

    3.3.4

    ,

    .

  • 54

    [ 2]

    [ 3]

    . [ 2]

    , ,

    .

    .

    IV.

    .

    .

    [ 1] .

    TTP 3

    1

    2

    [ 1]

    4.1

    .

    1)

    3 (TTP, Third Trust

    Party)(: )

    .

    2) TTP

    .

    3) ,

    .

    4) TTP

    .

    5)

    .

    6) TTP

    TTP .

    4.2

    [ 3]

    .

    1) ,

    ,

    .

    2) (:

    , ) ,

    .

  • (2009. 12) 55

    [ 4]

    [ 5]

    1 2

    [ 2]

    3)

    .

    4)

    ,

    .

    5)

    [ 4]

    .

    6)

    .

    7)

    .

    8) (Initial

    Authentication Data)

    .

    9) 2 2

    .

    10) 1 2

    .

    4.3

    [ 5]

    i (Block Data) .

    (Integrity Verification Data) .

    ,

    .

    4.3.1

    [ 2]

    . 1

    2 . 1

    .

    ,

    . 2

    .

    .

    .

    4.3.2

    [ 3]

    .

    [ 4] .

    1)

    1

    .

    2) ,

  • 56

    :

    1: for to

    2: if then

    3:

    4:

    5: else

    6:

    7: delete 8: 9: end if

    10: 11: 12: end for

    [ 3]

    [ 4]

    1

    . (Initial

    Authentication Data) .

    3) .

    4) 1

    1 1

    2

    .

    5) 2 1

    2 2 ,

    . ,

    .

    6) 1

    1

    , 2

    1 1

    .

    7) 1

    1 . ,

    .

    8)

    . .

    9) 2

    2 . ,

    .

    10) (6)~(9)

    . [ 4] .

    TTP

    [ 5] . TTP

    ,

    .

    4.3.3

    I

    (Intra frame)

    (2.3 ).

    . I

    .

  • (2009. 12) 57

    : , , : True or False

    1:

    2: if ? then

    3: for to

    4: if then

    5:

    6: else

    7:

    8: 9: end if

    10: 11: 12: if and then13: return False

    14: end if

    15: if and then16: return False

    17: end if

    18: end for

    19: return True

    20: else

    21: return False

    22: end if

    [ 5]

    [ 6]

    .

    .

    V.

    .

    ,

    .

    5.1

    .

    1)

    . TTP

    .

    2) ,

    . .

    3)

    . .

    4)

    .

    .

    ,

    , (Pre-image)

    .

    [ 6]

    .

    .

    .

  • 58

    [ 7]

    1 2

    TTP

    0 1

    [ 8]

    .

    5.2

    .

    .

    .

    5.3

    5.3.1

    4.3.3

    .

    .

    5.3.2

    .

    . .

    5.4

    [ 7] .

    1)

    (1)

    2) TTP

    (2)

    .

    .

    .

    5.5

    [ 8] .

    ,

    , .

    .

    VI.

  • (2009. 12) 59

    CPU Pentium D 3.0G Pentium D 2.8G Core2Duo 2.0G Core2Quad 2.4G

    RAM 2G 2G 2G 4G

    OSWindows XP

    Professional SP2

    Windows XP

    Professional SP3

    Windows XP

    Professional SP3

    Windows Vista

    Enterprise K SP2

    30.02 31.09 72.48 37.50

    [ 9] :

    [ 6]

    (a) (b)

    [ 7] (a)

    (b)

    .

    ,

    ,

    4 .

    RSA 1024bits-PSS Encoding

    SHA-1 .

    6.1

    720MB

    .

    100KB .

    [ 9] .

    720MB 1

    . 1

    .

    6.2

    100MB

    .

    ,

    , 2

    3

    . 1

    . [ 6] .

    .

    6.3

    .

    100MB

    . [

    7] (a)

    (b) .

    CPU Pentium D 3.0GHz,

    RAM 2G, OS Windows XP Professional SP2

    ,

    Osprey-210 AVStream Video Device.

    [ 10] .

    .

  • 60

    1KB 2KB 4KB 8KB 16KB 32KB 64KB 128KB

    102400 51200 25600 12800 6400 3200 1600 800

    152.51 153.73 153.64 153.02 152.41 153.39 153.13 153.76

    [ 10] :

    1KB 2KB 4KB 8KB 16KB 32KB 64KB 128KB

    102400 51200 25600 12800 6400 3200 1600 800

    6.89 6.65 5.90 6.03 6.01 5.95 5.71 5.63

    [ 11] :

    6.4

    .

    [ 11] .

    .

    25

    .

    . TTP

    .

    6.5

    .

    .

    VII.

    .

    .

    .

    .

    .

    .

    .

    ,

    .

    .

    [1] http://thumb.paoin.com/paoweb/common/flash/

    ArticleViewer02.swf?CNo=60204159

    [2] NHTSA EDR Working Group, Event Data

    Recorders Summary of Findings, NHTSA,

    USDOT, May 2002.

    [3] IEEE 1616 Working Group, Motor Vehicle Event

    Data Recorders, IEEE, Sep. 2004.

    [4] VEDI Technical Committee, SAE J1698: Vehicle

    Event Data Interface-Vehicular Output Data

  • (2009. 12) 61

    (Yungyu Kim)

    2008 2:

    2008 3:

    , VANET, ,

    (Bum Han Kim)

    2004 2:

    2006 2:

    2008 3:

    , VANET, USIM , ,

    (Dong Hoon Lee)

    1983 8:

    1987 12: Oklahoma University

    1992 5: Oklahoma University

    1993 31997 2:

    1997 32001 2:

    2001 3:

    , , USN, , , PET

    Definition, SAE, Feb. 2005.

    [5] ,

    , , 25(3), pp. 29-43, 2007

    6.

    [6] , -

    , , , 1, p.

    73, 2009 1.

    [7] http://www.mpeg.org/

    [8] A. Kassem, R. Jabr, G. Salamouni, and Z.K.

    Maalouf, Vehicle Black Box System, IEEE,

    SysCon-IEEE International Systems Conference,

    pp. 1-6, Apr. 2008.

    [9] , ,

    ,

    , 13(1), pp. 253-260, 2008 1.

    [10] , , ,

    ,

    , pp. 364-367, 2009 6.