Modern vehicles integrate Internet of Things (IoT) components to bring value-added services to both drivers and passengers. These components communicate with the external world through different types of interfaces including the on-board diagnostics (OBD-II) port, a mandatory interface in all vehicles in the United States and Europe. While this transformation has driven significant advancements in efficiency and safety, it has also opened a door to a wide variety of cyberattacks, as the architectures of vehicles were never designed with external connectivity in mind, and accordingly, security has never been pivotal in the design. As standardized, the OBD-II port allows not only direct access to the internal network of the vehicle but also installing software on the Electronic Control Units (ECUs). While this privilege, historically, is achieved through physical access on the underlying port using a dedicated tool, remote access is recently supported in many modern vehicles, i.e., self-driving ones, and via OBD-II dongles, making the OBD-II port the most significant automotive interface that has to be secured. Motivated by various recent attacks and vulnerability analyses of OBD-II, this paper tackles the problem of lack of security in OBD-II by proposing a novel end-to-end role-based access control (RBAC) mechanism that would prevent unauthorized access to any of the vehicle functionality through existing vulnerable OBD-II ports. The proposed solution is AUTOSAR compliant and architecture independent, and does not require modifying any hardware inside the vehicle. Accordingly, it applies to the millions of current on-road vehicles. Furthermore, while physical attacks are not avoidable, they are not scalable, considering our approach, and only affect the attacked vehicle. We provide a proof of concept implementation and evaluation of the proposed solution, showing its robustness and efficiency.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Securing the On-Board Diagnostics Port (OBD-II) in Vehicles


    Additional title:

    Sae Int. J. Transp. Cyber. and Privacy


    Contributors:


    Publication date :

    2020-08-18


    Size :

    24 pages




    Type of media :

    Conference paper


    Type of material :

    Print


    Language :

    English




    Securing Vehicles

    Dev Sarmah, Deepangshu | Springer Verlag | 2016

    Free access

    Demo: Securing Heavy Vehicle Diagnostics

    Daily, Jeremy / Nnaji, David / Ettlinger, Ben | TIBKAT | 2021


    SECURING DEVICE FOR VEHICLES

    FUENTES DOMINGO ISMAEL / IBANEZ FERRER JORDI | European Patent Office | 2020

    Free access

    Securing access to vehicles

    GENNERMANN SVEN | European Patent Office | 2019

    Free access

    On-board diagnostics for off-road vehicles

    Merkisz,J. / Rychter,M. / Poznan Univ.of Technol.,PL | Automotive engineering | 2003