{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,20]],"date-time":"2026-10-20T02:32:12Z","timestamp":1792463532646,"version":"4.5.0"},"reference-count":49,"publisher":"MDPI AG","issue":"21","license":[{"start":{"date-parts":[[2021,10,25]],"date-time":"2021-10-25T00:00:00Z","timestamp":1635120000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100006245","name":"Ministry of Science and Technology","doi-asserted-by":"publisher","award":["MOST 639 110-2221-E-033-008"],"award-info":[{"award-number":["MOST 639 110-2221-E-033-008"]}],"id":[{"id":"10.13039\/501100006245","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006245","name":"Ministry of Science and Technology","doi-asserted-by":"publisher","award":["MOST 109-2221-E-130-006"],"award-info":[{"award-number":["MOST 109-2221-E-130-006"]}],"id":[{"id":"10.13039\/501100006245","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006245","name":"Ministry of Science and Technology","doi-asserted-by":"publisher","award":["MOST 110-2218-E-A49-011-MBK"],"award-info":[{"award-number":["MOST 110-2218-E-A49-011-MBK"]}],"id":[{"id":"10.13039\/501100006245","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The design of the Controller Area Network (CAN bus) did not account for security issues and, consequently, attacks often use external mobile communication interfaces to conduct eavesdropping, replay, spoofing, and denial-of-service attacks on a CAN bus, posing a risk to driving safety. Numerous studies have proposed CAN bus safety improvement techniques that emphasize modifying the original CAN bus method of transmitting frames. These changes place additional computational burdens on electronic control units cause the CAN bus to lose the delay guarantee feature. Consequently, we proposed a method that solves these compatibility and security issues. Simple and efficient frame authentication algorithms were used to prevent spoofing and replay attacks. This method is compatible with both CAN bus and CAN-FD protocols and has a lower operand when compared with other methods.<\/jats:p>","DOI":"10.3390\/s21217069","type":"journal-article","created":{"date-parts":[[2021,10,25]],"date-time":"2021-10-25T21:42:05Z","timestamp":1635198125000},"page":"7069","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":26,"title":["A CAN-Bus Lightweight Authentication Scheme"],"prefix":"10.3390","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1395-5810","authenticated-orcid":false,"given":"Jia-Ning","family":"Luo","sequence":"first","affiliation":[{"name":"Department of Computer Science and Information Engineering, Chung Cheng Institute of Technology, National Defense University, Daxi District, Taoyuan City 335009, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chang-Ming","family":"Wu","sequence":"additional","affiliation":[{"name":"Department of Electronic Engineering, Chung Yuan Christian University, Chung-Li District, Taoyuan City 320314, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4773-7352","authenticated-orcid":false,"given":"Ming-Hour","family":"Yang","sequence":"additional","affiliation":[{"name":"Department of Information and Computer Engineering, Chung Yuan Christian University, Chung-Li District, Taoyuan City 320314, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2021,10,25]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"1552","DOI":"10.1109\/COMST.2016.2521642","article-title":"In-vehicle networks outlook: Achievements and challenges","volume":"18","author":"Zeng","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_2","unstructured":"HPL, S.C. (2002). Introduction to the Controller Area Network (CAN), Texas Instruments. Application Report SLOA101."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"von der Wense, H.C. (2000). Introduction to Local Interconnect Network, SAE International. Technical Report, SAE Technical Paper.","DOI":"10.4271\/2000-01-0153"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Makowitz, R., and Temple, C. (2006, January 28\u201330). Flexray-a communication network for automotive control systems. Proceedings of the 2006 IEEE International Workshop on Factory Communication Systems, Torino, Italy.","DOI":"10.1109\/WFCS.2006.1704153"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Fijalkowski, B. (2011). Automotive Mechatronics: Operational and Practical Issues, Springer.","DOI":"10.1007\/978-94-007-0409-1"},{"key":"ref_6","unstructured":"Standards-ISO (2021, August 31). ISO 11898-3:2006 Road Vehicles\u2014Controller Area Network (CAN)\u2014Part 3: Low-Speed, Fault-Tolerant, Medium-Dependent Interface. Available online: https:\/\/www.iso.org\/standard\/36055.html."},{"key":"ref_7","unstructured":"Standards-ISO (2021, August 31). ISO\/CD 11898-1 Road Vehicles\u2014Controller Area Network (CAN)\u2014Part 1: Data Link Layer and Physical Coding Sub-Layer. Available online: https:\/\/www.iso.org\/standard\/83292.html."},{"key":"ref_8","unstructured":"Standards-ISO (2021, August 31). ISO\/CD 11898-2:2016 Road Vehicles\u2014Controller Area Network (CAN)\u2014Part 2: High-Speed Medium Access Unit. Available online: https:\/\/www.iso.org\/standard\/67244.html."},{"key":"ref_9","unstructured":"Hoppe, T., and Dittman, J. (2007, January 22\u201325). Sniffing\/Replay Attacks on CAN Buses: A simulated attack on the electric window lift classified using an adapted CERT taxonomy. Proceedings of the 2nd Workshop on Embedded Systems Security (WESS), Newcastle upon Tyne, UK."},{"key":"ref_10","first-page":"100214","article-title":"Cybersecurity challenges in vehicular communications","volume":"23","author":"Sadatsharan","year":"2020","journal-title":"Veh. Commun."},{"key":"ref_11","unstructured":"Miller, C., and Valasek, C. (2015). Remote Exploitation of an Unaltered Passenger Vehicle, Black Hat USA."},{"key":"ref_12","first-page":"405","article-title":"Security, vulnerability and protection of vehicular on-board diagnostics","volume":"10","author":"Yadav","year":"2016","journal-title":"Int. J. Secur. Appl."},{"key":"ref_13","unstructured":"Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., Savage, S., Koscher, K., Czeskis, A., Roesner, F., and Kohno, T. (2011, January 8\u201312). Comprehensive experimental analyses of automotive attack surfaces. Proceedings of the USENIX Security Symposium, San Francisco, CA, USA."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Iehira, K., Inoue, H., and Ishida, K. (2018, January 12\u201315). Spoofing attack using bus-off attacks against a specific ECU of the CAN bus. Proceedings of the 2018 15th IEEE Annual Consumer Communications & Networking Conference (CCNC), Las Vegas, NV, USA.","DOI":"10.1109\/CCNC.2018.8319180"},{"key":"ref_15","unstructured":"Daimi, K., and Saed, M. (2018, January 22\u201326). Securing Tire Pressure Monitoring System. Proceedings of the 2018 the 14th Advanced International Conference on Telecommunications Conference, Barcelona, Spain."},{"key":"ref_16","unstructured":"Rouf, I., Miller, R.D., Mustafa, H.A., Taylor, T., Oh, S., Xu, W., Gruteser, M., Trappe, W., and Seskar, I. (2010, January 11\u201313). Security and Privacy Vulnerabilities of In-Car Wireless Networks: A Tire Pressure Monitoring System Case Study. Proceedings of the USENIX Security Symposium, Washington, DC, USA."},{"key":"ref_17","unstructured":"Avatefipour, O., and Malik, H. (2018). State-of-the-art survey on in-vehicle network communication (CAN-Bus) security and vulnerabilities. arXiv."},{"key":"ref_18","unstructured":"Cho, K.T., and Shin, K.G. (2016, January 10\u201312). Fingerprinting electronic control units for vehicle intrusion detection. Proceedings of the 25th USENIX Security Symposium (USENIX Security 16), Austin, TX, USA."},{"key":"ref_19","unstructured":"Klinedinst, D., and King, C. (2016). On Board Diagnostics: Risks and Vulnerabilities of the Connected Vehicle, CERT Coordination Center. Technical Report."},{"key":"ref_20","first-page":"15","article-title":"Adventures in automotive networks and control units","volume":"21","author":"Miller","year":"2013","journal-title":"Def Con."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3431233","article-title":"Cyberattacks and countermeasures for in-vehicle networks","volume":"54","author":"Aliwa","year":"2021","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Nilsson, D.K., Larson, U.E., and Jonsson, E. (2008, January 21\u201324). Efficient in-vehicle delayed data authentication based on compound message authentication codes. Proceedings of the 2008 IEEE 68th Vehicular Technology Conference, Calgary, AB, Canada.","DOI":"10.1109\/VETECF.2008.259"},{"key":"ref_23","unstructured":"Hartkopp, O., and Schilling, R.M. (2012, January 28\u201329). Message authenticated can. Proceedings of the Escar Conference, Berlin, Germany."},{"key":"ref_24","first-page":"993","article-title":"A practical wireless attack on the connected car and security protocol for in-vehicle CAN","volume":"16","author":"Woo","year":"2014","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"ref_25","unstructured":"Kurachi, R., Matsubara, Y., Takada, H., Adachi, N., Miyashita, Y., and Horihata, S. (2014, January 18\u201319). CaCAN-centralized authentication system in CAN (controller area network). Proceedings of the 14th International Conference on Embedded Security in Cars (ESCAR 2014), Hamburg, Germany."},{"key":"ref_26","first-page":"5","article-title":"Security authentication system for in-vehicle network","volume":"81","author":"Ueda","year":"2015","journal-title":"SEI Tech. Rev."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"N\u00fcrnberger, S., and Rossow, C. (2016, January 17\u201319). \u2013vatican\u2013vetted, authenticated can bus. Proceedings of the International Conference on Cryptographic Hardware and Embedded Systems, Santa Barbara, CA, USA.","DOI":"10.1007\/978-3-662-53140-2_6"},{"key":"ref_28","first-page":"188","article-title":"Mini-MAC: Raising the bar for vehicular security with a lightweight message authentication protocol","volume":"9","author":"Schmandt","year":"2017","journal-title":"Veh. Commun."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"86836","DOI":"10.1109\/ACCESS.2020.2992112","article-title":"Practical Sender Authentication Scheme for In-Vehicle CAN With Efficient Key Management","volume":"8","author":"Youn","year":"2020","journal-title":"IEEE Access"},{"key":"ref_30","unstructured":"Standards-ISO (2021, August 31). AUTOSAR: Specification of Secure Onboard Communication. Available online: https:\/\/www.autosar.org\/fileadmin\/user_upload\/standards\/classic\/4-3\/AUTOSAR_SWS_SecureOnboardCommunication.pdf."},{"key":"ref_31","unstructured":"F\u00fcrst, S., M\u00f6ssinger, J., Bunzel, S., Weber, T., Kirschke-Biller, F., Heitk\u00e4mper, P., Kinkelin, G., Nishikawa, K., and Lange, K. (2009, January 7\u20138). AUTOSAR\u2013A Worldwide Standard is on the Road. Proceedings of the 14th International VDI Congress Electronic Systems for Vehicles, Baden-Baden, Germany."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"F\u00fcrst, S., and Bechter, M. (July, January 28). AUTOSAR for connected and autonomous vehicles: The AUTOSAR adaptive platform. Proceedings of the 2016 46th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks Workshop (DSN-W), Toulouse, France.","DOI":"10.1109\/DSN-W.2016.24"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Radu, A.I., and Garcia, F.D. (2016, January 28\u201330). LeiA: A lightweight authentication protocol for CAN. Proceedings of the European Symposium on Research in Computer Security, Heraklion, Greece.","DOI":"10.1007\/978-3-319-45741-3_15"},{"key":"ref_34","unstructured":"Van Herrewege, A., Singelee, D., and Verbauwhede, I. (2011, January 28\u201329). CANAuth-a simple, backward compatible broadcast authentication protocol for CAN bus. Proceedings of the ECRYPT Workshop on Lightweight Cryptography, Louvain-la-Neuve, Belgium."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Groza, B., Murvay, S., Van Herrewege, A., and Verbauwhede, I. (2012, January 12\u201314). Libra-can: A lightweight broadcast authentication protocol for controller area networks. Proceedings of the International Conference on Cryptology and Network Security, Darmstadt, Germany.","DOI":"10.1007\/978-3-642-35404-5_15"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Ziermann, T., Wildermann, S., and Teich, J. (2009, January 20\u201324). CAN+: A new backward-compatible Controller Area Network (CAN) protocol with up to 16\u00d7 higher data rates. Proceedings of the 2009 Design, Automation & Test in Europe Conference & Exhibition, Nice, France.","DOI":"10.1109\/DATE.2009.5090826"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Martinelli, F., Mercaldo, F., Nardone, V., and Santone, A. (2017, January 9\u201312). Car hacking identification through fuzzy logic algorithms. Proceedings of the 2017 IEEE International Conference on Fuzzy Systems (FUZZ-IEEE), Naples, Italy.","DOI":"10.1109\/FUZZ-IEEE.2017.8015464"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Levi, M., Allouche, Y., and Kontorovich, A. (2018, January 3\u20136). Advanced analytics for connected car cybersecurity. Proceedings of the 2018 IEEE 87th Vehicular Technology Conference (VTC Spring), Porto, Portugal.","DOI":"10.1109\/VTCSpring.2018.8417690"},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"9091","DOI":"10.1109\/ACCESS.2018.2799210","article-title":"A distributed anomaly detection system for in-vehicle network using HTM","volume":"6","author":"Wang","year":"2018","journal-title":"IEEE Access"},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"17","DOI":"10.3390\/smartcities3010002","article-title":"Identify a Spoofing Attack on an In-Vehicle CAN Bus Based on the Deep Features of an ECU Fingerprint Signal","volume":"3","author":"Yang","year":"2020","journal-title":"Smart Cities"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Zhang, H., Meng, X., Zhang, X., and Liu, Z. (2020). CANsec: A practical in-vehicle controller area network security evaluation tool. Sensors, 20.","DOI":"10.3390\/s20174900"},{"key":"ref_42","unstructured":"Andersson, R. (2021). Combining Anomaly- and Signature based Algorithms for Intrusion Detection in CAN-bus. [Bachelor\u2019s Thesis, Faculty of Technology and Society (TS), Malm\u00f6 University]. Available online: https:\/\/www.diva-portal.org\/smash\/record.jsf?dswid=2720&pid=diva2%3A1566210."},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Cena, G., Bertolotti, I.C., Hu, T., and Valenzano, A. (2015, January 16\u201318). Improving compatibility between CAN FD and legacy CAN devices. Proceedings of the 2015 IEEE 1st International Forum on Research and Technologies for Society and Industry Leveraging a Better Tomorrow (RTSI), Turin, Italy.","DOI":"10.1109\/RTSI.2015.7325134"},{"key":"ref_44","unstructured":"GmbH, R.B. (2021, August 31). CAN XL News Text|Bosch Semiconductors. Available online: https:\/\/www.bosch-semiconductors.com\/news\/t-newsdetailpage-4.html."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Rivest, R., and Dusse, S. (1992). RFC 1321: The MD5 Message-Digest Algorithm, Internet Engineering Task Force (IETF). Available online: https:\/\/www.ietf.org\/rfc\/rfc1321.txt.","DOI":"10.17487\/rfc1321"},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Bider, D., and Baushke, M. (2012). RFC 6668: SHA-2 Data Integrity Verification for the Secure Shell (ssh) Transport Layer Protocol, Internet Engineering Task Force (IETF). Available online: https:\/\/www.ietf.org\/rfc\/rfc6668.txt.","DOI":"10.17487\/rfc6668"},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"M\u2019Raihi, D., Bellare, M., Hoornaert, F., Naccache, D., and Ranen, O. (2005). RFC 4226: HOTP: An HMAC-Based One-Time Password Algorithm, Internet Engineering Task Force (IETF). Available online: https:\/\/www.ietf.org\/rfc\/rfc4226.txt.","DOI":"10.17487\/rfc4226"},{"key":"ref_48","unstructured":"Eastlake, D., and Jones, P. (2011). RFC 3174: Us Secure Hash Algorithm 1 (SHA1), Internet Engineering Task Force (IETF). Available online: https:\/\/www.ietf.org\/rfc\/rfc3174.txt."},{"key":"ref_49","first-page":"27","article-title":"Migration from Classical CAN to CAN FD","volume":"2021","author":"Webermann","year":"2021","journal-title":"CAN Newsl."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/21\/7069\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T07:23:03Z","timestamp":1760167383000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/21\/7069"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10,25]]},"references-count":49,"journal-issue":{"issue":"21","published-online":{"date-parts":[[2021,11]]}},"alternative-id":["s21217069"],"URL":"https:\/\/doi.org\/10.3390\/s21217069","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,10,25]]}}}