สถาปัตยกรรมเครือข่ายของรถยนต์อัตโนมัติ (Autonomous Vehicle Network Architecture)
รถยนต์ขับขี่อัตโนมัติไม่ใช่แค่ "คอมพิวเตอร์บนล้อ" — มันเป็น Cyber-Physical System (CPS) ที่มีเครือข่ายหลายชั้น:
1. In-Vehicle Network (IVN) — เครือข่ายภายในรถ
- CAN Bus (Controller Area Network): Real-time Control (Brake, Steering, Throttle) — ไม่มี Authentication/Encryption (Legacy)
- CAN FD: Bandwidth สูงกว่า, ใช้ใน ECU ใหม่
- Automotive Ethernet (100/1000BASE-T1): High-bandwidth (LiDAR, Camera, Infotainment) — รองรับ TCP/IP, TLS, TSN (Time-Sensitive Networking)
- LIN (Local Interconnect Network): Low-cost, Non-critical (Window, Mirror, Seat)
- FlexRay: Deterministic, Safety-critical (ถูกรีเพลซด้วย Ethernet TSN)
2. V2X Communication (Vehicle-to-Everything) — เครือข่ายภายนอก
| ประเภท | คำอธิบาย | เทคโนโลยี/มาตรฐาน | Security |
|---|---|---|---|
| V2V (Vehicle-to-Vehicle) | รถ ↔ รถ: ชนกัน, ช่วงรถ, Intersection | IEEE 802.11p / C-V2X (PC5), SAE J2735 (BSM) | IEEE 1609.2 (ECDSA Certificates, Pseudonym Certs) |
| V2I (Vehicle-to-Infrastructure) | รถ ↔ Traffic Light, Road Sign, RSU | C-V2X (PC5/Uu), 802.11p, MAP/SPAT Messages | PKI, Certificate Management, SCMS (Security Credential Management System) |
| V2N (Vehicle-to-Network) | รถ ↔ Cloud/Backend (OTA, Telemetry, HD Maps, Fleet Mgmt) | 4G/5G (Uu), MQTT, AMQP, gRPC, TLS 1.3 | Mutual TLS, OAuth2/OIDC, Certificate Pinning, Hardware Security Module (HSM) |
| V2P (Vehicle-to-Pedestrian) | รถ ↔ ผู้เดินเท้า (Phone, Wearable) | Bluetooth LE, C-V2X PC5, Wi-Fi Aware | Proximity Authentication, Pseudonymity |
| มาตรฐาน/โปรโตคอล | ใช้สำหรับ | รายละเอียด |
|---|---|---|
| IEEE 1609.2 / 1609.3 | V2X Security (WAVE) | ECDSA (P-256), Pseudonym Certificates (Short-lived, Rotating), SCMS (Certificate Provisioning/Revocation) |
| ISO 21434 | Automotive Cybersecurity Engineering | Lifecycle: Concept → Development → Production → Post-production — TARA (Threat Analysis & Risk Assessment) |
| UN R155 / R156 | UN Regulation: Cybersecurity Management System (CSMS) + Software Update Management | บังคับใน EU/Japan/Korea ตั้งแต่ 2022/2024 — ต้องมี CSMS, SOC, VULN Management, Incident Response |
| SAE J3061 | Cybersecurity Guidebook for Cyber-Physical Vehicle Systems | ก่อน ISO 21434 — แนวทางปฏิบัติ |
| AUTOSAR SecOC | Secure Onboard Communication | Freshness Counter + MAC (CMAC/AES) บน CAN/Ethernet — ป้องกัน Replay/Injection |
| TLS 1.3 + Mutual Auth | V2N, OTA, Diagnostics, Cloud API | X.509 Certificates, HSM Storage, Certificate Pinning, OCSP Stapling |
| 5G Security (3GPP TS 33.501) | V2N over 5G | SUCI (Subscription Concealed Identifier), 5G-AKA, SEAF/AUSF, Network Slicing Security |
ภัยคุกคามหลักต่อรถยนต์อัตโนมัติ (Threat Landscape)
- CAN Bus Injection / Spoofing: ส่ง Frame ปลอมบน CAN → ควบคุม Brake/Steering (Miller & Valasek 2015 Jeep Hack)
- V2X Message Spoofing: ปลอม BSM (Basic Safety Message) → Ghost Vehicle, False Collision Warning
- OTA Update Compromise: Supply Chain Attack → Malicious Firmware → Fleet-wide Compromise
- Sensor Jamming/Spoofing: LiDAR Jamming, GPS Spoofing, Camera Adversarial Examples (Adversarial ML)
- Key Fob / Relay Attack: Passive Entry/Start — Relay Attack (Amplify Signal), Rolling Code Replay
- Infotainment/Telematics Exploit: Browser/RCE → Pivot ไป CAN/Ethernet (Harman, QNX Vulnerabilities)
- Privacy Violation: Location Tracking, Driver Behavior Profiling, In-cabin Recording
- Ransomware on Fleet/Backend: Encrypt Fleet Management/OTA Server → Ransom
- Denial of Service (DoS): CAN Bus Flood, V2X Channel Jamming, Cloud API Flood
- Insider/Supply Chain: Malicious Component, Compromised Build Pipeline, Third-party Library
แนวทางป้องกันและลดทอน (Mitigation Strategies)
In-Vehicle (IVN Security)
- Gateway Firewall / Domain Controller: แยก Domain (Powertrain, Chassis, Body, Infotainment, Telematics) — ควบคุม Traffic ระหว่าง Domain
- SecOC (Secure Onboard Communication): AUTOSAR SecOC — MAC + Freshness Counter บน Critical Signals
- Intrusion Detection System (IDS): Anomaly-based (Timing, Frequency, Payload) บน CAN/Ethernet —
CAN IDS,Ethernet IDS - Hardware Security Module (HSM) / SHE (Secure Hardware Extension): Key Storage, Crypto Acceleration, Secure Boot, Attestation
- Secure Boot + Measured Boot: Root of Trust → Verify Firmware/OS/Application Chain
- Network Segmentation (Ethernet TSN + VLAN + Firewall): Critical Control ↔ Non-critical Isolation
V2X Security
- SCMS (Security Credential Management System): Issue/Rotate/Revoke Pseudonym Certificates — Prevent Tracking, Enable Accountability
- Message Authentication: ECDSA Signature บนทุก BSM/SPAT/MAP — Verify ต่อ Message
- Misbehavior Detection & Revocation: Local/Global Detection → Report to SCMS → Revoke Certificates
- Congestion Control: DCC (Decentralized Congestion Control) — ป้องกัน Channel Overload
V2N / Cloud Security
- Zero Trust Architecture: Never Trust Vehicle/Network — Continuous Verification (Device Identity, Health, Location)
- OTA Security: Signed Images (Root Key in HSM), Delta Updates, Rollback Protection, Staged Rollout, A/B Partition
- API Security: OAuth2/OIDC, mTLS, Rate Limiting, Schema Validation, WAF
- Data Protection: Encryption at Rest/Transit, Tokenization, Privacy by Design (GDPR, CCPA, China PIPL)
Organizational / Process
- CSMS (Cybersecurity Management System) ตาม ISO 21434 / UN R155: Governance, Risk Assessment (TARA), Secure Development, Post-production Monitoring, Incident Response
- Vehicle SOC (vSOC): 24/7 Monitoring Fleet Telemetry, Anomaly Detection, Threat Intel, Incident Response
- Vulnerability Management: Coordinated Vulnerability Disclosure (CVD), Bug Bounty, Patch Deployment (OTA), Supplier Security
- Security Testing: Fuzzing (CAN, Ethernet, V2X, Bluetooth), Penetration Testing, Red Teaming, Hardware Glitching/EMFI
ENISA Report 2023: Key Findings
- รถยนต์อัตโนมัติ Highly Vulnerable to Wide Range of Attacks
- Attack Surface กว้างมาก: 100+ ECUs, Millions of Lines of Code, Multiple Wireless Interfaces
- Safety-Critical Systems ต้องมี Functional Safety (ISO 26262) + Cybersecurity (ISO 21434) รวมกัน (Safety-Security Co-engineering)
- ต้องมี Post-production Security Operations (vSOC, OTA, Vuln Mgmt) ตลอดอายุการใช้งานรถ (15+ ปี)
สรุป
รถยนต์ขับขี่อัตโนมัติใช้ Multi-layered Network Security: In-Vehicle (SecOC, Gateway Firewall, IDS, HSM, Secure Boot, TSN) + V2X (IEEE 1609.2, SCMS, Pseudonym Certs, Misbehavior Detection) + V2N/Cloud (Zero Trust, mTLS 1.3, OTA Security, API Security) + Governance (ISO 21434, UN R155, CSMS, vSOC) — ไม่ใช่โปรโตคอลเดียว แต่เป็น Security-by-Design ทั่ว Lifecycle ตั้งแต่ Concept จน End-of-Life
