基于ISO14229标准的安全诊断服务

打开文本图片集

中图分类号：U463.6 文献标识码：A 文章编号：1003-8639（2025）07-0138-03

Security Diagnosis Service Based on ISO14229 Standard

Liu Zhilong，Zhang Baoping，Cai Zhaoqian，Hou Bobo，Wang Yuanbo

Automobile Enginering Research Institute，Shaanxi Heavy Duty Automobile Co.，Ltd.，Xi'an7102O0，China）

【Abstract】Thisarticle focusesonthe fieldof vehicle diagnostic security and systematically analyzes the technical principlesandapplication scenariosof Ox29 identityauthenticationservice and Ox27authorityauthenticationservice under the ISO standard system.Firstly，forthe Ox29 service，the one-way/two-way authentication mechanism，PKI certificate exchange processand challenge response authentication strategy are expounded，and thedeploymentschemes fordiferentscenariosareproposed incombination withtheplatformizationrequirementsof theentirevehicle.Secondly， inviewof thecurrent situationof insuficientsecuritystrengthof thetraditionalOx27service，strenghening schemesare proposed from three dimensions：algorithmupgrade（replacing traditional CRCwith AES/SM4），interaction process reconstruction（bidirectional dynamic factor authentication），and real-time verificationmechanism （periodic verificationof 3Eservices），to constructasecurityprotectionsystem covering theentire diagnosis cycle.Theresearch resultsprovideenginering references for thesafety designofon-board diagnostic systems，anditisexpected to play some promoting role in theimplementation of vehicle information security standards.

【Keywords】diagnostic safety；authority identification；ISO standard；diagnostic

0 引言

车辆的软件升级、硬件采集驱动信息读取、故障码读取和清除、介入式负载驱动、传感器零位标定、钥匙匹配等功能，均通过与车辆通信相同的物理总线、不同的上层协议实现。（剩余2580字）