Analyzing the technical specifications of CiA 613-1 (CANsec) and implementing high-speed security for zonal automotive networks.
As vehicle architectures transition from domain-based to zonal topologies, zonal gateways aggregate traffic from dozens of sensors and actuators. CAN-XL provides the bandwidth (up to 20 Mbps) and payload capacity (2048 bytes) required for this consolidation. CanHSM delivers dedicated hardware acceleration for this next-generation standard.
CANsec operates similarly to IEEE 802.1AE MACsec on Ethernet, encrypting and authenticating the CAN-XL Data Field while leaving the arbitration header clear for hardware bus priority resolution. CanHSM performs this encryption in a pipelined fashion as bits are shifted out to the transceiver.
CanHSM includes physical-layer transceivers with autonomous error confinement. If a rogue node attempts to dominate the bus by manipulating dominant bits during arbitration, CanHSM detects the violation and physically disconnects the transmitter within 2 bit-times.