Attribute-based Access Control for Secure Firmware Over-The-Air Updates in Vehicles

The vulnerability of modern connected vehicles stems from the fact that firmware updates are frequently downloaded wirelessly. By taking advantage of flaws in the update procedure, malicious actors can compromise vehicle systems and put the lives of drivers and passengers at risk. To secure communications between vehicles, this research details a method for employing Ciphertext-Policy Attribute-Based Encryption (CP-ABE). Secure and adaptable data sharing in decentralized settings is made possible by CP-ABE, a cryptographic technique. The goals of this study is to improve the state of the art for vehicular communication systems with regards to key revocation, attribute revocation, and efficient encryption and decryption performance. The proposed method can be broken down into three stages: publishing updates, choosing updates, and retrieving updates. The paper describes CP-ABE and discusses how it can be used for in-car communication. Current CP-ABE-based access control and location privacy schemes for vehicular communication are also discussed. The proposed methodology employs optimized algorithms and techniques to solve the problems of key revocation, attribute revocation, and efficient encryption and decryption performance. Furthermore, for the evaluation of the effectiveness of the proposed method the AVISPA simulation tool is used that verify the correctness of the proposed scheme, proving its resilience to attacks.