Securing in-vehicle service oriented architecture with mac generate allow list

A node comprising:

• a processor coupled to a memory;
• a security peripheral;
• at least one key stored in the security peripheral of the node;
• wherein MAC authenticate requests to the security peripheral from a receiving node are received with the same key to authenticate messages from the transmitting node in a way that prohibits the key used for transmission from being used to generate MACs.

An in-vehicle network, comprising:

• an electronic control unit (ECU) comprising a security peripheral, the security peripheral comprising a MAC generate allow list (MGAL);
• a processor configured to use a shared secret key to generate MACs from the security peripheral;
• a plurality of receivers configured to receive updates relative to permissions or denials of the security peripheral to MAC generation requests, wherein
• the network elements can be relocated without software upgrades.