Transport layer authenticity and security for automotive communication

A device, associated with a receiver device, comprising:

• one or more processors configured to:
• receive a first frame that includes an authentication tag;
• extract a received payload from the first frame,
• forward the received payload as a second frame;
• extract a first header from the second frame;
• access a key that is selected from a plurality of keys based on a security tag that comprises a sequence number, secure channel information, and crypto information;
• and
• perform an authentication check by using the key, data associated with the authentication tag, and at least the first header as additional authentication data to indicate an authenticity of the second frame as an original frame sent from a transmitting device to the device.

A method, comprising:

• generating, by a device, a first header;
• selecting, by the device, a key from a plurality of keys based on a security tag that comprises a sequence number, secure channel information, and crypto information;
• generating, by the device, an authentication tag using the key and at least the first header as additional authentication data;
• and
• forwarding, by the device, a first frame including the authentication tag,
• wherein the first frame is used to generate a second frame that is transmitted, and
• wherein an authenticity of the second frame as an original frame sent from the device is indicated based on an authentication check using at least data associated with the authentication tag and a second header extracted from the second frame as additional authentication data.