Vehicle-mounted Ethernet information security protection method

The invention relates to a vehicle-mounted Ethernet information security protection method, and belongs to an Ethernet information security protection method. The method comprises: key allocation, wherein the gateway ECU has a set of digital certificates including an identifier, a public key and a private key of each legal ECU in the network, and meanwhile, the gateway ECU has an encryption key EKand an authentication key AK required by communication, and in the starting stage, the gateway ECU allocates the encryption key and the authentication key to each legal ECU in the network in sequence; and safe communication, wherein after the key distribution process in the starting stage is completed, each legal ECU in the network already has an encryption key and an authentication key, and thenencryption, decryption and authentication operation can be conducted on messages in the normal running process of the vehicle. The method has the advantages that safe and stable protection measures are provided for the vehicl