What s New in AUTOSAR?

Transcription

1 What s New in AUTOSAR? By Stephen Waldron Local Prodct Line Manager Vector UK Conference, Wednesday 27 th September 2017 V

2 Agenda What s New in AUTOSAR? AUTOSAR 4.3 Software Architectre AUTOSAR Soltions for Cybersecrity New E2E Transformers Other New AUTOSAR Concepts Adaptive AUTOSAR Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR 3

3 AUTOSAR 4.3 Software Architectre Addition of Cryptographic and Wireless Commnication Services 4

4 AUTOSAR 4.3 Software Architectre Addition of Cryptographic and Wireless Commnication Services 5

5 Agenda What s New in AUTOSAR? AUTOSAR 4.3 Software Architectre AUTOSAR Soltions for Cybersecrity New E2E Transformers Other New AUTOSAR Concepts Adaptive AUTOSAR Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR 6

6 AUTOSAR Soltions for Cybersecrity AUTOSAR Secre IPDUs Athentication The sender adds a digital signatre to the data, which confirms to the receiver, that the data is athentic and is actally from the sender. Additionally, the sender cannot deny that they sent it. Athentic I-PDU and Secred I-PDU The term Athentic I-PDU refers to an AUTOSAR I-PDU that reqires protection against nathorized maniplation and replay attacks. The payload of a Secred I-PDU consists of the Athentic I-PDU and an Athenticator (e.g. Message Athentication Code). The payload of a Secred I-PDU may optionally inclde the Freshness Vale sed to create the Athenticator (e.g. MAC). 7

7 AUTOSAR Soltions for Cybersecrity AUTOSAR Secre IPDUs Athentication The sender adds a digital signatre to the data, which confirms to the receiver, that the data is athentic and is actally from the sender. Additionally, the sender cannot deny that they sent it. Athentic I-PDU and Secred I-PDU The term Athentic I-PDU refers to an AUTOSAR I-PDU that reqires protection against nathorized maniplation and replay attacks. The payload of a Secred I-PDU consists of the Athentic I-PDU and an Athenticator (e.g. Message Athentication Code). The payload of a Secred I-PDU may optionally inclde the Freshness Vale sed to create the Athenticator (e.g. MAC). 8

8 AUTOSAR Soltions for Cybersecrity AUTOSAR Secre IPDUs Athentic I-PDU and Secred I-PDU The term Athentic I-PDU refers to an AUTOSAR I-PDU that reqires protection against nathorized maniplation and replay attacks. The payload of a Secred I-PDU consists of the Athentic I-PDU and an Athenticator (e.g. Message Athentication Code). The payload of a Secred I-PDU may optionally inclde the Freshness Vale sed to create the Athenticator (e.g. MAC). 9

9 AUTOSAR Soltions for Cybersecrity MICROSAR 4.3 Secrity Modles 10

10 AUTOSAR Soltions for Cybersecrity MICROSAR 4.3 Secrity Modles Application FVM RTE OS SYS DIAG MEM COM IO LIBS SecOC CAN LIN FR ETH V2G 1 Complex Driver CSM CRYIF CRYDRV(SW) AMD AVB 1 MCAL EXT CRYDRV(HW) Hardware Trst Anchor (HTA ) Microcontroller Vector Standard Software 11

11 AUTOSAR Soltions for Cybersecrity AUTOSAR Cryptographic Services (with/withot HW spport) KeyM 1 Crypto Service Manager CSM RTE > Services can be called by SWCs OS SYS DIAG MEM > Manages COM the Job Qee CSM CRYIF CRYDRV(SW) MCAL CRYDRV (HW) AMD Application SECOC FWM 1 IDSM 1 Crypto Interface CRYIF > CAN LIN FR ETH V2G Spports dispatching of secrity Jobs to HW or 1 SW crypto CANFWdrivers 1 ETHFW 1 TLS CANIDS1 ETHIDS 1 XML Sec SCANTSYN 1 SETHTSYN Crypto Driver Crypto (SW/HW) 1 AVB 1 > Implementation of cryptographic fnctions > Crypto (SW): Usage of SW libraries EXT > Crypto (HW): Usage of micro resorces and capabilities of HW-Trst Anchors (i.e. SHE, HSM) IO MCAL LIBS CAL CSM (CPL) Complex Driver CRYIF Crypto(SW) SWC/Application RTE FBL Application SYS HIS Secrity Modle Rntime Protection Update Athorization COM Secre Update Manager Crypto(HW) CDD Microcontroller Sec. Bootmanager HTA (HSM) Microcontroller Hardware Trst Anchor (HTA ) 12

12 AUTOSAR Soltions for Cybersecrity HW vs. SW Performance Comparison AES ECB Encryption: SHE vs. Software library µs Block 3 Blocks 6 Blocks Performance estimations are always dependent on at least: General performance and speed of the HW platform Speed of the HTA Capabilities of the HTA (e.g. HW acceleration) 400 Crypto-Algorithm sed SHE 64 Mhz SW 64 Mhz SHE 120 Mhz SW 120 Mhz Size of the data Measred on a Freescale MPC5646C (w/ CSE), MICROSAR Stack with CSM and SHE driver with the Vector AUTOSAR Measrement and Debgging (AMD) Rntime Measrement (Rtm) Tool. 1 Block = 16 bytes 13

13 AUTOSAR Soltions for Cybersecrity Secre On-Board Commnications (SecOC) ASR 4.3 SecOC sends & receives secred PDUs OS SYS DIAG MEM CSM CRY(SW) AMD Application RTE COM SECOC CAN RTE interfaces to the SecOC rather than the PDUR SWC reads/writes the Athentic I-PDU to the SecOC (via RTE) SecOC calls CSM to secre/validate the I-PDU SecOC then rotes IO the Secre LIBS I-PDU to/from the PDUR FWM 1 IDSM Freshness 1 vales are handled via CAL callots (CPL) to the FVM HIS Secrity Modle LIN FR ETH ETHFW 1 V2G 1 TLS ETHIDS 1 XML Sec 1 SETHTSYN 1 AVB 1 TLS 1 Complex Driver SWC FBL Application Rntime Protection Update Athorization FVM RTE MCAL CRY(HW) EXT CSM SecOC PDUR COM SYS COM IF/TP Microcontroller Hardware Trst Anchor (HTA ) LIB MCAL CDD Microcontroller 1 Extensions for AUTOSAR Vector Standard Software 14

14 AUTOSAR Soltions for Cybersecrity Ftre Secrity Modles (Vector enhancements to AUTOSAR) KeyM 1 SLog 1 Application STiM 1 RTE OS SYS DIAG MEM COM IO FwM 1 IDSM 1 CAN LIN FR ETH V2G 1 FwCAN 1 FwEth 1 IDSCAN 1 IDSEth 1 AMD AVB 1 LIBS Key Manager (KeyM) Secrity Adit Log (SLog) Firewall Manager (FwM) > CAN Firewall (FwCAN) > Ethernet Firewall (FwEth) Secre Time Manager (STiM) Complex Intrsion Detection System Driver Manager (IDSM) > CAN Intrsion Detection System (IDSCAN) > Ethernet Intrsion Detection System (IDSEth) MCAL EXT Microcontroller Hardware Trst Anchor (HTA ) 1 Extensions for AUTOSAR 15 Ftre Secrity Modles

15 AUTOSAR Soltions for Cybersecrity Management of Cryptographic Material (Keys, Certificates) Key Manager (KeyM) KeyM 1 > Receives new cryptographic material Application (keys/certificates) via OEM specific diagnostic services OS SYS RTE > Provides OEM specific bsiness logic for SYS key lifecycle phases (prodction, DIAG MEM COM IO initialization, pdate, repair / SLOG 1 SECOC FWM 1 IDSM 1 CSM replacement) > Provides OEM specific bsiness logic for CAN LIN FR ETH V2G 1 CSM deriving new keys CANFW 1 ETHFW 1 TLS CRYIF > Provides OEM specific bsiness logic for key distribtion/sharing CANIDS1 inside the ETHIDS 1 XML Sec CRYDRV(SW) AMD vehicle SCANTSYN 1 SETHTSYN 1 AVB 1 CRYIF LIBS CRYDRV(SW) KeyM 1 CAL (CPL) Complex Driver MEM Application RTE FBL Application DIAG COM DCM HIS Secrity Modle Rntime Protection Update Athorization Secre Update Manager MCAL CRYDRV (HW) EXT MCAL Sec. Bootmanager (HSM) Microcontroller Hardware Trst Anchor (HTA ) CRYDRV (HW) HTA Microcontroller 1 Extensions for AUTOSAR 16

16 AUTOSAR Soltions for Cybersecrity Firewalls and Intrsion Detection Systems KeyM 1 Application FBL Application RTE OS SYS DIAG MEM COM IO LIBS POLM 1 KSM 1 CSM CRYIF CRYDRV(SW) SLOG 1 AMD SECOC FWM 1 IDSM 1 CAN LIN FR ETH V2G 1 CANFW 1 ETHFW 1 TLS CANIDS1 ETHIDS 1 XML Sec SCANTSYN 1 SETHTSYN 1 AVB 1 CAL (CPL) Complex Driver HIS Secrity Modle Rntime Protection Update Athorization Secre Update Manager MCAL EXT CRYDRV (HW) Firewall Manager - FWM > CAN Firewall CANFW > Ethernet Firewall - ETHFW Sec. Bootmanager (HSM) Microcontroller Hardware Trst Anchor (HTA ) Intrsion Detection System Manager IDSM > CAN Intrsion Detection System CANIDS > Ethernet Intrsion Detection System - ETHIDS 1 Extensions for AUTOSAR Vector Standard Software 17 Ftre Secrity Modles

17 AUTOSAR Soltions for Cybersecrity Embedded SW AUTOSAR CryptoStack 4.2 CryptoStack Release: Available 4.3 CryptoStack Beta: Available 4.3 CryptoStack Release: R18 (04/2017) KeyM 1 PolM 1 SLog 1 Application STiM 1 AUTOSAR SecOC 4.2 SecOC Release: Available RTE 4.3 SecOC Release: Available 4.3 SecOC Freshness Vale Manager: Available (OEM Specific) OS SYS DIAG MEM COM FwM 1 IDSM 1 IO LIBS KeyM SWC Release: Available (OEM specific) SLog SWC Release: Available (OEM specific) PolM SWC Release: Available (OEM specific) STim SWC Release: Available (OEM specific) AMD CAN FwCAN 1 IDSCAN 1 LIN FR ETH FwEth 1 V2G 1 IDSEth 1 AVB 1 Complex Driver FwEth MCAL EXT Beta: Available Release: On Reqest Secre Boot Release: Available Secre Update Release: Available Microcontroller Hardware Trst Anchor (HTA ) 18

18 Agenda What s New in AUTOSAR? AUTOSAR 4.3 Software Architectre AUTOSAR Soltions for Cybersecrity New E2E Transformers Other New AUTOSAR Concepts Adaptive AUTOSAR Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR 19

19 SafeWDG New E2E Transformers End-to-End Protection (Overview) SWC E2E SWC SafeRTE SWC SWC Commnication from one application Software Component to another, on a different ECU, over an nsafe channel This channel comprises: SafeOS SafeBSW RTE Com-Stack MCAL Bs Controller Hardware Cabling E2E is able to detect if a falt occrred dring the transmission SWC SWC The application needs to se this information to react on the falts and take safe-state handling BSW HW BSW HW 20

20 New E2E Transformers End-to-End Protection SWC A Application E2EPW_Read( data cnt. crc ) SWC B Application E2EPW_Write( data ) E2E Protection Wrapper data cnt. crc data stats E2E Protection Wrapper E2E LIB E2E LIB Rte_Write_<A>_<B> CRC LIB CRC LIB verify CRC Rte_Read_<A>_<B> RTE RTE BSW BSW Bs 21

21 New E2E Transformers SafeE2E sing E2E Transformers SWC A Application SWC B Application Rte_Write_<A>_<B>( data ) Rte_Read_<A>_<B>( data, E2E_ret ) RTE RTE COMXF COMXF E2EXF E2E LIB E2E LIB E2EXF data cnt. crc CRC LIB CRC LIB BSW BSW Bs 22

22 Agenda What s New in AUTOSAR? AUTOSAR 4.3 Software Architectre AUTOSAR Soltions for Cybersecrity New E2E Transformers Other New AUTOSAR Concepts Adaptive AUTOSAR Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR 23

23 Other New AUTOSAR Concepts V2X (Wireless) Commnications Other New Featres in AUTOSAR 4.3 V2X (Wireless) Commnications > The off-board Commnication Services are modles for Vehicle-to-X commnication via a wireless network > Fnctionality to implement reception and transmission of standardized V2X messages > Spport of wireless ITS-G5 message handling > Spport of V2X applications distribted over mltiple ECUs in a vehicle network SOME/IP Transport Protocol (Segmenter) > Introdces a SOME/IP segmenter modle to enable handling of SOME/IP messages bigger than 127kByte New concepts coming next in AUTOSAR 4.3.1/4.4? Ethernet NM Wake on Data Line > In preference to a dedicated wake-p line Spport for LIN Slaves > Pertinent for LIN Slaves that need to flfil ISO Safety Reqirements and need an AUTOSAR (ASIL-D) Operating System. MCAL Mlticore distribtion > Separation of different MCAL drivers across cores 24

24 Agenda What s New in AUTOSAR? AUTOSAR 4.3 Software Architectre AUTOSAR Soltions for Cybersecrity New E2E Transformers Other New AUTOSAR Concepts Adaptive AUTOSAR Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR 25

25 Adaptive AUTOSAR Why do we need another AUTOSAR? Classic Platform (CP) For embedded systems with hard real-time and safety constraints Adaptive Platform (AP) For high-performance compting ECUs and fail-operational systems (sch as ADAS) sorce: 26

26 Adaptive AUTOSAR AUTOSAR Adaptive Platform The AUTOSAR Adaptive Platform implements the AUTOSAR Rntime Environment for Adaptive Applications (ARA). Two types of interfaces are available, services and APIs. The platform consists of fnctional clsters which are groped in services and fondation (basis). Fnctional clsters in AUTOSAR Fondation have to have at least one instance per (virtal) machine while services may be distribted in the in-car network. In comparison to the AUTOSAR Classic Platform the AUTOSAR Rntime Environment for the Adaptive Platform dynamically links services and clients dring rntime. sorce: 27

27 Agenda What s New in AUTOSAR? AUTOSAR 4.3 Software Architectre AUTOSAR Soltions for Cybersecrity New E2E Transformers Other New AUTOSAR Concepts Adaptive AUTOSAR Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR 28

28 Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR Featres Under Development MICROSAR MICROSAR4 MICROSAR on POSIX (Linx) MICROSAR POSIX Gest-OS Secrity AUTOSAR 4.3 Secrity Soltion (incl. CSM, SecOC) Key and Freshness Vale Management Ethernet Firewall TLS for Ethernet spports more se-cases also otside V2G Additional modles with Mlti-core spport XCP, DEM, ECUM, BSWM Already spported: WDG, RTE, OS Inter Process commnication (e.g. for ECUs with several controller) IPC commnication over SPI sing CAN like APIs

29 Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR Featres Under Development Tools DaVinci Tools Spport of platform development Assignment of SWCs or partial BSW config to ECU fnctions Atomatic fnction assignment by analysis of dependencies Selective diff/merge based on ECU fnctions New add-on tool Vector ARXML Editor Qick display of any ARXML file content Editing of the model with a generic editor Tools: System Design SWC Design BSW Configration Virtal Integration ECU and System Test ECU Calibration PREEvision CANdela Stdio DaVinci Developer DaVinci Configrator Pro vvirtualtarget CANoe CANape

30 Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR Featres Coming Next MICROSAR MICROSAR4 Time Synchronization according to AUTOSAR 4.3 StbM, EthTSyn, CanTSyn, FrTSyn Identity Manger (PB-Selectable) of TSyn modles (commnication aspect) Spport of SWC external triggers (TriggerInterface, ExternalTriggerOccrredEvent) Flash access coordinator Enable coexistence between memory stack and crypto rotines SafeBSW completion E2EXF and COMXF AUTOSAR 4.3 Crypto Stack (CSM; CRYIF; CRYPTO; SECOC) J1939 Badrate Negotiation Commnication drivers spporting Greenhills Integrity RTOS

31 Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR Featres Under Development AUTOSAR Org AUTOSAR Adaptive First Release March 2017 Commnication Management AUTOSAR defined middleware (ARA::com) Service oriented C++ binding Sitable for IPC and ETH commnication via SOME/IP (SD) Exection Management Start application(s) and control their shtdown. Shtdown of the complete ECU. Diagnostics ISO (UDSoverIP) DoIP DTC handling Logging and Tracing Spport of DLT protocol

32 Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR Featres Under Development MICROSAR MICROSAR Adaptive Prototype 1st Prototype based on Adaptive AUTOSAR Rnning on Linx Middleware (ARA::com) Exection Management Diagnostic (UDS) Log and Trace For Evalation only

33 Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR Featres Coming Next AUTOSAR Org AUTOSAR Adaptive Release 2017 Oct Package Management Application pdate Commnication Management CAN network spport (signal-based commnication) E2E spport Secrity extensions User Management Secre key storage File encryption Platform Health Management Watchdog fnctionality Clod interaction HW acceleration via OpenCL

34 Vector s Roadmap for AUTOSAR 4.3 & Adaptive AUTOSAR Otlook MICROSAR MICROSAR Adaptive Prodction Release of MICROSAR Adaptive

35 Thank yo for yot time! For more information abot Vector and or prodcts please visit Athors: Stephen Waldron Vector GB Limited Vector GB Limited. All rights reserved. Any distribtion or copying is sbject to prior written approval by Vector. V