Diagnostics is evolving

Transcription

1 Diagnostics is evolving Vector India Conference, V

2 Agenda AUTOSAR Development Remote Diagnostics and OTA Secrity 2

3 AUTOSAR Development DEXT Diagnostic Extract Template (=DEXT) Part of AUTOSAR version 4.2. and newer Configration of diagnostic BSW modles in AUTOSAR ECUs AUTOSAR Classic > Diagnostic Commnication Manager (DCM) > Diagnostic Event Manager (DEM) > Fnction Inhibition Manager (FIM) Spported protocols: UDS, OBD, J939 Designed as data exchange format between OEM and sppliers 3

4 AUTOSAR Development Classic data formats Flashing ODX Focs of ODX is tester parameterization, spanning mltiple models Focs of DEXT is AUTOSAR BSW configration Variant Coding CDD spports tester parameterization, BSW configration and diagnostic validation Services, Data, Commnication DEXT CDD Tester Parameterization BSW Configration Diagnostic Validation 4

5 AUTOSAR Development Classic tool chain Diagnostic Reqirements Definition Common Database PREE vision WindowPosition (readable DID) CSV AUTOSAR System Design Diagnostic Commnication Design PREE vision WindowPosition (scaling, access via SWC port WindowPos ) CANdela Stdio WindowPosition (assigned to ID 0x602) SYS-EX SWC references DIAG-EX CDD ODX AUTOSAR SWC Design (Diagnostic Interfaces) AUTOSAR BSW Configration (Dcm, Dem) Diagnostic Validation Diagnostic Tester Parametrization DaVinci Developer or PREEvision DaVinci Configrator PRO CANoe.DiVa 3rd Party Tool 5

6 AUTOSAR Development Classic tool chain characteristics Spport of distribted development > Reqirement definition in PREEvision > Software modelling in PREEvision > Diagnostic commnication design in CANdelaStdio > BSW configration in DaVinci Configrator Pro Spported se cases > DIDs (stored data, present vales) > IO Control > Rotines > DTCs Rese of information of other process steps Generation of DEXT and ODX > Standardized soltion for ECU software configration and tester parameterization 6

7 AUTOSAR Development Adaptive - being prepared for the next generation of ECUs Additional, high performance ECUs hosting applications for pcoming se cases Adaptive MICROSAR is a complete basic software soltion p to ASIL D Seamless interoperability with classic AUTOSAR ECUs Infotainment ADAS sorce: fotolia Applications installed and started dring rntime Connectivity Development of applications in the ecosystem of POSIXbased OS (Linx, PikeOS, QNX, Integrity, ) Dynamic Software Platform 7

8 AUTOSAR Development Adaptive Diagnostic Manager No fndamental changes to existing diagnostic workflows (like development, prodction, workshop, ) de to Adaptive Platform Main Tasks Application (Software Components) Diagnostic Coding Callbacks Diagnostic Measrements Callbacks Diagnostic Rotines Diagnostic Monitor Diagnostic Monitor Diagnostic Monitor ISO (UDSonIP) Inclding falt-memory (DTC) handling Inclding transport layers (i.e. DoIP ISO 3400-x) ara::com Configrable via AUTOSAR Diagnostic Extract (DEXT) Diagnostic Manager Diagnostic Reqest Diagnostic Response Tester 8

9 AUTOSAR Development Adaptive Diagnostic Manager Adaptive ECU SWCL A TA=0xC000 SWCL B TA=0xC00 Platform SWCL TA=0xA000 App A App A2 ara::com App B App P App P2 Each SWCL has its own Diagnostic Address, Diagnostic Configration, Falt Memory. Each SWCL is managed by its own Diagnostic Server Instance OS EM DiagServerI nstance DiagServerI nstance 2 DiagnosticManager DoIP DiagServerI nstance 3 Each UDS reqest is dispatched towards SWCL according to its Target Address. The same tooling as for ASR classic development can be sed 9

10 Agenda AUTOSAR Development Remote Diagnostics and OTA Secrity 0

11 Remote Diagnostics and OTA Diagnostics today

12 Remote Diagnostics and OTA Use cases for remote diagnostics Test drive or test stand Prodction plant After-sales workshop OEM cooperation 2

13 Remote Diagnostics and OTA Vector Indigo Remote was the first implementation of Remote Diagnostics over CAN Indigo Remote Server Internet, UMTS Internet, UMTS Indigo Access Indigo Point Indigo Remote Vehicle Specialist, Test Driver Windows-PC Windows-PC or VN880 Windows-PC Diagnostic Expert Network Interface 3

14 Remote Diagnostics and OTA Vector Remote D-PDU API enables Remote Diagnostics by 3rd Party tools Vector Clod Internet, UMTS Internet, UMTS Technician, Test Driver Remote Tester D-PDU API Application D-PDU APIAccess Point ODX Windows-PC D-PDU Remote API D-PDU API Windows-PC Tester Application ODX Diagnostic Expert Network Interface 4

15 Remote Diagnostics and OTA Traditional diagnostic test tools Diagnostics from a distance Diagnostics in the Clod In-vehicle-SW (Over-the-air) Indigo, vflash, CANoe, CANalyzer, Indigo Remote, Remote D-PDU API, VN880 Vector Diagnostics Web Services, Remote D-PDU API OTA Framework 5

16 Remote Diagnostics and OTA OTA 6

17 Remote Diagnostics and OTA Use case : Software pdate over the air (SOTA) adds vale & saves money Avoid expensive recalls Fix problems thr SW pdate campaigns Enable new fancy featres and new bsiness models Offer an App Store in the vehicle Enable fnctionalities for a period of time only Keep vehicle p to date Enable vehicles for new se cases over lifetime Accomplish model pgrades by SW pdates 7

18 Remote Diagnostics and OTA Use case 2: Remote Diagnostics - Revoltionizes After Sales Cstomer Experience Compile and send reglar vehicle health-reports Smmarize present and stored failres, gas consmption, mileage, oil-level, Predictive maintenance > Call vehicle to the repair shop prior to occrrence of severe damages Get remote roadside assistance from central vehicle spport centers Allows remote diagnostics when malfnction indicator illminates: Contine drive or keep waiting for the towing service? Some EE isses can even be solved immediately. Make inspection and repair in car workshop more predictable and comfortable Actions, effort, time of visit can be planned beforehand based on vehicle health-report and an enhanced remote diagnostics when reqired Spare parts will be ordered early and are already available when car comes in 8

19 Remote Diagnostics and OTA Use case 3: Data Collection provides new insights into vehicles in the field Setp a campaign to analyze a certain phenomenon Select vehicles Define measrement configration and trigger condition Transfer configration from backend into vehicles of selected fleet Perform measrement, pre-evalate and collect data Transfer data to the backend Perform data analytics Refine configration if needed Close campaign Early feedback loop (e.g. on lanch of a new model) Internet Backend 9

20 Identical data sorces and process interfaces Identical data sinks and process interfaces Remote Diagnostics and OTA Holistic Approach In the clod Bs Traces Diagnostic data Diagnostic Seqence Resable Software Components In PC tools Measrement data In the vehicle 20

21 Agenda AUTOSAR Development Remote Diagnostics and OTA Secrity 2

22 Secrity OTA Threat Analysis Why is TLS pls a PKI not sfficient? TLS for all commnication between vehicle and Backend is reqired bt not sfficient TLS assres that yo are talking to the correct conterpart / address > Yo do not know if that conterpart is compromised or not TLS encrypts the commnication > Yo do not know if the data sent is genine or p to date Signatres assre that the data has not been tampered > Yo do not know if the data sent is still p to date > Yo do not know if the data was intended for yo or if it is the data yo reqested Yo shold se mltiple secrity measres always > Keys / TLS might be compromised Secrity mechanisms on application level are necessary Secrity concept of Vector OTA Framework covers all spported OTA se cases Applied secrity measres > Usage of offline and online keys > Implicit and explicit revocation of keys > Separation of dties > Mltiple roles sing different keys > Time synchronization / trsted time > Signed meta data garantee > Message integrity and encryption (TLS) > Freshness of data > Correct sender-recipient mapping > Detection of withholded data > 22

23 Secrity CANoe.DiVa Validation of diagnostic implementation on the ECU: CANoe.DiVa CANdelaStdio Specification of Diagnostic fnctionality Configrator CANoe Option DiVa Rntime Library Report Analyzer CDD ODX Generator CANoe XML/ CAPL CANoe Test Featre Set CANoe Test Report ECU Diagnostic Description CANoe Test Modle ECU System nder Test 23

24 Secrity Secrity Manager Vector OEM Secrity Sorce Vector Tool Secrity Manager OEM - Sign - Athenticate GUI - administration of Secrity Sorces - Configration of Secrity Sorces: - access to backend - Platform OEM 2 - Encrypt Back end File based RT Component - Crypto Bib - Sign/Verify - Encrypt/Decrypt - Athenticate, ASR SecOC/ (UDS Defalt) Clod 24

25 Secrity Tests in DiVa Protocol validation > Addressing and timing > Format: Processing of (in)valid reqests > Data types and vale limits Plasibility check of parameters > Read/write comparison > Expected vales (XCP/CCP) > IO/network signals Falt Memory Tests > Provoke and reset errors with VT system Mapping of test cases to reqirements Secrity > Exection of services in sessions/secrity levels/roles > Tests with valid and invalid certificates > Tests with otdated certificates > Chain of trst > Role / certificate mapping > 25

26 Smmary AUTOSAR diagnostic BSW is configred sing DEXT Vector offers a tool chain for the distribted development of ASR classic diagnostic BSW consisting of: > PREEvision > CANdelaStdio > DaVinci Configrator Pro For the development of AUTOSAR adaptive diagnostics the same tool chain can be sed Vector offers different soltions for remote diagnostics > Indigo Remote > Remote D-PDU-API The main se cases for OTA are > Software pdates over the air > Remote diagnostics > Data collection TLS for all commnication between vehicle and backend is reqired bt not sfficient for an OTA soltion Secrity mechanisms have to be intensively tested CANoe.DiVa together with the Secrity Manager allows the integration of secrity tests into the validation of the ECU diagnostic BSW 26

27 For more information abot Vector and or prodcts please visit Athor: Dr. Klas Beiter Vector Germany Vector Informatik GmbH. All rights reserved. Any distribtion or copying is sbject to prior written approval by Vector. V