Diagnostic Trends 2017 An Overview

Transcription

1 Diagnostic Trends 2017 An Overview Vector India Conference, V

2 Agenda 1. DoIP 2. Remote Diagnostics 3. Cyber Security 4. Summary 2/29

3 DoIP Why DoIP? Why another diagnostic network? Ever more bandwidth bottlenecks expected due to sophisticated ECU applications and increasing ECU numbers Automotive evolution to result in new demanding use cases Diagnostic paradigm change: wired & local networked & remote Why IP? Approach: Reuse available network instead of inventing a new one Ethernet and IP: Mature technology, available since 1980s Well-established standards with upper layer protocols (like TCP/IP) High bandwidth and scalable (switched) networking technology 3/29

4 Image source: Fotolia Image source: Fotolia Image source: Fotolia DoIP Envisioned Benefits Manufacturing Shorten flashing times Be able to flash even more at EOL After-Production Simplify short-term SW update of produced cars After-Sales/Garage Speed up quick check Shorten SW update times Simplify access to cars Allow value-adding services 4/29 * Image source: Fotolia

5 DoIP Envisioned Benefits Test Equipment High transfer rates - up to... CAN: 500kBit/s Ethernet: 100MBit/s 100BaseTX 500kBit/s 100MBit/s 5/29 CAN Eth

6 DoIP Envisioned Benefits Test Equipment Logistic Application Make vehicles become Internet nodes Identify individual vehicles Diagnose multiple vehicles at the same time Flash multiple vehicles at the same time 6/29

7 DoIP DoIP Protocol Stack from UDS to Ethernet UDS Message 0x22 01 DoIP Payload Max. ~ 4 GB Logical addresses to address in-vehicle ECUs DoIP Source Address DoIP Target Address UDS Message DoIP Message Max. ~ 4 GB Protocol Version Inv. Protocol Version Payload Type Payload Length DoIP Payload TCP Segments Default max. segment size (IPv4) 536 Bytes DoIP Message part n... DoIP Message part 2 DoIP Message part 1 Ethernet Frame Max Bytes Eth Hdr IP Hdr TCP/UDP Hdr DoIP Message part Eth CRC 7/29

8 DoIP Bandwidth in Relation to Packet Size High bandwidth, but significant overhead High transfer rates especially with large packets Example: Flashing DoIP CAN FD CAN /29

9 DoIP Flash-Programming in Practice Programming is more than transferring data over the network... Example: Flash 2 MB into ECU via 500kBit/s CAN Share of data transfer time: ~ 50% Reduction of overall flashing time limited to that portion only Maximize advantages when flashing in parallel... 9/29

10 DoIP DoIP vs. DoCAN Diagnostics over Ethernet (DoIP) Diagnostics over CAN (DoCAN) Integration in Network Infrastructure Easy Bus Access Multi Vehicle Access Low Cost and Complexity Very High Bandwidth Easy Bus Analysis DoIP offers vehicle access with unique benefits DoIP and underlying technology rather complex 10/29

11 Agenda 1. DoIP 2. Remote Diagnostics 3. Cyber Security 4. Summary 11/29

12 Remote Diagnostics Traditional (wired) Diagnostics VCI = vehicle communication interface, most often CAN-to-USB PC based test system Interactive diagnostics OBD: fixed set of data Enhanced diagnostics: Need for extensive vehicle-specific data description 12/29

13 Remote Diagnostics Wireless Diagnostics Dedicated VCI for wireless access CAN to Bluetooth, Wifi or 3G/4G Often: Used with smart device, like smartphone or tablet (lightweight) Supports OBD: fixed set of data Sometimes with small additional set of vehicle specific data (hardcoded) 13/29

14 Remote Diagnostics Remote Desktop Remote expert supports local worker Use of Windows Remote Desktop or TeamViewer application Remote control application running on local PC (via Internet) All tools and diagnostic data and procedures must be available on the local PC Local person sees the steps taken by the remote expert 14/29

15 Remote Diagnostics Diagnostics from a Distance Remote expert supports local worker Local VCI can be reused Dedicated application for remote expert, potentially with enhanced data and expert only functions Local person does not see steps taken by the remote expert Helpful when issues cannot be solved by local personnel Issue in the garage (field) Issue when setting up new assembly plant/line/model Even issues during development, e. g. on test drive Issues in a joint project, when help of partner is needed 15/29

16 Remote Diagnostics Diagnostics in the Cloud Local VCI can be reused, or dedicated wireless device Thin clients, diagnostics can be one part of an integrated garage repair and maintenance system. All data is available centrally, like vehicle health reports, repair operations,... Quick data updates possible, quick reaction on issues in the field Opens new business models Pay per use for free garages Services based on Big Data Requires reliable network connection! 16/29

17 Remote Diagnostics Over-the-air (OTA/SOTA) A diagnostic onboard client ( onboard tester ) and is part of the vehicle The vehicle connects to the Cloud by the connectivity system, = it extends to the Cloud. Used by the infrastructure rather than humans Key use-cases SW update (like mobile phones) Add new features by SW update Diagnostics Prognostics Added-value services, new business models (...) Requires reliable network connection! Challenge (not only) for security... 17/29

18 Remote Diagnostics Summary Traditional wired Diagnostics Wireless Diagnostics Remote Desktop Diagnostics from a Distance Diagnostics in the Cloud Over-the-air (OTA/SOTA) 18/29

19 Agenda 1. DoIP 2. Remote Diagnostics 3. Cyber Security 4. Summary 19/29

20 Cyber Security Recent Car Hacking Stories... Need Cyber Security like in traditional IT or mobile phones! Encrypt the in-vehicle network communication? 20/29

21 Cyber Security In-Vehicle Network Communication 21/29

22 Cyber Security Goals Security lets you assure that information is transmitted fully and unchanged and that only certain receivers have access to this information. Authenticity Trustworthy data exchange between senders and receivers Integrity Checking to ensure that information contents are complete and unmodified Confidentiality Data is encrypted and can only be read by authorized nodes 22/29

23 Cyber Security Today s Solution in ISO UDS Tester Tester needs to execute a protected service Examples for protected services: Write (2E) I/O Control (2F) Reprogramming Services For this, a tester needs to unlock a security mode ( level ) in the ECU. Start state once ECU is operational Locked 22 Security mode 2E 2F 23/29

24 Cyber Security Today s Solution in ISO UDS Tester 27 2n-1 Tester requests unlocking of security level #n 67 2n-1 se ed The ECU answers by sending a random value ( seed ) 27 2n k ey ECU computes a key from the seed 67 2n ECU also computes key and unlocks if tester and ECU keys match 24/29

25 Cyber Security Certificate Based Public Key Infrastructure to the Rescue? Property Seed/Key Public Key Infrastructure Authentication method Unidirectional (tester to ECU) Bidirectional Potential Benefit Tester can decide whether to send data to an ECU or not. Authorization Ability to compute key for a security level constitutes membership to group of authorized communication parties. Communication parties can be authenticated individually. Defining finegrained user role schemes greatly facilitated. Validity of keys Usually, keys valid indefinitely. Date of expiry can be defined for certificates. Attacks based on stolen testers significantly impeded. Extended Authorization ( Enhanced Rights ) Not possible Selective unlocking via dedicated certificates. Unlocking of critical functions can be bound to special conditions (e. g. tester connection to special company server ). 25/29

26 Cyber Security Challenges Security needs runtime. Impact on real-time? Security needs bandwidth. Redesign communication? Replace network? A state-of-the-art secure system is not necessarily still secure in 3 years. Security must be kept up-to-date after being delivered.... How to organize and setup a key infrastructure - in and ex vehicle? Usually there are thousands authorized users of diagnostics in service And, related to diagnostics... How to figure out hard-to-locate critical issues without accessing related in-vehicle signals? How do diagnostics despite of Cyber Security? Don t lock yourself out! 26/29

27 Agenda 1. DoIP 2. Remote Diagnostics 3. Cyber Security 4. Summary 27/29

28 Summary Diagnostic Trends DoIP brings high-speed access to vehicles and ECUs: It shortens flashing times and speeds up diagnostics. DoIP makes vehicles become Internet subnet or Intranet nodes. The term Remote Diagnostics is used for many different wireless scenarios. Scenarios range from rather simple, lightweight solutions to extensive server infrastructure based solutions. OTA/SOTA allows SW update of vehicles like with mobile phones today. Focusing on the impact of security on diagnostics only... Certificate based public key infrastructure approaches promise significant benefits compared to present-day seed / key approach. How to manage the key infrastructure for thousands of people involved in diagnostics - in different roles? How to do an in-depth diagnostic analysis despite of security? Don t lock yourself out! 28/29

29 Thank you! For more information about Vector and our products please visit Author: Vector Germany Vector Informatik GmbH. All rights reserved. Any distribution or copying is subject to prior written approval by Vector. V