Overview of Security Support in Vector Tools

Transcription

1 Overview of Secrity Spport in Vector Tools Secrity Manager V

2 Agenda Motivation Challenges Secrity Manager Otlook 2

3 Motivation Secrity protects Featres and Bsiness Models Secrity Goals: Integrity Checking to ensre that information contents are complete and nmodified. Athenticity Trstworthy data exchange between senders and receivers Confidentiality Data is encrypted and can only be read by athorized nodes. Replay protection: Freshness Mechanism prevents replay of valid pairs of data and athentication New challenges: Simlation and testing of secred ECUs and Networks Testing of secrity mechanism MAC = Message Athentication Code 3

4 Motivation Example: Secre Onboard Commnication Sender Receiver Secret key k Secret key k MAC calclation MAC verfication Calc. MAC RX MAC PDU-ID DLC Data Athentic-I-PDU Freshness MAC PDU-ID DLC Data Athentic-I-PDU Freshness Athentic-I-PDU FV MAC Secred I-PDU Athentic-I-PDU FV MAC Secred I-PDU MAC = Message Athentication Code 4

5 Motivation Effects on Tools withot Secrity Spport Use Case: MAC based Commnication Analysis of the commnication (real/ offline) Remaining bs simlation / Stimlation Data can be read Athentication verification Athentication calclation Use Case: Encrypted Commnication Analysis of the commnication (real/ offline) Remaining bs simlation / Stimlation Data mst be decrypted Data mst be decrypted Data mst be encrypted 5

6 Challenges Tools need Secrity Access to secrets (Keys, Certificates ) File based OEM Secrity Backend Secret Management Availability of secrets in each car life cycle: > Development > Prodction > After Sales OEM specific concepts for Key distribtion/generation > Car manages keys atonomos > Global OEM database manages all keys > OEM specific process spport Spport of several Freshness systems > Conter > Time > Trip based > OEM specific > Spport of reqired cryptographic fnctions Simlation spport 6

7 Secrity Manager Secrity Use Cases Secred on Board Commnication Spport of the AUTOSAR standard and OEM specific variants Use case: Message Athentication, Encryption Freshness Management SecOC Secred Diagnostics Tester Athentication, Secrity Access & Access Right management Encrypted/Signed diagnostic commnication Coding Software Download (Flashing) Signing of code or flash data (e.g. ODXStdio) Unlocking of encrypted commnication (Testing, Logging) Diagnostics Uniqe Secret Management Administration of keys and certificates Secre secret storage Spport of OEM specific certificate systems Secrity Manager 7

8 Secrity Manager Concept Crypto Backend Secrity Sorces Vector Tools Generic AR SecOC Secrity Manager SecrityManager Client for CANoe CANoe OEM 1 OEM 2 Another Client Secrity Manager UI Device Under Test OEM specific Tool specific Interface Bs System 8

9 Secrity Manager Secrity Administration Secrity Configration and Management Common sage for all Vector tools Plgin mechanism for OEM specific Secrity Sorces: > Definition of OEM Secrity Profiles > Featre set (Athentication calclation and verification, Freshness ) > Optional: Access to an OEM Secrity Backend > OEM specific Krypto fnctions OEM specific Management of certificates and keys (Import ) > Several sets per profile are possible Secre storage of the secrets 9

10 Secrity Manager Tool Interface Use Case based Interface: Encryption, Athentication Encapslation of the secrets, Tool client cannot export keys and certificates Low level crypto fnctions for tests Key Store Contains keys and certificates Import of temporary keys and certificates from the tool Resable Freshness Manager models: Conter / time stamp, Trip Conter based OEM specific variants Tool specific 10

11 Secrity Manager Tool featres 1/2 - CANoe: Secred on board commnication Spported bs systems > CAN/FD > FlexRay > Ethernet Atomatic Athentication calclation / verification nder consideration of the correct keys and freshness models Reqirement: AUTOSAR database 11

12 Secrity Manager Tool featres 2/2 - CANoe: Secred on board commnication CAPL Interface Callback after verification of secred PDUs Callback to modify TX data (Data, Freshness, Athenticator) before transmission Low-level fnctions for athenticator creation /verification Fnction to implement ser specific freshness models 12

13 Secrity Manager Secrity Setp 1/3 Secrity data import into Secrity Manager Secrity Profile template selection (OEM1, OEM2 ) Creation of Profile : > Import of keys and certificates > Inpt of Profile parameter (Accont, Freshness ) 13

14 Secrity Manager Secrity Setp 2/3 Secrity Profile mapping in tool Secrity Profile selection from Secrity Manager provided profiles Usage in the tool context > Network > Diagnostics connection >. Activation of the secrity spport 14

15 Secrity Manager Secrity Setp 3/3 Usage of Secrity Manager services The Vector tool can se now the secrity featres CANoe / Secred on board commnication > Bilt in Athenticator calclation /verification of Secred-I-PDUs > CAPL fnctions: Test athenticator calclation /verification > CAPL Callbacks: TX and RX of Secred PDUs, Freshness 15

16 Otlook Distribtion & Roadmap Distribtion The secrity spport is a typical tool featre -> no separate prodct Secrity Manager and AR SecOC Sorce are installed together with the tool OEM Secrity sorces are installed together with the OEM Add on package Roadmap Secrity Manager together with CANoe 10.0SP3 > Secrity Manager UI > ASR SecOC Sorce > Min. CANoe: 10.0 SP3 Secrity Sorces > DAG available > TMC available > Nissan available > VAG nder development, Q1/2018 > Frther tool connections are in planning > CANape, vflash, Indigo, 16

17 Yor qestions are welcome! Athor: Marks Fischer, Iain Cnningham Vector Germany Vector Informatik GmbH. All rights reserved. Any distribtion or copying is sbject to prior written approval by Vector. V