Thomas Fleischmann June 5 th 2015
2
3
Agenda The big picture SW-Update today Diagnostics vs SW-Update Our solution for SW-Update The real challenges beyond getting a file into the car Elektrobit (EB), 2015 4
More and more product value from software Automotive Mobile Software Components Silicon Components Mechanical Components Other 22% 7% 41% 11% 15% 5% 69 % 30% Source: VDC Research, June 2013 Elektrobit (EB) 2015 5
Agenda The big picture SW-Update today Diagnostics vs SW-Update Our solution for SW-Update The real challenges beyond getting a file into the car Elektrobit (EB), 2015 6
Elektrobit (EB) 2015 Confidential 7
From the CE industry Elektrobit (EB) 2015 8
Agenda The big picture SW-Update today Diagnostics vs SW-Update Our solution for SW-Update The real challenges beyond getting a file into the car Elektrobit (EB), 2015 9
Different kinds of flashing Calibration / Code Parameter settings E.g. 0101111011 on -> off Data set download Data set 1 0101111011 Flashing Application Bootloader, OS Elektrobit (EB) 2015 10
UDS update programming Read data by Identifier Diagnostic session control extended session Routine Control Check Prog Precond. Control DTC Setting (-> Off) Comm. Control Disable Non-Diag.Comm. Diagnostic Session Control Prog.Session Security Access Request Seed Transfer Key Write data by Identifier -Write fingerprint Read ECU identification in oder to check HW/SW compatibility Switch to extended session as next steps are not allowed in default session Check preconditions e.g. motor off, battery V sufficient Disable trouble code storage Disable normal ECU communication Switch to the programming session Login procedure, depending on security level Write ID of tester to document programming Elektrobit (EB) 2015 11
UDS update programming Routine control - erase memory Request download Transfer data Request transfer exit Routine control check memory and reprog. dependencies ECU Reset Comm. Control enable Non- Diag.Comm. Control DTC Setting Diagnostic session control Default session Erase flash memory Prepare ECU for download In a loop: Transfer data blocks to ECU End download often the actual flash is started now Verify and ensure consistency Restart the ECU Re-enable normal communication Switch on trouble code logging End of programming Elektrobit (EB) 2015 12
On-Board Diagnose (2) Modern gateway architecture CAN motor ECU Trans control FlexRay drive by wire DoIP,... Diagnostic CAN Gateway Comfort CAN Door climat contr. ACC LIN fan Infotainment navi radio telematic ethernet front camera rear camera Elektrobit (EB) 2015 13
Agenda The big picture SW-Update today Diagnostics vs SW-Update Our solution for SW-Update The real challenges beyond getting a file into the car Elektrobit (EB), 2015 14
One aproach Add a special agent into each ECU SW- Packages Backend SW- Packages OMA- DM Server OEM specific OMA- DM Client Update agent manager TCU Update agent ECU Update agent ECU Update agent ECU Elektrobit (EB) 2015 Confidential 15
Agenda The big picture SW-Update today Diagnostics vs SW-Update Our solution for SW-Update The real challenges beyond getting a file into the car Elektrobit (EB), 2015 16
EB Solution: Evolution versus Revolution Solution: Use established mechanisms and processes with smart extensions Client receives SW Update via online connectivity (e.g. OTA-DM) Connection is secured via established mechanisms Internally an onboard diagnostics tester is connected to other ECUs Benefits Only one specific OTA-DM Client needed Legacy ECUs can be updated as well as next generations ECUs Avoid introducing a completely new path that has to be secured OTA for existing architectures more efficient and faster Elektrobit (EB), 2015 17
EB Solution The Smart Antenna A smart antenna will concentrate all wireless protocols in one place and secure the car infrastructure from the wireless access. Technologies: Linux/Autosar multi-core system Firewall between Linux and Autosar Update OTA enabled Secure connection to back-end system Ethernet connection to gateway Linux Hypervisor Autosar Elektrobit (EB) 2015
The real Challenge Obvious, but not the challenge: Download packages to the car, Variants and versions to be managed The real challenges are: Security & attack vectors Update distributed functions Dealing with power consumption Elektrobit (EB), 2015 19
Security Solutions by EB With more than 10 years of experience in engineering security processes and solutions, we are the perfect partner for carmakers and Tier 1 suppliers when ECUs require a secure software base. Use Cases: Authentication Signature Flash protection Software-enabling (carmaker-specific or according to HIS) Anti-theft protection Mileage protection Secure on-board communication Data protection Support for cryptographic hardware, e.g., SHE and HSM Compression and decompression Benefit from: Deep expertise Standardized and efficient embedded cryptography architectures based on AUTOSAR, HIS-Standard and customerspecific software: EB s security solutions seamlessly integrate into EB tresos AutoCore Reliability Support during the entire software life cycle paired with comprehensive maintenance services: EB s security solutions are already on the road in millions of cars Elektrobit (EB), 2015 20
Agenda The big picture SW-Update today Diagnostics vs SW-Update Our solution for SW-Update The real challenges beyond getting a file into the car Elektrobit (EB), 2015 21
The mirrored car Elektrobit (EB) 2015 22
Battery BIG BATTERY IMAGE Elektrobit (EB) 2015 23
Things to touch Elektrobit (EB) 2015 24
Building a SW Update OTA solution needs B EB Expert know how about the system (EB tresos and AUTOSAR) Solutions to save on battery power (e.g. pipelined programming, partial networking,.. ) Solid understanding and partners for the backend An answer to ensure overall system security (Hypervisor, security solutions, ) Good understanding about future vehicle networks (smart antenna, role of domain controllers, ) Elektrobit (EB) 2015 25
Thank you! automotive.elektrobit.com Thomas.Fleischmann@elektrobit.com