Secure Automotive On-Board Protocols: A Case of Over-the-Air Firmware Updates

The software running on electronic devices is regularly updated, these days. A vehicle consists of many such devices, but is operated in a completely different manner than consumer devices. Update operations are safety critical in the automotive domain. Thus, they demand for a very well secured process. We propose an on-board security architecture which facilitates such update processes by combining hardware and software modules. In this paper, we present a protocol to show how this security architecture is employed in order to achieve secure firmware updates for automotive control units.

[1]  S. Mahmud,et al.  Secure software upload in an intelligent vehicle via wireless communication links , 2005, IEEE Proceedings. Intelligent Vehicles Symposium, 2005..

[2]  Lei Sun,et al.  A Framework for Self-Verification of Firmware Updates over the Air in Vehicle ECUs , 2008, 2008 IEEE Globecom Workshops.

[3]  Eylem Ekici,et al.  Wireless Access in Vehicular Environments , 2009, EURASIP J. Wirel. Commun. Netw..

[4]  Ludovic Apvrille,et al.  Security requirements for automotive on-board networks , 2009, 2009 9th International Conference on Intelligent Transport Systems Telecommunications, (ITST).

[5]  R. Bogenberger,et al.  A Novel Network Architecture for In-Vehicle Audio and Video Communication , 2007, 2007 2nd IEEE/IFIP International Workshop on Broadband Convergence Networks.

[6]  Hagai Bar-El.  Intra-Vehicle Information Security Framework , 2009 .

[7]  Christof Paar,et al.  Secure In-Vehicle Communication , 2006 .

[8]  Christof Paar,et al.  Embedded Security in Cars , 2006 .

[9]  Pai H. Chou,et al.  Remote progressive firmware update for flash-based networked embedded systems , 2009, ISLPED.

[10]  Ulf Lindqvist,et al.  Key management and secure software updates in wireless process control environments , 2008, WiSec '08.

[11]  Gernot Heiser,et al.  Operating systems technology for converged ECUs , 2008 .

[12]  D.K. Nilsson,et al.  Secure Firmware Updates over the Air in Intelligent Vehicles , 2008, ICC Workshops - 2008 IEEE International Conference on Communications Workshops.

[13]  Yuval Elovici,et al.  Google Android: A State-of-the-Art Review of Security Mechanisms , 2009, ArXiv.

[14]  Matti Valovirta,et al.  Experimental Security Analysis of a Modern Automobile , 2011 .