Safe and Secure Automotive Over-the-Air Updates

Chowdhury, Thomas; Lesiuta, Eric; Rikley, Kerianne; Lin, Chung-Wei; Kang, Eunsuk; Kim, BaekGyu; Shiraishi, Shinichi; Lawford, Mark; Wassyng, Alan

doi:10.1007/978-3-319-99130-6_12

Cited by 21 publications

(12 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For example, periodic software updates are routinely applied to general-purpose computing and personal smart devices throughout their lifetime. Regular updates address flaws and bugs in software code, provide security and deliver new or additional system functionality [35,36]. According to [37], software can exhibit signs of ageing where old software versions lose market share and customers to new software products.…”

Section: Ageing and Out Of Date Codementioning

confidence: 99%

Continuous Automotive Software Updates through Container Image Layers

2021

View full text Add to dashboard Cite

The vehicle-embedded system also known as the electronic control unit (ECU) has transformed the humble motorcar, making it more efficient, environmentally friendly, and safer, but has led to a system which is highly dependent on software. As new technologies and features are included with each new vehicle model, the increased reliance on software will no doubt continue. It is an undeniable fact that all software contains bugs, errors, and potential vulnerabilities, which when discovered must be addressed in a timely manner, primarily through patching and updates, to preserve vehicle and occupant safety and integrity. However, current automotive software updating practices are ad hoc at best and often follow the same inefficient fix mechanisms associated with a physical component failure of return or recall. Increasing vehicle connectivity heralds the potential for over the air (OtA) software updates, but rigid ECU hardware design does not often facilitate or enable OtA updating. To address the associated issues regarding automotive ECU-based software updates, a new approach in how automotive software is deployed to the ECU is required. This paper presents how lightweight virtualisation technologies known as containers can promote efficient automotive ECU software updates. ECU functional software can be deployed to a container built from an associated image. Container images promote efficiency in download size and times through layer sharing, similar to ECU difference or delta flashing. Through containers, connectivity and OtA future software updates can be completed without inconveniences to the consumer or incurring expense to the manufacturer.

show abstract

Section: Ageing and Out Of Date Codementioning

confidence: 99%

Continuous Automotive Software Updates through Container Image Layers

2021

View full text Add to dashboard Cite

show abstract

“…The assumption is that the suggested synchronised development process (Section 3) supports a joint incremental assessment/certification process with a similar approach, which might be enhanced by an assurance case template approach [3].…”

Section: Validation Test Parameters Validation Specificationmentioning

confidence: 99%

Synchronisation of an Automotive Multi-concern Development Process

Skoglund

Warg

Hansson

et al. 2021

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Standardisation has a primary role in establishing common ground and providing technical guidance on best practices. However, as the methods for Autonomous Driving Systems design, validation and assurance are still in their initial stages, and several of the standards are under development or have been recently published, an established practice for how to work with several complementary standards simultaneously is still lacking. To bridge this gap, we present a unified chart describing the processes, artefacts, and activities for three road vehicle standards addressing different concerns: ISO 26262 -functional safety, ISO 21448 -safety of the intended functionality, and ISO 21434 -cybersecurity engineering. In particular, the need to ensure alignment between the concerns is addressed with a synchronisation structure regarding content and timing.

show abstract

“…This method enables efforts saving, raising issues which may not be identified instead and multidimensional decision making. Finally, an argumentation case for safe and secure automotive OTA updates was presented by T.Chowdhury et al [28].…”

Section: Related Workmentioning

confidence: 99%

Safety and Security Concept for Software Updates on Mixed-criticality Systems

Mugarza

Yarza

Agirre

et al. 2021

2021 5th International Conference on System Reliability and Safety (ICSRS)

View full text Add to dashboard Cite

The raising connectivity of critical embedded systems makes them vulnerable to cyber-security attacks that compromise not only privacy but also safety. This results in intricate dependencies between functional safety and security, and higher demands to address both disciplines simultaneously. However, there are still many gaps on the common application of functional safety and cyber-security standards. Over-The-Air (OTA) software updates are a clear example of this challenge. While the installation of regular software upgrades is a crucial cyber-security practice to keep the system up-to-date with the latest security patches, they might involve high re-certification efforts and costs from a safety standpoint. In this paper, a safety and security concept for software updates on mixed-criticality systems is presented. Particularly, a combined safety and security risk assessment on an automotive use case is performed and risk mitigation measures proposed.

show abstract

Safe and Secure Automotive Over-the-Air Updates

Cited by 21 publications

References 9 publications

Continuous Automotive Software Updates through Container Image Layers

Continuous Automotive Software Updates through Container Image Layers

Synchronisation of an Automotive Multi-concern Development Process

Safety and Security Concept for Software Updates on Mixed-criticality Systems

Contact Info

Product

Resources

About