Automotive Cybersecurity: Device Tamper Protection & Secure Over-the-air Updates

Security risks do not commence when the production of the automobile is finalized; they begin at the point of manufacture, where individual components and devices are manufactured. The interconnected manufacturing systems, along with the components and devices produced, are the initial attack surfaces that require strong security. The modern automobile, with its numerous complex systems, necessitates the use of several Electronic Control Units (ECUs), which, in turn, are a common point of attack. In order to protect the components and devices, they can be given digital identities that not only provide tamper protection but also secure the complete automotive supply chain. These components and devices can identify and authenticate themselves whenever or wherever required. The complexity in vehicles has grown in tandem with the rise of autonomous, electric, connected, and shared mobility. Vehicles are now more software-driven, with ~ 50-100 ECUs and millions of lines of code. To keep the vehicle fully functional, secure, and running, it is necessary that the firmware in ECUs is continuously updated. Remote software updates provide a solution that enables over-the-air updates (OTA), through a gateway inside the vehicle to the ECU, allowing the vehicle to receive secure OTA updates. These updates are required to meet the UN Regulation No. 156 - Software update and software update management system. The device tamper protection and firmware over-the-air updates from UTIMACO’s Automotive Trust Suite enable various market players, such as OEMs and Tier-1s, to secure devices and components and enable secure remote software updates. Highlights of the webinar: • A reliable device attestation solution for automobile, manufacturing, and third-party use • Tamper protection for components and devices • Secure communication from each device and component • Secure remote software updates for smart vehicle components