Secure software updates

Securing software updates over the air is a critical component in the overall strategy of keeping the vehicle software patched while preventing the tampering of ECU software. To achieve this objective, an end-to-end approach is needed, starting with the backend and terminating at the target ECU. This holistic approach requires a series of security controls to be applied at each stage of the OTA update process, including a robust update service architecture, strict access controls and privilege separation in the backend, secure data transfer to the vehicle, and authentication and encryption of software packages before software reprogramming. Let’s examine these security controls closely throughout the software update chain.

First, a code-signing service is needed to protect the authenticity and integrity of software updates before they are deployed. Establishing a secure service that enables suppliers to submit their software packages for signing is...