Streamlining secure connected-car application development

Today’s auto designers rely more and more on ECUs to manage intricately featured applications, including brake-by-wire, automatic transmission, multi-mode lighting, parking assist, collision avoidance and many others. These ECUs are enabling 'digital' control of each function of the car through sending commands over the communication network that interconnects the vehicle sub-systems. Moreover, more cars are becoming connected to the cloud enabling new functionalities like OTA software updates, remote diagnostics and the forthcoming V2X communication.

To safely support such trends, there is an acceleration in the deployment of robust hardware and software security platforms that are managed over the entire vehicle lifetime.

ST is working with ETAS and ESCRYPT to deliver a cost-effective platform for sub-system developers to create ECUs that ensure a high level of protection for vehicle-owners’ privacy, OEMs’ intellectual property, ECU functional integrity and secure communication among the car’s ECUs and the cloud.

“This well-architected and easy-to-use development platform will deliver unprecedented convenience to customers in the form of a ready-made solution that combines the security know-how of ESCRYPT, ETAS and ST,” said Luca Rodeschini, Director, Strategic Business Development and Microcontroller Business Unit, Automotive and Discrete Product Group, STMicroelectronics.

The solution ST is developing with ETAS and ESCRYPT leverages the SPC58 series of power-efficient and real-time-capable automotive MCUs, which feature a built-in Hardware Security Module as well as multiple state-of-the-art CAN FD interfaces, plus LIN, FlexRay and Ethernet with time-stamping to implement both control units with a functional integrity check and an in-vehicle network with encrypted communication. This approach expands ST’s offering for connected-car defence, which also includes Secure Elements, or embedded SIMs, for protection against internet-based attacks on ECUs and gateways that can steal personal data or compromise important vehicle systems.

“SPC58 automotive MCUs deliver the underlying ruggedness and hardware security the industry needs at a competitive price. They have already been selected by a major Tier-1 supplier for a secure OTA application that enables remote software fixes and upgrades without requiring customers to bring their vehicles to a repair garage,” added Rodeschini.

ESCRYPT is contributing its expertise in secure ECU communication, including distribution of OTA software updates, and provides firmware and middleware for ECU developers to utilise the SPC58 HSM. Together, the HSM and ESCRYPT’s security technologies handle all the necessary authentication of trusted sources and prevention of access by unauthorised agents.

"We provide our product CycurHSM, the essential solution that exercises the HSM and our Key Management Solution to secure every aspect of the ECU’s activity, including secure boot-up, programming and updates, as well as secure in-vehicle communication,” explained Dr. Thomas Wollinger, Managing Director, ESCRYPT.

The solution leverages ETAS’ proven RTA software products that support ECU code development. RTA-BSW (Basic Software) consists of a full AUTOSAR solution including AUTOSAR R4-compliant basic software capable of supporting safety-critical ECUs for both passenger cars (ISO 26262) and off-highway (ISO 25119) domains. RTA-BSW is complemented by ISOLAR-A and ISOLAR-EVE tools for authoring and testing a full ECU software stack in a virtual environment.

AUTOSAR, the AUTomotive Open Systems Architecture, is the accepted automotive industry framework for scalable, interoperable, standards-compliant embedded systems, which enables developers to bring new products to market quickly and cost-effectively while allowing scope to create differentiating features.

“We are building on a proven record of successful collaborations with ST,” said Dr. Nigel Tracey, leader of the ETAS Application Field RTA Solutions. “With our comprehensive ECU development environment, and the added dimension of advanced security from our subsidiary ESCRYPT, this new platform will enable OEMs to maximise the value of the connected-car concept and quickly build confidence among partner organisations and end users.”