Over-the-Air Updates and Cybersecurity A Brave New World – But Safe

Related Vendors

FAULHABER Drive Systems

Wuxi InfiMotion Technology Co., Ltd.

Automakers need a software platform that allows them to manage software updates as well as the condition and status of their vehicles. They must be able to input and read data in and out of the vehicle and be capable of interacting securely with each individual vehicle. This article describes a holistic approach that goes far beyond a pure OTA solution.

With the transition to software-defined vehicles (SDVs), complexity is increasing almost exponentially. Of course, car manufacturers and suppliers are generally in a position to develop the components required for communication between the vehicle and the cloud in the vehicle and on the backend server themselves and to support them over the entire service life of the vehicle. However, this requires not only a qualified internal team, but also a considerable development effort.

Sibros addresses the growing complexity with its Deep Connected Platform, which integrates over-the-air (OTA) updates, data logging and remote diagnostics into a unified vehicle-to-cloud system. This platform is designed to adapt to different vehicle architectures, including centralized and zonal designs, making it compatible with a wide range of vehicles.

The Basis: OTA Update System

The foundation of the platform is its OTA update system, which is essential in the age of SDVs. As vehicles increasingly rely on interconnected ECUs for critical operations, updating software is becoming an operational priority. Sibros' OTA solution enables accurate updates to the software that controls these ECUs without the need for a physical connection to the vehicle. The process is secure and uses multi-factor authentication, certificate validation and robust encryption protocols to ensure the integrity and authenticity of the updates. These measures mitigate risks such as unauthorized software tampering or data breaches and are essential for protecting vehicles from cyber threats.

In addition to its OTA capabilities, the platform is characterized by data collection and analysis. The system can collect extensive, detailed data from each vehicle, including parameters such as sensor outputs, engine performance, battery health and user interactions. Data is collected in near real-time, allowing car manufacturers to maintain a comprehensive overview of fleet performance and identify potential issues before they escalate. This is crucial for reducing vehicle downtime and increasing operational efficiency. Once collected, the data is processed by the platform's analytics tools, which use algorithms to detect anomalies, predict maintenance requirements and provide actionable insights to engineering and service teams.

Precise Updates

The update process itself is extremely dynamic. The platform offers the ability to address specific ECUs, modules or systems within a vehicle so that precise updates can be carried out without affecting other software functions. In addition, the solution also allows small software elements to be updated so that the vehicle is not at a standstill for several hours to perform a full update. Instead, the update of the small software component may only take a few minutes. If a car owner can't use their vehicle for 15 hours because of an update, that's basically a disaster. However, if the update runs smoothly in the background without restricting the usability of the vehicle, the car owner usually does not even notice the updates and can use new functions when needed. The service quality of the OTA functions is therefore of fundamental importance.

This targeted approach is beneficial for vehicles with complex architectures, such as those with a zonal or centralized design. In addition, the platform supports rollback prevention and ensures that outdated or compromised software cannot be restored. This is an important security measure for maintaining the operational integrity of vehicle systems.

Logging and Analysis in Real Time

In addition to the OTA functions, the solution also has data logging and analysis functions. Vehicles already generate a huge amount of data, covering aspects such as performance metrics, sensor outputs, user interactions and environmental conditions. Managing and analyzing this data is a significant challenge for automotive manufacturers, especially given the variety and volume of information collected across fleets. Sibros addresses this challenge with an integrated system that collects, processes and interprets data in real time. Fleet management companies can use this software to optimize their fleet management and even carry out their maintenance work via a central platform.

The platform uses edge computing to enable instant data processing in the vehicle itself, while also transmitting key insights to cloud servers for further analysis. This two-tiered approach ensures that key diagnostics and insights are immediately available to engineers and service teams, allowing them to better monitor vehicle performance and proactively address potential issues. For example, patterns identified in brake system performance data could indicate early signs of wear and tear and prompt preventative maintenance before the problem escalates. Such predictive analytics are invaluable for optimizing vehicle reliability and reducing operating costs for fleet operators.

Remote Diagnosis

Remote diagnostics further extends the platform's capabilities and offers OEMs the ability to interact with a vehicle's systems remotely. This feature is particularly useful in fleet management, where maintaining operational efficiency is of paramount importance. Using the Deep Connected Platform, engineers can remotely run diagnostic commands, access vehicle logs and even troubleshoot issues without having to take the vehicle to a workshop. For example, a fleet operator could use remote diagnostics to detect an anomaly in an electric vehicle's battery system and take immediate corrective action.

Scalability

An important aspect of the platform's data management system is its scalability. Whether the fleet consists of a handful of vehicles or thousands, the platform's architecture is designed to handle large volumes of data without compromising processing speed or accuracy. This scalability is particularly beneficial for car manufacturers operating in multiple markets where data collection and management requirements can vary significantly.

Modular Architecture

The architecture of the Deep Connected Platform is modular and can therefore be adapted to a wide range of vehicle designs. Thanks to its modularity, the solution can be scaled and customized according to specific requirements, regardless of whether it is a fully electric vehicle or a hybrid. The system can be seamlessly integrated into existing vehicle electronic ecosystems, minimizing the need for extensive revisions or compatibility adjustments.

Secure Bootloader

Another important aspect of the platform is its secure bootloader technology. This bootloader ensures that software updates can be carried out without compromising the operational integrity of the control units. It prevents rollback attacks and enforces strict verification mechanisms during the update process. This is particularly important for compliance with the safety standards and regulations that apply to automotive electronics.

Development and Entire Service Life

The Sibros solution is designed to work across the entire lifecycle of a vehicle. During the design and development phase, it provides real-time diagnostics and compliance tools that enable manufacturers to effectively overcome challenges in the development phase. When the vehicle goes into production, the platform supports factory testing by verifying ECU configurations and optimizing supply chain logistics. Once the vehicle is in the hands of the end user, the platform's remote diagnostics and OTA capabilities ensure that it remains up to date and operational throughout its lifetime.

The platform also plays a crucial role in ensuring regulatory compliance. By continuously monitoring software versions and diagnostic data, it helps car manufacturers comply with regional and global standards, minimizing the risks associated with non-compliance. This is important because automotive electronics regulations are constantly evolving and imposing stricter requirements on manufacturers.

Seamless Digital Ecosystem

The key advantage of the Deep Connected Platform lies in its ability to create a seamless digital ecosystem within the vehicle. At its core, the platform serves as the backbone for software and data management and integrates functions that optimize operations across the entire lifecycle of a vehicle - from conception to after-sales service. This technological cohesion is critical at a time when vehicles are increasingly reliant on software for both basic functions and advanced features.

To understand how the platform works, you first need to look at the over-the-air update system. OTA updates represent a transformative approach to software management. In traditional systems, updating vehicle software often required manual intervention, necessitating a visit to the service center or the use of USB devices. This approach was not only time-consuming, but also prone to errors and security risks. The Sibros platform eliminates these inefficiencies by enabling secure remote updates directly to the vehicle's ECUs. The process includes sophisticated encryption techniques, secure bootloaders and multi-level authentication protocols that ensure only verified software is delivered to the vehicle.

Integration with Standardized Protocols

The platform's modular architecture ensures compatibility with different vehicle designs and electronics ecosystems. Sibros has designed the platform to integrate seamlessly with existing systems, eliminating the need for extensive modifications or customization. This modularity is achieved through standardized protocols and interfaces that allow the platform to function as a plug-and-play solution across different electronic architectures. For car manufacturers, this means reduced deployment time and lower integration costs, making the platform an economically viable choice. It also enables the vehicle to be securely connected to third-party providers such as car rental companies, as Sibros already provides powerful APIs for this.

Security is Crucial

Sibros is aware of the vulnerabilities inherent in connected vehicle systems. The platform includes comprehensive cybersecurity measures, including the use of frameworks such as Uptane. These measures protect against unauthorized access, data breaches and software tampering and ensure that vehicles remain secure throughout their lifecycle. In addition, the platform's secure bootloader technology prevents rollback attacks and enforces strict verification mechanisms during software updates, ensuring the integrity of critical systems.

The regulatory framework in the automotive industry is constantly evolving, with ever stricter compliance requirements being imposed on manufacturers. To this end, the manufacturer has tools to monitor and ensure compliance in all software processes. From emissions-related software updates to safety-critical diagnostics, the platform enables automotive manufacturers to maintain transparency and adhere to both regional and global standards. The Sibros solution complies with several standards such as ISO 26262 for ASIL-D or ISO 21434.

The Deep Connected Platform is designed to work at every stage of the vehicle lifecycle. During the design and development phase, it enables real-time diagnostics and conformance testing so that challenges can be identified and resolved early in the development process. In the production phase, the platform supports factory testing by verifying the configuration and functional scope of ECUs, optimizing supply chain logistics and ensuring quality control. Once the vehicles are on the road, the platform's OTA, data analysis and remote diagnostics functions ensure that they remain operationally optimized and safe.

The Three Pillars of the Platform

The Sibros solution is based on three pillars called Deep Logger, Deep Updater and Deep Commander. The Deep Logger software enables real-time monitoring of vehicles. It acts as an "ear" in the car and monitors all sensors and hardware components with an accuracy of up to 10 milliseconds. It offers the possibility to virtually listen to the vehicle in real time. The Deep Updater not only allows the vehicle software to be read out, but also updated via OTA to ensure that the vehicle is always up to date. Finally, the Deep Commander combines the functions of the two previous tools with additional options for special queries and remote vehicle maintenance. AI can also play an important role here.(se)

*Hemant Sikaria, CEO and co-founder of Sibros, spent five years at Tesla, where he was the technical lead for OTA updates and body/suspension firmware and helped launch three vehicle models.

Future Mobility

Beyond CASE: The SDV Revolution