Automotive & Smart Mobility
Security has become more important than ever in the automotive and smart mobility industry. Secure-IC ensures compliance with industry standards and guidelines such as Evita combined with ISO 26262 for road vehicles’ functional safety with its SecuryzrTM solution for automotive that provides complete safety and security coverage for vehicles and smart mobility.
Connected and autonomous vehicles are the future of automotive. Today, these vehicles have already significantly changed the way we interact on the road. After years of improving automotive safety, the time has come for increase connectivity, additional safety and ergonomics in vehicles.
Indeed, the automotive industry is in the midst of a huge change as well as tomorrow’s overall transportation systems that are reshaping our urban mobility, noticeably with the emergence of new technologies such as ADAS or Advanced Driver Assistance Systems. Indeed, with electrification as well as the need for autonomous driving and self-driving cars increasing every year; the demand for embedded electronics in the intelligent mobility industry is rapidly increasing. Electronic Control Units (ECUs) which control an entire electronic subsystem and pilot numerous electronic devices, can be as many as 80 in a modern car.
Secure-IC can support all players in the automotive industry to face the upcoming challenges of the industry. Secure-IC has experience working with automotive chipmakers, Tier 1 companies and directly OEM worldwide.
The specific security challenges for automotive & smart mobility
- Performances
- Safety by design
- Protection from physical harm is guaranteed
- System is fully functional on its own and a failure cannot occur without intervention of a third party.
- Electrification
- The Super Electronic Control Unit (sub-system dedicated to one or more features of an automotive system) is protected
Smart Mobility & Automotive Security and Safety Solutions
Secure-IC’s PESC approach is built on a portfolio of security products and services that, when combined, create a deep security by design that protects the very foundation of your industry.
- SecuryzrTM for automotive is compliant with Evita, ISO 26262 and ISO 21434 for secure remote connectivity and management with TLS/Secure protocol requirements and firmware stack.
- SecuryzrTM security level is adapted to its threat model depending on which ECU it is used in: ADAS, Body-Control Module (BCM), Telematics, TCU, Central Gateway
- EVITA Full, Medium, Light compliant solution SecuryzrTM Smart Monitor can be included to provide security monitoring in-device and embedded security policy, using Artificial Intelligence. It can also include a software version for IDS (Intrusion Detection System).
- SecuryzrTM Server for fleet management, device onboarding/offboarding, secure firmware update over-the-air. SecuryzrTM Server includes also a security monitoring solution. That includes remote security analysis of security events.
- LaboryzrTM: Security Evaluation
- Hardware Trojans detection
- Reverse engineering protection verification
- Hardware/software penetration testing at chipset, ECU or system level
- LaboryzrTM includes 3 tools:
- AnalyzrTM, evaluation tool to validate the security level of real physical chip/boards after foundry tape-out
- Enables ISO/IEC 17825, 20085 compliance
- VirtualyzrTM, an EDA Tool to assess the security design verification at all Hardware design levels (RTL, Post-Synthesis, Place & Route and Layout)
- CatalyzrTM, software tool to evaluate software code vulnerability with static and dynamic analysis
- AnalyzrTM, evaluation tool to validate the security level of real physical chip/boards after foundry tape-out
- ExpertyzrTM is Secure-IC’s expertise service, it constitutes of a number of services and trainings that could bring your business to the next level in terms of security such as:
- Support to identification of threat models for each player in the value chain
- Evaluation as a Service for both legacy devices and new devices
- Support to Certification
- Security Training & Watch
- In particular, ISO21434 certification support through security training and security evaluation
Secure-IC is able to accompany its clients through every aspect of the Automotive and Smart Mobility industry; which makes it unique on the market.
Standards & Certification to consider in Automotive & Smart Mobility
Safety and security needs in a vehicle are very important, and are intrinsically linked, as one cannot go without the other to fight against all undesirable events such as failures, theft or even reverse engineering.
On the one hand, ISO 26262 standard for “Road vehicles – Functional safety” covers the entire development cycle and ensures that safety is taken into account step by step; this standard leads the developer up to the targeted ASIL rating, usually B or D, depending on the required safety level.
On the other hand, the security of the connected car is paramount, several standards have been developed and others are being developed. Evita, ISO 21434 or Common Criteria with V2X Protection Profile will give the baseline; for more specific applications or finer needs.
Inside the World Forum for Harmonization of Vehicle Regulations (UNECE), WP29 working group produced recommendations on cyber security to be applied to vehicle components. It provides organizational requirements and Security-by-Design approach.
Protection Profiles may be defined in the future to cover specific applications such as infotainment or radar. Protecting the communication between two different ECUs, for example by using TLS, MACSEC and IPsec is also becoming more and more important to have trusted connected vehicles.
General Certifications:
- FIPS 140-3 (U.S. Standard)
- Common Criteria (EU Standard)
- OSCCA (Chinese Standard)
Related Resources & Events
You may also be interested in having a closer look at the elements below:
