Present-day vehicles involve many Electronic Control Units (ECUs). Future vehicles will have even more ECUs. Currently, the firmware of these ECUs is updated at the dealership when there is a need. The updates are sent to the dealership using electronic media. This process is very time-consuming and lacks the possibility of performing these updates to all vehicles of a certain model in parallel. A future trend by auto manufacturers would be performing these updates over the air. Firmware Over-The-Air (FOTA) will be prone to a variety of attacks. This paper proposes a security architecture for the FOTA updates and discusses how this security architecture is implemented for vehicles at customer locations, dealership sites, and production lines.
展开▼
