Secure Over-the-Air Software Updates for Autonomous Vehicle Firmware
Keywords:
Software-Defined Vehicles, (SDVs), (OTA)Abstract
Software-Defined Vehicle (SDV) is one of the next-generation innovation technologies in the automobile industry, which provides capabilities for both in-vehicle and out-vehicle communications. Over-the-air (OTA) firmware update is a need for the SDV firmware update process. OTA transmissions from a software provisioning server to a vehicle telematics module are both over cellular networks and infrastructure/satellites. The firmware images are first sent to the software provisioning server (SPS), and they are multicasted (often over satellite) to vehicle Telematics modules (VTMs), which download them first, validate them and store them in the Firmware/Staging Area. This initial firmware is then flashed to a USB hidden partition in MTD, and then they are moved from there to the Active firmware partition. This determines OTAs delay ratio and also the space for these Partitions on device architecture. At each stage, the integrity validation, transfer, and storage are both prone to various attacks. OTA technology has the distinctive property of running in the full control of a remote over-the-air attacker on all platforms. The described version is severe and similar to the previous two, but a successful attack can now occur by genetic code variation in two steps: over the air and remotely [1].
Downloads
References
G. Abdelkader, K. Elgazzar, and A. Khamis, "Connected Vehicles: Technology Review, State of the Art, Challenges and Opportunities," 2021. ncbi.nlm.nih.gov
Y. Shin and S. Jeon, "MQTree: Secure OTA Protocol Using MQTT and MerkleTree," 2024. ncbi.nlm.nih.gov
S. Halder, A. Ghosal, and M. Conti, "Secure OTA Software Updates in Connected Vehicles: A survey," 2019. [PDF]
C. Olarte, V. de Paiva, E. Pimentel, and G. Reis, "The ILLTP Library for Intuitionistic Linear Logic," 2019. [PDF]
M. La Manna, L. Treccozzi, P. Perazzo, S. Saponara et al., "Performance Evaluation of Attribute-Based Encryption in Automotive Embedded Platform for Secure Software Over-The-Air Update," 2021. ncbi.nlm.nih.gov
Tatineni, Sumanth. "Cloud-Based Business Continuity and Disaster Recovery Strategies." International Research Journal of Modernization in Engineering, Technology, and Science5.11 (2023): 1389-1397.
Vemori, Vamsi. "Harnessing Natural Language Processing for Context-Aware, Emotionally Intelligent Human-Vehicle Interaction: Towards Personalized User Experiences in Autonomous Vehicles." Journal of Artificial Intelligence Research and Applications 3.2 (2023): 53-86.
Tatineni, Sumanth. "Security and Compliance in Parallel Computing Cloud Services." International Journal of Science and Research (IJSR) 12.10 (2023): 972-1977.
Gudala, Leeladhar, and Mahammad Shaik. "Leveraging Artificial Intelligence for Enhanced Verification: A Multi-Faceted Case Study Analysis of Best Practices and Challenges in Implementing AI-driven Zero Trust Security Models." Journal of AI-Assisted Scientific Discovery 3.2 (2023): 62-84.
R. Singh Rathore, C. Hewage, O. Kaiwartya, and J. Lloret, "In-Vehicle Communication Cyber Security: Challenges and Solutions," 2022. ncbi.nlm.nih.gov
F. Rosique, P. J. Navarro, C. Fernández, and A. Padilla, "A Systematic Review of Perception System and Simulators for Autonomous Vehicles Research," 2019. ncbi.nlm.nih.gov
P. Mundhenk, A. Paverd, A. Mrowca, S. Steinhorst et al., "Security in Automotive Networks: Lightweight Authentication and Authorization," 2017. [PDF]
S. Saponara, S. Giordano, and R. Mariani, "Recent Trends on IoT Systems for Traffic Monitoring and for Autonomous and Connected Vehicles," 2021. ncbi.nlm.nih.gov
M. Grosso, I. Cristinel Raileanu, J. Krause, M. Alonso Raposo et al., "How will vehicle automation and electrification affect the automotive maintenance, repair sector?," 2021. ncbi.nlm.nih.gov
