Date created: 2012-03-12Issuer: Anna Karin Anckar AKARLS13, Brand & Insights, PowerPoint Guidelines, Security Class: Proprietary 1

Sigyn II 2009-2012software in global yielding networks

Project organization & partners

2

1. SOTA: Security cOncept and IT Architecture 2. SADD: Safety Analysis and concept for Diagnostics and software Download3. TACTA: TrAfic Control and Test car mAnagement4. CIRA: Connected car Impact on Repair shops and After sales

* Know it left the project in Q4 2010

Academy & Administration

SADD2

SOTA1

TACTA3

CIRA4

*

Intensions & objectives

3

Intentions are to study

Connected vehicles with services like remote

diagnostics, measurement and software download

Test car status and traffic monitoring/controlling

Security and safety concepts for connected vehicles

and Security analysis at academies

Basic objectives are to

Add safety, robustness and security to the remote

services

Develop a scalable IT architecture to handle a large vehicle population

increasing over time

Requirement on future vehicle architecture

Evaluate IT architecture, remote diagnostics,

measurement and software download

Results remote services

R&D

Synchronousremote services

Wireless Diagnostics &

SWDL

Asynchronous remote services

Remote SWDL

Remote Diagnostic parameter settings

Remote data measurement

Vehicle state of health

Remote online Diagnostics

Work shop

Page 4

5Date created: [YYYY-MM-DD]Issuer: [Name] [CDS ID], [Organisation], [Name of Doc], Security Class: Proprietary 5

Results security

Security concept

• Reliance on cryptography and hardware security modules to establish trust.

• Communication security solutions with strong authentication

• Application of defense in depth concepts

Security implications

• Resource constrains of the ECU.

• Limited possibilities of extra cost, security solutions must be very cost efficient.

• Lifetime of the solution, the vehicle may be in use for 10-15 years.

Result Safety

6

Safety implications

• Previously the diagnostic client was always physically attached to the vehicle via the OBD-connector and became de-attached before the vehicle left the workshop.

• The diagnostic client will be built into the vehicle (thus never de-attached).

• There will be occasions when the workshop mechanic have no visual overview of the vehicle when performing remote diagnostics.

Safety concept

• Involvement and reliance upon the vehicle user

• Vehicle must verify certain conditions

• The application of requirements is location dependent (road side/workshop)

publications

7

“Security Concerns in Communication with the Connected Car using DoIP”.P. Kleberger, A. Javaheri, V. Izosimov, and H. Broberg. In: Electronic Systems for Motor Vehicles. VDI-Berichte 2132. ISBN: 978-3-18-092132-7. Baden-Baden, Germany, Oct. 2011, pp. 245-254 (nominated for best paper at the conference)

“A Framework for Assessing the Security of the Connected Car Infrastructure”P. Kleberger, A. Javaheri, T. Olovsson, and E. Jonsson. In: Proceedings of the Sixth International Conference on Systems and Networks Communications (ICSNC 2011). IARIA. Barcelona, Spain, Oct. 2011, pp. 236-241.

“Security Aspects of the In-Vehicle Network in the Connected Car”P. Kleberger, T. Olovsson, and E. Jonsson.. In: Proceedings of the 2011 IEEE Intelligent Vehicles Symposium (IV). Baden-Baden, Germany: IEEE, June 2011, pp. 528-533. doi: IVS.2011.5940525.

“An In-Depth Analysis of the Security of the Connected Repair Shop”. P. Kleberger, T. Olovsson, and E. Jonsson. In: Proceedings of the Seventh International Conference on Systems and Networks Communications (ICSNC 2012). IARIA. Lisbon, Portugal., Nov. 2012, pp. 99-107.

"Remote vehicle diagnostics over the Internet using the DoIP protocol M. Johanson, P. Dahle and A. Söderberg," 6th International Conference on Systems and Network Communications, ICSNC 2011, Barcelona, Spain, October 23-29, 2011.

"A Structured Approach to Securing the Connected Car". P. Kleberger . Thesis for degree of Licentiate of engineering. Technical report at Department of Computer science and engineering, no 99L ISSN 1652-876X.

The sigyn journey

8

2005 2006 2007 2008 2009 2010 2011 2012

SIGYN II

LOKE

Pre study

SIGYN

Page 9

Project significance

Functionality introduction in SPA

Volvo Technology award winner 2012

10

SIGYN II Continuation

FFI Security Framework (SeFram)

FFI Remote Data Collection & Visualization (RDCV)

FFI Big Automotive Data (BAuD)

Thanks for your attention!Anna SundalenVolvo Cars

11