Integrity Assurance of OTA Software Update in Smart Vehicles

Kim, Geunhyoung; Jung, Im Y.

doi:10.21307/ijssis-2019-011

Abstract

Smart vehicles tend to choose an over-the-air (OTA) software (SW) update service. In an environment with smart vehicles, software malfunctions may have serious consequences such as accidents involving human lives and property loss. Therefore, we must ensure that the software updates in smart vehicles are completed correctly. In this study, we focused on the assurance of both data integrity and service integrity in smart vehicles to improve the OTA SW update service security. To this end, the security features of integrity in smart vehicles were identified and discussed with an emphasis on its potential impact on future vehicular applications.

References

Abbas, Q. E. and Sung-Bong, J. 2019. A survey of blockchain and its applications. International Conference on Artificial Intelligence in Information and Communication, 001–003.
Search in Google Scholar Back to article
Ashibani, Y. and Mahmoud, Q. H. 2017. Cyber physical systems security: analysis, challenges and solutions. Computers and Security 68: 81–97.
Search in Google Scholar Back to article
Aust, S. 2018. Software downloads in trusted zones with wake-up sensors for connected vehicles. IEEE Vehicular Technology Conference, 1–5.
Search in Google Scholar Back to article
Avizienis, A., Laprie, J.-., Randell, B. and Landwehr, C. 2004. Basic concepts and taxonomy of dependable and secure computing. IEEE Transactions on Dependable and Secure Computing 11: 11–33.
Search in Google Scholar Back to article
Cebe, M., Erdin, E., Akkaya, K., Aksu, H. and Uluagac, S. 2018. Block4Forensic: an integrated lightweight blockchain framework for forensics applications of connected vehicles. IEEE Communications Magazine 5610: 50–57.
Search in Google Scholar Back to article
Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., Savage, S., Koscher, K., Czeskis, A., Roesner, F. and Kohno, T. 2011. Comprehensive experimental analyses of automotive attack surfaces. In Proceedings of USENIX Security Symposium, 77–92.
Search in Google Scholar Back to article
Dhakal, S., Jaafar, F. and Zavarsky, P. 2019. Private blockchain network for IoT device firmware integrity verification and update. IEEE International Symposium on High Assurance Systems Engineering, 164–170.
Search in Google Scholar Back to article
Doddapaneni, K., Lakkundi, R., Rao, S., Kulkarni, S. G. and Bhat, B. 2017. Secure FoTA object for IoT. IEEE Conference on Local Computer Networks Workshops, 154–159.
Search in Google Scholar Back to article
Fongen, A. 2012. Identity management and integrity protection in the internet of things. International Conference on Emerging Security Technologies, Lisbon, Portugal, September 5-7.
Search in Google Scholar Back to article
Ford. Available at: www.ford.com.ph/engineering/sync/
Search in Google Scholar Back to article
Fraga-Lamas, P. and Fernández-Caramés, T. M. 2019. A review on blockchain technologies for an advanced and cyber-resilient automotive industry. IEEE Access 7: 17578–17598.
Search in Google Scholar Back to article
Gao, W., Hatcher, W. G. and Yu, W. 2018. A survey of blockchain: techniques, applications, and challenges. International Conference on Computer Communication and Networks, 1–11.
Search in Google Scholar Back to article
Halder, S., Ghosal, A. and Conti, M. 2019. Secure OTA software updates in connected vehicles: a survey. ArXiv, available at: https://arxiv.org/abs/1904.00685
Search in Google Scholar Back to article
Idrees, M. S., Schweppe, H., Roudier, Y., Wolf, M., Scheuermann, D. and Henniger, O. 2011. Secure automotive on-board protocols: a case of over-the-air firmware updates. Lecture Notes in Computer Science 6596: 224–238.
Search in Google Scholar Back to article
Jo, H. J., Choi, W., Na, S. Y., Woo, S. and Lee, D. H. 2017. Vulnerabilities of android OS-based telematics system. Wireless Personal Communications 924: 1511–1530.
Search in Google Scholar Back to article
Khodari, M., Rawat, A., Asplund, M. and Gurtov, A. 2019. Decentralized firmware attestation for in-vehicle networks. In Proceedings of the 5th on Cyber-Physical System Security Workshop–CPSS ‘19, Auckland, New Zealand, July 8.
Search in Google Scholar Back to article
Khurram, M., Kumar, H., Chandak, A., Sarwade, V., Arora, N. and Quach, T. 2016. Enhancing connected car adoption: security and over the air update framework. IEEE World Forum on Internet of Things, Reston, VA, December 12-14, pp. 194–198, available at: https://ieeexplore.ieee.org/document/7845430
Search in Google Scholar Back to article
Knockel, J. and Crandall, J. R. 2012. Protecting free and open communications on the internet against man-in-the-middle attacks on third-party software: we’re FOCI’d. USENIX Workshop on Free and Open Communications on the Internet, Bellevue, WA, August 6.
Search in Google Scholar Back to article
Kong, H., Kim, T. and Hong, M. 2016. A security risk assessment framework for smart car. International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, 102–108.
Search in Google Scholar Back to article
Kuppusamy, T. K., DeLong, L. A. and Cappos, J. 2018. Uptane: security and customizability of software updates for vehicles. IEEE Vehicular Technology Magazine 131: 66–73.
Search in Google Scholar Back to article
Kuppusamy, T. K., Torres-Arias, S., Diaz, V. and Cappos, J. 2016. Diplomat: using delegations to protect community repositories. USENIX Symposium on Networked Systems Design and Implementation, 567–581.
Search in Google Scholar Back to article
Kuppusamy, T. K., Brown, A., Awwad, S., McCoy, D., Bielawski, R., Mott, C., Lauzon, A., Weimerskirch, S. and Cappos, J. 2016. Uptane: securing software updates for automobiles. In Proceedings of International Conference on Embedded Security in Car Europe, 1–11.
Search in Google Scholar Back to article
Le, V. H., Hartog, J. D. and Zannone, N. 2018. Security and privacy for innovative automotive applications a survey. Computer Communications 132: 17–41.
Search in Google Scholar Back to article
Mahmud, S. M., Shanker, S. and Hossain, I. 2005. Secure software upload in an intelligent vehicle via wireless communication links. In Proceedings of IEEE Intelligent Vehicles Symposium, 588–593.
Search in Google Scholar Back to article
Mathur, R., Agarwal, S. and Sharma, V. 2015. Solving security issues in mobile computing using cryptography techniques–a survey. International Conference on Computing, Communication and Automation, 492–497.
Search in Google Scholar Back to article
Mayilsamy, K., Ramachandran, N. and Raj, V. S. 2018. An integrated approach for data security in vehicle diagnostics over internet protocol and software update over the air. Computers & Electrical Engineering 71: 578–593.
Search in Google Scholar Back to article
Nilsson, D. K. and Larson, U. E. 2008. Secure firmware updates over the air in intelligent vehicles. IEEE International Conference on Communications Workshops, 380–384.
Search in Google Scholar Back to article
Nilsson, D. K., Phung, P. H. and Larson, U. E. 2008. Vehicle ECU classification based on safety-security characteristics. IET Road Transport Information and Control and ITS United Kingdom Members’ Conference, 1–7.
Search in Google Scholar Back to article
Nilsson, D. K., Sun, L. and Nakajima, T. 2008. A framework for self-verification of firmware updates over the air in vehicle ECUs. IEEE GLOBECOM Workshops, 1–5.
Search in Google Scholar Back to article
Odat, H. A. and Ganesan, S. 2014. Firmware over the air for automotive, fotamotive. In Proceedings of IEEE International Conference on Electro/Information Technology, 130–139.
Search in Google Scholar Back to article
Petri, R., Springer, M., Zelle, D., McDonald, I., Fuchs, A. and Kraub, C. 2016. Evaluation of lightweight TPMS for automotive software updates over the air. In Proceedings of International Conference on Embedded Security in Car, 1–15.
Search in Google Scholar Back to article
Riggs, C., Rigaud, C., Beard, R., Douglas, T. and Elish, K. 2019. A survey on connected vehicles vulnerabilities and countermeasures. Journal of Traffic and Logistics Engineering 61: 11–16.
Search in Google Scholar Back to article
Steger, M., Boano, C. A., Niedermayr, T., Karner, M., Jillebrand, J., Roemer, K. and Rom, W. 2018. An efficient and secure automotive wireless software update framework. IEEE Transactions on Industrial Informatics 145: 2181–2193.
Search in Google Scholar Back to article
Stević, S., Lazić, V., Bjelica, M. Z. and Lukić, N. 2018. IoT-based software update proposal for next generation automotive middleware stacks. IEEE International Conference on Consumer Electronics, 1–4.
Search in Google Scholar Back to article
Tesla. Software updates, available at: www.tesla.com/support/software-updates. (accessed December 6, 2019).
Search in Google Scholar Back to article

Integrity Assurance of OTA Software Update in Smart Vehicles

Abstract

Paradigm

My account