Keeping Up with the Data & Security Demands of the Automotive IoT

Size: px

Start display at page:

Download "Keeping Up with the Data & Security Demands of the Automotive IoT"

Patrick Horn
8 years ago
Views:

1 Keeping Up with the Data & Security Demands of the Automotive IoT AESIN 2015 Robert Moran Automotive Systems Engineering O C T O B E R External Use

2 Keeping Up with the Data & Security Demands of the Automotive IoT The Automotive IoT What is it & why do we need it? How will it be implemented? Future vehicle architectures & communications Security External Use 1

Freescale: Automotive MCU Product Leadership Megatrend Safer Travel Electrification Going Green Connectivity Electrification Emerging Markets Application Radar Vision Powertrain Gateways General Body

3 Freescale: Automotive MCU Product Leadership Megatrend Safer Travel Electrification Going Green Connectivity Electrification Emerging Markets Application Radar Vision Powertrain Gateways General Body and Chassis Actuators and Sensors Key Technology High perf. ADC and DSP Image processing CPU/timer performance and instrumentation Communication interfaces Security ARM Cortex Software and Tools MagniV with HV Analog Value Proposition Highest performance and system integration Leading image processing AND functional safety Leading performance architecture Highest networking bandwidth AND security Reduce our customers R&D and time-tomarket Reduce system size and manufacturing cost External Use 2

Freescale: Towards Automated Vehicles, Safety Drives Innovation MC6801 First Engine Control MCU 1978 1988 First 32-bit MCU Technology & Reliability 1993

2009 2010 First 32-bit MCUs for Advanced Vehicle Gateways 2012 First MCUs for Secure Vehicle Gateways with Encryption First ISO 26262 ASILD Certified

4 Freescale: Towards Automated Vehicles, Safety Drives Innovation MC6801 First Engine Control MCU First 32-bit MCU Technology & Reliability 1993 First MCU w/integrated Flash Memory PowerArchitecture 32-bit RISC MCU 1997 Performance Safety & Security First Dual-Core Automotive 32-bit MCU First 32-bit MCUs for Advanced Vehicle Gateways 2012 First MCUs for Secure Vehicle Gateways with Encryption First ISO ASILD Certified Safety MCU First Quad-Core Fault Tolerant MCU for Drive by Wire Applications 2015 First ADAS MPU with Integral Safety and Security Capabilities External Use 3

Monitors + Fitness Energy Management, Wind + Solar Telehealth Connected Appliances Smart Energy Grid Connected Farms

5 The Internet of Tomorrow Traffic Monitoring Base Stations Metro Cells Small Cells Advanced Safety Security Networked Printers Infotainment Radar + Vision Cloud Computing Data Center Enterprise Gateways, Switchers, Routers Home Health Monitors + Fitness Energy Management, Wind + Solar Telehealth Connected Appliances Smart Energy Grid Connected Farms Industrial Networking Digital Power Conversion Home Hubs Energy Meters Machine Machine Human Machine Interface Security External Use 4

6 Projected IoT Market Size by Sector in 2022 Intelligent Buildings Utilities Automotive Healthcare Consumer Electronics Smart Cities & Public Transport Manufacturing & Supply Chain Retail & Leisure Smart Enterprise Management Agriculture & Environment Emergency Services & National Security Construction External Use 5

7 103 exabytes of data is generated by vehicles every day Source: IBM External Use 6

mx Powertrain & Vehicle Parameters MPC57XX Long & Short Range Radar MPC57xx V2I CLOUD Collision Avoidance Advise Entertain Assist Control Tyre pressure Brake wear Service intervals

8 Automotive: Big Data User on the IoT CLOUD Wi-Fi, 3G, 4G... Intelligent Transportation System Big Data Audio Amplifier MPC5748G, i.mx Smart Rear Camera SPC2200 Front Vision ADAS S32V Cluster MAC57Dxx Networked Controller (supporting functional safety & virtualisation) V2V, V2I i.mx DSRC Infotainment i.mx Powertrain & Vehicle Parameters MPC57XX Long & Short Range Radar MPC57xx V2I CLOUD Collision Avoidance Advise Entertain Assist Control Tyre pressure Brake wear Service intervals Insurance & toll services Dig radio Connected games Streaming video Internet/phone services Optimised routing Blue wave Optimum speed E-brake lights OTA software updates Emergency braking Adaptive cruise control Road geometry tracking External Use 7

Evolving Vehicle Safety Systems «Passive Safety Airbag ABS Stability Control «Active Safety «Blind spot detection Adaptive cruise control Lane departure warning Predictive Safety

9 Evolving Vehicle Safety Systems «Passive Safety Airbag ABS Stability Control «Active Safety «Blind spot detection Adaptive cruise control Lane departure warning Predictive Safety (Connected Car) Collision avoidance Hazard early warning Traffic management « Automated Car Vehicle trains Predictable traffic flow Driver independent External Use 8

10 Typical Vehicle Network Architecture Amp Nav/IVI Radio Front Display Speakers Infotainment Central Gateway Rear Display OBD Port Powertrain/ T ransmission Body Body Controller (BCU) FOTA Amp Safety/Chassis Nav/IVI Radio Front Display Speakers Infotainment Central Gateway Rear Display s per average car Top end cars have 150 s 150 network connections >5 km copper wire (>60 kg) 100 motors 500 LEDs >5 cameras Key OBD Port Powertrain/ Transmission Body Body Controller (BCU) CAN FlexRay 100Mbps Ethernet Other Safety/Chassis LIN CAN FR Other External Use 9

11 Trends in Vehicle Architecture Traditional EE Architecture Partial EE Architecture Full EE Architecture Existing ~2016 >2022 Driving Forces: Integration, reducing #s Extensibility and flexibility Inter-domain and cross-domain BW Higher security External Use 10

12 bit rate [bits/s] Communication Protocols Landscape Gb Ethernet 150M MOST 1 GB/sec CSMA/CD twisted-pair 100M 50M 25M 10M FlexRay Ethernet 100 MBit/sec CSMA/CD twisted-pair MBit/sec synchronous unshielded twisted-pair Or plastic fibre optical 1M 125k CAN2.0 1 MBit/sec event triggered two wire bus CAN-FD ~4 MBit/sec event triggered two wire bus 10 MBit/sec time triggered fault tolerant, dependable 2x2 wire / optical 20k LIN 20 kbit/sec master-slave single wire bus price, complexity External Use 11

13 CAN-FD Motivation Extending classic CAN to handle newer requirements of vehicle architecture No significant impact on vehicle topology Security over CAN Larger payload to sustain classic CAN data rates, but add authentication or encryption to packets flashing Higher bit rate helps sustain factory programming times Classic CAN (Without Security) Data 8-bytes Data 8-bytes Data 500 khz ~ 4 MB/s CAN-FD (With Security) CMAC 16-bytes Data 1.5 MHz ~ 4 MB/s External Use 12

14 Evolution of Ethernet in the Vehicle OBD μs Widely used network standard (IEEE 802.3) for LANs Many topologies: Bus, Switch, Ring, etc Diagnostics Port (vs CAN) Surround Cameras (vs LVDS) Audio / Video (vs MOST) Backbone Real-time Control Data time Several speed grades: 10 baset, 100 baset, 1000 baset. Multiple PHY to MAC Interfaces Next-Gen Duplex and half duplex communication External Use 13

15 Significance of Ethernet Many protocols supported in a vehicle Each tends to be unique, solving a specific problem E.g. safety, multimedia, etc Ethernet has potential to combine many protocols into a single twisted pair Deterministic, high bandwidth/ capacity, fault tolerant, low power support Strong flexibility & future proofing Cost barrier at low end PHY, MAC, Power, etc Protocol LIN Motivation Low cost deterministic bus for control data Ethernet Function TSN (1722a) CAN Bus for control data TSN (1722a) FlexRay MOST Fault Tolerant Deterministic Topology for Safety data Deterministic streaming of Multimedia Seamless Redundancy AVB External Use 14

16 Connecting the Data to the World Trusted Central Gateway OBD Port Isolation of trusted and non-trusted resources Physical separation Non-Trusted Nav/IVI Body Controller (BCU) Hardware separation within SOC Amp Radio Front Display Rear Display Connectivity requirements of OEM data quite different to User Speakers Infotainment Powertrain/ T ransmission Body Safety/Chassis External Use 15

17 Source: NBC News Source: CNN External Use 16

Securing Connectivity Secure X boot, keys, communication, debug Freescale helped drive HSM and SHE automotive security standards and first to implement into silicon First to implement SHE security

18 Securing Connectivity Secure X boot, keys, communication, debug Freescale helped drive HSM and SHE automotive security standards and first to implement into silicon First to implement SHE security (MPC5646C) First to productionise HSM security (MPC5777M) First to implement SHE on Flashless device (S32V234) But, Security is way more than cryptography Device Life-Cycle scheme Debugger access Flash Protection MCU Resource control Freescale Production OEM Production In- Field Customer Delivery Failure Analysis External Use 17 *Gartner report 2014

19 Hardware Separation External Internal Securing the Entry Point to the Vehicle Vehicle Connectivity Gateway i.mx 6 / MPC5748G Security Bridge between external & internal networks STRONG security required The most valuable node to attack 3G/LTE V2X WiFi Normal Connected Applications Packet Routing 3 rd Party Code Secure Key Storage Authentication Encryption Firewall Reduce the attack surface area Isolate trusted resources in hardware, e.g. TrustZone Hardware security module, e.g. CSE/HSM Crypto-Engines AES, ECC, RSA, SHA, etc Software Firewall Packet Inspection: deep vs shallow etc etc Cost vs Power vs Risk External Use 18

20 Data & Security Demands in the Automotive IoT IoT is more than marketing hype it is a game changer in the experience & safety of owning & driving a vehicle Automotive segment will be huge generator & consumer of data Data demands leading to new vehicle architectures and wide adoption of Ethernet in the vehicle. Recent hacks have made the world cyber security aware, with implications in the gateway functionality External Use 19

21 Freescale Semiconductor, Inc. External Use

How To Make A Car A Car Into A Car With A Car Stereo And A Car Monitor

How To Make A Car A Car Into A Car With A Car Stereo And A Car Monitor Designing 1000BASE-T1 Into Automotive Architectures Alexander E Tan Ethernet PHY and Automotive PLM alextan@marvell.com Ethernet IP & Automotive Tech Day October 23 & 24th, 2014 Agenda What Does 1000BASE-T1