Kaspersky Lab and AVL Software and Functions GmbH: In response to the growing digital challenges facing the connected and standalone car industry, Kaspersky Lab and AVL Software and Functions GmbH unveiled the Secure Communication Unit (SCU) yesterday of the New Mobility World / IAA 2017 held in Frankfurt.
The original security solution demonstrates the communication capabilities between car components, the car itself and its externally connected infrastructure, making connected cars secure-by-build.design).
With each generation, cars incorporate new "smart" technologies for remote diagnostics, telematics, automated and autonomous driving, remote driver assistance and infotainment.
Based on electromechanical vehicle actuators, car controls become increasingly sophisticated digital and parallel systems with multiple sensors, controls, applications, subnetworks and communication units that interact with other vehicles and their environment. Their functions can be controlled remotely via digital systems. Because of this, tied cars are increasingly targeted by digital criminals.
The growing number of third-party applications and the complexity of the system in connected cars, as well as the growing dynamics of software updates using "over-the-air" updates, make it difficult to test the complete system so that manufacturers can be sure that there are errors, resulting in backdoors and architectural issues to be overlooked.
The role of the Safe Communication Unit is to make connected cars secure-by-design, regardless of third party software and systems that may be installed. The SCU is a communication gateway of the control unit connected to various subnetworks and / or gateway controllers on these subnets within the car network, acting as a single secure gateway for incoming and outgoing communication flows.
Based on security policy enforcement and strong separation to prevent unwanted contact between various car accessories, the software helps ensure proper communications that are protected against interference within the car's network.
The reliable SCU software platform consists of safety components that are reliable by-design. First, the proprietary operating system microkernel (KasperskyOS) is based on well-established security-oriented development principles and is specially designed for embedded systems with strict digital security requirements.
KasperskyOS removes the possibility of unwarranted functionality and thus mitigates the risk of digital attacks: even if an unauthorized code is incorporated, it will not be executed because, by definition, this unjustifiable operation is prohibited.
Other tools include a security policy engine (Kaspersky Security System), defining the specific scope and the character of the interaction between the various components and a trustworthy channel framework with a set of encryption algorithms, as well as hardware-based low level security services .
The original SCU is implemented exemplarily in ARMv7 architecture with proposed RAM 128 MB and IOMMU. Other HW platforms can be deployed on a case-by-case basis, according to the requirements of the manufacturer.
Andrey Doukhvalov, Head of Future Technologies and Chief Security Architect of Kaspersky Lab, commented: "With the modern automotive ecosystem becoming increasingly complex and interconnected, it is not surprising that consumers and the automotive industry are concerned about digital security. While opportunities and benefits are obvious, there is still a need to make car systems safe. That is why we are making a big step forward with our prototype for secure communications in cars to ensure that connectivity options are not turned into failures. "
The platform provides the framework for solutions for customized applications, allowing car manufacturers to develop and deploy unique SCUs in their cars, based on specific hardware and additional software components in alignment with their design plans.
SCU is available for OEM, ODM, system integrators and software developers around the world.
