Sigyn II 2009-2012 software in global yielding networks Issuer: Anna Karin Anckar AKARLS13, Brand & Insights, PowerPoint Guidelines, Security Class: Proprietary Date created: 2012-03-12

Project organization & partners Academy & Administration SOTA1 SADD2 * TACTA3 CIRA4 1. SOTA: Security cOncept and IT Architecture 2. SADD: Safety Analysis and concept for Diagnostics and software Download 3. TACTA: TrAfic Control and Test car mAnagement 4. CIRA: Connected car Impact on Repair shops and After sales * Know it left the project in Q4 2010

Intensions & objectives Intentions are to study Connected vehicles with services like remote diagnostics, measurement and software download Test car status and traffic monitoring/controlling Security and safety concepts for connected vehicles and Security analysis at academies Basic objectives are to Add safety, robustness and security to the remote services Develop a scalable IT architecture to handle a large vehicle population increasing over time Requirement on future vehicle architecture Evaluate IT architecture, remote diagnostics, measurement and software download

Results remote services Asynchronous remote services Synchronous remote services R&D Work shop Remote SWDL Vehicle state of health Remote Diagnostic parameter settings Wireless Diagnostics & SWDL Remote online Diagnostics Remote data measurement

Results security Security implications Resource constrains of the ECU. Limited possibilities of extra cost, security solutions must be very cost efficient. Lifetime of the solution, the vehicle may be in use for 10-15 years. Security concept Reliance on cryptography and hardware security modules to establish trust. Communication security solutions with strong authentication Application of defense in depth concepts Issuer: [Name] [CDS ID], [Organisation], [Name of Doc], Security Class: Proprietary Date created: [YYYY-MM-DD] 5

Result Safety Safety implications Safety concept Previously the diagnostic client was always physically attached to the vehicle via the OBD-connector and became de-attached before the vehicle left the workshop. The diagnostic client will be built into the vehicle (thus never de-attached). There will be occasions when the workshop mechanic have no visual overview of the vehicle when performing remote diagnostics. Safety concept Involvement and reliance upon the vehicle user Vehicle must verify certain conditions The application of requirements is location dependent (road side/workshop)

publications “Security Concerns in Communication with the Connected Car using DoIP”. P. Kleberger, A. Javaheri, V. Izosimov, and H. Broberg. In: Electronic Systems for Motor Vehicles. VDI- Berichte 2132. ISBN: 978-3-18-092132-7. Baden-Baden, Germany, Oct. 2011, pp. 245-254 (nominated for best paper at the conference) “A Framework for Assessing the Security of the Connected Car Infrastructure” P. Kleberger, A. Javaheri, T. Olovsson, and E. Jonsson. In: Proceedings of the Sixth International Conference on Systems and Networks Communications (ICSNC 2011). IARIA. Barcelona, Spain, Oct. 2011, pp. 236-241. “Security Aspects of the In-Vehicle Network in the Connected Car” P. Kleberger, T. Olovsson, and E. Jonsson.. In: Proceedings of the 2011 IEEE Intelligent Vehicles Symposium (IV). Baden- Baden, Germany: IEEE, June 2011, pp. 528-533. doi: IVS.2011.5940525. “An In-Depth Analysis of the Security of the Connected Repair Shop”. P. Kleberger, T. Olovsson, and E. Jonsson. In: Proceedings of the Seventh International Conference on Systems and Networks Communications (ICSNC 2012). IARIA. Lisbon, Portugal., Nov. 2012, pp. 99-107. "Remote vehicle diagnostics over the Internet using the DoIP protocol M. Johanson, P. Dahle and A. Söderberg," 6th International Conference on Systems and Network Communications, ICSNC 2011, Barcelona, Spain, October 23-29, 2011. "A Structured Approach to Securing the Connected Car". P. Kleberger . Thesis for degree of Licentiate of engineering. Technical report at Department of Computer science and engineering, no 99L ISSN 1652-876X.

The sigyn journey 2005 2006 2007 2008 2009 2010 2011 2012 SIGYN II Pre study SIGYN LOKE 2005 2006 2007 2008 2009 2010 2011 2012

Project significance Functionality introduction in SPA Volvo Technology award winner 2012

SIGYN II Continuation FFI Security Framework (SeFram) FFI Remote Data Collection & Visualization (RDCV) FFI Big Automotive Data (BAuD) 2016 2015 2014 2013 2012

Thanks for your attention! Anna Sundalen Volvo Cars