1. New Architectures Concepts in Body Control Modules
Class 09
Interior Body and Security

2. New Architectures in Body Control Modules Table Of Contents
Car Architecture Overview 1 3
Body Control Modules Overview 2 9
Autosar 10
Adaptive Autosar 4 13
SW Architecture 5 25
Security & Privacy 6 28
Safety 7 32

3. New Architectures in Body Control Modules CAR Architecture Overview – Domains
The trend of adaption of consumer electronics in the automotive industry is accelerating with every passing year. The automotive electronics design not only provides a unified human machine interface but also assists the automobile manufacturers to enhance the consistency of body electronics.
Instrument Clusters
Hardware architecture
HMI components
Touch display
Vehicle Bus Communication
Multimedia Bus Interface
CAN, LIN, Ethernet
Body Controller
Infotainment and Telematics
Hands free telephony
Navigation, DVD player, Radio, Storage devices
Body Electronics
Power windows
Mirror control
Gateways module
Remote keyless entry
Sun roofs
Automatic liftgates
HEV / EV
Vehicle energy management
Tire Guards
Pressure monitoring
Suspension monitoring
Power Train & Engine Management
Diagnostic tests and interfaces
Software & Hardware development
Light Control
Adaptive Light Control

4. New Architectures in Body Control Modules CAR Architecture Overview - Communication
Under the hood and above the hood communications such as Ethernet, CAN, LIN, MOST, I2C, I2S is connecting all electronics on the car.
CAN High Wire \ LIN \ ETH Rx
CAN Low Wire \ GND \ ETH Tx
Car Left Mirror
Car Right Mirror
Inside Car Control Switch Mirrors

5. New Architectures in Body Control Modules CAR Architecture Overview – How data is transmitted
Communication between electronics on the car is done through frames or messages (Ethernet, CAN or LIN protocol).
CAN High Wire
CAN Low Wire
Mirror is moving
Button is switched and
pressed to control left mirror
and a CAN message is send.
Message received by the
left mirror electronic.
Car Left Mirror
Car Right Mirror
Inside Car Control Switch Mirrors

6. New Architectures in Body Control Modules CAR Architecture Overview – How communication looks like
Below is depicted communication between several electronics on the car with CAN protocol (a common language spoke by electronics to understand each other). Every message sent, by one of the electronics, have an predefined identifier (like and destination address written on the envelope) and a predefined length.
Electronic responsible for
reading the ignition key (car
key) and motor status is
sending on the CAN line
message mBSG_3 with
identifier 0x575 and length
of 4 bytes. Is read by other
electronics on the car which
requires that information.
Message data (4 bytes) are divided into signals which are interpreted accordingly (is known in advanced how the format of the message should look like).

7. New Architectures in Body Control Modules CAR Architecture Overview – General HW ECU architecture
ECU = Electronic Control Unite (electronic responsible for a specific functionality
inside car like electronic mirrors)
Basic hardware components to which every ECU
is populated with:
Microcontroller – for computation power;
SBC or ASIC (responsible with wakeup &
sleep);
EEPROM – non volatile small memory;
CAN transceiver for communication;
LIN transceiver for communication;
Power regulator.

8. New Architectures in Body Control Modules CAR Architecture Overview – General SW ECU architecture
Basic SW components layouts inside every ECU which is designed:
Bootloader (for application update – similar to smart phones
today which allows you to updated to a new firmware);
Application SW: OS (operating system) + Application layer.

9. New Architectures in Body Control Modules Central Body Control Modules – Hidden But Essential For Every Car
Central Body Control Modules (BCMs) are central elements of vehicle electronics.
They combine several functions in one housing and control practically all the
vehicle's electronic basis, comfort and security functions like:
Gateway modules
External lighting
Interior lighting
Windshield wipers
Windshield washer system
Central locking system
Climate control system
Seat adjustment
RF reception
Immobilizer
Remote Keyless Entry
Passive Start and Entry Systems
Tire Pressure Monitoring System
Energy Management
Thanks to their scalable architecture and AUTOSAR-compatible software modules, they can be freely adapted and harmonize with a every specific type of vehicle. 9

10. New Architectures in Body Control Modules AUTOSAR - Introduction
AUTOSAR (Automotive Open System Architecture) is a standardization initiative of leading automotive OEMs and suppliers and was founded in autumn The goal is to develop a reference architecture for ECU software, which can overcome the growing complexity of software in modern vehicles.
ECU classic architecture
design
ECU standardization architecture design 10

11. New Architectures in Body Control Modules AUTOSAR – Major principle
The AUTOSAR project objectives
- specifying and
- standardizing
the central architectural elements across functional domains, allowing
industry competition to focus on implementation.
Major principle
- Ensure stabilization of releases
- Consider market needs of AUTOSAR partners
Content
- Architecture
- Methodology
- Application interfaces
Process & Quality
- Promote global use of the standard
- Establish a flexible work package structure
- Clear release and revision numbering scheme
- Ensure backward compatibility
- Life cycle plan for each release
- Continuous incorporation of new concepts 11

12. Architectures Concepts AUTOSAR - Software architecture12

13. New Architectures in Body Control Modules Adaptive AUTOSAR – New Architecture Concepts
Automotive industry is tasked
to enable a host of new
features - including
connectivity,
over-the-air updates,
sensory data and
autonomy - never before
offered in vehicles. On the
other hand, traditional
ECUs were primarily
designed to perform
a specific, static, real-time
function.
Making ECUs future-proof
wasn’t really on nobody’s mind in the past. This is where Autosar (AUTOmotive Open System Architecture)’s emerging standard, “Adaptive Automotive Platform,” comes in.
Its goal is to offer more flexible options for ECU architecture, to establish a foundation for more compute-intensive tasks with large amounts of data. 13

14. New Architectures in Body Control Modules Adaptive AUTOSAR – For high-performance in-car computers
While Classic Autosar was designed for control units with static functions, control units with Adaptive Autosar can be enhanced with additional functions and security updates during the life cycle (central control unit with performance and safety cores). 14

15. New Architectures in Body Control Modules Adaptive AUTOSAR
Digital.
Connected.
Current way of thinking:
Vehicle separated from customers
daily digital experience
New way of thinking:
Vehicle integrated in customer digital
experience 15

16. New Architectures in Body Control Modules Adaptive AUTOSAR - Motivation
„Digital World“ stands for innovation and being up to date
The Vehicle becomes an integral part of this digital world
The smart vehicle consistently
increases its performance via
updates and upgrades after sales
A new approach is required to
enable continuous innovation 16

17. New Architectures in Body Control Modules Adaptive AUTOSAR - Assumptions and Challenges
Power Train
Power Train
Key Parameter
Chassis
Chassis
Body
Body
ADAS
ADAS
Infotainment
Infotainment
Criteria
Auto. Driving
Digitalization
E/E-Architecture 17

18. New Architectures in Body Control Modules Adaptive AUTOSAR - Architectural Pattern for Automotive Networks
Central Gateway
Architecture
Domain Controller
Architecture ?
Amount of software
Software complexity 18

19. New Architectures in Body Control Modules Adaptive AUTOSAR - A new approach to enable updatability & upgradability
Centralized functional architecture with decoupling of application software and I/O functions
- Reduce overall system complexity and dependencies between applications
Efficient & fast development of customer functions
- Provide basic services required by several customer functions
- Make use of service-oriented communication 19

20. New Architectures in Body Control Modules Adaptive AUTOSAR - Service-oriented architecture as key to digitalization
Enables carmakers to reduce complexity & improve updateability, upgradeability, reusability and portability by:
- dividing applications in single, self-contained software components
- minimizing functional dependencies between software components
Achieved by:
- Service-oriented communication
- Dynamic binding using service
discovery and publish/subscribe
- Data representation primarily
based on REST (Representational
State Transfer)
- Uniform interfaces, stateless,
separation of concerns, ...
- Forward- and
backward-compatibility of
interfaces 20

21. New Architectures in Body Control Modules Adaptive AUTOSAR - Interface compatibility
To enable continuous updates and upgrades, the compatibility of interfaces is required. 21

22. New Architectures in Body Control Modules Adaptive AUTOSAR - Communication Server
Central architectural component to encapsulate signal-based communication from
service-oriented communication
- (Bus)signals on sensor-actuator level and legacy partition
- Services interfaces for service-oriented communication (application/basic services) 22

23. New Architectures in Body Control Modules Adaptive AUTOSAR - Common SW-Framework based on Adaptive AUTOSAR
- Customer functions/basic services can be developed independently of ICAS and operating system
- Common methodology and exchange formats
- Common update and communication protocols 23

24. New Architectures in Body Control Modules Adaptive AUTOSAR - Common SW-Framework based on Adaptive AUTOSAR 24

25. New Architectures in Body Control Modules Software Architecture – Gateway
Separation of gateway, safety and security functions
A safety multi-core operating system with classic Autosar AR4.2
Gateway:
Classic gateway functions
one core for Can / Lin routing
one core for ETH Stack
Parts of the COM server (conversion signals in Services + UDP bridge)
Filter / Proxy - Control instance for the switch control
Safety:
fully ASIL certified safety components
Conversion to services (safety) - with new protection
Monitoring the performance controller (if required)
HSM:
Minimum operating system with queue, interruptions of operations, etc.
Implementation of further real-time functions with time-critical start-up behavior

26. New Architectures in Body Control Modules Software Architecture – Gateway
Responsible to transfer data from area of the car to another
(similar to Ethernet routers which we have in our homes).
Click !
CAN High Wire
DLC = Data length code
(length in bytes of usable
information carry be message)
CAN Low Wire
Gateway
CAN High Wire
CAN Low Wire
Highspeed CANs
Messages with too short DLC will be routed
Transmit message
Messages with too long DLC will be routed
Receive message

27. New Architectures in Body Control Modules Software Architecture – Gateway*

28. New Architectures in Body Control Modules Security & Privacy in Product Life Cycle
Concept
Refinement
Industrial-
ization
Product
Validation
Production
Ramp-up
After
Series
Innovation
Quotation V
Model
Development
Research for Industrial Leadership
Sec&Priv
Concept and Architecture
Sec&Priv
Support
Sec&Priv
Work Packages
Prototype Planning &
Specification
Realization
Integration
& Testing
LOOP
Incident Response Management

29. Threat (& Risk) Analysis
New Architectures in Body Control Modules Security & Privacy in V-Model
Security & Privacy
Goals
Security & Privacy
Validation
System Design
System
Integration & Testing
Threat (& Risk) Analysis
Security & Privacy
Integration Testing
Requirements Analysis
& Specification
Requirements
Verification
Integration & Evaluation
Analysis & Design
Security & Privacy
Concept
Compliance Testing
Architectural Design
Integration & Testing
Security & Privacy
Architecture
Functional
Reviews & Analysis
Unit Design &
Implementation
Unit Testing
Legend:
Product dev. V-Modell Approach
SCC Consulting/Support
Implementation
Implementation
Proofs of Concept
Secure SW/HW
Engineering

30. New Architectures in Body Control Modules Security Engineering Approaches
Independent consideration of protection mechanisms for every platform layer
Context Establishment
Risk Monitoring and Review
Risk Communication and Consultation
Threat Analysis
Risk Assessment
Risk Treatment
Security
Privacy
Security and Privacy Requirements
Top-Down
Bottom-Up
Access Control
Resource
Assignment
Isolation
Protection
of Restricted
Resources
Resource
Sharing
CPU Time
Flow Control
Firewall
Identification
Processes, Containers, OSs

31. New Architectures in Body Control Modules Security – Secure Memory Assignment

32. New Architectures in Body Control Modules Safety Concept
SW package for Safety plan to take from SWP Toulouse
RAM / ROM Test
ECC Handler
Register Monitoring
SafeStorage Module -> ASIL Function data
Safe SPI (Master Test pattern)

33. New Architectures in Body Control Modules Thank you!
Thank you for attending this course!
Thank you for support materials:
Vector Informatik -
Elektrobit -
Continental -
YouTube –