用用OTA更新和網(wǎng)絡(luò)安全盾為智聯(lián)汽車(chē)保駕護(hù)航王洪濱,高級(jí)技術(shù)經(jīng)理,哈曼Redbend2017年6月22日OTA更新方案介紹3.OTA威脅矩陣和AACI安全模型4.網(wǎng)絡(luò)防護(hù)–哈曼網(wǎng)絡(luò)安全盾軟軟件內(nèi)置>1700萬(wàn)輛汽車(chē)縮小95%的更新包;100%更新成功率>3000萬(wàn)次成功更新14家活躍汽車(chē)客戶(hù)汽車(chē)網(wǎng)絡(luò)連接軟件驅(qū)動(dòng)汽車(chē)網(wǎng)絡(luò)連接軟件驅(qū)動(dòng)的汽車(chē)生態(tài)環(huán)境演變不不斷增加的安全性法規(guī)要求大小(數(shù)百萬(wàn)行代碼)0102030405060708090100ModernHigh-endCarFacebookWindowsVistaLargeHadronColliderBoeing787AndroidGoogleChromeLinuxKernel2.6.0MarsCuriosityRoverHubbleSpaceTelescope F-22RaptorSpaceShuttle設(shè)每1,000行代碼有5-20缺陷，行代碼汽汽車(chē)將有碼且還在不斷增加到2025年,100%的車(chē)輛都將連網(wǎng)眾多型號(hào)的汽車(chē)將有>100ECUs2015年美國(guó)的汽車(chē)召回達(dá)到8400萬(wàn)輛6.4%的車(chē)輛召回與軟件相關(guān)回車(chē)輛總數(shù)(83,841,427)X相關(guān)的4%)X召回成=(82$)每年通過(guò)OTA更新可節(jié)約數(shù)億美元成本!($440M)成后再進(jìn)行懲罰”?BMW修正了ConnectedDrive中打開(kāi)車(chē)門(mén)的缺陷[link]?Tesla解決安全漏洞[link]?GM改進(jìn)智能手機(jī)藍(lán)牙兼容性[link]?Tesla引進(jìn)反饋充電補(bǔ)償彌補(bǔ)機(jī)制來(lái)補(bǔ)償電網(wǎng)不穩(wěn)定性[link]?Tesla助P85D實(shí)現(xiàn)加速并拓寬P60視野范圍[link]?Tesla運(yùn)用OTA為AutoPilot添加嘗試&購(gòu)買(mǎi)試用期[link]3.OTA威脅矩陣及AACI安全模型4.網(wǎng)絡(luò)防護(hù)–哈曼網(wǎng)絡(luò)安全盾消除軟件重刷瓶頸消除軟件重刷瓶頸允許后期更改和能在目標(biāo)地點(diǎn)進(jìn)行軟化縮減交付時(shí)間減少人力勞動(dòng)軟件更新成為?BOM(物料清單)量降低?網(wǎng)絡(luò)安全問(wèn)題下降降低經(jīng)銷(xiāo)商軟件更新減少維修和等候時(shí)間消除昂貴的召回提升客戶(hù)體驗(yàn)緩解安全威脅聯(lián)網(wǎng)服務(wù)貨幣化?智能差分?極小封裝(footprint)?低內(nèi)存(RAM)需求?UDS刷新?軟件,固件,應(yīng)用,地圖,設(shè)置,配置?后臺(tái)可集成API?服務(wù)器存取保護(hù)?服務(wù)器-客戶(hù)端認(rèn)證?打包認(rèn)證&保護(hù)?下載和安裝分離?網(wǎng)絡(luò)-安全5+1?100%容錯(cuò)保護(hù)?20億裝機(jī)設(shè)備,1700萬(wàn)輛汽車(chē)?可擴(kuò)展性–3000萬(wàn)輛汽車(chē)通過(guò)一臺(tái)服務(wù)器管理?3層級(jí)專(zhuān)業(yè)支持?汽車(chē)SPICE&ISO26262OTA更新案例研究3.OTA威脅矩陣和AACI安全模型4.網(wǎng)絡(luò)防護(hù)–哈曼網(wǎng)絡(luò)安全盾鍵性車(chē)輛控制系統(tǒng):剎車(chē),駕駛,加速,動(dòng)力C和使用信息TheftofOEMIPsersfingpingtofsecretsstoOEMIP?2015Redbend–Confidential在系統(tǒng)相關(guān)主體之在系統(tǒng)相關(guān)主體之間建立信任人和專(zhuān)有數(shù)被惡意授權(quán)使用請(qǐng)求首要級(jí)別的安全目標(biāo)新包無(wú)法惡意主體篡改概括來(lái)說(shuō),為整車(chē)實(shí)現(xiàn)安全有效更新需要:?綜合全面的客戶(hù)端-服務(wù)器架構(gòu)?在OEM更新架構(gòu)和汽車(chē)之間建立起AACI保護(hù)?安全的車(chē)內(nèi)整體更新方案?為所有ECUs實(shí)現(xiàn)智能差分更新和整體刷新更新OTA例研究3.OTA威脅矩陣及AACI安全模型4.網(wǎng)絡(luò)防護(hù)–哈曼網(wǎng)絡(luò)安全盾SECURITYISASYSTEMBEHAVIOR,NOTAFEATUREBuilton-topoftheTowerSecacquisitioninJanuary2016,withthegoalofprovidingsecuritysolutionstoprotectvehiclesandrelatedon-boardcomponentsagainsthackingandintrusions.PORTFOLIOPORTFOLIOcsTowerSecwasfoundedin2012,forgingIsraelicybersecurityexpertisewithDetroit’sautomotiveindustryknowledge.TowerSechasofficesintheUS,EuropeandIsrael,servingclientsinNA,EuropeandAPAC.?2016HARMANINTERNATIONALINDUSTRIES,INCORPORATED?2016HARMANINTERNATIONALINDUSTRIES,?2016HARMANINTERNATIONALINDUSTRIES,INCORPORATEDHARMANInternationalIndustriesCopyright22ECUSHIELDINTRUSIONDETECTION/PREVENTIONFORIN-VEHICLENETWORKSAnAnIntrusionDetectionandPreventionrksprovidingtionsreadytosmartgateways?2016HARMANINTERNATIONALINDUSTRIES,INCORPORATEDHARMANInternationalIndustriesCopyright24TCUSHIELDPROTECTIONFOREXTERNALCOMMUNICATIONDetectionanddesignedconDetectionanddesignedcontrolwithtobeembeddedAACyberAttackPreventionSoftware,integratedintelematicsIVIsandotherdevicesconnectivity?2016HARMANINTERNATIONALINDUSTRIES,INCORPORATEDWatchonYouTube?2016HARMANINTERNATIONALINDUSTRIES,INCORPORATED12345.NETWORKPROTECTIONDOMAINSEPARATIONTAMPERRESISTANCE12345.NETWORKPROTECTIONDOMAINSEPARATIONTAMPERRESISTANCE5APPLICATIONISOLATIONAUTHORIZATIONPOLICYECUSHIELD&TCUSHIELD?2016HARMANINTERNATIONALINDUSTRIES,INCORPORATEDChateworldsleadingmanufacturersandserviceproviderstomanageover2Billionconnecteddevices