Vortex has launched a new project: SecUp, which aims to implement Secure OTA following the Uptane framework. It involves the understanding of the security risks in OTA updates, implementing the trust chain on-vehicle and off-vehicle, and demonstrating the PoC via the simulation of an attack.
SecUp will address off-vehicle OTA, by securing the updates pushed from the server (at OEM) or from associated repositories (via suppliers) to the vehicle’s primary ECU. The on-vehicle OTA secures the updates pushed by the primary to the secondary ECUs (e.g., Brake Control Module ECU). The Uptane framework is the leading security framework that covers the end-to-end trust chain and provides protection against more than ten types of relevant OTA attacks.