AUTOCRYPT, Author at AUTOCRYPT

13 September, 2021 . 5 mins read

What Are Over-the-Air (OTA) Car Updates and Why Are They Important to Security?

Just like how IT software and operating systems receive regular updates from their vendors, vehicles receive software updates from their manufacturers. Software updates are an integral part of the overall user experience as they contain important feature enhancements and crucial security patches. Traditionally, software updates are performed in person at service centers. But as cars become increasingly connected today, OEMs are trying a new approach by sending and installing software updates over the air (the Internet) to the cars directly—the same way that smartphones and computers receive updates. Such software updates are called Over-the-Air (OTA) Car Updates.

The Software-Oriented Car: Skyrocketing Software Compliants and Recalls

Many car owners tend to believe that software only exists in a car’s infotainment system and thus downplay the importance of software maintenance. This might have been the case a few decades ago, but a modern vehicle today contains many more software components than it seems. With more than a hundred electronic control units (ECU) equipped in an average car, almost every function is either controlled or monitored by software. For instance, ECUs are built into the powertrain to run features like advanced driver-assistance systems (ADAS) and to monitor turning angles and road conditions to allow for on-demand all-wheel drive and traction control.

Having more software means more software issues. In the mid-2010s, OEMs saw a drastic increase in the number of emergency recalls with regards to software flaws and errors, with the percentage of software-related recalls reaching 46% in 2016. Timely recall is especially important for software parts that are crucial to safety. For example, Mercedes-Benz USA recalled 41,838 of its SUVs in the North American market in early 2021 due to a software error in its Electronic Stability Program, a feature that applies a twisting force to one of the car’s front wheels so that the car pulls itself towards the turning direction during sharp turns to maintain stability and comfort. Clearly, a malfunction in this feature could lead to an unexpected twisting force and potentially cause crashes.

The Growing Importance of OTA Car Updates

Even without major flaws or errors, both hardware and software components need to be maintained and updated regularly during a car’s lifespan. Normally, car owners visit the service center at least once a year to get their scheduled hardware maintenance and software updates. However, as software features become increasingly sophisticated, more frequent updates are required. Having to install software updates at service centers is not only inconvenient for the owners, but also highly costly for the OEMs due to the tremendous labour needed. Additionally, many car owners neglect software updates altogether and put themselves in the danger of outdated software that is not just slow and inefficient, but also prone to cyberattacks.

OTA car updates solve all the above problems by eliminating the need for software-related recalls and make software updates easy and seamless. OEMs simply send the updates and patches over the internet so that the cars can download and install them on their own.

OTA car updates are commonly applied to two major types of systems within a vehicle: drive control and infotainment. Updates in drive control systems include feature upgrades and security patches related to the ADAS, powertrain, and chassis. Updates in the infotainment system include map updates and application enhancements. Even though the infotainment system does not directly affect driving, it is still a crucial component that must be updated and secured as it contains sensitive personal data.

Another important role of OTA updates is that they keep vehicles from depreciating. Since modern vehicles are essentially computers on wheels, they depreciate much faster than conventional vehicles. Without regular updates, software-enabled features can deteriorate and become slow and unusable after a few years. OTA updates prevent this from happening and keep the onboard experience new and fresh.

How Do OTA Updates Work?

To enable OTA updates, cars must be equipped with a telematics control unit (TCU), which is a piece of hardware that contains a mobile communication interface (e.g., LTE, 5G) and a memory to store driving and vehicle data. The TCU must also be able to recover data in case if an update needs to be removed. Whenever an update is available, the OEM delivers the software package to its vehicles from a cloud-based server.

The first OEM to successfully perform OTA updates was Tesla. Other manufacturers like GM and Ford quickly followed. Being able to deliver OTA updates is especially crucial for electric vehicle manufacturers because it allows them to introduce their vehicles to the market as early as possible to gain an early advantage, while working on quality assurance and improvements after they are sold.

How Secure Are OTA Updates?

We now know that OTA updates are essential to keeping vehicle software up-to-date and secure, but the next question to consider is—are OTA updates secure? Giving vehicles wireless internet connectivity has a lot of benefits, but also creates a new world of opportunities for hackers. Attackers could attempt to corrupt the software update kits with malware and enter the vehicle system to steal personal data or even take physical control.

To prevent this risk, not only must OEMs make sure that their vehicle connections are secured, but more and more regulatory bodies are mandating vehicular cybersecurity. Recent releases of the WP.29 regulation now require cybersecurity type approval for all new connected vehicles.

To fill in this gap, AutoCrypt IVS provides an in-vehicle security solution that protects the vehicle’s internal systems from cyber threats, enabling secure communication between the vehicle’s onboard units and the cloud. With AutoCrypt IVS, both OEMs and car owners can rest assured that their OTA updates are original and protected. Apart from blocking malicious traffic from entering the vehicle, it constantly monitors communications within the vehicle for any abnormal activities.

To stay informed with the latest news on mobility tech and automotive cybersecurity, subscribe to AUTOCRYPT’s monthly newsletter.

31 August, 2021 . 4 mins read

Barriers to Autonomous Vehicle Adoption

Autonomous driving has been a futuristic technology we’ve seen in entertainment for decades. In the 2020s, self-driving seems like it is becoming a tangible reality, with manufacturers like Tesla releasing Full-Self Driving (FSD) mode, and other manufacturers eager to follow suit. While manufacturers have quite a way to go before achieving high or full automation (level 4 and 5, respectively, according to the SAE levels of vehicle autonomy), the bigger problem is that though manufacturers may be hard at work developing autonomous technology for future self-driving vehicles, there are still many factors to consider before fully overcoming the barriers to adoption of autonomous vehicles. Here are just a few of these challenges we look through in our blog today.

1. Technology

There are a variety of factors why we haven’t seen more autonomous vehicles on our roads – technology is one of them. As previously mentioned, though manufacturers may tout “autonomous tech,” it’s still more of a marketing term, rather than technologically reliable. For example, autonomous vehicles rely on sensors like Lidar, Radar, and cameras. These technologies help the car navigate the environment around them, and they should be able to detect buildings, other vehicles, road infrastructure (think traffic signals and road signs) and most importantly, pedestrians. Sensors have to “see” in order to do all of this properly: whether it’s in inclement weather conditions, or in congested urban areas. While the available sensors are continuing to make great advancements in ensuring safety in autonomous driving, we have to ask ourselves what is the level of certainty we require and the level of risk we’re willing to allow.

2. Public acceptance

In addition to the technology development, there is the issue of acceptance within society. While the majority of the population enjoys seeing futuristic technology on the big screen, it is an entirely different matter when it comes to personal usage. There is still resistance and distrust when it comes to self-driving cars. The Partners for Automated Vehicle Education (PAVE) found that 3 in 4 Americans say that they don’t think autonomous vehicle technology is ready to be mainstream. 48% said that they would never use a self-driving ride service, and 20% believed that AVs will never be safe. This was a 2020 poll, but polls in previous years have shown similar skepticism, and it looks like this attitude might be here to stay unless some major changes occur.

3. Security

One reason that the public is still wary of autonomous vehicles may be that they don’t fully trust the security of AVs. More connected than its traditional counterparts, an AV is essentially a smartphone on wheels, which means that it is at risk of breaches unless a proper cybersecurity management system protocol is in place. There isn’t a one-stop solution to having a proper cybersecurity management system, but the ISO/SAE 21434 risk assessment system is a good place to start.

Fortunately, manufacturers will soon be mandated to have a proper cybersecurity system in place. Starting in July 2022, new vehicle models will be required to get cybersecurity type approval for the model before it is allowed to be put on the market.

4. Standardization and regulations

Ultimately, many of our aforementioned barriers to adoption can be improved upon when there are wider, universal standards put into place by regulators. For example, the UNECE’s WP.29 regulations for cybersecurity will mandate in-vehicle security for new vehicle models next year, and all vehicle models by 2024. With this kind of overarching, nearly-universal regulation in place, the public’s acceptance of connected and autonomous vehicles will continue to grow.

An added example is the recently published ISO 22737, the first international safety standard for Level 4 automated driving systems. These types of standards help us to have more trust for safety and security, addressing the minimum requirements for technology systems, that previously were unclear.

Conclusion

Unfortunately, AV adoption isn’t as simple as making a fully autonomous vehicle and putting it on the road. To overcome the various barriers to adoption, many factors need to work hand-in-hand to ensure not only that the vehicles do what they’re supposed to do, but also other societal infrastructure is on the same page. Standards will help move this process along, and we will be sure to keep you updated on the latest standardizations that are developed to keep our vehicles and mobility services secure.

For more information about our vehicle security solutions, visit www.autocrypt.io/solutions

26 August, 2021 . 2 mins read

AUTOCRYPT highlighted in Forbes Asia Inaugural 100 to Watch List

Leading autonomous vehicle cybersecurity provider AUTOCRYPT announced that it was spotlighted in Forbes Asia’s inaugural 100 to Watch list. The newly announced list highlights notable companies and startups on the rise in the Asia-Pacific region. AUTOCRYPT was featured as the sole cybersecurity provider on the list.

As the number of connected and autonomous vehicles (CAVs) on the road increase, it is becoming more apparent that cybersecurity will be the key to wider, safer adoption of this new technology. AUTOCRYPT’s solutions cover the entire connected car ecosystem by securing not only the vehicle itself, but charge points and networks, fleet management solutions, as well as V2X (vehicle-to-everything) communications. AUTOCRYPT’s security solutions currently cover over 5000 kilometers of smart roadways and highways, and its proprietary technology has provided secure communications for several major manufacturers’ vehicles and charging systems.

“We are exceptionally pleased to see our inclusion into this inaugural list. We live in an era where autonomous vehicles are making headway in terms of technological development, and as such, security is now more necessary than ever. Legislation is beginning to follow, putting into effect cybersecurity regulations and standards for those in the automotive industry, and demand has skyrocketed,” noted AUTOCRYPT’s CEO and co-Founder, Daniel ES Kim. He continued, “We do our best to meet this demand, but we also take it upon ourselves to inspire and raise up leaders and experts in this industry. We hope that our presence on the Forbes 100 to Watch highlights the work being done to bring cybersecurity of not only vehicles, but of the entire mobility ecosystem to the forefront.”

AUTOCRYPT made headlines earlier this year by raising a total of US$15 million from major investors to expand its offerings globally. The company most recently launched offices in Germany and the United States, opening its doors to collaborative projects with North American and European vehicle OEMs and Tier-1 suppliers. By providing security solutions complying with the diverse range of standardizations for vehicles worldwide, AUTOCRYPT allows for convenience and ease when it comes to interoperability.

24 August, 2021 . 6 mins read

How Do Automotive OEMs Transition to Electric Vehicle Manufacturing?

Due to growing customer demand and tightening carbon emission quotas, nearly all automotive manufacturers today are undergoing a significant transition from producing ICE and hybrid vehicles to electric vehicle manufacturing, specifically battery-electric vehicles. Last month, Volkswagen Group announced its NEW AUTO strategy, a long-term plan that projected electric vehicles to make up 50% of the group’s total sales by 2030 and 100% by 2040. Earlier in the year, Hyundai Motor Group also unveiled its plan to increase its EV portfolio from the current eight models to 23 models by 2025. Other OEMs such as GM, Mercedes-Benz, BMW, and Volvo all have ambitious plans to increase their EV portfolio and grab as many early adopters as possible in this booming industry.

Will Traditional OEMs Dominate Electric Vehicle Manufacturing?

Many tend to take it for granted that traditional major OEMs will naturally take over all electric vehicle productions. This is a fair assumption because the automotive industry has always had extremely high entry barriers due to the economies of scale—an absolute advantage firmly held by large global OEMs. While producing one vehicle might cost millions, producing 100,000 vehicles reduces the per-unit expense down to the thousands.

However, the above assumption has a major flaw; that is, it underestimates how different EV production is compared to producing ICE vehicles. When making a new model of a hybrid vehicle, the manufacturer can still use the existing frame, design, and powertrain of its gasoline-powered siblings, with only some modifications needed to the original assembly plant. On the other hand, to build a battery-electric vehicle, OEMs need to start from scratch and consider a whole different set of problems when designing the frame and the powertrain, such as how to best fit the batteries at the base. As a result, OEMs cannot take advantage of their existing ICE-vehicle assembly lines to make EVs, and hence lose the economies-of-scale advantage.

In fact, despite a vibrant automotive industry, these traditional OEMs are facing their biggest threats in decades, if not ever. Tesla has proven that a startup with no experience in car manufacturing can rise to become a market leader in the EV industry. Over the past few years, countless startups and even tech giants like Apple and Sony are all trying to gain a foothold in the market.

Nevertheless, despite losing their absolute advantage, traditional OEMs still have a better chance of winning the EV race as they have pre-established brands that are well recognized and trusted by consumers. Therefore, OEMs should take advantage of their beloved brands to make a smooth and bold transition into the EV game.

Brownfield vs. Greenfield: Two Strategies for Electric Vehicle Manufacturing

To start manufacturing electric vehicles, the first big decision that traditional OEMs face is whether to adopt the brownfield or greenfield strategy. OEMs that choose the brownfield strategy need to do a significant overhaul to their existing ICE-vehicle assembly line to accommodate an EV assembly line. This strategy is commonly adopted by an OEM at its early stages of the EV transition, when it does not expect high sales in the short run. However, adopting the brownfield strategy also means that the OEM must abandon some of their existing ICE-vehicle lineups to create rooms for EV production. The more EVs produced, the more ICE-vehicle sales it needs to sacrifice.

Another alternative is to adopt the greenfield strategy. That is, to establish new facilities and plants dedicated specifically to electric vehicle manufacturing. Doing so requires significant investment, and whoever has the most cash has the greatest advantage to begin with. By adopting this strategy, OEMs put themselves side by side with new market entrants like startups and tech firms.

What Advantages Do Traditional OEMs Have?

During this transition period, it is almost certain that some of the traditional OEMs will lose the race to new market entrants. However, traditional OEMs do still have certain advantages over startups and tech firms. First, their experience and knowledge in the E/E (electrical and electronic) architecture mean that it takes less time for them to design and develop new vehicle models. Moreover, the pre-established quality assurance system also ensures that their vehicles will be more reliable overall than those built by new market entrants. Additionally, the suppliers are evolving with the OEMs. Large tier 1 suppliers like Bosch and Magna are now providing EV parts and solutions, meaning OEMs with existing supply chains can save time and cost in looking for new suppliers.

However, traditional OEMs must be aware that these advantages are not as significant as the absolute advantage they used to have. Therefore, to establish a firm foothold in the new EV market, OEMs must utilize these advantages in an efficient way as early as possible.

New Considerations in Electric Vehicle Manufacturing

Amid the fierce competition, OEMs must also consider a wide range of new challenges in the EV manufacturing process. Most of these are related to charging and range. How far can the car travel on a full charge? How long does it take for a full charge? How many charging stations are available in a certain area? Can the power grid accommodate all charging needs during peak times?

To solve these problems, OEMs, charger manufacturers, charging point operators (CPO), and mobility operators are working towards a new solution that makes EV charging smart and seamless. Utilizing the vehicle-to-grid (V2G) communication interface, Plug&Charge (PnC) is an EV charging technology outlined by ISO 15118 to allow bidirectional charging with a seamless user identification and payment process. Plug&Charge infrastructure allows the driver to plug in their car at any charging station without the need to carry membership cards and credit cards.

To integrate Plug&Charge technology, OEMs must ensure that their vehicles have the security measures to allow the safe transmission of vehicle and payment data. This is AUTOCRYPT’s role as a cybersecurity supplier. AutoCrypt PnC secures the Plug&Charge process using a PKI-based security system made by cutting-edge encryption and authentication technology.

As the above example shows, electric vehicle manufacturing requires the collaborative work of a wide range of different parties extending into infrastructure providers and cybersecurity firms. OEMs that are willing to adapt to these changes have a greater chance of succeeding in this new market. To stay informed with the latest news on mobility tech and automotive cybersecurity, subscribe to AUTOCRYPT’s monthly newsletter.

10 August, 2021 . 6 mins read

Camera, Radar and LiDAR: A Comparison of the Three Types of Sensors and Their Limitations

Autonomous driving is enabled by two sets of technologies: V2X and ADAS. V2X (vehicle-to-everything) utilizes wireless communication technology to facilitate real-time interactions between the vehicle and its surrounding objects and infrastructure. On the other hand, ADAS (advanced driver-assistance systems) make use of built-in sensors to detect and calculate the surrounding environment. Both technologies complement each other to ensure a safe and seamless autonomous driving experience. We have so far explained how V2X technology works and the different wireless communication standards involved, see: DSRC vs. C-V2X: A Detailed Comparison of the 2 Types of V2X Technologies. In this article, we will focus on the technologies behind ADAS and take a deep dive into the three types of commonly used sensors: camera, radar, and LiDAR.

Camera

First introduced in the form of a backup camera by Toyota in 1991, camera is the oldest type of sensor used in vehicles. It is also the most intuitive sensor since it works just like our eyes do. After decades of usage for backup assistance, car cameras had undergone significant improvements in the 2010s as they were applied for lane keep and lane centering assists. Today, camera has become the most essential component of the ADAS and can be found in every vehicle.

Advantages of Camera:

Vision-like sensory. Just like our vision, cameras can easily distinguish shapes, colours, and quickly identify the type of object based on such information. Hence, cameras can produce an autonomous driving experience that is very similar to the one produced by a human driver.

Recognizing 2D information. Since camera is based on imagery, it is the only sensor with the capability of detecting 2D shapes and colours, making it crucial to reading lanes and pavement markings. With higher resolutions, even fading lines and shapes can be read very accurately. Infrared lighting is also equipped with most modern cameras, making it just as easy to navigate at night.

Low cost. Camera is relatively cheaper compared to other types of sensors. This made it possible for OEMs to introduce better autonomous driving features to mid-range and even lower-end vehicles.

Disadvantages of Camera:

Poor vision under extreme weather events. Its similarity to the human eye also makes it a major disadvantage under severe weather conditions like snowstorms, sandstorms, or other conditions leading to low visibility. Therefore, the camera is only as good as the human eye. Nevertheless, most people do not expect their car to see better than their eyes and would not fully rely on their car under such extreme conditions. In fact, Tesla had decided to abandon radar and use camera only for its Autopilot system, starting with its newly produced Model 3 and Model Y vehicles. Named Tesla Vision, the system is expected to decrease the frequency of system glitches because of the reduction of confusing signals from radar.

Radar

Radar (radio detection and ranging) was first invented prior to World War II and has been widely used since then to precisely track the position, speed, and direction of aircraft and ships. It was first brought into cars by Mercedes-Benz in 1999 to support its adaptive speed feature. Radar technology can be broken down into a transmitter and a receiver. The transmitter blasts radio waves in a targeted direction. These radio waves then get reflected when they reach any significant object. The receiver picks up these reflected waves and analyzes them to identify the location, speed, and direction of the object.

Advantages of Radar:

Unaffected by weather conditions. The greatest advantage of radar is that the transmission of radio waves is not affected by visibility, lighting, and noise. Therefore, radar performance is consistent across all environmental conditions.

Default sensor for emergency braking. The radar system has been used as the default sensor for emergency braking due to its ability to detect and forecast moving objects coming into the vehicle’s path.

Disadvantages of Radar:

Low-definition modeling. The radio waves are highly accurate at detecting objects. Yet, compared to the camera, radar is relatively weak at modeling a perfectly precise shape of the object. As a result, the system might not be able to identify exactly what the object is. For instance, unlike the camera, the radar system normally cannot distinguish bicycles from motorcycles, even though it has no problem determining their speeds.

LiDAR

LiDAR (light detection and ranging) adopted its name the same way as radar did. Despite its underlying mechanism being similar to radar, LiDAR utilizes laser lights instead of radio waves. Invisible laser lights are fired to the vehicle’s surroundings. The computer then uses the reflection time paired with the speed of light to calculate the distance of the reflector.

Advantages of LiDAR:

High-definition 3D modeling. LiDAR can be seen as a more advanced version of radar. It has a detection range of as far as 100 meters away with a calculation error of less than two centimeters. Hence it is capable of measuring thousands of points at any moment, allowing it to model up a very precise 3D depiction of the surrounding environment.

Unaffected by weather conditions. Same as radar, LiDAR’s efficacy is not affected by the environmental condition.

Disadvantages of LiDAR:

Highly sophisticated. In order to provide an accurate 3D model of the environment, LiDAR calculates hundreds of thousands of points every second and transforms them into actions. This means that LiDAR requires a significant amount of computing power compared to camera and radar. It also makes LiDAR prone to system malfunctions and software glitches.

High cost. As expected, due to the sophistication of the software and the computing resources needed, the price to implement a set of LiDAR sensors is the highest among the three.

Are Sensors Reliable?

All three types of sensors have their pros and cons. Therefore, most OEMs use a mix of at least two of the three to complement each other and outweigh their weaknesses. As sensor technologies become more mature, more and more vehicles are expected to reach autonomous driving levels 3 to 4 in the next five years.

Yet, no matter how advanced and sophisticated sensor technologies become, they are nothing more than computers; and connected computers are always at risk of cyberattacks. Therefore, just as we trust these sensors to take over our wheels, cybersecurity measures must be in place to ensure they do not get tampered with by malicious actors. The automotive cybersecurity regulation outlined by WP.29 ensures that all OEMs build their vehicles with secure cybersecurity systems in place, so that we can all trust the sensors to do their job.

AutoCrypt IVS is an in-vehicle security solution chosen by some of the top ten OEMs in the world for vehicular cybersecurity type approval. Not only does IVS block malicious threats from outside the vehicle, but it also monitors communications within the vehicle, and responds to abnormal and malicious activity in real-time.

To stay informed with the latest news on mobility tech and automotive cybersecurity, subscribe to AUTOCRYPT’s monthly newsletter.

6 July, 2021 . 3 mins read

Infographic: The Different Types of Electric Vehicles

The EV is an umbrella term for battery EVs, plug-in hybrids, hybrids, and fuel cell EVs. In this infographic we go through the different types of electric vehicles and their key differences.

(Accessibility version below)

Electric Vehicles, or EVs, are all over the news. With demands on the rise dueto environmental concerns, we have seen many more EVs in the news and on the road.

But did you know? An EV is in reality, an umbrella term. Despite what many may think, EVs can still have a traditional combustion engine as well as a battery-powered motor, and can even generate electricity without plugging into a charge point.

Take a look at the different types of electric vehicles (EVs) and all the different components they utilize to operate properly on the road.

HEV – Hybrid Electric Vehicle
- Utilizes traditional internal combustion engine (ICE) with electric propulsion, meaning that the ICE charges the batteries to power the electric motor
- Still requires fuel to operate, though it has a higher fuel economy than ICE vehicles
- Less carbon emissions than ICE vehicles
- Heavier weight because of the components involved
FCEV – Fuel Cell Electric Vehicle
- Fuel cells combine hydrogen and oxygen to product electricity, which runs the motor
- The battery captures braking energy, conserving extra power to smooth out power from the fuel cell
- Emissions are simply water vapor and warm air
- Vehicles can be more expensive and difficult to refuel due to the lack of fuel stations
PHEV – Plug-in Hybrid Electric Vehicle
- PHEVs can be charged for power, and runs mostly on the electric motor
- Still utilizes fuel to power the ICE, but the engine is considered backup
- Prices can be higher than other vehicles
- Less fuel consumption, less carbon emissions
- Heavier weight due to the components involved
BEV – Battery Electric Vehicle
- No ICE, powered by electricity only. The vehicle plugs into a charge point to recharge the battery
- No emissions, and lower maintenance
- Charging can take time, and range anxiety can limit driving distance
- Prices can be higher than conventional ICE vehicles, but more affordable models are launching as demand rises.

Secure it First. No matter what your vehicle is fueled by, without proper protocols in place, systems can be more vulnerable to cyberattacks. EVs are no exception. Particularly for BEVs, communication between the vehicle and charge point, as well as its servers, could pass along sensitive information like 1) Credit card / payment information, 2) Personal Identification Information (PII), and 3) Vehicle data.

Ensure that your charge point operator and mobility operator’s systems are in compliance with ISO-15118 standards for V2G (Vehicle-to-Grid) communication. This will ensure that both the vehicle and charger’s certificates are verified and safely delivered, making your EV ride a secure one.

AutoCrypt PnC secures the EV and its supply equipment during the Plug&Charge process, providing secure communication and certificate management. For more information, visit our product page!