- -, Author at AUTOCRYPT

26 November, 2025 . 6 mins read

Shift Toward Adaptive Public Mobility Ecosystems

Public transportation is undergoing a profound transformation. What was once limited by fixed timetables and rigid infrastructure is evolving into an intelligent, adaptive network powered by real-time data, electrification and automation. Beyond technological progress, this shift reflects a move toward a mobility model driven by cooperation and shared innovation.

Cities, governments, and transport authorities are increasingly co–developing mobility services with private technology providers to address emerging urban and societal needs. Many of these efforts are guided and supported by national and bilateral innovation initiatives, providing the funding and regulatory frameworks needed to connect public governance with private technological capability.

This blog highlights the global trend through initiative-backed examples, showing how collaboration between public entities and private firms is reshaping the future of public transportation.

Rise of Adaptive Public Mobility Ecosystems

Traditional fixed-route transit systems are increasingly challenged by uneven ridership patterns, with dense urban areas often overcrowded while suburban and rural regions remain underserved. To close this gap, cities and transport authorities are adopting digitally integrated, AI-powered systems that can adjust dynamically to real-time demand, ensuring more efficient and inclusive operations.

The following case studies illustrate how initiative-backed partnerships are aligning public governance with private innovation, advancing adaptive, data-driven mobility solutions through the combined expertise of governments and technology leaders.

Case 1: Shucle DRT Pilot (Hungary, 2025)

The Hyundai Shucle pilot in Hungary was launched under the Economic Innovation Partnership Program (EIPP), a Korea-Hungary bilateral cooperation framework led by the Ministry of Economy and Finance (MOEF) and the Korea Development Institute (KDI). Under the initiative’s design on promoting innovation-driven development projects, the pilot aims to introduce an AI-powered Demand-Responsive Transport (DRT) solution which enhances operational efficiency and accessibility within Hungary’s public transit systems.

On the public side, MOEF and KDI oversee funding, policy design and program monitoring, while the Gödöllő Municipality and local transport operators act as pilot hosts, integrating the service into the local transit network. As the private partner, Hyundai Motor Group provides and operates the Shucle platform, which leverages AI for dynamic routing, real-time demand optimization and fleet management.

The project demonstrates how bilateral innovation programs can effectively bridge public governance and private technology to deliver tangible mobility improvements.

Case 2: NoWel4Project (Germany, 2024-2026)

The NoWel4Project originates from Germany’s Federal Ministry for Digital and Transport (BMDV) R&D program for Autonomous and Connected Driving. The initiative focuses on deploying Level 4 autonomous electric shuttles in northwest Berlin to explore how automated mobility can be integrated safely and effectively into existing public transport networks.

BVG, Berlin’s public transport operator, manages route planning, service integration and regulatory compliance, while academic and institutional partners, including TU Berlin and IKEM, contribute to research and policy framework development. The private partner, MOIA GmbH, a subsidiary of Volkswagen Group, provides and operates ID.Buzz AD shuttles equipped with Level 4 automation and oversees software management, connectivity and fleet operations.

Together, the partners represent Germany’s coordinated approach to incorporating advanced automation within the public transport ecosystem.

Case 3: National Diet Shuttle (Japan, 2025)

In a more recent case, TIER IV was selected to lead a public-sector autonomous shuttle project connecting government buildings around Japan’s National Diet in central Tokyo. Funded by the Ministry of Economy, Trade and Industry (METI), the initiative aims to accelerate the adoption of autonomous driving technologies within public services, addressing broader social challenges such as an aging populations and driver shortages in municipalities beyond major metropolitan areas.

Powered by Autoware™, the open-source autonomous driving software developed by TIER IV, the system utilizes Suzuki’s Solio model and implements TIER IV’s robotaxi reference design. The service began operations on November 20, 2025, with project findings expected to inform Japan’s future frameworks for autonomous mobility procurement and deployment.

This example illustrates Japan’s commitment to technology-driven public innovation, embedding autonomous mobility into public infrastructure to enhance transportation efficiency while advancing social sustainability.

Case 4: Autonomous Shuttle Pilot (Singapore, 2025)

In Singapore, the partnership between WeRide and Grab operates under the Land Transport Authority (LTA)’s regulatory sandbox for autonomous vehicle testing, part of the nation’s Smart Nation and Land Transport Master Plan. Under a framework that enables real-world testing of autonomous mobility technologies in designated smart zones, the pilot conducts large-scale trials of autonomous shuttles in Singapore’s Punggol district to evaluate service readiness before public launch in early 2026.

Guided by the LTA, which ensures compliance with national safety and operational standards, the pilot brings together two private partners, each contributing distinct technical and operational strengths. WeRide, serving as the technology provider, supplies autonomous driving systems and vehicles while managing fleet operations and safety monitoring. Grab, leveraging its operational and local expertise, handles service deployment, customer interface, and integration with its existing ride-hailing platform.

This initiative stands to illustrate a regulatory-sandbox approach where public oversight and private innovation intersect to validate autonomous mobility services for commercial deployment.

Implications

Despite regional and strategic variations, the four cases trace a clear progression in how adaptive public mobility is evolving through public-private collaboration.

The ‘Shucle DRT Pilot’ demonstrates how bilateral innovation programs can initiate policy-backed experiments that connect governance with technology. Building on this foundation, both the ‘NoWel4 Project’ and ‘National Diet Project’ exemplify how coordinated public initiatives are advancing regulatory and operational readiness for autonomous urban transit. Finally, the ‘Autonomous Shuttle’ pilot highlights the transition from controlled testing to commercial deployment, illustrating how proven technologies can scale into real-world, revenue-generating services.

Together, they pursue the same overarching goal: to enhance accessibility, efficiency and adaptability within public transportation systems and highlight a global shift toward an adaptive mobility framework.

Future of Connected Mobility

As cities worldwide adopt adaptive mobility frameworks, their success increasingly depends on secure, interoperable collaboration between public and private stakeholders. Ensuring seamless communication among vehicles, infrastructure, and digital platforms requires standardized protocols, trusted data exchange and end-to-end cybersecurity. Without these foundations, the integration of connected and autonomous mobility remains incomplete.

AUTOCRYPT plays a defining role in enabling this transformation. In particular, AutoCrypt® MOVE™ (Learn More) is one such solution which shows our capabilities into the mobility platform domain. Designed for demand-responsive transport (DRT) and other emerging mobility services, AutoCrypt® MOVE™ enables operators to plan, deploy and manage secure, data-driven mobility platforms tailored to diverse needs.

By combining our proven expertise in fleet management, data analytics, and security integration, AUTOCRYPT supports both public transit operators and private mobility providers in establishing reliable and adaptive services.

With expertise spanning digital key management, V2X communication, cybersecurity testing and compliance consulting, AUTOCRYPT provides the technologies and guidance that help stakeholders operate securely within complex mobility environments. By embedding safety and interoperability into every layer of mobility infrastructure, AUTOCRYPT helps build a trusted, scalable, future-ready ecosystem which benefits both public and private partnerships.

To learn more about end-to-end mobility solutions, visit https://autocrypt.io/all-products-and-offerings/

18 November, 2025 . 3 mins read

AUTOCRYPT to Unveil Next-Gen Vehicle Solutions at CES 2026

AUTOCRYPT, a leading global provider of digital key and automotive cybersecurity solutions, announced its participation at the 2026 Consumer Electronic Show (CES) in Las Vegas from January 6-9, where it will present its foundational and future-ready security solutions.

Showcasing technologies that protect every layer of mobility, AUTOCRYPT will demonstrate three interconnected domains of expertise:

End-to-End Vehicle Key Management System: AUTOCRYPT’s key management infrastructure provides full-lifecycle generation, distribution, authentication, and access control of cryptographic keys across both on-board and off-board environments. By combining Public Key Infrastructure (PKI) and the Key Management System (KMS) with hardware-based protection through Hardware Security Module (HSM) and isolated execution via Trusted Execution Environment (TEE), cryptographic keys and digital access credentials are stored, transmitted and verified in a tamper-resistant manner. A demonstration of AUTOCRYPT’s digital key system featuring secure vehicle-user communication and cross-account key sharing will be available on-site.
Connected Mobility Security: Supporting safe interactions between the vehicle, user, environment and charging infrastructure, AUTOCRYPT provides robust and interoperable systems for Digital Key, Vehicle-to-Everything (V2X) communications, and Plug&Charge (PnC). These technologies support OEMs and mobility operators in meeting rigorous automotive safety and quality standards while enabling trusted connectivity across all mobility touchpoints.
Next-Gen Vehicle Security with Lifecycle Management: Adopting a holistic approach to automotive cybersecurity across every stage of the vehicle lifecycle, AUTOCRYPT will showcase AI-enabled risk assessment and automated testing solutions. This includes AI-based Threat Analysis and Risk Assessment (TARA) Automation, which applies AI-generated inputs to accelerate and strengthen fault injection and vulnerability testing. The Cybersecurity Testing Platform (CSTP) provides integrated validation aligned with global standards such as UN R155/156 and ISO/SAE 21434. CSTP Fuzzer, a core component of the platform, recently passed Amazon Web Services’ (AWS) Foundational Technical Review (FTR), enabling scalable, cloud-based security testing and proof-of-concept (PoC) deployments.

“As we reinforce our foundational security pillars and introduce future-ready, AI-driven capabilities, we remain committed to protecting all parts of the vehicle and mobility landscape,” said Seokwoo Lee, Founder and CEO of AUTOCRYPT. “By delivering tailored digital infrastructure solutions for OEMs, suppliers and end users, we will continue expanding our global ecosystem through strategic collaborations.”

Exhibiting at CES for the third consecutive year, AUTOCRYPT continues to demonstrate technological innovation within the automotive cybersecurity space. With additional on-site events to be announced, attendees are encouraged to visit AUTOCRYPT’s booth #4667 at the Las Vegas Convention Center’s West Hall for demonstrations and in-depth discussions with the company’s team of experts. Meetings are available by reservation only. Book a meeting at https://calendly.com/autocrypt_global/.

To learn more, visit autocrypt.io.

About Autocrypt Co., Ltd.

AUTOCRYPT is the leading player in automotive cybersecurity. It specializes in the development and integration of security software and solutions for in-vehicle systems, V2X communications, Plug&Charge, and fleet management, paving the way towards a secure and reliable C-ITS ecosystem in the age of software-defined vehicles. Its comprehensive suite of automotive cybersecurity testing services and platforms includes the award-winning AutoCrypt CSTP, which supports automotive OEMs and suppliers in meeting regulatory standards ilke ISO/SAE 21434, UNECE WP.29 UN R155, and CRA.

29 October, 2025 . 5 mins read

Ensuring Safe, Seamless Vehicle Access

With the advent of software-defined vehicles, the concept of the car key has evolved from a physical device into a digital access system seamlessly connected to the driver’s smartphone. Through smartphone-based digital keys, drivers can lock, unlock, start vehicles and even share access to their vehicles — all through a single intuitive mobile experience.

As vehicles become increasingly connected, the need for robust security grows alongside the convenience these systems provide. Every interaction between the smartphone, vehicle and backend must occur within a trusted, interoperable ecosystem that protects against unauthorized access and data compromise. This article explores the core components of a secure Digital Key Ecosystem and highlights the measures and technologies that enable safe, seamless, and scalable vehicle access.

I. Secure Digital Key System Architecture

Digital key solutions operate within a complex ecosystem connecting multiple systems and communication layers. From user registration to daily vehicle operation and key revocation, every stage requires security embedded by design to ensure the digital key performs safely, reliably and seamlessly.

At the foundation of this ecosystem lies the Backend System & User Data Management layer, which links user accounts, vehicles and mobile devices through centralized control. This layer manages user registration, key issuance and access permissions across multiple vehicles, synchronizing updates between the mobile app and vehicle in real time. By continuously managing backend events such as invitations, temporary credentials and revocations, it ensures that digital key services remain scalable, interoperable and responsive to every user action.

The next layer, Vehicle and User Authentication, safeguards trust between the user’s smartphone and the vehicle before any operation takes place. Through certificate-based authentication and encrypted communication, this layer verifies that both the driver and vehicle are legitimate participants in each interaction. As the core of identity verification, it ensures that every connection within the ecosystem begins from a trusted foundation, maintaining cybersecurity from the very first handshake.

Beyond authentication, the In-Vehicle Key Management layer embeds protection directly within the vehicle. Every vehicle interaction is validated at the hardware level, controlling how digital keys are stored, verified and applied to vehicle systems. Whether online or offline, this layer preserves key confidentiality and enforces access rights while integrating proximity-based protection to prevent relay or spoofing attacks. In doing so, it enables continuous safeguarding of digital credentials throughout their active use.

Finally, the In-Vehicle Applications layer provides the user-friendly interface that connects security with convenience. Hosting in-vehicle infotainment (IVI) and head-unit control (HCP) applications, it allows drivers to view key status, manage profiles and control access settings. By coordinating commands such as unlock, start and key sharing with backend systems in real-time, this layer ensures user interaction and consistent connectivity across all digital key features — whether for individuals or fleets.

II. End-to-end Digital Key Solution

Digital key systems function as a unified ecosystem, with each component — backend, authentication, in-vehicle systems, applications — continuously exchanging data and trust signals. These interactions form a closed feedback loop, where every vehicle operation and user action is reported back to the backend for synchronization and validation. Building an effective digital key solution requires recognizing how these layers interact through a system-level approach.

A prime example of such an approach is the co-developed Digital Key Solution by AUTOCRYPT and Valtech Mobility, unveiled at IAA Mobility 2025. Designed around interconnection and interoperability, the joint solution demonstrates how a unified architecture can deliver a secure, reliable, and scalable digital key experience built on shared standards and complementary expertise.

The solution’s architecture enables continuous communication between the backend, authentication layer, in-vehicle key management and smartphone interface:

Backend System & User Data Management: Data synchronization and multi-user access are managed in alignment with Car Connectivity Consortium (CCC) guidelines.
Vehicle & User Authentication: Real-time authentication between smartphone, vehicle and cloud is reinforced with Ultra-Wideband (UWB) proximity verification for precise, relay-resistant access control.
In-Vehicle Key Management: Key credentials are handled within secure hardware environments, ensuring both performance and protection.
In-Vehicle Applications: Access and control are provided through an intuitive smartphone interface, integrating convenience with end-to-end security.

This solution delivers clear advantages for both OEMs and users. For OEMs, its CCC-compliant, globally interoperable solution framework ensures readiness for standardized deployment. The solution’s purpose-built cloud system with open APIs enables fast, cost-efficient integration while remaining scalable and adaptable across different vehicle models and mobility platforms. Over time, this flexibility also creates new revenue opportunities through premium digital key and connected services.

For users, the digital key can be accessed seamlessly through their smartphone, combining convenience with robust protection. Secure authentication and UWB-based proximity-based verification safeguard against unauthorized access, while controlled key sharing allows owners to grant temporary access to family members, friends, or service providers — without compromising privacy or data integrity.

III. Conclusion

This article explored how the digital key ecosystem connects multiple systems and communication layers – from backend platforms to in-vehicle components and user applications – to deliver an end-to-end vehicle access experience. The jointly developed solution by AUTOCRYPT and Valtech Mobility GmbH exemplifies how an integrated approach can achieve security, scalability and user accessibility in unision.

Building on its proven expertise in Digital Key solutions, AUTOCRYPT continues to develop tailored digital infrastructure and foster strong technology synergies with global partners to advance the future of connected mobility.

Learn more about our Digital Key expertise at https://autocrypt.io/products/digital-key/.

29 September, 2025 . 6 mins read

Securing Electric Vehicle Charging Infrastructure

EV charging infrastructure sits at the center of the electric mobility transition. Yet according to the The HERE-SBD EV Index 2025, limited charging access remains the top barrier to EV adoption, with more than half of respondents (53%) citing a perceived lack of charging access as their primary concern.

Expanding the availability of charging stations is crucial, but so is securing the digital backbone that supports them. Public charging points are no longer simple power outlets, but digital infrastructures that handle sensitive information such as personal identifiers, payment credentials and vehicle contract certificates. Without robust safeguards, these data can become points of vulnerability, slowing adoption.

This blog explores three cornerstone frameworks shaping EV charging security — ISO 15118-2 (2014), the Open Charge Point Protocol (OCPP) 2.0.1 (2020), and the EU Cyber Resilience Act (CRA) (2023). By examining their roles and how they interconnect, we aim to simplify compliance in the EV charging ecosystem and highlight how integrators like AUTOCRYPT can help turn these standards and regulations into practice.

I. Interconnected Pillars of EV Charging Security

Securing EV charging infrastructure depends on three complementary pillars, each addressing a different layer of the ecosystem.

A) ISO 15118-2 (2014): Securing the EV, Charger Interface

The ISO 15118 multi-part standard (i.e. Part 1 – 2013, Part 2 – 2014, Part 3 – 2015, Part 20 – 2022) defines secure, interoperable communication between the vehicle and the charging station. While each part addresses different aspects of EV-EVSE interaction, Part 2: Network and application protocol requirements is especially significant as it lays out the technical implementation for managing secure communication flows.

ISO 15118-2 (2014) mandates that EV and EVSE establish a TLS-secured channel for direct current (DC) charging using certificate-based authentication. Within this secure channel, the Plug&Charge contract exchange is executed: the EV presents its contract certificate and the charger verifies it with the backend, enabling seamless authentication and billing. Later updates in ISO 15118-20 (2022) expand these provisions to cover both alternating current (AC) and direct current (DC) charging, as well as Vehicle-to-Grid (V2G) bidirectional energy flows.

Together, these measures ensure that the EV-charger handshake is both seamless and secure, protecting against spoofing and unauthorized access.

B) Open Charge Point Protocol (OCPP) 2.0.1 (2020): Securing the Charger, Backend Interface

The Open Charge Point Protocol (OCPP) 2.0.1 provides an open, interoperable standard for communication between charging stations and backend systems such as Charging Station Management System (CSMS) and mobility operators (MO).

OCPP 2.0.1 requires charging stations and backend systems to establish a TLS 1.2-secured channel with mutual authentication. Over this protected connection, OCPP defines operational protocols ranging from standardized message formats for anomaly reporting to the use of digitally signed meter values that ensure billing accuracy.

By embedding these measures, OCPP ensures chargers remain trusted, manageable and interoperable throughout their operational life.

C) Cyber Resilience Act (CRA) (2023): Hardware and Software Lifecycle

Although the Cyber Resilience Act (CRA) does not specifically target EV charging infrastructure, it strengthens EVSE security by covering hardware, firmware and backend systems under the category of “products with digital elements.”

Under the baseline obligations of the CRA, all EVSE must be secure at launch and throughout use, with manufacturers required to conduct conformity assessments before placing products on the market. Moreover, the CRA mandates secure update mechanisms such as OTA updates, vulnerability handling processes including coordinated disclosure, and obliges manufacturers to report actively exploited vulnerabilities.

In doing so, the CRA provides the regulatory umbrella that ensures ISO 15118 and OCPP implementations are maintained securely and transparently across both hardware and software layers.

Interconnected Security Chain

Viewed together, these three pillars create a security chain rather than isolated requirements. ISO 15118-2 secures the EV-charger interface, OCPP 2.0.1 governs charger-backend communications, and the EU Cyber Resilience Act sets mandatory cybersecurity obligations across hardware and software. Combined, they form an interconnected framework that strengthens resilience, ensures compliance, and builds trust throughout the entire EV charging ecosystem.

II. Autocrypt as the Integrator

AUTOCRYPT combines a deep understanding of standards-based requirements with practical expertise to deliver a wide range of solutions for securing EV charging infrastructure. By aligning with ISO 15118 and OCPP, and offering dedicated guidance on CRA compliance, AUTOCRYPT acts as an integrator that embeds end-to-end trust across the entire EV charging chain.

A) AutoCrypt® PnC

The AutoCrypt® PnC protocol incorporates mechanisms for both secure communication and PKI-based certificate management. Built on the ISO 15118 PKI authentication framework, it secures the vehicle-to-grid (V2G) communication interface through encryption and certificate-based trust. Moreover, designed for integration with OCPP, AutoCrypt PnC ensures contracts verified in the backend are securely delivered to the vehicle.

In doing so, it bridges front-end communication between the EV and charger with back-end contract flows, creating an unbroken chain of trust.

B) EVIQ™ Platform

Addressing the growing need for a unified and secure EV charging ecosystem, the EVIQ™ Platform combines applications, charger tools and management systems into one solution. Supporting Plug&Charge protocol outlined in ISO 15118 and fully compliant with OCPP 1.6, EVIQ provides both user-facing and operator-facing functions.

Together, these components make EVIQ a comprehensive platform which strengthens both user convenience and operator control.

C) CRA Consulting Service

With the EU Cyber Resilience Act (CRA) set for full enforcement in 2027, AUTOCRYPT’s CRA Consulting Service helps stakeholders systematically prepare for compliance. This includes support for OEMs, CPOs and mobility operators on security-by-design requirements, vulnerability management and update processes, compliance documentation.

By guiding clients through each step, AUTOCRYPT ensures ISO 15118 and OCPP implementations are maintained securely and transparently, offering a clear pathway to regulatory readiness well ahead of the enforcement deadline.

III. Safeguarding the EV Charging Security Chain

The path to secure EV charging is not defined by a single standard or regulation, but by the interconnected security chain of ISO 15118, OCPP and the EU Cyber Resilience Act. Together, they safeguard the EV-charger handshake, protect the charger-backend connection, and ensure the long-term resilience of hardware and software systems.

AUTOCRYPT plays a pivotal role in uniting these layers. Through solutions such as AutoCrypt® PnC, EVIQ™ Platform and CRA Consulting Service, the company translates complex standards and regulatory requirements into practical, operational security across the charging ecosystem.

As EV adoption accelerates worldwide, AUTOCRYPT remains committed to building end-to-end trust and driving sustainable growth by continually expanding its suite of solutions for EVSE manufacturers, operators and mobility providers.

Learn more about our products and solutions at https://autocrypt.io/all-products-and-offerings/.

16 September, 2025 . 3 mins read

AUTOCRYPT and Valtech Mobility Showcase Digital Key solution at IAA Mobility 2025

AUTOCRYPT, a leading provider of automotive cybersecurity and digital key solutions, has partnered with Valtech Mobility GmbH to deliver a secure and flexible digital key ecosystem which references the standards of the Car Connectivity Consortium (CCC), for global OEMs and users. Both parties announced a strategic partnership at IAA Mobility 2025. As the first step in this partnership, the two companies revealed a jointly developed demo of their Digital Key management solution.

Under this partnership, Valtech Mobility leads the development and integration of in-vehicle applications and backend user data management, enabling seamless connectivity between in-vehicle apps and user management backends. AUTOCRYPT provides its cutting-edge expertise in vehicle and user authentication, certificate-based key management, and security infrastructure, ensuring robust protection of digital credentials throughout the lifecycle.

The Digital Key Solution with Ultra-Wideband (UWB) technology allows drivers to lock, unlock and start their vehicles seamlessly with their smartphone, while ensuring robust protection against cybersecurity threats. With built-in vehicle and user authentication and secure cross-account key management, the solution integrates with OEM servers to block unauthorized access and support for safe, efficient vehicle key management.

Developed on a purpose-built cloud system with APIs, the end-to-end solution builds on the proven expertise of both companies: AUTOCRYPT, a trusted CCC(Car Connectivity Consortium) member, provides security stacks for vehicle and user authentication, while Valtech Mobility is a global leader in backend platforms and in-vehicle applications, with over 25 years of experience supporting leading OEMs.

For OEMs and fleet operators, this enables seamless integration of a Digital Key system that follows the standards of the CCC and scales flexibly to their needs while unlocking new premium service opportunities. For users, it enhances accessibility and convenience, offering secure vehicle control through their smartphone and the ability to delegate access to others with confidence.

“We are excited to showcase our secure, flexible, future-proof Digital Key solution for OEMs and users, bringing together the strengths of both companies,” said Seokwoo Lee, Founder and CEO of AUTOCRYPT. “With rising demand for robust yet accessible Digital Key solutions, we aim to continue expanding our automotive infrastructure offerings to meet these needs.”

Moving forward, AUTOCRYPT and Valtech Mobility plan to deliver tailored digital infrastructure solutions for OEMs, mobility service providers, and other clients, accelerating user experience innovation through vehicle digitalization.

To learn more, visit autocrypt.io.

About Autocrypt Co., Ltd. 

AUTOCRYPT is the leading player in automotive cybersecurity. It specializes in the development and integration of security software and solutions for in-vehicle systems, V2X communications, Plug&Charge, and fleet management, paving the way towards a secure and reliable C-ITS ecosystem in the age of software-defined vehicles. Its comprehensive suite of automotive cybersecurity testing services and platforms includes the award-winning AutoCrypt CSTP, which supports automotive OEMs and suppliers in meeting regulatory standards ilke ISO/SAE 21434, UNECE WP.29 UN R155, and CRA.

About Valtech Mobility

Valtech Mobility is a global software company delivering full-service digital solutions for connected mobility. The company designs, develops, and operates digital platform services and products for vehicle manufacturers and new mobility providers. With a team of more than 650 experts passionate about vehicle software, Valtech Mobility is a leader in User Experience, Automotive Cloud platform development and operations, Data & AI, and Android Automotive. The company manages the complexity of more than 50 OEM services across 370 versions within an ecosystem of 40 million connected cars in 65 markets.

3 September, 2025 . 8 mins read

Evolution of AI in Automotive Safety

In recent years, headlines showcasing how AI technology is being incorporated into automotive software solutions have become increasingly common. The establishment of dedicated AI facilities (e.g. Izmo’s Automotive AI Factory, Qualcomm’s AI R&D Center) and collaborative initiatives regarding Automated Driving Assistance System (ADAS) development (e.g Bosch & Cariad, GM & NVIDA) are just a few examples of how the automotive sector is rapidly embedding AI across the vehicle lifecycle.

When it comes to automotive safety software, AI adoption has advanced along two simultaneous fronts. In one dimension, AI is positioned as a Safety Enabler, actively embedded in tools and solutions to strengthen resilience, detect risks and improve the reliability of vehicle platforms. From another perspective, AI is treated as a Safety-Critical Element, subject to rigorous standards and certifications to ensure that its deployment is trustworthy, robust and auditable.

This blog aims to explore these two complementary perspectives on AI in automotive safety — one driven by industry innovation and the other shaped by regulatory and standards-based assurance. Together, they illustrate how AI has evolved from a promising technology to a core component of both engineering practice and compliance frameworks.

AI as a Safety Enabler

Across both the development and operational stages, OEMs, Tier1 suppliers and cybersecurity firms are applying AI to augment safety functions — strengthening resilience through proactive risk detection, automated testing and system-wide awareness.

I. Development Stage

In the development stage, AI is increasingly used to validate safety-critical components by automating test generation and expanding scenario coverage.

Fault Injection and Vulnerability Testing

Traditional fuzzing relies on random or manually crafted test inputs, which can miss subtle flaws. AI-enabled fuzzing, by contrast, generates protocol-specific, context-aware test cases at scale, uncovering vulnerabilities more quickly and systematically. A representative example is the AutoCrypt CSTP Security Fuzzer Solution which leverages AI-generated inputs to probe in-vehicle communication protocols and expose weaknesses in ECUs, braking controllers and telematic units with greater depth and coverage.

Scenario Generation & Simulation

Another area where AI enhances safety is in the generation of synthetic, edge-case scenarios that supplement baseline test datasets. Addressing a key challenge of ADAS and AV validation surrounding reflection for rare, safety-critical scenarios, AI allows engineers to proactively evaluate system safety under unusual conditions. The Gatik Arena platform illustrates this approach, employing techniques such as NeRFs, 3D Gaussian splatting and diffusion models to create synthetic scenarios, which are then fed into a modular simulation engine for end-to-end validation.

System-Level AI Safety Architecture

Beyond individual tools, AI is also embedded into holistic safety frameworks that span the entire lifecycle of software-defined vehicles. These frameworks account for the multi-dimensional nature of automotive software, monitoring and validating AI performance from training to deployment. The NVIDIA AI Systems Inspection Lab highlights this application, offering a safety framework that integrates cloud-based training oversight, model inspection and in-vehicle runtime validation to ensure system-wide assurance.

II. Operational Stage

AI also plays a crucial role in maintaining and extending safety during vehicle operation, both at the individual and fleet level.

Sensor-Aided Risk Detection

Leveraging multi-modal data fusion, AI enables vehicles to analyze real-time inputs from tires, cameras, radar and LiDAR to identify conditions that could compromise safety. The collaboration between AEye and Blue–Band illustrates this approach: by combining AEye’s OPTIS™ autonomous system and Apollo long-range LiDAR with Blue–Band’s AI orchestration platform, the solution delivers real-time insights for traffic monitoring, incident detection, and adaptive road safety management.

Fail-Safe & Safety Redundancy Systems

Overcoming the limitations of traditional automotive systems which often fail to account for systemic decision-making errors, AI continuously interprets both the driving environment and system health to determine when fallback responses are necessary. The patent for Guident’s Remote Monitoring and Control Center (RMCC) represents this scenario: it’s AI-driven fusion system processes sensor data from multiple autonomous vehicles and can assume remote control when risk levels exceed predefined safety limits.

Distributed Sensor Fusion & Fleet-Level Threat Analysis

Reflecting the fact that safety hazards regarding environmental disruptions affect entire fleets, AI enables fleet-level data aggregation and threat analysis, transforming distributed sensor inputs into system-wide safety insights. NIRA Dynamic’s partnership with BANF demonstrates this with the integration of triaxial tire sensor data into fleet management systems, enabling large-scale hazard detection and broadcast-level warnings to improve fleet safety.

AI as a Safety-Critical Element

While AI enables safer and more resilient automotive systems, it is also recognized as a safety-critical element requiring rigorous evaluation to ensure trustworthiness. This perspective is reflected in a series of international standards: ISO 26262: 2018, ISO 21448: 2022 and ISO/PAS 8800: 2024.

I. ISO 26262: 2018 (Functional Safety)

The ISO 26262 standard focuses on addressing hardware and software faults inside road vehicles that can lead to hazardous behavior. While it does not directly reference AI or ML, AI modules are implicitly covered as safety-related component that may fail due to defects in software implementation, hardware execution, or system integration.

The first connection appears in the definition of a “safety-related item” under Part 3. System & Item Definition. Any component which failure could lead to a hazard qualifies, and thus AI modules can be treated as such. Similarly, Part 3. System & Item Definition and Part 4. Hazard Analysis & Risk Assessment (HARA) define “hazards” as malfunctions requiring assignment of an Automotive Safety Integrity Level (ASIL). Under this framework, AI failures such as object misclassification or a neural network crash can be classified and addressed as safety hazards.

The standard also indirectly applies to AI within software and hardware development. For example, Part 5. Hardware Development requires diagnostic coverage and safety mechanisms for critical hardware faults. This extends to SoCs or accelerators running AI inference (e.g. GPUs, NPUs), which must be safeguarded to prevent silent failures that could compromise AI workflows.

While ISO 26262 provides a baseline framework for addressing AI malfunction scenarios, it falls short in covering the non-deterministic behavior of AI systems. These gaps have prompted the development of complementary standards — ISO 21448, ISO/PAS 8800 — to more fully address AI-related safety risks.

II. ISO 21448: 2022 (Safety of the intended functionality, SOTIF)

Whereas ISO 26262 focuses on risks from system malfunctions, ISO 21448 addresses situations where the system behaves as designed but still poses safety risks under certain conditions. As with ISO 26262, terms explicitly referencing AI or machine learning are absent. Nevertheless, the standard is widely recognized as highly relevant to AI-driven systems, which are especially sensitive to incomplete data, edge cases and unknown scenarios.

One key concept appears in Clause 11. Hazardous Scenarios, which introduces the distinction between “known hazards” (anticipated cases) and “unknown hazards” (unanticipated conditions). The latter is particularly relevant to AI, as machine learning models are prone to failure when exposed to out-of-distribution inputs. The standard emphasizes the need to achieve acceptable residual risk even in such unknown conditions.

Expanding beyond definitions, Clause 9. Verification and Validation stresses the importance of robust validations strategies that go beyond normal operating conditions. This is especially critical for AI/ML systems, as traditional deterministic testing methods cannot guarantee complete coverage of rare, long-tail scenarios.

By incorporating concepts of non-deterministic behavior and unquantifiable risks, ISO 21448 plays a crucial role in framing AI-related safety challenges in automotive systems. It highlights how limitations in AI perception and decision–making can result in unsafe outcomes. However, with methodologies for residual risk evaluation still relying on conventional statistical methods, there remain limitations in guaranteeing coverage for rare or unforeseen inputs.

III. ISO/PAS 8800: 2024 (Safety and artificial intelligence)

Building on the foundations of ISO 26262 and ISO 21448, ISO/PAS 8800 provides the first global assessment framework dedicated to systematically evaluating AI systems in road vehicles. The document explicitly states its intent to extend and adapt the principles of functional safety (ISO 26262) and SOTIF (ISO 21448) to AI and machine learning elements.

ISO/PAS 8800 raises AI-specific safety concerns directly, linking identified hazards to clear safety requirements and goals. It details procedures covering the entire lifecycle of AI systems including dataset quality management, model development and safe deployment practices. In addition, the standard also places emphasis on runtime monitoring and post-deployment governance, ensuring continuous oversight of AI performance.

Through this framework, ISO/PAS 8800 ensures that AI safety measures are embedded from the earliest stages of system design through post-deployment operation, closing gaps left by prior standards and providing a structured foundation for AI assurance in automotive systems.

Future Progress of AI in Automotive Safety

As illustrated in the previous sections, the automotive safety industry has approached AI from two contrasting angles: as a defense mechanism to strengthen safety levels, and as a potential risk factor requiring strict evaluation. Nevertheless, both perspectives converge on the same overarching goal — leveraging AI to improve resilience of automotive systems against internal flaws (i.e. software errors, model weakness) and external risks (i.e. environmental hazards, cyber threats).

Looking ahead, the progress of AI in vehicle systems will center on two parallel developments: advancing innovation in AI-driven safety tools and establishing rigorous compliance and certification frameworks. As this dual evolution unfolds, AUTOCRYPT is committed to playing a leading role in not only providing solutions that integrate AI to enhance safety and resilience but also by staying closely aligned with the evolving regulatory landscape that governs the safe deployment of AI-embedded vehicle systems.

Learn more about our products and solutions at https://autocrypt.io/all-products-and-offerings/.