AUTOCRYPT Releases Polarion-Based Cybersecurity TARA Template for the Automotive Industry

SEOUL, KOREA, Dec. 18, 2023 — Automotive cybersecurity company AUTOCRYPT recently announced the release of “TARA Template for Automotive,” a project management tool for conducting Threat Analysis and Risk Assessment (TARA), a process crucial to the development and maintenance of automotive software. The cybersecurity tool is now available as an extension on Siemens’ Polarion ALM application lifecycle management platform, helping users effectively address TARA activities.

Defined by “ISO/SAE 21434: Road Vehicles – Cybersecurity Engineering,” TARA is a preventive cybersecurity methodology that involves performing a set of key activities during software development and maintenance. The process involves the analysis of potential cyberattack objectives, vectors, and threats, followed by an assessment of their risk and severity levels.

AUTOCRYPT’s TARA Template for Automotive greatly reduces the complexity and increases the accuracy of TARA activities. Developed by AUTOCRYPT in collaboration with Branvi, an official Polarion partner, the tool has been optimized for the Polarion platform. Work items can be automatically connected to the template, allowing users to benefit from the step-by-step manual and calculation tools in the template.

AUTOCRYPT’s CEO, Daniel ES Kim, commented, “With the advancement of software-defined vehicles, TARA has become an inseparable part of vehicle development and maintenance. Based on our decades of experience in cybersecurity implementation, our team at AUTOCRYPT has established an intuitive template optimized for ISO/SAE 21434 compliance.”

Beyond the ISO/SAE 21434 standard, TARA is also an effective strategy for implementing security by design and managing security updates, as mandated by UN Regulation 155 and 156. AUTOCRYPT provides a wide range of security testing tools and services to complement TARA and secure the vehicle manufacturing process.

To learn more about AUTOCRYPT’s automotive cybersecurity solutions, contact global@autocrypt.io.

About Autocrypt Co., Ltd.

AUTOCRYPT is the leading player in automotive cybersecurity and smart mobility technologies. It specializes in the development and integration of security software and solutions for in-vehicle systems, V2X communications, Plug&Charge, and fleet management, paving the way towards a secure and reliable C-ITS ecosystem in the age of software-defined vehicles. AUTOCRYPT also provides management and service platforms for the operators and end users of MaaS, contributing to sustainable and universal mobility.

AUTOCRYPT Partners With Hitachi Solutions on V2X and In-Vehicle Systems Security Solutions

SEOUL, KOREA, December 7, 2023 — AUTOCRYPT, an industry-leading automotive cybersecurity and mobility solutions company, announced its partnership with Hitachi Solutions, Ltd., a global IT service provider and system integrator. The two companies have agreed to provide joint offerings and consulting services covering V2X and in-vehicle systems security to Japanese automotive OEMs and tier suppliers.

The two companies already have a history of collaboration; AUTOCRYPT has been offering its V2X security solution with the option of integrating its security library with Hitachi Solution’s V2X Middleware Platform. The formalization of the partnership signifies the continued success of past projects, and seeks to further expand the scope of collaboration beyond V2X to embedded vehicular systems.

As vehicles become increasingly software-defined, cybersecurity for in-vehicle systems has become an integral part of automotive production and regulatory compliance. AUTOCRYPT’s in-vehicle systems security solution helps OEMs exceed cybersecurity requirements with open-source license management, fuzzing, penetration testing, and threat mitigation, while Hitachi Solutions, Ltd. offers a range of compliance consulting that covers all facets of vehicle production. The partnership will provide an optimized range of solutions for both companies’ clients to meet production requirements.

“The Japanese automotive industry is one of the largest in the world and is currently undergoing a major transition to a more electrified and software-defined future,” said AUTOCRYPT’s CEO, Daniel ES Kim. “Through this partnership with Hitachi Solutions, we are excited to offer a more comprehensive V2X and in-vehicle systems security solution with an enhanced support network for our existing and potential clients in Japan.”

As a global leader in automotive cybersecurity, AUTOCRYPT’s goal is not confined to helping clients stay secure and compliant, but to also maximize efficiency by streamlining cybersecurity engineering into the production process. Its newly developed AutoCrypt Security Fuzzer for HIL enables fuzz testing in hardware-in-the-loop (HIL) simulations, greatly reducing vehicle development costs.

To learn more about AUTOCRYPT’s in-vehicle systems security solutions, contact global@autocrypt.io.

About AUTOCRYPT

AUTOCRYPT is the leading player in automotive cybersecurity and smart mobility technologies. It specializes in the development and integration of security software and solutions for in-vehicle systems, V2X communications, Plug&Charge, and fleet management, paving the way towards a secure and reliable C-ITS ecosystem in the age of software-defined vehicles. AUTOCRYPT also provides management and service platforms for the operators and end users of MaaS, contributing to sustainable and universal mobility.

About Hitachi Solutions, Ltd.

Hitachi Solutions is a core IT company of the Hitachi Group. We deliver products and services of superior value to customers worldwide through key subsidiaries in Asia, the United States and Europe. We have also been providing a variety of solutions globally using cutting-edge digital technologies based on collaborative creation with customers. Together with our partners around the world, we are accelerating Sustainability Transformation (SX) to solve the challenges facing society and business, and contribute to the realisation of a happy society where no one is left behind.

AutoCrypt Security Fuzzer Expands Vehicle Fuzzing Capabilities Through Major Upgrade

SEOUL, KOREA, September 5, 2023 — Automotive cybersecurity and mobility solutions company AUTOCRYPT released a major upgrade to its automotive fuzzing software—AutoCrypt Security Fuzzer. The upgrade (version 2.0) enables a much wider testing range and greater automation, allowing automotive OEMs to benefit from a more simplified and efficient fuzzing process for UN R155 (WP.29) compliance.

AutoCrypt Security Fuzzer was first released in December 2021. As the world’s first fuzzing solution for the vehicular environment, its fuzzing algorithms were built based on the structures of Unified Diagnostic Services (UDS), the communication protocol used in electronic control units (ECU). Version 2.0 expands the testing range beyond ECUs to include other protocols like the Controller Area Network (CAN), Wi-Fi, Bluetooth Low Energy (BLE), and most importantly, the Ethernet, which is a crucial component of software-defined vehicles. The v2.0 platform also allows new protocols to be added through software updates.

Offered through an intuitive UI, AutoCrypt Security Fuzzer v2.0 greatly improves the user experience. Yet, its biggest differentiation point is its smart fuzzing capabilities. It accurately identifies the functions and technical specifications of each test target and generates test cases based on these characteristics, ensuring that only relevant test cases are input into the program. Moreover, testing can be assigned at a project level, allowing for continuous testing for multiple ECUs. Even if an unexpected interruption occurs, the fuzzing process will continue based on its automation algorithms. All these features make AutoCrypt Security Fuzzer exceptionally efficient and easy to use.

AUTOCRYPT’s CEO, Daniel ES Kim, emphasized the importance of fuzz testing for vehicle production, “Fuzz testing is not just an effective way to identify software vulnerabilities at an early stage, but a necessary process to receive vehicle type approval as mandated by UN R155.” Regarding AutoCrypt Security Fuzzer, he added, “We developed the solution specifically for the automotive industry. It offers diagnostics services and NRC support features based on ISO 14229. It also provides support for all ISO-TP specifications as defined in ISO 15765.”

AutoCrypt Security Fuzzer is a component of AUTOCRYPT’s in-vehicle systems (IVS) security solution, an end-to-end automotive cybersecurity solution that secures all stages of the vehicle lifecycle, offering a wide range of products and services from TARA and security testing to the intrusion detection and prevention system (IDPS) and vehicle security operations center (vSOC). To learn more about AUTOCRYPT’s IVS solution, contact global@autocrypt.io.

ABOUT AUTOCRYPT

AUTOCRYPT is the leading player in automotive cybersecurity and smart mobility technologies. It specializes in the development and integration of security software and processes for in-vehicle systems, V2X communications, Plug&Charge, and fleet management, paving the way toward a secure and reliable C-ITS ecosystem. AUTOCRYPT also provides management and service platforms for the operators and end users of e-mobility and MaaS, contributing to sustainable and universal mobility.

AUTOCRYPT and V2ROADS Sign MOU to Cooperate on Full-Stack V2X Solution

SEOUL, KOREA, July 28, 2023 — AUTOCRYPT, an industry-leading automotive cybersecurity and V2X (vehicle-to-everything) solutions company, announced a new cooperation agreement with Hungary-based V2X solutions provider V2ROADS to deliver a full-stack secure V2X solution to Europe, North America, and South Asia.

The two companies offer complementary technologies for V2X communications. V2ROADS provides V2X software products for onboard units (OBU), roadside units (RSU), and server (cloud) infrastructure, delivering turnkey V2X software and hardware solutions. AUTOCRYPT specializes in the cybersecurity aspect of V2X, establishing PKI-based message security in compliance with the Security Credential Management System (SCMS). The transcontinental cooperation seeks to integrate AUTOCRYPT’s V2X security module and Local Certificate Manager (LCM) into V2ROADS’ OBUs and RSUs, allowing these devices to securely sign and verify messages by utilizing AUTOCRYPT’s cloud-based PKI services and SCMS backend.

With the combined solution, both companies will engage with automotive OEMs and C-ITS integrators in the European, North American, and Indian markets to accelerate V2X deployment. The two companies are also in talks to work with 4G/5G mobile network operators to bring forward value-added V2X services via multi-access edge computing through their infrastructure.

AUTOCRYPT CEO, Daniel ES Kim noted that “V2X and PKI must go hand in hand. Every V2X device needs to be equipped with the necessary security library and algorithms to enable SCMS enrolment and ongoing PKI services.” Regarding this cooperation, he commented, “We are excited to work with V2ROADS to bring forward a complete V2X deployment solution with pre-validated security features, simplifying V2X implementation for OEMs and C-ITS operators.”

V2ROADS CEO, Yaroslav Domaratsky, PhD commented, “We see the growing V2X project opportunities in Europe, North America, and South Asia in the areas of vehicle and vulnerable road user (VRU) safety, traffic efficiency, and more optimal electrical and autonomous vehicle operations. We are very excited to work with AUTOCRYPT to integrate its V2X security module and LCM into our OBUs and RSUs.”

AUTOCRYPT offers one of the most comprehensive V2X security solutions in the industry. Besides providing security software for V2X end entities, its Integrated Management System (IMS) for SCMS enables operators to monitor and manage all their SCMS certificates across all regions in real time.

To learn more about AUTOCRYPT’s V2X security solutions and the cooperation, contact global@autocrypt.io

ABOUT AUTOCRYPT

AUTOCRYPT is the leading player in automotive cybersecurity and connected mobility technologies. It specializes in the development and integration of security software and processes for in-vehicle systems, V2X communications, Plug&Charge, and fleet management, paving the way toward a secure and reliable C-ITS ecosystem. AUTOCRYPT is a pioneer in integrating trusted execution environments (TEE) into automotive systems, for which it received ASPICE CL2 certification. The company is also accredited by WebTrust as a root CA for V2X PKI.

AUTOCRYPT also provides management and service platforms for the operators and end users of e-mobility and MaaS. By building customized platforms tailored to individual needs, AUTOCRYPT contributes to sustainable and universal mobility.

AUTOCRYPT Releases Plug&Charge Upgrade for Charging Station Management System

SEOUL, KOREA, July 27, 2023 — Automotive cybersecurity and mobility solutions provider AUTOCRYPT expanded the scope of its EV charging station management system (CSMS) through the release of “EVIQ CSMS for Plug&Charge,” an add-on that will seamlessly guide the deployment and management of Plug&Charge (PnC) operations, available for charge point operators (CPO) and e-mobility service providers (EMSP). Defined in ISO 15118 for vehicle-to-grid (V2G) communications, Plug&Charge allows vehicles and chargers to automatically authenticate one another once plugged in, enabling a fully automated charging and billing process.

Certificate management through EVIQ CSMS for Plug&Charge

Compliant with ISO 15118-2 and ISO 15118-20, EVIQ CSMS for Plug&Charge provides customers with a comprehensive set of components necessary for the adoption of PnC technology as well as the management of PnC-capable chargers. These include the establishment of a PnC server on the backend and a frontend admin dashboard for certificate key management. The PnC server is integrated into the existing server of the CPO, while the admin dashboard can be integrated into their existing CSMS frontend or AUTOCRYPT’s EVIQ CSMS dashboard.

More importantly, the PnC add-on is interoperable across multiple V2G root environments. Due to the wide variety of V2G roots used by different CPOs and EMSPs, many service operators have found it challenging to enable Plug&Charge across different vehicle models and charging stations. AUTOCRYPT facilitates this interoperability by enabling validation across multiple root certificates.

“Given the growing number of regulations in Europe and Asia mandating V2G interoperability in public charging stations, we expect Plug&Charge to become the mainstream method for EV charging and billing,” said Daniel ES Kim, CEO of AUTOCRYPT. “The growing adoption of NACS will also simplify PnC deployment across North America. We look forward to helping more operators implement and manage the technology.”

The North American Charging Standard (NACS), formerly known as the Tesla charging connector specification, is now gaining popularity across the continent after Tesla opened the technology to other OEMs in late 2022.

Offering full compatibility with NACS, AUTOCRYPT’s EVIQ lineup of EV charging-related solutions also encompasses the establishment of the PKI needed for secure PnC authentication. The company has deployed its PnC PKI for some best-selling EV models across the globe and the largest PnC charging network in South Korea.

ABOUT AUTOCRYPT

AUTOCRYPT is the leading player in automotive cybersecurity and smart mobility technologies. It specializes in the development and integration of security software and processes for in-vehicle systems, V2X communications, Plug&Charge, and fleet management, paving the way toward a secure and reliable C-ITS ecosystem. AUTOCRYPT is a pioneer in integrating trusted execution environments (TEE) into automotive systems, for which it received ASPICE CL2 certification. The company is also accredited by WebTrust as a root CA for V2X PKI.

AUTOCRYPT also provides management and service platforms for the operators and end users of e-mobility and MaaS. By building customized platforms tailored to individual needs, AUTOCRYPT contributes to sustainable and universal mobility.

AUTOCRYPT and RWTH Aachen University Co-Develop Fuzzing Solution for HIL Simulation

SEOUL, KOREA, July 6, 2023 — Automotive cybersecurity and mobility solutions provider AUTOCRYPT announced its new “AutoCrypt Security Fuzzer for HIL” solution, jointly developed by AUTOCRYPT and RWTH Aachen University as part of their industry-academia partnership. As an add-on version of the existing AutoCrypt Security Fuzzer, the new tool enables fuzz testing in the HIL simulation environment.

Hardware-in-the-loop (HIL) simulation is a testing platform created by generating a virtual simulation of the in-vehicle architecture so that all systems and operations can be pre-validated before producing and conducting tests on the physical vehicle. Given that a modern vehicle contains over 1,000 semiconductors, being able to pre-validate the systems through a virtual simulation greatly reduces the complexity and costs of early-stage testing.

AutoCrypt Security Fuzzer for HIL is a fuzz testing solution optimized for vehicle HIL simulations, fuzzing against the virtual operations of the vehicle systems and ECUs to detect and report vulnerabilities. As the world’s first fuzzing solution for vehicle HIL simulations, it complies with vehicular cybersecurity standards ISO 21434 and UN R155, and functional safety standard ISO 26262 regarding electrical current stability.

AUTOCRYPT’s CEO, Daniel ES Kim noted that “existing HIL tests mainly verify system integrity in certain specific scenarios, but AutoCrypt Security Fuzzer for HIL detects unprecedented vulnerabilities by exploring unexpected system abuse cases.” Regarding the partnership, he added, “We are excited to partner with one of the leading European universities. With contributions by RWTH Aachen University, we are now at the automation and advancement stages of the development process.”

Along with fuzz testing, AUTOCRYPT provides a full range of vulnerability testing tools and security validation services dedicated to different stages of the automotive manufacturing process, helping OEMs exceed cybersecurity regulatory requirements and save on production costs.

For more information with regard to AutoCrypt Security Fuzzer for HIL, contact global@autocrypt.io.