Flashware Protection
By using physical methods, the fit and origin of mechanical components in vehicles can be verified. In contrast, different mechanisms are required to verify the integrity and authenticity of software. Cryptographic verification methods are an effective solution in this regard.
secunet supports you in successfully implementing the corresponding protection mechanisms. A comprehensive check of the vehicle software ensures the increased safety and security of the vehicle. In addition, the liability risks for the vehicle manufacturer that may be incurred as a result of non-enabled software in control units are reduced. In this way, our protection mechanisms also help to enforce brand protection for genuine products.
For the implementation of these protection mechanisms, we take various requirements into account:
- Integration of safeguarding mechanisms into the software release process
- Distribution of the cryptographic keys in the tool chain at the factory and the service point
- Integration of independent repair shops and third-party tool manufacturers
- Compliance with legal requirements in the markets
Your company can also benefit from our comprehensive experience in the area of IT security gained in many real-life projects and our established expertise in the automotive sector.
Overview of our services:
- Risk analyses and vulnerability assessments as well as elaboration and evaluation of implementation alternatives
- Design of the required safety infrastructure and process extensions for vehicle software programming under consideration of the following areas: development, diagnostics, production, repair shops, parts logistics and IT
- Requirements specifications for the control units
- Consulting services concerning network security in connection with software distribution
- Specification and implementation of IT systems required for the generation, management and distribution of cryptographic keys
- Integration of the security infrastructure into existing IT environments and the corresponding technical and organisational processes
- VPN integration support
