基于Trustzone的汽车ECU安全OTA系统设计

汽车已经成为黑客攻击的一个新领域,因此就会有不断的攻防的技术演进,旧的防御技术被攻破,新的防御技术被研制出来。这其中就涉及升级的过程,虽然已有OTA技术被应用在汽车ECU升级上,但整个升级过程并未对安全威胁做过多的设计。本文基于ARM架构的trustzone技术重新设计整个升级汽车ECU的OTA系统,以双系统进行分别处理不同下载服务,实现对汽车ECU升级安全性的保障。

Cars have become a new f ield of hacker attacks,so there will be a continuous evolution of of fensive and defensive technology,old defense techniques are broken,and new defense technologies are being developed.This involves the upgrade process.Although the existing OTA technology has been applied to the upgrade of the automotive ECU,the entire upgrade process has not been too much design for the security threat.Based on the ARM architecture trustzone technology,this paper redesigns the OTA system of the entire upgraded car ECU,and handles different download services separately by the dual system to ensure the security of the car ECU upgrade.