Compromise-Resilient Security for Connected Vehicle Updates
Implementing the Uptane standard (IEEE-ISTO 6100) separating Image and Director repositories to protect fleets even if OEM cloud servers are breached.
Decoupled Director and Image Roles
The Director repository signs installation instructions, while the offline Image repository signs binary images with air-gapped cryptographic hardware security modules.
- Full compliance with IEEE-ISTO 6100 Uptane standard.
- Protection against key compromise, drop-request, and freeze attacks.
- Offline root keys requiring multi-party quorum signatures.
- Partial verification offloading for resource-constrained microcontrollers.
Domain-Portfolio entdecken