Secure On-Board Diagnostics: UDS 0x27 SecurityAccess & ISO 13400 DoIP
Hardening vehicle diagnostic interfaces against unauthorized ECU reprogramming and malicious OBD-II injection.
Hardening the OBD-II Diagnostic Port
The physical OBD-II connector represents an open physical gateway into in-vehicle networks. AutoHSM protects critical diagnostic services (such as ECU flashing and actuator testing) by requiring dynamic cryptographic authentication signed by OEM cloud servers.
Diagnostic Session Token Management
AutoHSM generates ephemeral, time-bounded session keys for authorized diagnostic tools, ensuring that stolen mechanic credentials cannot be reused across multiple vehicles or extended timeframes.
- SecurityAccess Service (0x27): Asymmetric challenge-response authentication for diagnostic service tools.
- Role-Based Diagnostic Privileges: Enforcing strict boundaries between dealership, repair shop, and factory tools.
- Diagnostic over IP (DoIP): TLS-encrypted Ethernet diagnostic sessions conforming to ISO 13400.
- Anti-Brute Force Lockout: Hardware-enforced exponential backoff timers on invalid security access attempts.
Voir les domaines