[Solution Sharing | Automotive Electronics] Automotive OTA (remote upgrade) traffic and security testing

As a leader in automotive communication test technology, Rohde & Schwarz ("R&S" for short) has proposed an automotive OTA (remote upgrade) download traffic test solution to meet the OEM's test requirements for automotive OTA (remote upgrade) communication performance :

The core device of this solution is CMW/CMX500 network simulator. CMW/CMX500 provides an ideal mobile communication environment, which can test basic call functions, as well as automotive applications or T-box communication performance and diagnose problems such as the link from the car to the car enterprise user server. The detailed functions are listed as follows:

Car upload and download speed test and IP data statistics, such as car T-box data throughput test in a certain period of time under 4G or 5G network, statistics of IP network delay, packet loss, etc.;

Provide an ideal IP-based test environment for customers to customize test content, such as connecting car applications to third-party service websites such as iQiyi through the CMW/CMX500 network simulator, and user mobile phone apps accessing cars through CMW/CMX500, etc.

IP data analysis and setting of different service levels (QoS), such as analyzing the behavior and proportion of data traffic generated by each IP connection, application, and protocol, and setting different IP service priorities (network delay, jitter, and packet loss levels) for testing.

(Note that this test requires rewriting the esim information of the car chip to be compatible with the encryption and authentication parameters of CMW/CMX500.)

Complaints from car users about app downloading problems basically occur in actual network environments. So in order to save time and money on resolving customer complaints in external network environments on the road, OEMs also want to reproduce the problems users encounter in actual networks on the road in R&D laboratories.

Based on Solution 1, Rohde & Schwarz proposed the Road to Lab test solution , the architecture and functions of which are as follows:

Solution 2 mainly includes the field mobile network frequency scanning software "Romes", frequency scanning meter and graphical field network signal reproduction and editing software "CM360°". Finally, the field network signal is imported into the CMW/CMX500 network simulator for testing through the generated test script. Through field road testing, network signals from places with many customer complaints (including cell parameter SIB system messages, L3 layer signaling message signaling process, dynamic changes in cell signal strength) are collected to generate logs and reproduce and analyze in the laboratory to centrally locate problems and solve customer complaints.

Test Solution 2 has been able to help automakers resolve issues and complaints related to network performance of automotive Internet applications in actual field networks.

Cybersecurity is the core element of automotive OTA (remote upgrade). With the introduction of EU WP29 R156 Regulation Software Upgrade and Software Upgrade Management System (SUMS) and related domestic regulations, the automotive industry has an increasingly urgent need for OTA (remote upgrade) information security compliance testing.

OTA (remote upgrade) consists of "cloud" (business platform), "pipe" (communication channel), and "end" (vehicle-end equipment). There are many external attack points, and the potential security risks are prominent. Weichen Xinan is a leading domestic automotive network security technology and service provider. In response to the needs of OEMs for OTA information security testing, it provides an information security test system architecture for OTA (remote upgrade) as shown in the figure below:

The test process is clearly recorded and the statistics are comprehensive and accurate. The test process is highly automated, which reduces the need for professional background of testers, automatically analyzes test results and generates reports;

Deeply integrated with CMW/CMX500. Supports program-controlled management of CMW/CMX500, oscilloscopes and other equipment, and realizes automatic execution of the test process and automatic recovery of result data;

Synchronize with international authoritative feature database, with strong timeliness. Based on the international vulnerability database CVE, combined with OTA (remote upgrade) best practices, and continuously collect and improve the feature database;

Provide customizable services. Provide open SDK to support flexible expansion of system functions.

The information security test content of OTA (remote upgrade) can be divided into several aspects such as cloud, pipe, and terminal according to the test object.

In summary, this article preliminarily analyzes the communication traffic and security testing issues of automotive OTA (remote upgrade) , and provides targeted automotive OTA (remote upgrade) communication network traffic and information security testing solutions based on these issues and the testing needs of car companies.

Follow us to stay informed about future trends and new applications.

Rohde & Schwarz is a leading supplier in the fields of test and measurement, broadcast and media, aerospace, defense and security, and cybersecurity. As an independent technology group, Rohde & Schwarz's innovative communications, information and security products provide a more secure and connected world for customers in industry and government. As of June 30, 2020, Rohde & Schwarz had approximately 12,300 employees. Headquartered in Munich, Germany, the company has subsidiaries in more than 70 countries and regional centers in Asia and the United States.

For more information, please visit https://www.rohde-schwarz.com.cn

For technical and product information, please call 400-650-5896