Automotive Semiconductors and Functional Safety
Which is the appropriate approach when performing an OTA (Over-the-Air) update, which rewrites vehicle software wirelessly?
- APerform updates while driving whenever possible and, to avoid disturbing the driver, switch automatically to the new software version without notification before the driver notices
- BVerify the software's digital signature to prevent tampering, apply the update in a safe state such as while parked, and make it possible to roll back to the previous version if the update fails
- CSkip digital signature verification because it takes time, and perform the update prioritizing download speed
Show answer and explanation
Answer: B. Verify the software's digital signature to prevent tampering, apply the update in a safe state such as while parked, and make it possible to roll back to the previous version if the update fails
OTA updates allow features to be added and bugs to be fixed without a dealer visit, but if counterfeit software is installed, control of the vehicle could be hijacked. Therefore, a digital signature is used to verify that the software comes from the legitimate distributor. Updates are applied with the driver's consent at a time that does not affect driving, such as while parked, and the vehicle can still boot the previous version if the update fails. In some regions, cybersecurity and software update management systems based on UN regulations (UN R155 and R156) are required.
Continue: 9 more Automotive Semiconductors and Functional Safety questions