GENIVI_GDP_SOTA_Spring2017_Arthur_Taylor.pptx

Sota

1. GDP and SOTA May 10th, 2017 | Status and Next Steps Arthur Taylor CTO & Co-Founder, ATS Advanced Telematic Systems GmbH

2. Recent GENIVI Work

3. Recent GENIVI Work - Community OTA Server <number> | May 10th, 2017 | Copyright © GENIVI Alliance 2017 GDP 12 sota.genivi.org RVI Protocol aktualizr rvi_lib SOTA Server RVI Server Node SWLM Mostly GENIVI-funded development as part of GENIVI Challenge Grant Programme

4. Recent GENIVI Work - Community OTA Server <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 Launched server at sota.genivi.org Running on GENIVI infrastructure HTTPS Admin web-interface User Authentication with GENIVI LDAP logins RVI Server Node running - sota.genivi.org:8801-8811 Device Authentication using RVI device certificates (x.509) https://github.com/genivi/rvi_sota_server

5. Recent GENIVI Work - Community OTA Server <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 Integrated C++ SOTA Client - aktualizr aktualizr development kicked-off by ATS in December RVI support with JLR's C-based rvi_lib Using GENIVI SWLM APIs to install software via DBus notifications aktualizr upstreamed to GDP 12 https://github.com/advancedtelematic/aktualizr

6. Recent GENIVI Work - Lessons Learned <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 GDP Upstreaming GDP has very high standards for pull requests ATS underestimated the effort to get changes merged GENIVI Software Loading Manager SWLM PoC packaged for Yocto / GDP by ATS Had to drop some dependencies (GTK+/X11) RVI Encountered issues with expired development certificates Encountered issues with maximum message size

7. Recent ATS Work

8. Recent ATS Work <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 Uptane Implementation of Uptane security framework Connect GENIVI SOTA to ATS implementations of Uptane repositories Uptane Image repository - offline image signing keys Uptane Director repository - online metadata signing keys Extend aktualizr and rvi_sota_client to implement Uptane / TUF APIs 3rd-party security audit of implementation running on ATS Garage https://uptane.github.io https://app.atsgarage.com

9. Recent ATS Work <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 OSTree, TreeHub OSTree support in aktualizr, rvi_sota_client Transactional installation and rollback of full-filesystem updates Automatic delta generation, automatic client-server version negotiation Support for compressed deltas with bsdiff Compatible with standard OSTree tools - ostree admin OSTree integration layer for Yocto builds - meta-updater TreeHub server for remote OSTree pull / push OSTree support integrated into AGL https://ostree.readthedocs.io/ http://docs.atsgarage.com/start-yocto/adding-ostree-updates-to-your-existing-yocto-project.html http://docs.atsgarage.com/start-yocto/adding-treehub-updates-to-automotive-grade-linux.html

10. Recent ATS Work <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 Multi-ECU Update Campaigns Campaigns that include multiple images / firmwares Addressing / targeting ECUs inside vehicles Distributing software inside vehicles - CAN / UDS, Ethernet / DoIP Collecting installation reports from bus-connected ECUs Sending signed software manifests back to server

11. Recent ATS Work <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 Automatic Provisioning Per-account or per-device group provisioning certificate Provisioning certificate bootstraps device-specific x.509 negotiation Include generic certificate in all images / SD-cards Securely generate and share per-device x.509 public key for mutual TLS Device Gateway Mutual-TLS endpoint for HTTPS RESTful JSON APIs TLS credential exchanged on the server-side for OAuth2 token Device never sees OAuth2 token Possible model for RVI-EG provisioning work?

12. Roadmap

13. Roadmap <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 Feature GENIVI SOTA ATS Garage Aktualizr rvi_sota_client End-to-end updates ⚫ ⚫ ⚫ ⚫ RVI transport and Authz/c ⚫ ✕ ⚫ ⚫ Mutual TLS ⚫ ⚫ ⚫ ⚫ LDAP user accounts ⚫ ✕ OAuth2 / OpenID Connect ⚪ ◐ ⚫ ⚫ OSTree ⚪ ⚫ ⚫ ⚫ Yocto Integration ⚫ ⚫ ⚫ Device Auto-Provisioning ⚫ ⚫ ⚫ TUF Image Repo ⚪ ⚫ ⬥ ⚫ Uptane Director Repo ⚪ ⚫ ⬥ ⚫ Uptane Compliant ⬥ ⬥ ⬥ Multi-ECU / FOTA Updates ⬥ ⬥ ⬥ Static Deltas (various formats) ⬥ ⬥ ⬥ Map data updates ⬥ ⬥ ⬥ ⚫ Implemented ⚪ Supported ✕ Not supported ⬥ Planned

14. Roadmap <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 Compliance relevant Multi-ECU - Extend SWLM Module Loader API? Uptane - Significant SOTA / SWLM API impact Deltas - Some SOTA / SWLM API impact Map Data - Significant SOTA API impact Compliance Neutral - GDP / User Experience OSTree / Yocto

15. Longer-term <number> | May 10th , 2017 | Copyright © GENIVI Alliance 2017 AUTOSAR Adaptive Configuration management / Telecoding Safety critical systems User / Group Management? GDP CI integration?

16. Q&A / Roadmap Discussion

17. Thank you! Visit GENIVI at http://www.genivi.org or http://projects.genivi.org Contact us: [email protected] This work is licensed under a Creative Commons Attribution-Share Alike 4.0 (CC BY-SA 4.0) GENIVI is a registered trademark of the GENIVI Alliance in the USA and other countries. Copyright © GENIVI Alliance 2017.