Shin Yunje, Jeon Sanghoon
Department of Software, Kookmin University, Seoul 02707, Republic of Korea.
Department of Automobile and IT Convergence, Kookmin University, Seoul 02707, Republic of Korea.
Sensors (Basel). 2024 Feb 23;24(5):1447. doi: 10.3390/s24051447.
The escalating advancement in Software-Defined Vehicles (SDVs) necessitates a formidable strategy for firmware updates, where traditional methods often fall short of guaranteeing absolute integrity. Although decentralization has been explored in studies for firmware integrity verification using blockchain technology, it lacks comprehensive validation in the context of automotive over-the-air (OTA) updates. By recognizing the limitations of current practices and the partial validation of decentralized approaches, such as blockchain, in the automotive sector, our study introduces a novel mechanism for firmware over-the-air (FOTA) updates. This mechanism is grounded in the widely adopted message queuing telemetry transport (MQTT) protocol, integral to the Internet of Things (IoT) domain, and leverages Merkle tree-based blockchain verification to fortify the fidelity and efficiency of firmware updates. Our proposed solution not only prioritizes the stability crucial to automotive OTA updates but also ensures that performance is not compromised. This dual focus on reliability and efficiency represents a significant stride forward in the development of secure, scalable SDV firmware update protocols.
软件定义车辆(SDV)的不断升级发展,使得固件更新需要一个强大的策略,而传统方法往往无法保证绝对的完整性。虽然在利用区块链技术进行固件完整性验证的研究中已经探讨了去中心化,但在汽车空中(OTA)更新的背景下,它缺乏全面的验证。通过认识到当前做法的局限性以及去中心化方法(如区块链)在汽车领域的部分验证情况,我们的研究引入了一种新颖的固件空中(FOTA)更新机制。该机制基于物联网(IoT)领域广泛采用的消息队列遥测传输(MQTT)协议,并利用基于默克尔树的区块链验证来增强固件更新的保真度和效率。我们提出的解决方案不仅优先考虑汽车OTA更新至关重要的稳定性,还确保性能不受影响。这种对可靠性和效率的双重关注代表了安全、可扩展的SDV固件更新协议发展中的一大进步。