DOCSEARCHbyAlgolia
Submit Docs

Uptane Standard

website·Indexed 34 days ago

https://uptane.org/

A framework for securing ground vehicle software update systems. The documentation provides specifications for the Uptane standard (including versions 1.0.0 through 2.1.0), deployment best practices for ECU preparation and repository configuration, and enhancements such as POUF for secure time access and Scudo for software supply chain security.

Tokens
118.8K
Snippets
45
Records
738
Agent score
62%

What's inside Uptane

  1. Overview of the Uptane standard

    Uptane is a security standard designed to make software update systems resilient to real-world, long-term attacks. While originally designed for vehicles—handling constraints like multiple microcontrollers, various communication buses, and strict regulatory requirements—it is applicable to any embedded device requiring centralized control over firmware updates, such as medical devices, industrial automation, and robotics.

    Uptane is a set of rules and concepts rather than a specific piece of software. It focuses on supply-chain and deployment security, specifically addressing how to safely deliver updates when the manufacturer (or a central entity) must control which software is installed on a device.

  2. Overview of the Uptane Secure Software Update Framework

    Uptane is a software update security system specifically designed for the automotive industry to resist high-level attackers, including nation-state actors. It employs a hierarchical security design to ensure that the compromise of a single server, operator, or vehicular network does not lead to total system failure, thereby preventing irreparable damage to vehicles and allowing for rapid recovery.

  3. Introduction to the Uptane framework for ground vehicles

    The Uptane framework is specifically designed for securing the delivery of software updates for ground vehicles. It differs from other automotive secure update systems by focusing on the unique constraints and threat models of the automotive sector.

  4. Overview of the Uptane secure software update framework

    Uptane is a secure software update framework designed for ground vehicles (passenger cars, trucks, motorcycles) and potentially other IoT or autonomous domains. It provides a standardized approach for OEMs and suppliers to design and implement update systems that are resilient to compromise, ensuring that attackers cannot easily compromise critical systems and that recovery from a compromise is streamlined. The framework allows for technological flexibility in implementation while maintaining security through adherence to the Uptane Standard.

  5. Overview of the Uptane secure update framework

    Uptane is a secure software update framework designed for ground vehicles (including passenger cars, trucks, and motorcycles) to protect connected units from compromise. It provides a flexible implementation guide that allows OEMs and suppliers to make technological choices while maintaining security. To achieve interoperability between different implementations, developers can use POUFs, which describe specific implementation choices and data binding formats.

  6. Overview of the EU Cyber Resilience Act (CRA) requirements

    The Cyber Resilience Act (CRA) imposes cybersecurity requirements on any product with digital elements sold in the European Union. Non-compliance can result in fines up to 2.5% of global annual revenue or 15 million euros. The regulation is built on three pillars:

    1. Product-related essential requirements.
    2. Continuing responsibility for handling security issues and vulnerabilities after sale.
    3. Informing end users about support periods and cybersecurity features.

  7. Overview of the Uptane software update framework

    Uptane is an open-source, secure software update framework hosted by the Linux Foundation and Joint Development Foundation. It is specifically designed to protect software delivered over-the-air (OTA) to automobile electronic control units (ECUs).

    Key characteristics include:

    • Compromise-Resilience: It limits the impact of compromised repositories, insider attacks, or leaked signing keys.
    • Authenticity: It establishes a system of checks and balances to ensure that only valid, current software updates are installed in adversarial environments.
    • Foundation: It is based on the design principles of TUF (The Update Framework).
    • Integration: It is integrated into Automotive Grade Linux and used by various international OEMs.

  8. Overview of the Uptane secure software update framework

    Uptane is a secure software update framework designed for ground vehicles (including passenger cars, trucks, and motorcycles). It provides a set of procedures for OEMs and suppliers to securely design and implement update systems, reducing the ability of attackers to compromise critical systems and ensuring faster recovery in the event of a compromise. The framework is designed to be flexible, allowing implementors to make technological choices while remaining compliant with the standard.

  9. Overview of the Uptane security framework

    Uptane is an open-source framework designed to secure software updates for vehicles and other IoT devices (such as robotics, industrial systems, medical equipment, and aviation). It provides a multi-layered defense to ensure updates are tamper-proof and originate from legitimate sources, maintaining security even if one part of the update system is compromised.

  10. Overview of the Scudo framework for software supply chain security

    Scudo is a framework that combines Uptane's compromise resilience and secure delivery protection with in-toto's end-to-end software supply chain security guarantees. It allows in-toto metadata (which attests to the steps performed in the software supply chain) to be distributed via Uptane's root of trust and delegation structure alongside ECU images. This ensures that the integrity of the operations performed during the supply chain process is verified before an update is applied.

  11. Overview of the Uptane secure update framework

    Uptane is a secure software update framework designed for ground vehicles (passenger cars, trucks, motorcycles, etc.) to protect connected units from compromise and ensure faster recovery. It provides a flexible set of requirements that allow OEMs and suppliers to make technological choices while maintaining security. To achieve interoperability between different implementations, developers can use POUFs (Protocol, Operations, Usage, and Formats) documents which specify implementation choices and data binding formats.

  12. Implement Offline Updates using the Offline-update metadata role

    The Offline-update role is a new role added to the Director repository designed to facilitate firmware updates in airgapped environments, factory pre-provisioning, or via service technicians. It allows the creation of a bundle of firmware images and metadata on portable storage that can be validated by the device without an active connection to the update server.

    Key components of this role include:

    • Offline-update Snapshot metadata: Lists the filenames and version numbers of all valid Offline-update Targets metadata files.
    • Offline-update Targets metadata: Lists the set of images eligible for installation as an offline update. These files must not contain delegations.