Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was...

52
www.luxoft.com 22.05.2019 SwissRe Deutschland-Tour 2019: Zukunft Future cars and connected mobility – impacts

Transcript of Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was...

Page 1: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

22.05.2019 SwissRe Deutschland-Tour 2019: Zukunft

Future cars and connected mobility – impacts

Page 2: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Agenda

2

Company Overview01

02 Autonomous Driving

Connected Mobility

CyberSecurity for Mobility

TeleOPeration

Infrastructure based Driving (MaaS)

03

04

05

06

Sharing Economy

Validation, Functional Safety (Methods)

New Business Models

07

08

09

Page 3: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

3 Geographies 3 Continents 17 Countries 16 Delivery offices

Luxoft Automotive at a Glance

13 yearsAutomotive Practice

45% Compound Annual Growth Rate

40+Active Clients, 40% OEMs

3,200+Employees Worldwide

Luxoft HQZug Switzerland

<10%Attrition 5 new

locations in the last 12 Month

Page 4: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Future Mobility

Page 5: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com www.luxoft.com

7

The Mobility Revolution

Page 6: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

PERSONAL DIGITAL LIFESTYLE

AUTONOMY

ELECTRIFICATION

SHARING ECONOMY

The Mobility Revolution

www.luxoft.com

8

Page 7: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

Key industry challenges

Mechanical engineering

companies become

Software Companies

TECHNICAL AND ORGANIZATIONAL CONSEQUENCES

Autonomous Driving +

ECU consolidation =>

driving the need for

NEW software platforms

Digitalization of the

Customer Relationship

and need for holistic

Customer Experience

design => Smashing

lead-in

Personal Digital

Lifestyles Eco-systems

=> One company cannot

do all anymore.

1. 2. 3. 4.

www.luxoft.com

9

Page 8: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Inser webos picture with apps.

Thanks to our collaboration with Luxoft, we are able to bring webOS into automotive and beyond,” said I.P. Park, CTO at LG Electronics.

Building Eco-systems With Technology Partners

Page 9: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

• Co-creation of the SW Platform on which MBUX is build

• Scaling a large project team to implement and deliver complete

#MBUX software on behalf of Daimler

• TechCrunch: ”If you’d have told me a week ago that one of my favorite

things from CES would be an automaker’s infotainment software, I’d

have laughed, but here we are.”

• Software House using Scaled Agile way of working enabling

integration of 3rd party innovations for coming product generations

Achievements

Challenge

• Design & Develop the best User-Experience (UX) in the industry

• In-source development of UI Software to the OEM

• Ensure long-term innovation with eco-system of partners

MBUX – the benchmark in User Experiences

Page 10: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Autonomous Driving

12

Environmental Modelling

Precise Positioning

HD MapsTrajectory Planning and Control

Prediction and Decision

Page 11: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 13

BILLION DRIVING MILESSENSOR ECU DEVELOPMENT

VEHICLE PLATFORMS

SENSOR FUSION MODELS

AUTONOMY FUNCTIONS

SYSTEM-LEVEL INTEGRATION

FUN

CTI

ON

AL

SAFE

TY

engineers700+

Autonomous Drive

Page 12: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Autonomous Drive on the Motorway (L4)

14

Page 13: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Output: Reliable, de-noised, aligned

3D-geometry

CameraSensor

Camera ECU SW

Lidar SensorLidar ECU

SW

RadarSensor

Radar ECU SW

UltrasonicSensor

Ultrasonic ECU SW

Classic Platforms, Embedded Software,

Firmware

Vehicle NetworkingHigh-performance ECUs, AI-

based Algorithms

Sensor Fusion

ECU or SW

Input: RAW analog signal

Focus: Sensing & Fusion

Page 14: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Environment Model: What the Car Sees

Page 15: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Connected Mobility

Page 16: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

MBiENT…

Cloud Software

Connected servicesSpeechHybrid-

Navigation

UI/UX

Page 17: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Most modern cars are connected to the internet already. This trend will only

increase, especially when V2V communication is ready for prime time.

Teleoperated connectivity will allow to take over control remotely.

Each year, vehicles also are getting more automated functionality, leading to

L4/L5 autonomous driving capability in the next years.

Ideally, all communication subsystems are segregated for each use case, but this

is not always desired:

• Separate entertainment system from vehicle functions? Not so fast!

o E.g. some comfort functionality, like adjusting entertainment volume

needs to know the vehicle speed…

• Tradeoffs required and special care for interfaces handling this

Future Mobility: Connected Cars

Page 18: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

CyberSecurity for Mobility

Page 19: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Incidents are increasing. 2019 is still fresh and will surpass all previous years according to Trend Micro’s research. 70% of the incidents are related to OEMs

7 4

18

34

39

18 15

22 28 19

25

19

40

6258

0

10

20

30

40

50

60

70

2015 2016 2017 2018 2109

Criminal Researches Total

Automobile Cybersecurity Incidents 2015 - 2019

Overview: Threat Landscape for Modern Cars - Incidents

Page 20: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

These were the entry points of attacked vehicles. Since most

money currently can be made by criminals by simply stealing the

cars, mostly key access was attacked.

But in the future, any vehicle subsystem that can be used to start

a denial of service is critical or any hacked ECU can be used as

beachhead to launch attacks on other internal systems, e.g. via

the internal vehicle’s networks:

Think cryptolocker for cars, when your infected, new luxury

automotive will start immediately after you paid this little, tiny

amount of 30 ZCash to the criminals who infected your car with

malware via Cloud or Bluetooth or V2V connection...

33%

8%

11%10%

20%

18%

Cloud

Infotainment

Remote Keyless

OBD Port

Other

Mobile App

Overview: Threat Landscape for Modern Cars – Attack Vectors

Page 21: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Interior / Exterior camera

camera

LiDAR

RADAR

RADAR

RADARRADAR

RADAR

camera

camera

camera

RADAR

RADAR

LiDAR

LiDAR

UPA

UPA

UPA

UPA

UPA

UPA

UPA

UPA

camera

LiDAR

RADAR

camera

camera

Redundant High-Performance

AD Computer

Body/GWComputer

Redundant High-Performance

AD Computer

CockpitComputer

AD System Architecture

Attack vectors

Page 22: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Gateway

IVI

HU

Body DCUTCU

Ethernet

NAVI/GPS

USB

Bluetooth

Radio

WIFI

4G/5G

CAN FD

OBD

Powertrain DCU

Chassis DCU

ADAS DCU

FlexRay

CAN FD

CAN FD

CAN FDFlexRay

ECU13ECU12ECU11

ECU03ECU02ECU01

ECU23ECU22ECU21

LidarRadarCAM

ECU33ECU32ECU31

LIN

External Internal Telecom

Connected Car Architecture Connectivity

Cloud

Service

Management

Business

Agent based solution integrated with External Gateway. Vulnerability, Anonymity detection, File integrity check, IPS, Whitelisting

TMIS for Cars

End Point Security

Trend Micro Virtual Network Function Suite

TMVNFS

Network Security

Trend Micro Deep Security - Hybrid Cloud Security Solution

TMDS

Cloud Security

SOC Enable

Security Operation

Machine Learning based to detect abnormal network behavior within the CAN Bus

TMIS - CAN Bus Anomaly Detection

Network Anomaly Detection

Connected Car Architecture and Solution

Page 23: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

TeleOP Mobility

Page 24: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 27

ROADWORKS / MINES,FALLBACK SOLUTION FOR AV

WORKSHOPS / REPAIRING,FIRST MILE DELIVERY

VALET PARKING, CAR SHARINGLOGISTICS, AIRPORTS

Use Cases

Page 25: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 28

Teleoperated Driving: Concept

Control Center

control signals

video stream

vehicle data

Core Network Mobile Edge Cloud

e.g. LTE

Communication Channel Car

safety-critical features

Page 26: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 29www.luxoft.com

Teleoperated Driving: Car

Page 27: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 31www.luxoft.com

Teleoperated Driving: VR Experience

Page 28: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Mobility as a Service (MaaS)

Page 29: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Services for automated Cars

Automated Driving on Public Roads

• Traffic rules and regulations• Individual Mobility• Primarily driving to target

destination

C

OEM Plant Rental Car Areas

Parking EV Charging

A

BRoad Business Site

New Markets for Mobility Services

33

Automated Driving on Business Site 1

• Managed Business, specific Terms and Conditions

• Temporary and real fleets• Specific facility and Infrastructure• Primarily professional-, or duty-

rides

Page 30: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Infrastructure-based Driving

34

Cloud NetworkInfrastructure

CarTelematicControl Unit

Capture Sensor(LiDAR / Camera)

Environment

Architecture

Page 31: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Infrastructure-based Driving

35

Architecture

Infrastructure(Sensor equiped)

Automated Control

Vehicle(no Sensors)

Cost-efficient

No sensors at the vehicle

Infrastructure investment only

Time savings & efficiencyProcess is automated

Enabler for Mobility as a Service (MaaS)

Page 32: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Infrastructure-based Driving

36

Security potential attack vectors

Object detectionLocalization

Object catalogObject processing

Sensordata

Trajectory planning

Disturb sensors (introduce noise / deny service by

sending fake signals)

Vehicle must be able to reach safe state in case communication breaks down or contradicting local data

Man in the middle attack. Or disturb/jam data transfer

Page 33: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

AUTONOMOUS DRIVE. FROM ASSEMBLY TO LOGISTICS

37

Infrastructure-based Autonomous Driving

Page 34: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 38

Infrastructure-based Autonomous Driving

Page 35: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 39www.luxoft.com

Infrastructure-based AD: Experience

Page 36: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Sharing Economy

Page 37: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Holistic Mobilty View

Page 38: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Virtual Validation and HIL Testing

Autonomous Drive

Page 39: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Full Vehicle Virtualization…

43

Need faster and cheaper validation method

>10 billion miles of test drive to validate AD functions

24/7 driving at 25MPH requires ~50k years per vehicle

…the Hardest Part is Sensor Physics!

Page 40: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com Confidential

Environment

Sensor Model

Scenarios

V-ECUFusion/Decision/

Plant model

Controls for Actuators

Luxoft Focus Areas

OEM

Workflow setup & scalable execution

Transformation from real drive to simulate

driving scenarios.

Coupling to Sensor Models, Algorithmic

enhancement of SM(s)

Virtual Validation Areas of Focus

Page 41: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Sensor control-unit

Sensor(Camera/Radar/L

idar)

Sensor control-unit

Sensor(Camera/Radar/L

idar)

Images

Image information

Vehicle busVehicle bus

ON VEHICLE ON HIL

Control-Unit Control-Unit

Vehicle Recording

HIL for Sensors

Page 42: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Operational SafetyPerformance & reliability evaluation of sensor systems for highly automated driving functions -

collaboration insurances industry?

Page 43: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Differentiation of Safety in the Context of Autonomous Driving

47

FunctionalSafety

CyberSecurity

Safetyof the intended

functionality

SOTIF

Qualitative classification

Standard

Essential contents

ISO 26262 ISO/PAS 21448 ISO/SAE CD 21434

QM, ASIL A – D Not defined (CAL 0 – X)

• Functional failure of hard- & software of E/E systems

• Requirements & method for dev. process

• Safety of the target function

• Control of hazard-events

• Prevention of manipulation of functions

• Process-Requirements & Attack Protection

Safety & Security Academy

Focus of the IABG Method

Page 44: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Presentation of the IABG Method: Overview

User

Function

Quantitative

Risk & Safety

Assessment

Resulting Severity

S0

S1

S2

S3

Corner Cases

Analysis

Environment

System-under-Test

Applicationcontext

Traffic

EGO-Vehicle

IABG Method & Framework

Targets: Evaluation of sensor architectures for highly automated driving functions

Derivation of sensor requirements & application limits of the system

Results: Quantitative measure of safety & residual risk of driving functions

Probabilities of occurrence & severity of accidents

Page 45: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Approach of the IABG method: Holistic consideration of the driving function and the application context

• Identification of Corner Cases 2

• Quantitative Validation remaining risk 3

• Detection method & system optimization in early phase of development

Motivation of the IABG Method - Differentiation of scenario-based testing

51

Classical approach: The reliability of highly automated driving functions is analysed, simulated and tested by means of selective scenarios.

• Only parts of the multidimensional test space are investigated

• Unknown corner cases are not taken into account

1!1! 2! 3?

4?

2! 3?

4?

IABG-Method

Characteristics:

• Conform to ISO / PAS 21448

• Enlargement of the known event space through systematic (pre-) analysis

• Use as a framework for various applications

Page 46: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Presentation of the IABG method: Potential applications

User

Function

AEB ACCHighway

Autopilot

Automated

Parking

Your

Application

Possible applications:

• Analysis & evaluation of highly automated driving functions already at the beginning of the development process

• Reliability testing of systems & algorithms incl. sensor failures and redundancy concepts

• Analysis & identification of weak points in the system

• Sensor Performance Requirements & Specifications

• Derivation of KPIs and benchmarking of different sensor architectures

Page 47: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

IABG Method: Modelling & User Interface

Page 48: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

New Business Model

Page 49: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 55

Teleoperation real time QoS via Network slicing

Network Slicing

Page 50: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com 56

Teleoperation real time VR TeleOP Driving

Network Slicing

Page 51: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Thank you

Page 52: Future cars and connected mobility impacts292c7c6b-e0f9-4b72-aade...cars, mostly key access was attacked. But in the future, any vehicle subsystem that can be used to start a denial

www.luxoft.com

Autonomous InfraDrive: Time Line

58

ANFLUG v1First Phase

F40 Full Control

ANFLUG v2First Phase

Multi Car Control

ANFLUG V2Demo

ANFLUG V3

• Design Phase• IR Camera

Full Car-to-Cloud integration

Award of version 2

• New Location based system

• Lidar System• TMC DEMO• Other plants research

• 3rd Party Integration• ANFLUG v3

November 2017 February 2018 April 2018 October 2018 November 2018 December 2018