XGuard Onboard Security

Multi-Layer Security for Automotive Systems

Karamba Security’s XGuard Onboard Security is part of the XGuard Suite that offers a comprehensive set of tools for the teams responsible for development, maintenance and cybersecurity of automotive systems including ECUs and the networks that connect them.

Addressing industry regulations and standards, such as UN R155 and ISO/SAE 21434, XGuard Onboard Security provides underlying security enablers and a set of controls needed to protect automotive systems and communication.

Modules include Secure Boot, HSM utilization, cryptographic libraries, secure storage and AUTOSAR SecOC, designed to provide a strong security posture for individual devices and for deployed automotive fleets.

XGuard Onboard Security Elements

The figure below lists mitigations recommended or required in Annex 5 of the UN R155 regulation. The Onboard Security modules have been designed to function in compliance with this regulation and with the automotive cybersecurity management requirements of the ISO/SAE 21434 standard.

XGuard Onboard Security Enablers

As the foundation layer of XGuard Onboard Security, the main modules containing libraries and other files for use in the development of the mandated cybersecurity controls cover cryptographic functions, secure storage, and secure logging.

Cryptographic Module

Features and functions include key management and a hardware abstraction layer.

Key Management: The key management service enables creating and managing certificates and symmetric keys. It is easily adapted to new boards, via a hardware abstraction layer and system-specific crypto drivers. Basic cryptographic services are offered, such as AES, CMAC, Hashing, Key Derivation, TRNG, and PRNG, as well as RSA digital signature algorithms.

APIs: This module provides AUTOSAR compliant crypto APIs via the Crypto Service Manager, such as: