安全可靠 – ISO 26262 背景下的 MACsec 实施.pdf

1、PUBLICNXP,THE NXP LOGO AND NXP SECURE CONNECTIONS FOR A SMARTER WORLD ARE TRADEMARKS OF NXP B.V.ALL OTHER PRODUCT OR SERVICE NAMES ARE THE PROPERTY OF THEIR RESPECTIVE OWNERS.2020 NXP B.V.S E P T E M B E R 2 0 2 3Steffen LorenzSAFE AND SECUREMACSEC IMPLEMENTATION IN THE CONTEXT OF ISO26262ETHERNET&I

2、P AUTOMOTIVE TECHNOLOGY DAY1PUBLICCAN WE TRUST MODERN CARS?SECURITY IS A MUST-HAVE FOR VEHICLES-2PUBLICAGENDASecurity in automotive-MACsec in a nutshellFunctional SafetyFuSa MACsecSummary and conclusion 3PUBLIC3PUBLICNXP,THE NXP LOGO AND NXP SECURE CONNECTIONS FOR A SMARTER WORLD ARE TRADEMARKS OF N

3、XP B.V.ALL OTHER PRODUCT OR SERVICE NAMES ARE THE PROPERTY OF THEIR RESPECTIVE OWNERS.2020 NXP B.V.Security in automotiveMACsec in a nutshell4PUBLICNEW E/E ARCHITECTURES ARE EMERGING TO MANAGE INCREASING HARDWARE AND SOFTWARE COMPLEXITYADASConnectivity+IVIVehicle ComputerService-OrientedZoneService-

4、OrientedZoneService-Oriented ZoneService-Oriented ZoneService-OrientedZoneService-Oriented ZoneADASConnectivity+IVIDrivetrainBody+GatewayBodyZoneBodyZoneBodyZoneBodyZoneADASConnectivity+IVIVehicle ComputerX-domainZoneX-domain zoneX-domain zoneX-domain zoneGatewayADASConnectivityBodyIVIDrivetrainDOMA

5、INBODY-ZONALX-DOMAIN ZONALSDV-OPTIMIZEDCreates logical separation to isolate processing of domain functions with static network policiesCreates physical separation for body domain functions enabling smart data and power distribution and reducing wiring/weight/complexityCreates physical separation fo

6、r cross-domain functions in zones for further wiring/weight/complexity reduction using distributed compute architectureCentralized,service-oriented compute architecture with zones supporting SDV SW deployment and further wiring optimization5PUBLICCORE SECURITY PRINCIPLES FOR DEFENSE IN DEPTHMultiple