Middleware-Based Security and Privacy for In-car Integration of Third-Party Applications

Today’s vehicles include up to seventy networked electronicplatforms handling simultaneously infotainment and safety functions.Fully connected to the world, the car is now customizable, communi-cates with several external devices, online services and will be soon host-ing third party applications, as our smartphones already do. Such anevolution raises several critical security and privacy issues. While offer-ing numerous advantages, the use of Ethernet, the Internet Protocol (IP)and their associated security protocols as on-board communication stan-dards may not be sufficient. A generic framework focused on informationsecurity and on the aforementioned use cases would fill this gap and isstill missing. In this paper, we present a combination of car-wide andlocal security concepts for IP-based middleware securing the integrationof unsafe automotive scenarios. We describe the implementation and in-tegration of these mechanisms and show their evaluation.