Automotive cybersecurity has become a hot topic for a number of reasons. New international regulations (e.g. UNECE 155 and 156), an increase in emphasis on software based solutions and challenges from recent chip shortages have led OEMs to reassess their software approach. In response, GlobalPlatform initiated a direct focus on automotive, bringing together the full value chain of actors, to cooperate on hardware protected security environments for outstanding industry requirements and addressing priority security use cases.

GlobalPlatform’s goal is to develop a common set of non-differentiated standardized security services to support software-defined vehicles. GlobalPlatform is working with SAE International, Autosar, CCC, and AutoIsac to coordinate on common evolving requirements for future use cases.

Automotive Task Force Objectives:

GlobalPlatform’s Automotive Task Force focuses on identifying alignment issues between Automotive requirements and GlobalPlatform specifications, in particular to:

• Define requirements for secure components and services in the automotive industry related to GlobalPlatform technology, including Secure Element (SE), Trusted Execution Environment (TEE) and and mechanisms allowing access to platform services and other innovative isolation technologies.
• Provide input into GlobalPlatform’s technical committees on how GlobalPlatform specifications can be advanced to extend the support to automotive requirements
• Provide guidelines to the full value chain on the use of GlobalPlatform technology for automotive use cases
• Foster common definitions, and where relevant, alignment with standards bodies regarding automotive use cases
• Provide insight to the Automotive industry on:
  • Future-proofing secure components through roadmaps for migration to Post-Quantum Cryptography (PQC) and through guidance leveraging Software Bill of Materials (SBOM) in the software update process
  • Leveraging SESIP as a Security Evaluation Methodology in demonstrating compliance to automotive security requirements

The Automotive Task Force is chaired by Richard Hayton from Trustonic and all GlobalPlatform members are eligible to participate.

Current priorities for 2024

GlobalPlatform’s Cybersecurity Vehicle Forum brings together the automotive value chain and experts on trusted digital services to address the latest developments in automotive cybersecurity and work together to future proof the next generation of connected services. Open to members and non-members, free of charge.

Why Get Involved

Now is a valuable opportunity for the industry to engage on the requirements and priority use cases that the technical committees will use to base their development work for secure elements, trusted execution environments, security APIs, etc. In this way, automotive value chain actors drive the basis for market solutions, as opposed to merely choosing between available options.

To learn more about the value of GlobalPlatform membership, please contact automotive@globalplatform.org.