Securing the Connected Car with RVI
Talkat Embedded Linux Conference + OpenIoT Summit North America 2017 · on Thursday, 2017-02-23· at 11:10· Skyline II·
summary
GENIVI’s Remote Vehicle Interaction (RVI) is a small middleware shim that enforces access control with JSON Web Tokens, TLS 1.2/DTLS and PKI, routes JSON RPC–style messages with MQTT-like fully qualified service names, and buffers calls for sparse connectivity; implementations include an Erlang v0.5.0 proof‑of‑concept and a lightweight C library plus iOS/Android SDKs. Threats cited include the Miller–Valasek exploit that led to 1.4 million vehicles recalls and scans that returned ~2,500 matches; RVI also supports Bluetooth/SMS and transaction IDs to mitigate replay attacks.
AI-written summary · about
chapters (12)
- 0:00Intro
- 2:11Everyone's talking about car hacking...
- 2:27Chrysler recalls 1.4M cars after Jeep exploit
- 4:41Tesla hit by malicious wifi exploits in 2016
- 7:50Add external sources...
- 9:23RVI is middleware for service-oriented arch
- 10:53RVI Architecture Overview
- 20:25How does an app developer work with RVI?
- 25:53Authorization - Overview
- 28:38Dynamic Provisioning Sequence
- 33:31What's next for RVI?
- 36:20Further Reading on Automotive Security
related talks
43mSecuring Software-Defined Vehicles: From Threat Awareness To Holistic Cybersecur...
51mSteering Clear of Danger: Decrypting the Realities of Remote Car Hacking
43mConnected Cars - What could possibly go wrong?
01h 04mYour Car “Knows” You: Security in Connected Vehicles & Roadway Infrastructure
34mBack-connect to the Connected Car. Search for Vulnerabilities in the VW Electric Car.
41mThe (In)Security of Automotive Remote Keyless Entry Systems...
28mProtecting the connected car
43mSecuring the Connected Car