This content is not included in your SAE MOBILUS subscription, or you are not logged in.

Using a Dual-Layer Specification to Offer Selective Interoperability for Uptane

Journal Article
11-02-02-0011
ISSN: 2572-1046, e-ISSN: 2572-1054
Published August 24, 2020 by SAE International in United States
Using a Dual-Layer Specification to Offer Selective Interoperability for Uptane
Sector:
Citation: Moore, M., McDonald, I., Weimerskirch, A., Awwad, S. et al., "Using a Dual-Layer Specification to Offer Selective Interoperability for Uptane," SAE Int. J. Transp. Cyber. & Privacy 2(2):113-129, 2019, https://doi.org/10.4271/11-02-02-0011.
Language: English

Abstract:

This work introduces the concept of a dual-layer specification structure for standards that separates interoperability functions, such as backward compatibility, localization, and deployment, from those essential to reliability, security, and functionality. The latter group of features, which constitute the actual standard, make up the baseline layer for instructions, while all the elements required for interoperability are specified in a second layer, known as a Protocols, Operations, Usage, and Formats (POUF) document. We applied this technique in the development of a standard for Uptane [1], a security framework for over-the-air (OTA) software updates used in many automobiles. This standard is a good candidate for a dual-layer specification because it requires communication between entities, but does not require a specific format for this communication. By deferring wire protocols and other implementation details to POUFs, the creators of the Uptane Standard were able to focus on the basic procedures and operations needed to secure automotive updates. We demonstrate the effectiveness of this format by specifying a POUF for the Uptane Reference Implementation [2].