Currently, the electronic and electrical architecture of automobiles is becoming increasingly complex. With the electrification, intelligence, connectivity, and sharing of vehicles, the proportion of software R&D in automobiles is growing larger. The frequency of software updates is also increasing. Moreover, throughout the entire lifecycle of a car, including the R&D phase, production phase, and after-sales phase, software update functionality is required in each stage. Therefore, customer demand for software program updates is becoming more urgent.

Furthermore, with the implementation of the Internet of Vehicles, information security is gaining more attention. As chips serve as carriers of information, data protection within the chips is particularly important. ZC.Qinglong SecureBoot, based on the NXP S32K1xx platform, implements the security features of the BootLoader. By implementing SecureBoot, the controller can detect if the BootLoader program and application programs have been tampered with, ensuring the security of program updates, especially during the FOTA process.

The QSQR electronic and electrical architecture in SecureBoot, by implementing features such as AB partition switching, Secure Boot, and CBF encryption signature verification, reduces security risks during the MCU update process and significantly enhances the security and reliability of SecureBoot.

Product Feature

Ø  Suitable for QSQR platform specifications

Ø  Supports features such as AB partition switching

Ø  Supports update functions for applications and data

Ø  Supports HIS specifications

Ø  Supports communication via CAN/LIN/SPI/UART, etc.

Ø  Adapts to ZC Xuanwu program update tools, offering a complete solution for program updates

Ø  Supports various combinations of RSA and SHA standard algorithms

Ø  Supports CBF file parsing

ZC.XUNWU—Program Update Tool

Memory Structure

The ECU's memory is divided into PFLASH and RAM. PFLASH is further divided into Application & Data and BootLoader areas, while RAM is divided into FLASH Driver and Data areas.

Supports QSQR specifications

ZC Qinglong SecureBoot supports the flashing process and functional requirements of the QSQR specifications. The following are some of the QSQR specification requirements that have been implemented:

Ø  AB Partitioning:

ZC Qinglong SecureBoot supports the AB partition feature. SecureBoot determines which Application to jump to after updating based on the active flag of the AB partitions. Users can perform AB partition switching functions such as rollback and backup through related command operations.

Ø  Encryption Algorithms:

ZC Qinglong SecureBoot supports integrity checks through various combinations of RSA and SHA algorithms, such as SHA1, SHA256, SHA512, RSA1024+RSASS-PKCS1-V1_5, RSA2048+RSASS-PKCS1-V1_5, RSA4096+RSASSA-PSS, and other algorithms.

Ø  Support for CBF File Download:

By integrating with the ZC.Xuanwu program update tool, ZC.Qinglong SecureBoot can parse CCBF file data, download the data into the ECU, and verify the integrity and reliability according to the QSQR specifications using the Verification Block and Signature data carried in the CBF.

Process Documentation

ZC.QingLong BootLoader is a self-developed program refreshing software (BootLoader) by ZC. Controllers using ZC.QingLong BootLoader can achieve the update function of application programs through communication methods such as CAN, LIN, SPI, and UART. Currently, ZC.QingLong BootLoader supports chips from NXP, Infineon, Renesas, ST, and other manufacturers, and also supports the program refreshing standards of various car manufacturers, offering customized development services.

       ZC Qinglong SecureBoot, based on the NXP S32K3 platform, implements support for QSQR specification security features. Currently, ZC.Qinglong SecureBoot has realized support for CBF file flashing, AB partitioning, parsing of multiple RSA and SHA combination algorithms, signature authentication, and other functional requirements, meeting most of the flashing needs specified in QSQR.

ZC.Qinglong SecureBoot can be applied to the controller program refreshing functions that use the S32K3 series chips. The supported controllers include：

Ø  Body Controller

Ø  Gateway Controller

Ø  In-Vehicle Infotainment System Controller

Ø  Electronic Parking Brake System

Ø  Tire Pressure Monitoring System

Ø  Battery Management System

Ø  Air Conditioning Control System

Ø  Window Control System

Ø  Door Control System

The ZC.QingLong BootLoader software implements a layered architecture, which is divided into the Hardware Driver Layer (HwDrv), ECU Abstraction Layer (EcuAbstr), System Service Layer (SysSer), and Boot Management Layer (BootManager). The entire software is modularized, where:

Ø  HwDrv

The Hardware Driver Layer implements the drivers for the chip's hardware modules and is dependent on the specific chip. Different chips require replacement of the drivers in this layer.

Ø  EcuAbstr

The ECU Abstraction Layer is an abstraction of the ECU, including drivers external to the MCU.

Ø  SysSer

The System Service Layer implements functions such as communication, diagnostics, memory management, watchdog management, and security management.

Ø  BootManager

The Boot Management Layer is responsible for the scheduling management of the entire BootLoader software module and for managing the interfaces with the application programs.

Qinglong Software Copyright Registration Certificate

Qinglong Software Product Registration Certificate

Click to download the product manual