ZC.QingLong BootLoader is a self-developed program refreshing software (BootLoader) by ZC. Controllers using ZC.QingLong BootLoader can achieve the update function of the application program through communication methods such as CAN, LIN, SPI, and UART. ZC.QingLong BootLoader supports chips from NXP, Infineon, Renesas, ST, and other manufacturers, and also supports the program refreshing standards of many car manufacturers, offering customized development services.

The ZC.QingLong SecureBoot is based on the Infineon TC2xx platform, implementing the security features of the BootLoader. With the implementation of SecureBoot, the controller can detect whether the BootLoader program and application program have been tampered with, especially during the FOTA process, ensuring the security of the program update.

The ZC.QingLong SecureBoot adds support for FAW-VW CAN Diagnostic Programming Specification, FAW-VW Programming Flow, Degradation Protection, Pipeline Programming, Pipeline Verification and other functions.

Product Features

Ø  Suitable for the program update specifications of up to a dozen car manufacturers

Ø  Supports update functions for applications and data

Ø  Supports self-update functionality for BootLoader

Ø Supports HIS specifications

Ø  Supports communication via CAN/LIN/SPI/UART, etc.

Ø  Adapts to ZC.Xuanwu program update tools, offering a complete solution for program updates

Ø  Supports symmetric encryption algorithms SHA256 and AES128

Ø  Supports asymmetric encryption algorithms ECC and RSA                          

ZC.XuanWu—Software Update Tool

Software Architecture

FOTA system architecture

The Qinglong Ethernet FOTA system architecture supports the FOTA function in communication scenarios such as CAN, LIN, SPI, and Ethernet. It realizes the parsing of UDS messages and diagnostic programming through the Dcm module, and meets the information security requirements of various OEM specifications by adapting to the Crypto Library. The following are the functional descriptions of each module:

Ø  Bootloader

The BootManager module provides FOTA startup management functions and supports the adaptation of hardware and software SecureBoot functions. It stores the expected MAC values of the Bootloader and Application through programming and flashing. During the startup phase, SecureBoot performs software integrity verification by calculating and comparing the MACs of the Bootloader and Application to ensure software security requirements.

Ø  Can Com

The Can module supports CAN and CANFD communication functions.

Ø  Spi Com

The Spi module supports the master-slave programming function. By adapting to the hardware configurations of 5, 6, and 7 wires, it can support multiple SPI communication programming modes.

Ø  Ethernet Com

The DoIP module realizes the Ethernet communication sending and receiving functions based on the TCP/IP protocol, meeting the definition of the ISO 13400 standard. It implements the UDS flashing process through vehicle identification, routing activation, and diagnostic message functions, thereby achieving the Ethernet OTA function.

Ø  Dcm

The Dcm module realizes the diagnostic function based on the support of the communication module, meeting the definitions of ISO 14229 and ISO 15765 standards.

Ø  Crypto, HSM

The Ethernet OTA supports the adaptation of the Muniu Crypto Library functions. It combines asymmetric encryption algorithms with other encryption algorithms to achieve the secure flashing function. It adapts to the certificate authentication function to meet the security diagnostic requirements and adapts to the HSM to improve the stability and verification speed of the Cybersecurity function.

Memory Structure 

The ECU's memory is divided into PFLASH and RAM. PFLASH is further divided into Application & Data, BootManager and BootLoader areas, while RAM is divided into FLASH Driver and Data areas.

Secure Flashing and Secure Boot

ZC.QingLong SecureBoot supports the functions of secure flashing and secure booting

Ø  Secure Flashing：

ZC.QingLong SecureBoot uses the Root Public Key stored in non-volatile memory, and verifies the authenticity of the data through asymmetric encryption algorithms such as ECC or RSA. If the verification is successful, it then checks the integrity of the data through symmetric encryption algorithms like SHA256 or AES128, ensuring the secure flashing process.

Ø  Secure Boot：

During the process from power-on to jumping into the Application, ZC.QingLong SecureBoot supports the secure boot function. It verifies the security of the Boot and Application programs through symmetric encryption algorithms like SHA256 or AES128, ensuring the program starts securely.

The ZC.QingLong SecureBoot can be applied to the controller program update function using the TC2xx series chips. The supported controllers include:

Ø  Body Controller

Ø  Gateway Controller

Ø  In-Vehicle Infotainment System Controller

Ø  Electronic Parking Brake System

Ø  Battery Management System

Ø  Air Conditioning Control System

Ø  Window Control System

Ø  Door Control System

Currently, the electronic and electrical architecture of vehicles is becoming increasingly complex. Along with the trends of electrification, intelligence, connectivity, and sharing in the automotive industry, the proportion of software development in vehicles is growing larger. The frequency of software updates is also increasing. Moreover, throughout the entire lifecycle of a vehicle, including the research and development phase, production phase, and after-sales phase, the capability to update software is required at each stage. Therefore, the demand from customers for software program updates is becoming more urgent.

Furthermore, with the implementation of the Internet of Vehicles, information security is gaining more attention. As chips serve as carriers of information, the protection of data within the chips is particularly important. ZC.QingLong SecureBoot, based on the Infineon TC2xx platform, implements the security features of the BootLoader. By implementing SecureBoot, the controller can detect whether the BootLoader program and application program have been tampered with, especially during the FOTA process, ensuring the security of the program update.

Qinglong Software Copyright Registration Certificate

Qinglong Software Product Registration Certificate

Click to download the product manual