ZC.QingLong BootLoader is a self-developed program refreshing software (BootLoader) by ZC. Controllers using ZC.QingLong BootLoader can achieve the update function of the application program through communication methods such as CAN, LIN, SPI, and UART. ZC.QingLong BootLoader supports chips from NXP, Infineon, Renesas, ST, and other manufacturers, and also supports the program refreshing standards of many car manufacturers, offering customized development services.

The ZC.QingLong SecureBoot supports the implementation of SecureBoot functionality based on the YunTu YTM32B1HA0x platform. The controller can utilize the SecureBoot feature during the boot phase to verify whether the code data of the BootLoader software and Application software has been tampered with, ensuring the security of automotive software operations.

Memory Structure

The memory of the YunTu chip comprises PFLASH and RAM. The PFLASH section is divided into Application & Data, BootManager, and Bootloader areas, while the RAM section is divided into FLASH Driver and Data.

The Crypto Library is stored within PFLASH and is invoked by the BootManager and Bootoader during software execution.

Secure Flashing and Secure Boot

ZC.QingLong SecureBoot supports the functions of secure flashing and secure booting

Ø  Secure Flashing：

ZC.QingLong SecureBoot performs data authenticity verification by invoking the asymmetric encryption algorithms ECC or RSA interfaces within the SecureBoot, based on the Root Public Key stored in non-volatile memory. If the verification is successful, it then checks the integrity of the data through symmetric encryption algorithms like SHA256 or AES128, ensuring the secure flashing process.

Ø  Secure Boot：

During the process from power-on to jumping into the Application, ZC.QingLong SecureBoot supports the secure boot function. It verifies the security of the Boot and Application programs through symmetric encryption algorithms like SHA256 or AES128, ensuring the program starts securely.

The SecureBoot software from ZhiCong Qinglong can be applied to controller application programming functions utilizing the YTM32B1HA0x series chip. The supported controllers include:

Ø  Powertrain and Chassis

n  VCU

n  BMS

n  EPS

n  ABS

n  ESP

n  EBD

n  EPB

n  ASR

n  EGR

Ø  Body Control and Gateway

n  BDC

n  Entry-Level ZCU

Ø  Smart Cockpit and Display

n  MCU

n  AR-HUD

n  ADB

Currently, the electronic and electrical architecture of vehicles is becoming increasingly complex. Along with the trends of electrification, intelligence, connectivity, and sharing in the automotive industry, the proportion of software development in vehicles is growing larger. The frequency of software updates is also increasing. Moreover, throughout the entire lifecycle of a vehicle, including the research and development phase, production phase, and after-sales phase, the capability to update software is required at each stage. Therefore, the demand from customers for software program updates is becoming more urgent.

Furthermore, with the implementation of the Internet of Vehicles, information security is gaining more attention. As chips serve as carriers of information, the protection of data within the chips is particularly important. ZC.QingLong SecureBoot, based on the YunTu YTM32B1HA0x platform, implements the security features of the BootLoader. By implementing SecureBoot, the controller can detect whether the BootLoader program and application program have been tampered with, especially during the updating applicaiton process, ensuring the security of the program update.

Ø  Suitable for the program update specifications of up to a dozen car manufacturers

Ø  Supports update functions for applications and data

Ø  Supports self-update functionality for BootLoader

Ø  Supports HIS specifications

Ø  Supports communication via CAN/LIN/SPI/UART, etc.

Ø  Adapts to ZC.Xuanwu program update tools, offering a complete solution for program updates

Ø  Supports symmetric encryption algorithms SHA256 and AES128

Ø  Supports asymmetric encryption algorithms ECC and RSA

ZC.XuanWu—Software Update Tool

FOTA system architecture

The Qinglong FOTA system architecture supports the FOTA function in communication scenarios such as CAN, LIN, SPI, and Ethernet. It realizes the parsing of UDS messages and diagnostic programming through the Dcm module, and meets the information security requirements of various OEM specifications by adapting to the Crypto Library. The following are the functional descriptions of each module:

Ø  Bootloader

The BootManager module provides FOTA startup management functions and supports the adaptation of hardware and software SecureBoot functions. It stores the expected MAC values of the Bootloader and Application through programming and flashing. During the startup phase, SecureBoot performs software integrity verification by calculating and comparing the MACs of the Bootloader and Application to ensure software security requirements.

Ø  Can Com

The Can module supports CAN and CANFD communication functions.

Ø  Dcm

The Dcm module realizes the diagnostic function based on the support of the communication module, meeting the definitions of ISO 14229 and ISO 15765 standards.

Ø  Crypto

The Ethernet OTA supports the adaptation of the MuNiu Crypto Library functions. It combines asymmetric encryption algorithms with other encryption algorithms to achieve the secure flashing function. It adapts to the certificate authentication function to meet the security diagnostic requirements and adapts to the YunTu chip with built-in crypto library to improve the stability and verification speed of the Cybersecurity function.

Qinglong Software Copyright Registration Certificate

Click to download the product manual