At present, the electronic and electrical architecture of vehicles is becoming increasingly complex. Along with the electrification, intelligence, connectivity, and sharing of cars, the proportion of software development in vehicles is growing larger. The frequency of software updates is also increasing. Moreover, throughout the entire lifecycle of a vehicle, including the R&D phase, production phase, and after-sales phase, software update functionality is needed in every stage. Therefore, the demand for software program updates from customers is becoming more urgent.

For vehicle manufacturers or suppliers, BootLoader is an essential feature for the development of controllers. Moreover, different vehicle manufacturers have different program update specifications, and BootLoader drivers depend on different chips. Therefore, to meet the various program update specifications of vehicle manufacturers and to be compatible with chips from different chip manufacturers, ZC provides a complete BootLoader solution—the ZC.QingLong BootLoader. The ZC.QingLong BootLoader is applicable to different vehicle manufacturer program update specifications and chips from various chip manufacturers, allowing customers to focus more on their own controller product development.

The SMTC platform architecture, within the BootLoader, implements features such as Secure Boot, signature bypass verification, and secure flashing, which reduce the security risks during the MCU update process and greatly enhance the security and reliability of the BootLoader.

Feature Description

Ø   Compatible with SMTC Platform Specifications

Ø  Supports application and data update functionality.

Ø  Supports communication via CAN and other protocols.

Ø  Adapts to ZC.XuanWu program update tools, providing a complete program update solution.

Ø  Supports the symmetric encryption algorithm SHA256.

Ø  Supports the asymmetric encryption algorithm ECC (Elliptic Curve Cryptography).

Ø  Supports signature bypass authentication function.

Ø  Supports secure boot functionality.

Ø  Supports secure flashing functionality.

Memory Structure                                             

The memory of the ECU (Electronic Control Unit) is divided into PFLASH and RAM. The PFLASH is further divided into the Application & Data area and the BootLoader area. The RAM is divided into the FlashDriver area and the Data area.

Supports SMTC Specifications.

Ø  Secure Flashing Feature：

ZC.QingLong BootLoader supports the secure flashing feature in the SecureBoot process according to the SMTC specifications. The following is a simplified example diagram：

When the Bootloader performs the flashing process, it uses the asymmetric encryption ECC (Elliptic Curve Cryptography) algorithm and the root public key to verify the content of the signature header file. If the verification is successful, it retrieves the file summary from the signature header and stores it in non-volatile memory. The Bootloader then obtains the entire App data from the ECU (Electronic Control Unit) and calculates the Hash Value using the symmetric encryption SHA256 algorithm.

Compare the Hash Value with the file summary stored in non-volatile memory to implement the secure flashing feature of the ZC.QingLong Bootloader.

Ø  Secure Boot Feature：

ZC.QinLong Supports the Secure Boot process according to the SMTC specifications, which includes the secure boot feature. Below is a simplified example diagram:

When the Bootloader performs a power-on startup or a reset startup, it retrieves data stored in the ECU memory. It then uses the asymmetric encryption ECC (Elliptic Curve Cryptography) algorithm and a public key to decrypt and verify the signature of the data. If the verification is successful, the Bootloader obtains the Verification Data and compares it with the file summary stored in non-volatile memory. If the comparison is successful, the secure boot function can be realized.

Ø  Signature Bypass Feature：

ZC.QinLong BootLoader Supports the signature bypass verification feature in the SecureBoot process according to the SMTC specifications. Below is a simplified example diagram

During power-on or reset startup, the Bootloader checks if the Signature Bypass Indicator (SBI) flag is set. If the SBI is set, the Bootloader will then proceed to check whether the Signature Bypass Authority (SBA) license has been written.

If the Signature Bypass Authority (SBA) license has been written, the Bootloader will then check if the signature in the SBA matches the signature of the Application.

When the SBA (Signature Bypass Authority) verification is successful, the SBA valid flag will be saved. In the subsequent secure boot process, if the SBA valid flag is set, the signature refresh file's authorization and integrity checks in the secure boot and secure flashing processes will not be required.

Process Documentation

ZC.QingLong BootLoader is a self-developed program update software (BootLoader) by ZC. Using the controller of ZC.QingLong BootLoader, the application update function can be achieved through communication methods such as CAN, LIN, SPI, and UART. Currently, ZC.QingLong BootLoader has supported chips from multiple manufacturers like NXP, Infineon, Renesas, and ST, and it also supports the program update specifications of various vehicle manufacturers, providing customized development services.

This document describes the support for SMTC 2 800 004, SMTC 2 800 007, and SMTC 3 800 008 specifications based on the TC213 platform by ZC.QingLong BootLoader. It has already realized the support for the required functions and meets most of the writing needs in the SMTC specifications.

The ZC.QinLong BootLoader can be applied to the controller program update function that uses the TC213 series of chips. The supported controllers include:

Ø  Body Control Module

Ø  Gateway Controller

Ø  In-Vehicle Infotainment System Controller

Ø  Electronic Parking Brake System

Ø  Tire Pressure Monitoring System

Ø  Battery Management System

Ø  Air Conditioning Control System

Ø  Window Control System

Ø  Door Control System

ZC.QinLong BootLoader software is implemented with a layered architecture, which includes the Microcontroller Abstraction Layer (MCAL), the Basic Software Layer (BSW), and the Boot Management Layer (BootManager). Within the BSW, there are several functional components such as System Services (SYS), Storage Services, Diagnostic Services (DIAG), and the ECU Abstraction Layer. The entire software is modularized across its various functions, where:

Ø  Microcontroller Abstraction Layer(MCAL)

Implements the hardware module driver for the chip, which is dependent on the specific chip. Different chips require the replacement of the drivers in this layer.。

Ø  ECU Abstraction Layer

It mainly includes the abstract layer functionality for the ECU, such as the abstract layer functionalities for I/O (Input/Output) drivers.

Ø  System Services (SYS)

Implements functions such as communication, diagnostics, memory management, watchdog management, and security management. It also includes the SHA256 symmetric encryption algorithm and the ECC (Elliptic Curve Cryptography) asymmetric encryption algorithm.。

Ø  Diagnostic Services (SYS)

Implements DCM (Diagnostics Communication Manager) diagnostic functions based on the UDS (Unified Diagnostic Services) and SMTC (if it stands for a specific standard or organization, please provide the full form or context) specifications.。

Ø  Implements DCM

Implements memory management and storage control functions, supporting NVM (Non-Volatile Memory) storage management.

Ø  BootManager

The Boot Management Layer implements the scheduling management for the entire BootLoader software module and manages the interfaces with the application software, among other responsibilities.

Qinglong Software Copyright Registration Certificate

Qinglong Software Product Registration Certificate

Click to download the product manual