AGNOSAR® Bootloader

AVIN Systems offers a robust Modular Bootloader Architecture tailored for embedded automotive systems. Designed for both AUTOSAR and non-AUTOSAR-based ECUs, it features secured start-up, OTA-enabled, advanced memory management, integrated diagnostics and reliable communication layers. This bootloader ensures consistent initialisation and seamless integration across safety-critical vehicle platforms.

[request_quote_button popup_target=”requestQuotePopup”]
[request_quote]
Contact Us

Product Highlights

Non-AUTOSAR / OEM Specific

Flexible bootloader solutions tailored for OEM-specific requirements, ensuring compatibility beyond AUTOSAR standards.

CAN and Ethernet-Based

High-speed CAN and Ethernet-based bootloaders for secure and efficient ECU flashing and communication.

Secured Bootloader with HSM Integration

Secured bootloader with Hardware Security Module (HSM) integration for robust automotive cybersecurity.

OTA Compatible

Over-the-air (OTA) compatible bootloader enabling seamless remote ECU updates and enhanced vehicle connectivity.

Download Product Flyer

Vestibulum eu quam nec neque pellentesque efficitur id eget nisl.

[download_flyer_button popup_target=”downloadflyerpopup”]
[download_flyer]

Direct Links

AGNOSAR® Bootloader

At the top of the architecture is the Bootloader Task Manager, which acts as the central controller. It coordinates all bootloader operations, manages task execution, and ensures system readiness during start-up.

Software Function Modules (Blue)

These modules handle core bootloader logic and security:

Decompression & Decryption: Ensures secure loading of application binaries.
Application Validity Interface: Verifies the integrity of the application before execution.
Security Module: Manages authentication and secure boot processes.
Boot State Manager: Tracks and controls the bootloader’s operational states.
CRC Module: Performs cyclic redundancy checks for data integrity.
Scheduler & Utilities: Schedules various Bootloader tasks and provides utility functions.

Communication Modules (Orange)

These modules enable diagnostic and communication capabilities:

Diagnostic Configuration & UDS: Supports Unified Diagnostic Services for vehicle diagnostics.
CAN Transport Layer & CAN Driver: Facilitates communication over Controller Area Network.
Diagnostic over IP & TCP/IP: Enables diagnostics via Ethernet and IP protocols.
Ethernet Driver: Supports high-speed data exchange over Ethernet.

Memory Management Modules (Green)
These modules handle memory operations critical to bootloader functionality:

Memory Program Manager: Manages programming of flash memory.
Memory Configuration: Defines memory layout and access rules.
Bootloader Data: Stores configuration and ECU-specific data.
Flash Driver: Interfaces with flash memory hardware for erase/write/read operations.

Hardware-Specific Services (Grey)

These modules provide low-level hardware support:

MCU Services: Includes PLL, SPI, MCU, SBC, and watchdog configurations.
ECU Services: Supports external watchdogs, EEPROMs, and other ECU-specific hardware.

The AGNOSAR® Bootloader is designed to meet the demands of modern automotive systems, offering robust security, flexible communication, and efficient flashing capabilities. Built on standards like ISO 14229 and ISO 15765, it supports a wide range of features tailored for both development and production environments.
Security & Integrity

Secure Boot via software libraries or HSM firmware interface
Secure Flashing using CRC and SHA-RSA for data integrity
AES-128 Security Access for authenticated operations
Key Provisioning through software or HSM interface
AES Encryption/Decryption for secure data handling
Compression Support using LZSS and/or Delta for optimized downloads
Rollback Mechanism with soft/hard SWAP A-B for recovery to a working application
HSM Firmware Update in closed ECUs
Fail-Safe Bootloader Updater with two-step update process

Communication & Diagnostics

Multi-tester, Multi-channel Support over CAN, CANFD, and Ethernet
UDS Gateway Support for sub-node flashing
Customized End-of-Line Support using UDS (e.g., debug lock)
Variant Handling for similar ECUs (e.g., cell monitors)

Flashing & Memory Management

External Flash Support for download and installation
Shared NVM Stack Integration for DIDs and logistic data
Native Flashing Logistics Maintenance without mandatory NVM
Tool for Application Binary Preparation for flashing.
Tool for Flashing.
Third-party or OEM-specific Flashing Tools support.

Performance & Optimization

Low ROM Footprint: 32Kbytes for CAN (CAN-FD) and 96Kbytes for Ethernet.
High Throughput: ~140 KBPS over CANFD @ 2000/500, ~25 KBPS over CAN @ 500

The Flash Driver (FLD) is executed from RAM and plays a critical role in the flashing process. The Flash Driver can be downloaded/loaded by any one of the following methods:

Downloaded by the tester tool before the application software is flashed.
Optionally loaded from encrypted ROM, ensuring secure execution of flash-related operations.

By isolating flash operations to the FLD, the system minimises the risk of unintended memory programming and enhances overall safety and flexibility during software updates.

Modular Architecture

The bootloader is split into two layers:

⦁ Common Modules: Platform-independent components shared across projects.

⦁ Project-Specific Modules: Hardware-dependent and configurable elements tailored to individual ECU requirements.

This separation allows faster adaptation to new platforms and simplifies maintenance.

Dual Architecture Support

AGNOSAR® Bootloaders support two widely adopted bootloader architectures:
PBL/SBL (Primary/Secondary Bootloader) – Based on the Volvo Cars concept.
BTL/FLD (Flash Bootloader/Flash Driver) – Aligned with HIS specifications.
This dual support ensures compatibility with legacy systems and modern bootloader standards.

Accelerated Development Timeline

Thanks to its modular design and preconfigured components, AGNOSAR® Bootloader development can be completed on an accelerated schedule.

Preconfigured Software & Hardware Testing

Bootloader software is preconfigured for specific ECUs and tested directly on actual hardware. This reduces the integration effort during production to just a few weeks, streamlining the deployment process.

Optimised Flashing Performance

AGNOSAR® Bootloaders are designed to minimise overall flashing time. Key operations—reception, decryption, decompression, programming, and validation- are handled in parallel, leveraging processor capabilities to speed up flashing at End-of-Line (EOL) and service stations.

Decompression & Decryption: Ensures secure loading of application binaries.
Application Validity Interface: Verifies the integrity of the application before execution.
Security Module: Manages authentication and secure boot processes.
Boot State Manager: Tracks and controls the bootloader’s operational states.
CRC Module: Performs cyclic redundancy checks for data integrity.
Scheduler & Utilities: Schedules various Bootloader tasks and provides utility functions.

Communication Modules (Orange)

These modules enable diagnostic and communication capabilities:

Diagnostic Configuration & UDS: Supports Unified Diagnostic Services for vehicle diagnostics.
CAN Transport Layer & CAN Driver: Facilitates communication over Controller Area Network.
Diagnostic over IP & TCP/IP: Enables diagnostics via Ethernet and IP protocols.
Ethernet Driver: Supports high-speed data exchange over Ethernet.

Memory Management Modules (Green)
These modules handle memory operations critical to bootloader functionality:

Memory Program Manager: Manages programming of flash memory.
Memory Configuration: Defines memory layout and access rules.
Bootloader Data: Stores configuration and ECU-specific data.
Flash Driver: Interfaces with flash memory hardware for erase/write/read operations.

Hardware-Specific Services (Grey)

These modules provide low-level hardware support:

MCU Services: Includes PLL, SPI, MCU, SBC, and watchdog configurations.
ECU Services: Supports external watchdogs, EEPROMs, and other ECU-specific hardware.

Secure Boot via software libraries or HSM firmware interface
Secure Flashing using CRC and SHA-RSA for data integrity
AES-128 Security Access for authenticated operations
Key Provisioning through software or HSM interface
AES Encryption/Decryption for secure data handling
Compression Support using LZSS and/or Delta for optimized downloads
Rollback Mechanism with soft/hard SWAP A-B for recovery to a working application
HSM Firmware Update in closed ECUs
Fail-Safe Bootloader Updater with two-step update process

Communication & Diagnostics

Multi-tester, Multi-channel Support over CAN, CANFD, and Ethernet
UDS Gateway Support for sub-node flashing
Customized End-of-Line Support using UDS (e.g., debug lock)
Variant Handling for similar ECUs (e.g., cell monitors)

Flashing & Memory Management

External Flash Support for download and installation
Shared NVM Stack Integration for DIDs and logistic data
Native Flashing Logistics Maintenance without mandatory NVM
Tool for Application Binary Preparation for flashing.
Tool for Flashing.
Third-party or OEM-specific Flashing Tools support.

Performance & Optimization

Low ROM Footprint: 32Kbytes for CAN (CAN-FD) and 96Kbytes for Ethernet.
High Throughput: ~140 KBPS over CANFD @ 2000/500, ~25 KBPS over CAN @ 500

The Flash Driver (FLD) is executed from RAM and plays a critical role in the flashing process. The Flash Driver can be downloaded/loaded by any one of the following methods:

Downloaded by the tester tool before the application software is flashed.
Optionally loaded from encrypted ROM, ensuring secure execution of flash-related operations.

By isolating flash operations to the FLD, the system minimises the risk of unintended memory programming and enhances overall safety and flexibility during software updates.

Modular Architecture

The bootloader is split into two layers:

⦁ Common Modules: Platform-independent components shared across projects.

⦁ Project-Specific Modules: Hardware-dependent and configurable elements tailored to individual ECU requirements.

This separation allows faster adaptation to new platforms and simplifies maintenance.

Dual Architecture Support

Accelerated Development Timeline

Thanks to its modular design and preconfigured components, AGNOSAR® Bootloader development can be completed on an accelerated schedule.

Preconfigured Software & Hardware Testing

Optimised Flashing Performance

Porting Services

AVIN’s AGNOSAR® Classic Platform Basic Software is Easy to use, Safety Ready Product, OEM specific Harmonization & Supports SAE J1939 Standard for Trucks, Buses.

Case Studies

View all

What Our Customers Say

Rated 4.7 / 5 based on 28,370 reviews Showing our 4 & 5 star reviews

Latest Insights

View all

Why Choose AVIN system

25+ Years Experience

Quarter-century of automotive software expertise
with deep industry knowledge

635+ Expert Engineers

Global team of certified automotive software specialists across 7 offices

ISO 26262 Certified

Functional safety compliance for ASIL-D critical automotive systems

Global Footprint

Worldwide presence with local support and 24/7 development capabilities

Proven Track Record

Successfully delivered 500+ automotive projects for leading OEMs

Cutting-Edge Technology

Latest tools and frameworks for next-generation vehicle development

Frequently Asked questions

What is the AGNOSAR® Bootloader?

The AGNOSAR® Bootloader is AVIN Systems’ AUTOSAR-compliant software component that manages the secure startup of ECUs and enables software download, update, and reprogramming in line with OEM requirements.

Why is a Bootloader needed in ECUs?

A Bootloader ensures that:

ECUs can be updated with new software or patches (Over-the-Air or via diagnostic tools).
Secure startup sequences are maintained.
Vehicle electronics remain up-to-date without replacing hardware.

Which communication protocols are supported?

The bootloader can be configured to support commonly used automotive protocols such as:

CAN / CAN FD
LIN
Ethernet (DoIP – Diagnostics over IP)

Does the Bootloader support OTA (Over-the-Air) updates?

Yes. The AGNOSAR® Bootloader can be integrated into OEM update frameworks to enable OTA software downloads and updates.

How does AGNOSAR® Bootloader ensure security?

It supports security mechanisms such as:

Secure flashing (authentication and integrity checks).
Encrypted data transfer.
Verification of software images before execution.

Can the Bootloader be customized for specific ECU requirements?

Yes. The Bootloader is modular and can be tailored to project-specific needs, including communication stacks, memory layouts, and OEM-defined update strategies.

Which microcontrollers and hardware are supported?

AGNOSAR® Bootloader is hardware-independent and can be adapted to a wide range of automotive microcontrollers via MCALs. AVIN Systems provides integration services for leading semiconductor platforms.

How can I evaluate or adopt the AGNOSAR® Bootloader?

You can request a demo or technical discussion with AVIN Systems. Our team provides integration support, customization, and training to help you adopt the Bootloader seamlessly.

Test

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.