We provide complete architectural support covering all elements inside and outside the vehicle:
FOTA Server Authoring & Campaign Orchestration (Off-Vehicle)
- Setup and integration of FOTA backend servers, supporting both proprietary OEM servers and open-source ecosystems.
- Creation of campaign orchestration workflows for controlled rollout, scheduling, and monitoring of software updates.
- Support for version management, update distribution, metadata generation, and secure package handling.
FOTA Master ECU (In-Vehicle, Typically on HPC)
- Implementation and integration of FOTA Master services running on HPC controllers.
- Coordination of update distribution to all Target ECUs within the vehicle.
- Management of communication with backend servers via telematics or connectivity units.
FOTA Target ECUs (In-Vehicle)
- End-to-end support for receiving, validating, storing, and installing updates on Classic or Adaptive ECUs.
- Scalable architecture supporting multiple ECU domains and vehicle models.
Our Master ECU implementation ensures secure, fault-tolerant, and reliable update delivery across the vehicle network.
- Server Integration:
Seamless communication with OEM proprietary servers or open-source FOTA backend platforms.
- Adaptive Platform Functional Cluster Support:
Development and integration of UCM Master and associated Functional Clusters required for managing update workflows.
- Reliable Connectivity via CCU:
Data transfer through Ethernet, Wi-Fi, 4G, or 5G, depending on the telematics architecture.
- Secure Download Mechanisms:
Implementation of Crypto Functional Cluster and HSM integration to ensure encrypted downloads, authentication, and secure key handling.
- Intrusion Detection & Monitoring:
Support for AIDSM FC (Adaptive Intrusion Detection and Security Monitoring) to detect abnormal activity during update processes.
Our Target ECU services ensure safe update delivery, installation, and validation at the ECU level.
- Memory A/B Swap Strategy:
Implementation of dual-bank strategies to allow safe updates with rollback protection.
- Flexible Communication Interfaces:
Software download support via CAN, Ethernet, or mixed-network communication.
- Diagnostic Communication Support:
Utilization of DCM download services, diagnostic sessions, and buffer storage for safe image transfer.
- Programming via FOTA Handler CDD:
ECU reprogramming using Custom Device Drivers (CDD) and NVM services for robust data handling.
- Signature & Compatibility Validation:
Cryptographic signature checks, version compatibility, and metadata validation before activation.
- Safe-State Activation:
Update activation only when the vehicle is in a validated safe state (e.g., engine OFF, parking brake applied).
- Reliable Rollback Mechanism:
Automatic fallback to the previous software version in case of validation failures or runtime anomalies.
Adaptive Platform Functional Clusters (FCs):
- UCM Master
- UCM
- SM (State Management)
- CM (Configuration Management)
- EM (Execution Management)
- Diagnostic Communication (customized)
Custom Components & Services:
- Flashing Adapter (D-PDU API)
- Driver Interaction Modules
- Vehicle State Manager
- OTA Client
- Delta Installer (open-source based)
- Secure download using HSM services
- NVM stack integration (Bootloader or Application mode)
