Here Technologies joins Uptane Alliance for secure OTA for cars and IoT devices

Here Technologies, the Netherlands-based open location platform company joined the Uptane Alliance, an open software update security system for the automotive industry, further strengthening its commitment to ensuring the highest standards of automotive and IoT security.

Here provides its Uptane-based OTA software management technology, Here OTA Connect, to OEMs to enable the highly-secure remote exchange of software and data between cloud and cars. Here OTA Connect is part of the ‘Here Open Location Platform’ and is designed to also support other organisations, such as those managing industrial machinery or smart home IoT, to thwart attacks by malicious actors.

Justin Cappos, member of the Board of Directors of Uptane Alliance and professor at New York University’s Tandon School of Engineering said, "The automotive industry has realised that OTA updates are necessary for safety, security, and to reduce costs. Unfortunately, if not appropriately secured, software update systems are an attack vector that attackers can exploit. The Uptane Alliance brings together academic expertise about securing update systems and automotive industry domain knowledge to create a standard that will keep cars and other connected edge devices safe. Engineers from Here Technologies’ OTA team have been working with the Uptane Alliance for a number of years, and we’re happy to welcome them as an official member.”

“The systems enabling software and data updates for cars, IoT and robotics need to be much more secure than they are today,” said Jon Oster, lead architect at Here Technologies. “In the auto industry, for example, national lawmakers and global organisations like the UN are obliging carmakers to maintain the highest levels of security and ensure that their vehicles are always running the best code. And it’s not just software: to move safely and efficiently, increasingly automated cars need frequently updated firmware, configuration files and map data. Uptane-based security approaches are a key part of the required data infrastructure and we look forward to continuing to support and further the goals of the Uptane Alliance.”

The Uptane Alliance is a non-profit consortium of automotive companies, security researchers from academia, and government agencies working to standardise Uptane open-source software for the security of over-the-air software updates for vehicles and other edge devices and infrastructure.

Here introduced Here OTA Connect in 2018 following its acquisition of Advanced Telematic Systems (ATS), a Berlin-based software company specializing in connected car software. Here OTA Connect is used by OEMs to update vehicles in the field and to maintain on-demand mobility cars. Uptane is integrated in all deployments of OTA Connect, whether on-premise or SaaS-based.

Also read: Mitsubishi Electric and HERE Technologies develop lane hazard warning system