Ihringen, 14 July 2020.
The connectivity functions in modern vehicles bring a host of benefits, but can also pose a risk in terms of tampering and unauthorised access to data. This is why vehicle manufacturers are working on cyber security systems which make it more difficult to use the OBD diagnostics interface to access data, and which can be used to grant access via different authorization levels. After Fiat Chrysler Automobiles (FCA) launched its Security Gateway (SGW) to protect the company's vehicles against unauthorized access, Mercedes-Benz AG has followed suit by introducing a two-stage security concept. Depending on the model and the car’s date of production 2019 or later, the electronic ignition lock control unit now features a partial access restriction which uses seed-key security. Diagnostic devices that do not request a random number generated by the vehicle and are unable to respond correctly using the matching decryption algorithm will only be able to perform basic operations, such as reading and deleting trouble codes.
The good news is that workshops which update the software on their Hella Gutmann mega macs to version 59 can continue to run the tried and trusted diagnostics operations and perform basic settings and calibrations in these secured vehicles without any further action. The unlocking of the mega macs takes place in the background and unnoticed by the user. A registration at the vehicle-manufacturer's OE portal is not necessary.
By integrating the seed-key security process into the current mega macs software, Hella Gutmann has taken a second step towards enabling independent workshops to continue diagnostics and repair to the usual extent. The first step was the launch of the SGW adapter for FCA vehicles in spring 2020.
Several other vehicle manufacturers are currently planning security measures, so Hella Gutmann has decided to implement full cyber security management in the mega macs software as part of a third step in late 2020. Depending on the car manufacturer’s security systems, this OE-compliant integration will enable users to contact different manufacturer portals in order to obtain licenses for activation directly from the mega macs. The aim is to provide independent workshops with a convenient multibrand solution.