Method for verifying the authenticity of an actuator command

An actuator command system configured to be controlled by an electronic control unit, the electronic control unit being connected to a multimedia system comprising:

• a touch-sensitive display configured to receive a user command, and to display information relating to the command of the actuator;
• an operating system configured to transfer display from an external communication device onto the touch-sensitive display of the multimedia system;
• and
• a trusted execution environment configured to provide a higher level of security than a level of security of the operating system, the trusted execution environment comprising a tap controller configured to detect the user command on the touch-sensitive display, wherein
• the trusted execution environment signs the user command, the user command corresponding to a physical activation of at least one area of the touch-sensitive display,
• the operating system transmits the signed user command to the electronic control unit, and
• the electronic control unit verifies a signature of the signed user command,
• wherein
• before signing,
• the user command is detected by the trusted execution environment;
• the user command is transmitted from the trusted execution environment to the operating system;
• and
• the display on the touch-sensitive display is updated as a function of the user command,
• the trusted execution environment comprises an authentication component configured to control secure functions relating to the command of the actuator, and to date stamp the user command carried out on the touch-sensitive display, and
• signing of the user command comprises:
• receiving, by the authentication component, a vehicle function request sent out by the operating system, and
• signing the user command when a period between a time of receipt of the vehicle function request and a time of the user command on the touch-sensitive display is less than a predetermined value,
• or
• wherein
• the trusted execution environment comprises the authentication component configured to control secure functions relating to the command of the actuator,
• before signing, the authentication component detects a secure start of an action frame relating to the user command, in response to the physical activation of the area of the display, so as to display a vehicle interaction menu, and
• the authentication component generates, in response to transmitting by the operating system of the signed user command, a secure end of action frame relating to the user command,
• the actuator command system comprising:
• circuitry configured to execute the user command.

A method for verifying authenticity of a command of an actuator configured to be controlled by an electronic control unit, the electronic control unit being connected to a multimedia system comprising:

• a touch-sensitive display configured to receive a user command, and to display information relating to the command of the actuator,
• an operating system configured to transfer display from an external communication device onto the touch-sensitive display of the multimedia system, and
• a trusted execution environment configured to provide a higher level of security than a level of security of the operating system, the trusted execution environment comprising a tap controller configured to detect the user command on the touch-sensitive display,
• the method comprising:
• signing the user command by the trusted execution environment, the user command corresponding to a physical activation of at least one area of the touch-sensitive display;
• transmitting, by the operating system, the signed user command to the electronic control unit;
• verifying a signature of the signed user command by the electronic control unit;
• and
• executing the user command by the actuator,
• wherein the trusted execution environment comprises an authentication component configured to control secure functions relating to the command of the actuator, and
• the method further comprises, before the signing, detecting, by the authentication component, a secure start of an action frame relating to the user command, in response to the physical activation of the area of the display, so as to display a vehicle interaction menu.