Specification of Firewall for Classic Platform, AUTOSAR 1084, R23-11, CP

Specification of Firewall for Classic Platform, AUTOSAR 1084, R23-11, CP
https://www.autosar.org/fileadmin/standards/23-11/CP/AUTOSAR_CP_SWS_Firewall.pdf

<この項は書きかけです。順次追記します。>
This article is not completed. I will add some words in order.

Release Overviews

Classic Platform Release Overview, AUTOSAR No.0 ,R23-11, CP
https://qiita.com/kaizen_nagoya/items/8468435185e109189ead

Foundation Release Overview, AUTOSAR 781, R23-11, FO
https://qiita.com/kaizen_nagoya/items/f249bdb8c313d8bff883

Adaptive Platform Release Overview, AUTOSAR 782, R23-11, AP
https://qiita.com/kaizen_nagoya/items/13a104606a34fe24fcf7

Terms

Short Name(Acronym, Abbreviation)	Description
Firewall	An automotive Ethernet firewall is a network security device that monitors incoming and outgoing network traffic and grants or rejects network access between two or more Electronic Control Units (ECU) or between network zones (e.g. vehicle domain (ADAS, infotainment, diagnostics etc), trusted/non-trusted zones).
Firewall Rule	Pattern of expected values for a network packet together with an associated action in case a network packet matches the pattern (e.g., block or allow the network packet).
Firewall State	The Firewall State reflects the current state of the vehicle (e.g. driving, in a diagnostic session, ...) and can be set by a user application. Based on the currently active Firewall State, a specific set of Firewall Rules matching the current vehicle state is active.
Allowlist	Collection of Firewall Rules where the network packet is allowed in case of a pattern match.
Blocklist	Collection of Firewall Rules where the network packet is blocked in case of a pattern match.
OSI Layer	Network layer according to the ISO OSI model as specified in ISO/IEC 7498.
BswM	Basic Software Mode Manager
DDS	Data Distribution Service
DDS-RTPS	DDS Real-Time Publish Subscribe Protocol
DoIP	Diagnostics over IP
EthIf	Ethernet Interface
IDS	Intrusion Detection System
IdsM	IDS Manager
IdsR	IDS Reporter
IP	Internet Protocol
SEv	Security Event
SOME/IP	Service oriented Middleware over IP
TCAM	Ternary content-addressable memory
TCP	Transmission control protocol
UCM	Update & Configuration Management
UDP	User datagram protocol

Reference

[1] Glossary AUTOSAR_FO_TR_Glossary
https://www.autosar.org/fileadmin/standards/23-11/FO/AUTOSAR_FO_TR_Glossary.pdf
[2] Requirements on Firewall AUTOSAR_FO_RS_Firewall
[3] System Template AUTOSAR_CP_TPS_SystemTemplate
[4] General Specification of Basic Software Modules AUTOSAR_CP_SWS_BSWGeneral
[5] IEEE Standard for Ethernet https://ieeexplore.ieee.org/document/7428776
[6] SOME/IP Protocol Specification AUTOSAR_FO_PRS_SOMEIPProtocol
[7] SOME/IP Service Discovery Protocol Specification AUTOSAR_FO_PRS_SOMEIPServiceDiscoveryProtocol
[8] DDS Interoperability Wire Protocol, Version 2.2 http://www.omg.org/spec/DDSI-RTPS/2.2
[9] Road vehicles – Diagnostic communication over Internet Protocol (DoIP) – Part 2: Network and transport layer requirements and services (Release 2019-12) https://www.iso.org
[10] Specification of Ethernet Switch Driver AUTOSAR_CP_SWS_EthernetSwitchDriver

文書履歴(document history)

ver. 0.01 初稿 　 20231203

最後までおよみいただきありがとうございました。

いいね　💚、フォローをお願いします。

Thank you very much for reading to the last sentence.

Please press the like icon 💚　and follow me for your happy life.