Tuesday 26 September 2017

Software TEE - Virtual Car Key

This is an App for our IoT solution to serve our valuable customers (Valeo). You can upload your TA (a file with some configurations) to our backend server, After then they can download the TA and run it.

You can use this app to lock and unlock the car, door with our smart lock, you can even start and stop the car engine, depending on the TA you uploaded to our backend server.

To be able to operate it with our smart lock, you need to “Install TA” first, then you can “Run TA”, if you have our smart lock, you should be enabled to do the operation as you configured in the TA on our server.

Technical Stack:
  • Android Java Programming
  • iOS Objective-C Programming
  • Native C programming
  • WhiteBox Crypto with Key Rotation for every 3 months
  • Secure Channel Protocol
  • App Protection: Anti-tampering, Anti-debug, Anti-hooking, Root/Jailbreak detection, Android App re-signing detection.
Experience:
  • Built CI/CD pipelines with Jenkins, up to 10 customized deliverables for different customers. 
  • Created a Python script to generate certificate public key hash for certificate pinning. 
  • Implemented the mechanism to renew the White-Box keys for every 2-3 months. 
  • Worked with server team to improve the network performance by reducing the commands from the server. 
  • Worked with external labs (UL and APPLUS) and internal lab to do pen-testing for the application. 
  • Fixed memory leakage issues and crash issue caused by CPU cache. 



Reference Link: https://mymotorwheels.wordpress.com/2016/09/21/valeo-partnered-with-gemalto-to-secure-its-virtual-car-key-valeo-inblue/

No comments:

Post a Comment