Method for verifying the authenticity of an actuator command

1 . A method for verifying authenticity of a command of an actuator configured to be controlled by an electronic control unit, the electronic control unit being connected to a multimedia system comprising:

a touch-sensitive display configured to receive a user command, and to display information relating to the command of the actuator,

an operating system configured to transfer display from an external communication device onto the touch-sensitive display of the multimedia system, and

a trusted execution environment configured to provide a higher level of security than a level of security of the operating system, the trusted execution environment comprising a tap controller configured to detect the user command on the touch-sensitive display,

the method comprising:

signing the user command by the trusted execution environment, the user command corresponding to a physical activation of at least one area of the touch-sensitive display;

transmitting, by the operating system, the signed user command to the electronic control unit;

verifying a signature of the signed user command by the electronic control unit; and

executing the user command by the actuator,

wherein the method comprises, before the signing,

detecting, by the trusted execution environment, the user command;

transmitting the user command from the trusted execution environment to the operating system; and

updating the display on the touch-sensitive display as a function of the user command,

the trusted execution environment comprises an authentication component configured to control secure functions relating to the command of the actuator, and to date stamp the user command carried out on the touch-sensitive display, and

the signing of the user command comprises:

receiving, by the authentication component, a vehicle function request sent out by the operating system, and

signing the user command when a period between a time of receipt of the vehicle function request and a time of the user command on the touch-sensitive display is less than a predetermined value,

or

wherein

the trusted execution environment comprises the authentication component configured to control secure functions relating to the command of the actuator,

the method comprises, before the signing, detecting, by the authentication component, a secure start of an action frame relating to the user command, in response to the physical activation of the area of the display, so as to display a vehicle interaction menu, and

the authentication component generates, in response to the transmitting by the operating system of the signed user command, a secure end of action frame relating to the user command.

2 . The method as claimed in claim 1 , wherein the operating system regularly sends a screen grab, to the trusted execution environment, of content specific to the operating system, and the trusted execution environment superposes the vehicle interaction menu onto the screen grab received from the operating system.

3 . The method as claimed in claim 1 , wherein the actuator is configured to execute a command to control comfort of an automobile vehicle, to control a configuration of an automatic gearbox of an automobile vehicle or of a driver assistance function of an automobile vehicle.

4 . The method as claimed in claim 1 , wherein the actuator is configured to execute a command from a home automation system.

5 . The method as claimed in claim 1 , wherein the external communication device is a smartphone or a tablet.

6 . The method as claimed in claim 1 , wherein the physical activation of at least one area of the touch-sensitive display comprises tapping by a user of an area of the touch-sensitive display.

7 . An actuator command system configured to be controlled by an electronic control unit, the electronic control unit being connected to a multimedia system comprising:

a touch-sensitive display configured to receive a user command, and to display information relating to the command of the actuator;

an operating system configured to transfer display from an external communication device onto the touch-sensitive display of the multimedia system; and

a trusted execution environment configured to provide a higher level of security than a level of security of the operating system, the trusted execution environment comprising a tap controller configured to detect the user command on the touch-sensitive display, wherein

the trusted execution environment signs the user command, the user command corresponding to a physical activation of at least one area of the touch-sensitive display,

the operating system transmits the signed user command to the electronic control unit, and

the electronic control unit verifies a signature of the signed user command,

wherein

before signing,

the user command is detected by the trusted execution environment;

the user command is transmitted from the trusted execution environment to the operating system; and

the display on the touch-sensitive display is updated as a function of the user command,

the trusted execution environment comprises an authentication component configured to control secure functions relating to the command of the actuator, and to date stamp the user command carried out on the touch-sensitive display, and

signing of the user command comprises:

receiving, by the authentication component, a vehicle function request sent out by the operating system, and

signing the user command when a period between a time of receipt of the vehicle function request and a time of the user command on the touch-sensitive display is less than a predetermined value,

or

wherein

the trusted execution environment comprises the authentication component configured to control secure functions relating to the command of the actuator,

before signing, the authentication component detects a secure start of an action frame relating to the user command, in response to the physical activation of the area of the display, so as to display a vehicle interaction menu, and

the authentication component generates, in response to transmitting by the operating system of the signed user command, a secure end of action frame relating to the user command,

the actuator command system comprising:

circuitry configured to execute the user command.

8 . A method for verifying authenticity of a command of an actuator configured to be controlled by an electronic control unit, the electronic control unit being connected to a multimedia system comprising:

a touch-sensitive display configured to receive a user command, and to display information relating to the command of the actuator,

an operating system configured to transfer display from an external communication device onto the touch-sensitive display of the multimedia system, and

a trusted execution environment configured to provide a higher level of security than a level of security of the operating system, the trusted execution environment comprising a tap controller configured to detect the user command on the touch-sensitive display,

the method comprising:

signing the user command by the trusted execution environment, the user command corresponding to a physical activation of at least one area of the touch-sensitive display;

transmitting, by the operating system, the signed user command to the electronic control unit;

verifying a signature of the signed user command by the electronic control unit; and

executing the user command by the actuator,

wherein the trusted execution environment comprises an authentication component configured to control secure functions relating to the command of the actuator, and

the method further comprises, before the signing, detecting, by the authentication component, a secure start of an action frame relating to the user command, in response to the physical activation of the area of the display, so as to display a vehicle interaction menu.