ESCRYPT Production Key Platform

Maximizing efficiency and reliability in key management for automotive production

The ESCRYPT Production Key Platform provides a highly efficient, robust, and reliable key management for automotive production. Its resource-efficient design enables OEMs and Tier-1s to perform fast and secure key injection for high-volume manufacturing. The ESCRYPT Production Key Platform supports the production of all devices, including embedded devices such as ECUs, and covers complete key and certificate management for multi-line ECU volume production.

Screenshot of the ESCRYPT Production Key Platform by ETAS, showcasing its features for cybersecurity management.

Your benefits

High availability

Operation is guaranteed by the Production Key Server despite internet outages.

Fast and easy scalability

Many production plants can be served by one central key management platform.

Maximum security

HSM technology and end-to-end key protection provide a very high level of security.

The architecture of end-to-end key management solution

Graphic that provides an overview of the ESCRYPT Production Key Platform architecture — The ESCRYPT Production Key Platform provides comprehensive key management, including key/certificate injection, for high-volume ECU production across multiple lines. Central to the solution is the Production Key Server (PKS), which incorporates a cutting-edge hardware security module (HSM) for the secure storage of sensitive data.

Features

Use Cases

Secure communication within the vehicle’s internal network: ECU’s must be provisioned with symmetric cryptographic keys to protect network messages.
Secure external communication to the backend or third-party backends: Provisioning the vehicle with digital certificates enables secure connection and authentication.
Secure access: Ensure that only authorized machines and users get access to device interfaces, e.g. for diagnostics or to flash software.
Secure data distribution: Transport cryptographic data or data from a third party securely to the production plants.

Numbers zero and two with two people discussing

Technical features

Generate device specific symmetric keys with key sizes 128, 192 and 256 bit
Generate device specific asymmetric keys, e.g., RSA keys
Support key format of AUTOSAR Secure Hardware Extension (SHE)
Issue X.509 device certificates following RFC 5280 with a wide support for cryptography
Provide cryptographic functions, such as digital signatures, to implement secure access protocols
Secure distribution of key material to production plants
Ensure role-based access control
Assign fine-grained cryptographic material permission to users

Maximizing efficiency and reliability in key management for automotive production

Your benefits

High availability

Fast and easy scalability

Maximum security

The architecture of end-to-end key management solution

Features

Use Cases

Technical features

All news

Next events

Webinars

Contact us