{"id":"https://openalex.org/W7115931270","doi":"https://doi.org/10.1109/tdsc.2025.3646041","title":"LigSecOTA: Lightweight Over-the-Air (OTA) Software Updates With Integrated Security","display_name":"LigSecOTA: Lightweight Over-the-Air (OTA) Software Updates With Integrated Security","publication_year":2025,"publication_date":"2025-12-18","ids":{"openalex":"https://openalex.org/W7115931270","doi":"https://doi.org/10.1109/tdsc.2025.3646041"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3646041","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3646041","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Ruiqi Lu","orcid":"https://orcid.org/0000-0001-6192-8177"},"institutions":[{"id":"https://openalex.org/I100286613","display_name":"Hunan Institute of Science and Technology","ror":"https://ror.org/044ysd349","country_code":"CN","type":"education","lineage":["https://openalex.org/I100286613"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruiqi Lu","raw_affiliation_strings":["School of Artificial Intelligence, Hunan Institute of Science and Technology, Key Laboratory of Hunan Province on Intelligent Control and Optimization of Complex Industrial Logistics Systems, Yueyang, China"],"raw_orcid":"https://orcid.org/0000-0001-6192-8177","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Hunan Institute of Science and Technology, Key Laboratory of Hunan Province on Intelligent Control and Optimization of Complex Industrial Logistics Systems, Yueyang, China","institution_ids":["https://openalex.org/I100286613"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Guoqi Xie","orcid":"https://orcid.org/0000-0001-6625-0350"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoqi Xie","raw_affiliation_strings":["Key Laboratory for Embedded and Network Computing of Hunan Province, College of Computer Science and Electronic Engineering, Hunan University, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0001-6625-0350","affiliations":[{"raw_affiliation_string":"Key Laboratory for Embedded and Network Computing of Hunan Province, College of Computer Science and Electronic Engineering, Hunan University, Changsha, China","institution_ids":["https://openalex.org/I16609230"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Lida Huang","orcid":"https://orcid.org/0000-0002-4754-7340"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lida Huang","raw_affiliation_strings":["Key Laboratory for Embedded and Network Computing of Hunan Province, College of Computer Science and Electronic Engineering, Hunan University, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0002-4754-7340","affiliations":[{"raw_affiliation_string":"Key Laboratory for Embedded and Network Computing of Hunan Province, College of Computer Science and Electronic Engineering, Hunan University, Changsha, China","institution_ids":["https://openalex.org/I16609230"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xinzhong Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210108786","display_name":"SAIC-GM-Wuling (China)","ror":"https://ror.org/01g08q774","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210108786"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinzhong Liu","raw_affiliation_strings":["SAIC-GM-Wuling Automobile Company, Ltd., Liuzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC-GM-Wuling Automobile Company, Ltd., Liuzhou, China","institution_ids":["https://openalex.org/I4210108786"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Wei Xu","orcid":"https://orcid.org/0000-0002-2212-6275"},"institutions":[{"id":"https://openalex.org/I4210131649","display_name":"China Automotive Engineering Research Institute","ror":"https://ror.org/039jhgf83","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210131649"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Xu","raw_affiliation_strings":["China Automotive Engineering Research Institute Company, Ltd., Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-2212-6275","affiliations":[{"raw_affiliation_string":"China Automotive Engineering Research Institute Company, Ltd., Chongqing, China","institution_ids":["https://openalex.org/I4210131649"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jianmei Lei","orcid":"https://orcid.org/0009-0004-3978-2123"},"institutions":[{"id":"https://openalex.org/I4210131649","display_name":"China Automotive Engineering Research Institute","ror":"https://ror.org/039jhgf83","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210131649"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianmei Lei","raw_affiliation_strings":["China Automotive Engineering Research Institute Company, Ltd., Chongqing, China"],"raw_orcid":"https://orcid.org/0009-0004-3978-2123","affiliations":[{"raw_affiliation_string":"China Automotive Engineering Research Institute Company, Ltd., Chongqing, China","institution_ids":["https://openalex.org/I4210131649"]}]},{"author_position":"last","author":{"id":null,"display_name":"Junqiang Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210145666","display_name":"Embedded Systems (United States)","ror":"https://ror.org/04742eh45","country_code":"US","type":"company","lineage":["https://openalex.org/I4210145666"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Junqiang Jiang","raw_affiliation_strings":["Department of Computer and Information Science, Embedded Systems Laboratory (ESLAB), Linköping University, Linköping, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Information Science, Embedded Systems Laboratory (ESLAB), Linköping University, Linköping, Sweden","institution_ids":["https://openalex.org/I4210145666"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.55826469,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"4340","last_page":"4354"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.4138000011444092,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.4138000011444092,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.15629999339580536,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.13979999721050262,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5157999992370605},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.48660001158714294},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.46480000019073486},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.41350001096725464},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4113999903202057},{"id":"https://openalex.org/keywords/identity-management","display_name":"Identity management","score":0.4043000042438507},{"id":"https://openalex.org/keywords/public-key-certificate","display_name":"Public key certificate","score":0.39570000767707825},{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.3950999975204468},{"id":"https://openalex.org/keywords/digital-signature","display_name":"Digital signature","score":0.39340001344680786},{"id":"https://openalex.org/keywords/data-security","display_name":"Data security","score":0.373199999332428}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7940999865531921},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5676000118255615},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5157999992370605},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.48660001158714294},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.46480000019073486},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.41350001096725464},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4113999903202057},{"id":"https://openalex.org/C555379026","wikidata":"https://www.wikidata.org/wiki/Q977772","display_name":"Identity management","level":3,"score":0.4043000042438507},{"id":"https://openalex.org/C167529545","wikidata":"https://www.wikidata.org/wiki/Q274758","display_name":"Public key certificate","level":4,"score":0.39570000767707825},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.3950999975204468},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.39340001344680786},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.373199999332428},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.36660000681877136},{"id":"https://openalex.org/C2779813694","wikidata":"https://www.wikidata.org/wiki/Q528053","display_name":"Digital identity","level":3,"score":0.34869998693466187},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.3384000062942505},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.3303000032901764},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.32850000262260437},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.3278000056743622},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.32760000228881836},{"id":"https://openalex.org/C202775310","wikidata":"https://www.wikidata.org/wiki/Q1140366","display_name":"Trusted Platform Module","level":2,"score":0.3043999969959259},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3003999888896942},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2985999882221222},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.29580000042915344},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.2948000133037567},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2922999858856201},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.26910001039505005},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.265500009059906},{"id":"https://openalex.org/C93636275","wikidata":"https://www.wikidata.org/wiki/Q196776","display_name":"Certificate authority","level":4,"score":0.26420000195503235},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.263700008392334},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.25360000133514404},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.25290000438690186},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3646041","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3646041","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7706301212310791,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1603080799","display_name":null,"funder_award_id":"24A0472","funder_id":"https://openalex.org/F4320333642","funder_display_name":"Scientific Research Foundation of Hunan Provincial Education Department"},{"id":"https://openalex.org/G2590540725","display_name":null,"funder_award_id":"U24B20145","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3359096647","display_name":null,"funder_award_id":"62133014","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8946784670","display_name":null,"funder_award_id":"62321003","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320333642","display_name":"Scientific Research Foundation of Hunan Provincial Education Department","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W1572945509","https://openalex.org/W2005374071","https://openalex.org/W2011778848","https://openalex.org/W2043711803","https://openalex.org/W2055493989","https://openalex.org/W2077667328","https://openalex.org/W2114016378","https://openalex.org/W2121096017","https://openalex.org/W2138474070","https://openalex.org/W2155230502","https://openalex.org/W2518254460","https://openalex.org/W2519293460","https://openalex.org/W2527800909","https://openalex.org/W2565569045","https://openalex.org/W2883374116","https://openalex.org/W2883942505","https://openalex.org/W2972948825","https://openalex.org/W2986731541","https://openalex.org/W3003760462","https://openalex.org/W3033870338","https://openalex.org/W3045482416","https://openalex.org/W3045980446","https://openalex.org/W3081729268","https://openalex.org/W3106674775","https://openalex.org/W3113010046","https://openalex.org/W3119943821","https://openalex.org/W3178060858","https://openalex.org/W3209955315","https://openalex.org/W4200249621","https://openalex.org/W4214674051","https://openalex.org/W4293108682","https://openalex.org/W4298325597","https://openalex.org/W4312649721","https://openalex.org/W4360603373","https://openalex.org/W4386699339","https://openalex.org/W4388727250","https://openalex.org/W4400285325","https://openalex.org/W4406684160","https://openalex.org/W4408582077"],"related_works":[],"abstract_inverted_index":{"Over-The-Air":[0],"(OTA)":[1],"software":[2,14,22,42,48,96,124,240],"updates":[3,49,97,241],"are":[4,36,60,87,164,209],"widely":[5],"used":[6,37,166],"in":[7,242],"automotive":[8,40],"embedded":[9],"systems":[10],"to":[11,26,38,89,99],"remotely":[12],"address":[13],"defects":[15],"and":[16,68,110,146,180,188,246],"vulnerabilities.":[17],"However,":[18,44],"the":[19,198,213,221],"distribution":[20],"of":[21,159,207,244],"packages":[23],"is":[24],"vulnerable":[25],"malicious":[27],"attacks,":[28],"posing":[29],"severe":[30],"security":[31,102,128,205],"threats.":[32],"Various":[33],"cryptographic":[34],"algorithms":[35],"secure":[39,46,94,238],"OTA":[41,47,95,123,239],"updates.":[43],"existing":[45,116],"rely":[50],"on":[51,71,130,154,220],"digital":[52,58,133,139,148],"certificates":[53,59,163],"for":[54,150,167,197],"identity":[55,134,140],"authentication.":[56,169],"These":[57],"often":[61],"provided":[62],"by":[63],"third-party":[64],"Certificate":[65],"Authorities":[66],"(CAs)":[67],"issued":[69],"based":[70,129,153],"physical":[72,160],"identifiers":[73],"(e.g.,":[74],"Vehicle":[75],"Identification":[76],"Number":[77],"(VIN),":[78],"engine":[79],"number,":[80],"or":[81],"Electronic":[82],"Control":[83],"Unit-ID":[84],"(ECU-ID)),":[85],"which":[86],"susceptible":[88],"illegal":[90],"modification.":[91],"Additionally,":[92],"these":[93,115,162],"fail":[98],"provide":[100],"integrated":[101,127,172],"that":[103,234],"encompasses":[104],"authentication,":[105,175,186],"confidentiality,":[106,176],"integrity,":[107,177],"access":[108,178],"control,":[109,179],"data":[111,181],"freshness.":[112],"To":[113],"tackle":[114],"drawbacks,":[117],"we":[118,217],"propose":[119],"LigSecOTA,":[120],"a":[121,131,144],"lightweight":[122,251],"update":[125],"with":[126,225],"one-machine-one-certificate":[132,138],"management":[135,141],"system.":[136],"The":[137,191,204],"system":[142],"issues":[143],"unique":[145],"trusted":[147],"certificate":[149],"each":[151],"ECU":[152,168],"bit":[155],"time":[156],"information":[157],"instead":[158],"identifiers;":[161],"then":[165],"LigSecOTA":[170,208,219,235],"ensures":[171],"security,":[173],"including":[174],"freshness,":[182],"through":[183],"three":[184],"processes:":[185],"authorization,":[187],"package":[189,199],"distribution.":[190],"authorization":[192],"dy":[193],"namically":[194],"provides":[195],"keys":[196],"distribution,":[200],"significantly":[201],"enhancing":[202],"security.":[203],"attributes":[206],"formally":[210],"verified":[211],"using":[212],"ProVerif":[214],"tool.":[215],"Finally,":[216],"evaluate":[218],"NXP":[222],"LS1028A":[223],"platform":[224],"an":[226],"ARM":[227],"Cortex":[228],"A72":[229],"core.":[230],"Experimental":[231],"results":[232],"demonstrate":[233],"outperforms":[236],"state-of-the-art":[237],"terms":[243],"computation":[245],"communication":[247],"overhead,":[248],"highlighting":[249],"its":[250],"nature.":[252]},"counts_by_year":[],"updated_date":"2026-03-17T06:59:57.516163","created_date":"2025-12-19T00:00:00"}