Jacqueline Henle

Prevailing trends in the automotive and medical device industry, such as life cycle overarching configurability, connectivity, and automation, require an adaption of development processes, especially regarding the security and safety thereof. The changing requirements imply that interfaces are more exposed to the outside world, making them more vulnerable to cyberattacks or data leaks. Consequently, not only do development processes need to be revised but also cybersecurity countermeasures and a focus on safety, as well as privacy, have become vital. While vehicles are especially exposed to cybersecurity and safety risks, the medical devices industry faces similar issues. In the automotive industry, proposals and draft regulations exist for security-related risk assessment processes. The medical device industry, which has less experience in these topics and is more heterogeneous, may benefit from drawing inspiration from these efforts. We examined and compared current standards, processes, and methods in both the automotive and medical industries. Based on the requirements regarding safety and security for risk analysis in the medical device industry, we propose the adoption of methods already established in the automotive industry. Furthermore, we present an example based on an interoperable Operating Room table (OR table).

Since interoperability in the operating room (OR) is considered a main factor to increase safety and improve the quality of surgeries, new challenges arise for the medical device industry in this increasingly connected environment. Therefore, new architectural approaches are needed, some of which may be inspired by other domains. In the meantime, novel communication paradigms are also gaining practical relevance in the automotive industry, which faces similar challenges. As a result, service-oriented architectures (SOAs) are often considered to provide a higher degree of flexibility for changes during the development and after product deployment. In this paper, we derive requirements of future networked OR tables from challenges and trends ahead. Based on these requirements, we propose a mixed electric and electronic architecture (E/E-architecture) inspired by the state-of-the-art measures from automotive domain and present an Identity and Access Management (IAM) approach to improve system security. In addition, a prototypical implementation is used to demonstrate the practicality of the proposed solution and to discuss necessary adjustments to the development process resulting from a mixed E/E-architecture approach.

Autonomous Vehicles (AVs) are supposed to be continuously updated, besides that they combine many diverse applications by various developers. Accordingly, they require flexible and dynamic software (SW) architectures. With communication paradigms changing from signal-based to service- oriented architectures (SOAs), long-established standards seem no longer sufficient. The AUTomotive Open System ARchi-tecture (AUTOSAR) Platform came up with the Adaptive standard to meet future automobile requirements. Alongside, while requirements of AV s and robotic systems are similar to a certain extent, the Robot Operating System (ROS) gets growing attention in the automotive environment. With the introduction of ROS2 and ROS2-based commercial solutions, the Adaptive AUTOSAR Platform seems not to be the only appropriate standard for developing high-performing SW architectures. This paper provides an overall picture of Adaptive AUTOSAR and ROS2 and evaluates ROS2 and its suitability in an auto-motive context based on the Adaptive AUTOSAR architecture. This research analyzes the extent to which ROS2 fulfills the functionality provided by Adaptive AUTOSAR.