Cybersecurity for connected solutions in industry and transport

Efficient integration of cybersecurity in the vehicle development process

Common Criteria in the automotive environment

With its many years of experience in the development and evaluation of secure software, achelos boasts profound cryptographic expertise and specialist knowledge of embedded systems for every project phase. Having collaborated both with testing centres and manufacturers on Common Criteria evaluations for high-security products, we are a professional partner offering you precisely what you need. Our pool of experience saves a great deal of time and money, particularly when performing evaluations. High costs for subsequent revisions/amendments can then be avoided altogether.

TARA and security requirements engineering

Secure software starts with a risk assessment. Our security engineers support you when performing the threat analysis and risk assessment to ensure that security requirements can be specified efficiently for your product. Our security engineers plan and host security workshops as a way of identifying potential threats to the security of vehicle components and assessing their severity. The results of the workshops can then be used to derive security objectives and security requirements for ongoing project work.

Our security engineers accompany you throughout the entire development process. They examine security requirements, work with you to develop security architectures and are the central contacts for any product security-related issues and questions your team of developers may have.

Requirement engineering offers excellent methods for deriving testable security requirements. Our security engineers adopt this approach and then use an iterative process to develop robust security concepts and security architectures together with your specialists and system architects.

Relevant standards such as ISO 21434 are obviously also taken into account here.

Integration partner for high-security V2X applications

As integration partner, we support you in the implementation of cybersecurity and cryptographic functions in embedded Secure Elements (eSEs) and hardware security modules (HSMs) to enable ICS vehicle components to be toughened ready for product certification.

The security engineers at achelos have amassed many years of comprehensive expert knowledge and experience in the development of security-relevant applications, as well as operating systems for smartcards. This profound expertise in and around health insurance cards and bank cards has taught us how to work with extremely strict security standards.

As a manufacturer-independent consulting and software development house, we offer our customers a high degree of flexibility when integrating and developing products and solutions.

TLS and IKE/IPsec test suites from achelos

As per UNECE 155, a vehicle must verify the authenticity and integrity of the messages it receives. Confidential data that is sent to or from the vehicle must also be protected to prevent unauthorised access. In IP-based communication channels, this is performed via TLS and IKE/IPSec. UNECE 155 has placed great emphasis on safeguarding cybersecurity. With the TLS Inspector and the IKE/IPSec Inspector, achelos offers vehicle and vehicle component manufacturers an automated testing tool.

Customers can use this for reliable, automated and repeatable testing of the cryptographic security of the communication channels used in their vehicles for conformity, known weaknesses and correct configuration.

Optimum key management solutions thanks to optimum consulting and first class products

achelos provides PKI solutions for high-grade electronic certificates to verify the authenticity of the hardware and software in ICS products. As a recognised IT security expert, we offer comprehensive services for establishing new or migrating existing public key infrastructures and key management systems. This starts with system planning and continues through system provision, all the way up to secure operation.

We observe relevant standards and "best practices" for the industrial sector, for which certification to IEC 62443 or ISO 27001 is sufficient. We work with you to design an optimum and individual PKI solution.

achelos provides support for integration into production and development processes with experienced and certified IT consultants. Our experts attend intensive training from the respective manufacturers on the products they use and constantly add to their knowledge and qualifications. As a customer, you benefit from a vast pool of experience resulting from successfully completed integration projects. Our team recognises and understands the key issues in any project and can overcome challenges thanks to extensive expertise.

achelos uses high-grade PKI products that have been proven worldwide, are security-tested and come with outstanding product features.

As a certified Keyfactor Partner, achelos for example provides PKI appliances and SignServer appliances, as well as the Identity Authority Manager from the same manufacturer.

We offer comprehensive support

The team of experts at achelos also supports customers in the operational phase with supplementary services. We offer targeted 1st and 2nd line support in both German and English, as we know the customer solution very well. If desired, we can perform this service on site or as managed service, for example including PKI administration on the customer's behalf.

Successful development of secure ICS products

Expert knowledge

achelos has many years of experience in the development and evaluation of secure software. Our team has profound cryptographic expertise and specialist knowledge of embedded systems for all project phases. Having worked on a large number of evaluation projects, we have supported both testing centres and manufacturers in evaluating high-security products to Common Criteria. Our business partners benefited from significant time and money savings here and were also able to avoid costs for subsequent modifications.

The team of experts at achelos provides you with professional and efficient support during the evaluation process.

TARA and security requirements engineering

Secure software starts with a risk assessment. Our security engineers support you when performing the threat analysis and risk assessment to ensure that security requirements can be specified efficiently for your product. We plan and host security workshops as a way of identifying potential threats to the security of ICS components and assessing their severity. Based on the results of the workshops, we then define security objectives and security requirements for ongoing project work.

Our security engineers accompany you throughout the entire development process. They examine security requirements, work with you to develop security architectures and are the central contacts for any product security-related issues and questions your team of developers may have.

Requirement engineering offers excellent methods for deriving testable security requirements. Our security engineers adopt this approach and then use an iterative process to develop robust security concepts and security architectures together with your specialists and system architects.

Relevant standards such as ISO 62443 and OPC-UA are obviously also taken into account here.

Integration partner for eSEs

As integration partner, we support you in the implementation of cybersecurity and cryptographic functions in embedded Secure Elements (eSEs) and hardware security modules (HSMs) to enable ICS components to be toughened ready for product certification.

The security engineers at achelos have amassed many years of comprehensive expert knowledge and experience in the development of security-relevant applications, as well as operating systems for smartcards. This profound expertise in and around health insurance cards and bank cards has taught us how to work with extremely strict security standards.

As a manufacturer-independent consulting and software development house, we offer our customers a high degree of flexibility when integrating and developing products and solutions.