GuardKnox is the automotive industry’s first Cybertech Tier Supplier of secure, high-performance computing platforms that enable OEMs, Tier-1 suppliers, and aftermarket vendors to deliver the next generation of customized and secure, connected vehicles. All products are secure by design – providing a comprehensive secure product with cybersecurity as the foundation for additional levels of connectivity.
View The GuardKnox Product FamilyInspiration Outside the Automotive Industry
GuardKnox is at the cutting edge of innovation in the automotive industry as it leverages its deep-roots in defense aviation from the Israeli Air Force and brings this technological approach to the automotive industry providing secure, service-oriented, and high-performance computing solutions
& SW Customizations
Oriented Platforms, Consolidated HW with Virtualizations
by Design
of Computing
Expertise and Available Solutions
and Safety Enhanced by Next-Gen SW and HW Architecture
The GuardKnox Domain Controller’s main function is to act as the network backbone, connecting, segregating, and orchestrating all cross-domain communications. The domain controller serves as a uniform hardware and software ECU platform for domain controller E/E architectures.
GuardKnox Domain Controller platform supports high-performance processing with integrated microprocessors coupled with realtime processing using micro-controllers. High-speed communication is supported using Ethernet (1G, 100Mbps including switching and routing) and realtime communication with CAN-FD, FlexRay, and LIN.
The GuardKnox Zonal Gateway is a cost-effective hardware solution for high-performance routing on a single chip design. This high-performance routing solution also contains the GuardKnox proprietary High-Performance Communication Engine. This gateway supports all automotive communication interfaces and can implement a full communication matrix in hardware with integrated edge-processing capabilities. This implementation includes full line-rate security verification of all communication. GuardKnox has developed tools to convert CANDB and ARXML communication databases into High-Performance Communication Engine compatible databases.
In addition, the zonal gateway is able to support the full spectrum of AUTOSAR routing capabilities.
The GuardKnox Vehicle Server is a multi-domain ECU for Zonal backbone applications with heterogeneous resources (CPU, MCU, GPU, communication acceleration, and FPGA) in a highly integrated and cost-effective design. Coupled with the GuardKnox Secure SOA stack to provide both hardware and software infrastructure for safe and secure multi-domain and mixed-criticality operation (the design is engineered to be certifiable to ISO26262 up to ASIL D and upcoming ISO21434).
The Vehicle server is designed to support all automotive interfaces and is able to accommodate any number of interfaces. Due to the fact that the vehicle server is designed on families of SoCs GuardKnox is able to provide a seamless transition from low-cost mass-market solutions to super-premium solutions, all while utilizing the same hardware and software architecture as well as the same toolchain.
Additionally, the same architecture is able to be used across backbone ECUs, optimized for different application groups, while still maintaining the same development environment, uniform software deployment infrastructure (including between backbone ECUs) with smarter centralized management, and leveraging cost economy of scale. When FPGA based designs are employed, unique Hardware OTA (HOTA) capability becomes available, which enables the deployment of hardware processing resources in realtime while the vehicle is already on the road. The GuardKnox Vehicle Server is based on multiple, industry-leading SoC architecture, which are selected according to customer requirements.
The GuardKnox secure SOA stack is a fully secure, modular, and patented software solution that is able to meet customer hardware architecture requirements (e.g. Renesas, NXP, Xilinx, etc.) and OS requirements (e.g. Linux, Android, AUTOSAR, etc.).
The SOA stack includes a board support package (BSP) with a separation kernel and a hypervisor, optimized and secure partition and kernel configuration, host OS’s management infrastructure, software deployment infrastructure including OTA, network-level service discovery, security infrastructure, and container engine support. In addition, the SOA stack includes the GuardKnox patented Lockdown™ core.
GuardKnox’s SOA patented technology creates a secure environment that enables added services and applications by hosting downloads or upgrades on the GuardKnox platform. This enables mission-critical and non-mission critical applications to run simultaneously without interference even if one application is compromised.
SOA has a secure separation (both hardware and software) between all resources, application groups, and operating systems, simplifying edge computing capabilities by providing ample processing resources with maximal flexibility both in interface support and provision for future software extensions/additional service being added – enabling additional connectivity & customization through access control and service level partitioning.
GuardKnox’s technological capabilities and services are able to be adapted to meet each customer’s individual requirements and needs.
We are able to provide:
The GuardKnox Platform offers a secured infrastructure of hardware, firmware and software enabling the vehicle to take full advantage of a “software defined” vehicle. Our platform serves as the foundation for secure hosting of additional capabilities and services, which can be updated OTA in real-time. It also serves as an in-vehicle endpoint and as the hosting platform for a variety of applications.
