Securing ISP: How to Implement Cyber Security Features on FlashRunner Workbench

In a previous article, our technical team explained how cyber security has become a critical aspect of the modern technological landscape, particularly in sectors such as automotive, where in-system programming (ISP) is widely used. This guide covers how to put those cyber security features to work in FlashRunner Workbench.

Enabling user management

Our user interface, the Workbench, has a dedicated Cyber Security section. Entering a password and clicking Set new password activates user management mode. It is important to remember that password: it will be required every time you log in as Admin.

Two types of account are available: Admin and Guest.

To deactivate user management mode, click Remove password and enter the Admin password.

Per-command permissions

Through the permission manager, the Admin account selects which commands each type of user may execute. Every command can be set to one of four options:

• Guest — the command can be executed by both Guest and Admin.
• Admin — the command can be executed only by Admin.
• Prot — the command requires a password to be entered before it runs.
• None — the command is blocked, and no user can execute it.

Flashing cycle limits and firmware encryption

Flashing Cycles Limitation Management is configured by logging in as Admin, and allows a maximum number of cycles to be set for Guest mode.

Firmware Encryption is always available directly from the Workbench. It encrypts the firmware before flashing it onto the device, protecting the intellectual property held in that firmware.