SNIP_CLASSIC_CAN_FIGURE_Figure_7_2_KEYMANAGER

Figure 7.2: Exemplary PKI certificate chain. Root and intermediate certificates, if required, can be provided in the production phase of the ECU or the vehicle. These certificates will be permanently stored in a specified place. If a certificate is now presented to the ECU, this certificate can be stored in a temporary place to request the verification. The certificate submodule will check for existing certificates in the associated chain and will start to parse the contents, verify them against pre-configured conditions and will then check the signatures against all available certificates in its chain.