Open Source Summit Japan & Automotive Linux Summit 2021

Modern cars produce ten thousands of data messages per second. Those data are among the most promising source of revenue for the automotive industry and everyone understand they should be protected from Cyber-criminals. Web industries fight cyber-criminality since years and have far better experience/tools protocols to to protect their assets than the automotive industry. OpenID-Connect(OIDC) is a reference for all GAFAM, banks and telecom operators to expose in a secure manner data and APIs. This technical talk presents how OIDC can be used to complement embedded Linux kernel security capabilities to protect APIs and data from their acquisition to their transfer on the cloud. It also demonstrates how OIDC can be used to merge social identity as “Spotify” with physical devices as NFC token/key, or how to use an external device as a phone to provision an authentication or authorization.