Modern vehicles have an SGW (Security Gateway) primarily for security and data protection reasons. It acts as a kind of firewall that must be specifically authorized by the manufacturer.
1. Protection Against Vehicle Hacking and Theft
In the past, any diagnostic device could access control units almost without restrictions via the OBD port.
Problem:
- Changing security-relevant codings
- Manipulating the immobilizer
- Programming keys
- Manipulating comfort functions
With increasing connectivity, this poses a real cyber security risk.
The Security Gateway blocks all commands without authentication.
2. Protection of Connected Vehicles
Modern vehicles are online:
- Cloud services
- Smartphone apps
- Remote start
- OTA updates
An open diagnostic access point would be a potential attack vector into the vehicle, your home network, and also your personal data.
3. Legal Requirements
Manufacturers must now comply with cybersecurity regulations
- UNECE R155 (Cybersecurity Management)
- UNECE R156 (Software Updates)
Without access control, vehicles with modern control unit architectures no longer receive type approval today.
4. Control Over Diagnostics & Software
Besides security, there is also an economic effect:
Manufacturers can:
- Control programming
- Require online authorizations
- Log software access and changes
5. SGW Authorization
How can the SGW be authorized to work on the vehicle?
- You need a professional device
- Purchase the SGW package (only possible with a professional device)
- Only for registered workshops
- Authentication with an ID card is required
In short:
SGW exists because modern cars are now computers on wheels, and security must be ensured accordingly.