Why this environment matters
Security for vehicle diagnostic workshop terminals starts with the system's role: it connects technicians to vehicle ECUs for fault finding, coding, calibration and firmware work. A key concern is that infected tools or unauthorised software can push unsafe settings, extract keys or spread malware between customer vehicles. NØNOS offers a potential architecture based on signed capsules, explicit capabilities and strong isolation.
The security challenge
The practical concern is that infected tools or unauthorised software can push unsafe settings, extract keys or spread malware between customer vehicles. Connected vehicles combine public-facing radios, third-party content, diagnostics and hardware that can affect motion. Security therefore has to control both information flow and authority over physical functions. The attack surface may include remote support, software updates, removable media, third-party libraries, public input or misused operator credentials. The security design therefore needs containment as well as prevention.
How the capsule model could help
The proposed deployment pattern is to provide a clean, resettable diagnostic environment where each tool receives only the protocol and vehicle access required for the job. NØNOS would use verified boot and attestation and minimal persistent state as the trust foundation, then apply a memory-safe Rust core and signed capsule updates around higher-risk functions. Logs or proofs could record which approved capsule performed a privileged action without retaining unnecessary user data.
Deployment requirements
Any in-vehicle deployment would require OEM integration, hardware-specific drivers, deterministic timing analysis, functional-safety assessment and validation against the vehicle's existing safety architecture.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Diagnostic-tool manufacturers selecting terminal platforms
- Dealership groups buying managed diagnostic workstations
- Fleet maintenance operators standardising workshop devices
Industry examples: Bosch, Snap-on. Organisations shown illustrate the industry. No NONOS customer, partner or endorsement relationship is implied.