SciTransfer
SECREDAS · Project

Proven Cybersecurity Architecture for Safe Autonomous Vehicles and Industrial Systems

digitalPilotedTRL 6

Imagine your self-driving car or factory robot gets hacked mid-operation — that's a safety nightmare, not just a data breach. SECREDAS brought together 75 organizations across Europe to build security systems that protect autonomous machines without slowing them down or breaking their safety features. Think of it like installing a top-grade alarm system in your house that doesn't accidentally lock you inside during a fire. The results were tested at real pilot sites including automotive labs and smart mobility test tracks.

By the numbers
75
consortium partners across Europe
17
countries represented in the consortium
50
industry partners involved in development
25
SMEs contributing to the project
67%
industry participation ratio
26
total deliverables produced
4
demonstration deliverables including pilot site demos
The business problem

What needed solving

Companies building autonomous vehicles, industrial robots, or connected infrastructure face a dangerous gap: adding cybersecurity often breaks functional safety, and maintaining safety often leaves systems vulnerable to attack. A hacked autonomous vehicle isn't just a data breach — it's a physical safety crisis. Current solutions force engineers to choose between security and performance, but regulators now demand both simultaneously.

The solution

What was built

SECREDAS produced multi-domain security architectures, reference designs, and validated components for autonomous systems that combine cybersecurity with functional safety. The consortium built and demonstrated working prototypes — first as single systems, then as cooperating multi-system use cases — culminating in pilot-site demonstrations at AVL Lab, Thales Lab, Helmond Pilot Site, and CSIC Pilot Site. In total, 26 deliverables were produced across the project.

Audience

Who needs this

Automotive OEMs and Tier-1 suppliers adding ADAS or autonomous driving featuresIndustrial automation companies deploying connected robots or autonomous production systemsDefense and aerospace contractors operating autonomous surveillance or transport systemsSmart city infrastructure operators managing connected traffic or mobility systemsCybersecurity firms looking to expand into safety-critical autonomous system markets
Business applications

Who can put this to work

Automotive / Connected Vehicles
enterprise
Target: Automotive OEMs and Tier-1 suppliers building ADAS or autonomous driving features

If you are an automotive supplier dealing with the challenge of securing connected vehicle systems without compromising functional safety — this project developed reference architectures and security components validated at AVL Lab and the Helmond Pilot Site. With 50 industry partners involved in development, the solutions were built to fit real automotive supply chains. The architecture addresses both cybersecurity and privacy protection simultaneously, which matters for UNECE R155 compliance.

Industrial Automation / Smart Manufacturing
mid-size
Target: Manufacturers deploying autonomous robots or connected production lines

If you are a manufacturer worried about cyberattacks on your automated production systems — this project built multi-domain security components that keep machines safe and operational even under attack. The consortium included 25 SMEs working on practical integration challenges, meaning the solutions were designed for companies that cannot afford weeks of downtime for security upgrades. Demonstrations showed single systems and combined cooperating systems working under controlled security scenarios.

Aerospace & Defense / Critical Infrastructure
enterprise
Target: Defense contractors or critical infrastructure operators running autonomous surveillance or monitoring systems

If you are operating autonomous systems in high-security environments where both cyber threats and functional safety are non-negotiable — this project validated security architectures across multiple domains with partners like Thales. The final demonstrations included lab and pilot site testing at Thales Lab and CSIC Pilot Site, proving the technology works beyond controlled lab conditions. With 17 countries contributing expertise, the solutions account for diverse regulatory environments.

Frequently asked

Quick answers

What would it cost to implement SECREDAS security architecture in our products?

The project's EU contribution is not publicly listed in the dataset, so exact development costs cannot be quoted. However, with 75 partners sharing the R&D burden — including NXP Semiconductors as coordinator — the resulting reference architectures are designed to reduce per-company integration costs compared to building cybersecurity for autonomous systems from scratch.

Can this scale to production volumes in automotive or industrial settings?

The project specifically targeted operational performance preservation alongside security, meaning the architecture was designed not to create bottlenecks. Demonstrations progressed from single working demonstrators to combined cooperating systems in use cases, showing scalability was tested. The 67% industry ratio in the consortium suggests production-readiness was a priority.

Who owns the IP, and can we license the technology?

As an ECSEL Joint Undertaking project (RIA funding), IP is typically retained by the partners who generated it. NXP Semiconductors Netherlands BV coordinated the project, so they would be the first point of contact for licensing discussions. With 50 industry partners involved, specific components may have different IP holders.

Does this help with automotive cybersecurity regulations like UNECE R155?

SECREDAS directly addresses the combination of cybersecurity, privacy protection, and functional safety for autonomous systems — the exact intersection that UNECE R155 and ISO/SAE 21434 require. The reference architectures provide a structured approach to demonstrating compliance. Based on available project data, the multi-domain methodology was specifically designed for cross-sector regulatory alignment.

How long would integration take for an existing autonomous system?

The project ran from May 2018 to October 2021, producing 26 deliverables including reference architectures and validated components. Integration timelines depend on your existing system architecture, but the reference architecture approach means you adopt a proven design rather than engineering security from zero. The progression from single demonstrators to combined cooperating systems suggests modular, phased integration is possible.

What exactly was demonstrated and where?

Four demonstration milestones were completed: single demonstrators working independently, demonstrators combined and cooperating in use cases, final demos in controlled scenarios, and a final public event with demonstrations at AVL Lab, Thales Lab, Helmond Pilot Site, and CSIC Pilot Site FICO. This progression from lab to pilot sites shows increasing real-world validation.

Is there ongoing support or a community around this technology?

The project is closed as of October 2021, but the consortium of 75 partners across 17 countries represents a substantial knowledge network. The project website at secredas-project.eu may contain published results. For ongoing support or access to project outputs, contacting the coordinator NXP Semiconductors Netherlands BV is the recommended path.

Consortium

Who built it

This is one of the largest cybersecurity consortia in EU research with 75 partners from 17 countries — signaling serious industrial commitment, not just academic interest. The industry-to-research ratio is heavily tilted toward business: 50 industry partners (67%) versus 12 universities and 12 research organizations. NXP Semiconductors, a global leader in automotive and IoT chips, led the project, which immediately grounds the work in commercial reality. With 25 SMEs in the mix, there's a layer of specialized, agile companies that likely built niche components. The geographic spread across 17 countries (including major automotive nations like Germany, France, and the Netherlands) means the solutions were tested against diverse regulatory and technical requirements. For a business looking to adopt these results, the consortium itself is a ready-made supply chain of cybersecurity expertise for autonomous systems.

How to reach the team

NXP Semiconductors Netherlands BV (NL) — global semiconductor company, reachable through their corporate website or project page

Next steps

Talk to the team behind this work.

Want an introduction to the SECREDAS consortium or a detailed brief on specific security components for your autonomous systems? SciTransfer can connect you directly with the right partner.