Zero-Trust Federated Learning for Connected Aftermarket Devices

Computer Science > Cryptography and Security [Submitted on 5 Aug 2026] Zero-Trust Federated Learning for Connected Aftermarket Devices Shunmukha Sagar Puppala Connected aftermarket devices extend vehicle diagnostics, repair workflows, and over-the-air software maintenance beyond original equipment manufacturer boundaries, yet their heterogeneous ownership and long service life complicate conventional perimeter security. This paper develops Zero Trust Federated Learning for Connected Aftermarket Devices (ZT FL CADE), an edge-learning architecture that combines device-level access control, privacy-preserving federated learning, and adversarial validation for over-the-air update and predictive maintenance decisions. The evaluation uses a single synthetic dataset of 144,000 telemetry windows from 240 devices, 12 vendor domains, and 180 days of operation. Features include bus entropy, update latency, attestation age, signature retries, environmental signals, fault-code rates, packet loss, drift, mileage, and trust score, with targets for maintenance risk, update intrusion, and access action. ZT FL CADE trains local temporal models, aggregates privacy-bounded updates, scores each device against behavioral and update integrity evidence, and routes update requests to allow, challenge, or quarantine actions. Synthetic experiments improve maintenance risk F1 from 0.837 for Fed Avg to 0.883, improve intrusion F1 from 0.856 to 0.897, and preserve 0.842 intrusion recall when 20 percent of selected clients are adversarial. Mean access-decision latency remains 44 MS, below the 100 MS operational budget used in the simulation. The results do not establish field validation, but they indicate that zero-trust policy enforcement and federated learning can be evaluated jointly rather than as separate aftermarket security controls. Index Terms Zero trust architecture, federated learning, connected aftermarket devices, over-the-air updates, adversarial machine learning, edge artificial intelligence, predictive maintenance, automotive cybersecurity Comments: 8 pages Subjects: Cryptography and Security (cs.CR); Computational Engineering, Finance, and Science (cs.CE) Cite as: arXiv:2608.07591 [cs.CR]   (or arXiv:2608.07591v1 [cs.CR] for this version)   https://doi.org/10.48550/arXiv.2608.07591 Focus to learn more Submission history From: Shunmukha Sagar Puppala [view email] [v1] Wed, 5 Aug 2026 20:10:12 UTC (488 KB) Access Paper: view license Current browse context: cs.CR < prev   |   next > new | recent | 2026-08 Change to browse by: cs cs.CE References & Citations NASA ADS Google Scholar Semantic Scholar Export BibTeX Citation Bookmark Bibliographic Tools Bibliographic and Citation Tools Bibliographic Explorer Toggle Bibliographic Explorer (What is the Explorer?) Connected Papers Toggle Connected Papers (What is Connected Papers?) Litmaps Toggle Litmaps (What is Litmaps?) scite.ai Toggle scite Smart Citations (What are Smart Citations?) Code, Data, Media Demos Related Papers About arXivLabs Which authors of this paper are endorsers? | Disable MathJax (What is MathJax?)