This document summarizes the 2nd face-to-face meeting of the OpenChain Automotive Working Group held on October 29th, 2019 in Lyon. The meeting agenda included an introduction to the OpenChain project, a proposal to form an OpenChain Automotive Working Group, and presentations from various automotive companies on best practices for open source license compliance. The goal of the working group is to share information, establish best practices as an eventual industry standard, and raise awareness of open source license management in the automotive sector.

1. OpenChain Automotive WG
2nd F2F Meeting
Oct, 29th, 2019
Masato ENDO
CC BY-SA 4.0 1

2. CC BY-SA 4.0 2
•Linux Foundation meetings involve participation by industry competitors, and it is the
intention of the Linux Foundation to conduct all of its activities in accordance with
applicable antitrust and competition laws. It is therefore extremely important that
attendees adhere to meeting agendas, and be aware of, and not participate in, any
activities that are prohibited under applicable US state, federal or foreign antitrust and
competition laws.
•Examples of types of actions that are prohibited at Linux Foundation meetings and in
connection with Linux Foundation activities are described in the Linux Foundation Antitrust
Policy available at http://www.linuxfoundation.org/antitrust-policy. If you have questions
about these matters, please contact your company counsel, or if you are a member of the
Linux Foundation, feel free to contact Andrew Updegrove of the firm of Gesmer
Updegrove LLP, which provides legal counsel to the Linux Foundation.
Antitrust Policy Notice

3. Today’s Agenda
•Introduction of OpenChain Project
•OpenChain Automotive WG Proposal
•Sharing best practices of Automotive Industry
Jonas Öberg (Scania) Open Source at Scania
Yuichi Kusakabe (Denso Ten) How to use OSS license tools with AGL release software
Shunsuke Tokumoto (Fujitsu) License management with SPDX
Sebastian Schuberth (Bosch) Bosch’s Activities in Automating OSS
•Free discussion
CC BY-SA 4.0 3

4. CC BY-SA 4.0 4
Introduction of
OpenChain
Project

5. What is OpenChain?
OpenChain is one of The Linux Foundation’s official projects
to develop standard of OSS license compliance.
5CC BY-SA 4.0

6. The Purpose of OpenChain
Establish requirements to achieve effective management of OSS
for software supply chain participants.
Chip
Vendor
OEM/ODM
Vendor
OSS Supply Chain (Ex. Embedded Products)
Product
Vendor
OSS
IC Chip
OSS
IC Chip
OSS
Products
OpenChain
Conformant
OpenChain
Conformant
OpenChain
Conformant
License License License
6CC BY-SA 4.0

7. 7
3 Major outputs of OpenChain
Specification
The OpenChain Specification defines a core
set of requirements every quality compliance
program must satisfy.
Curriculum
The OpenChain Curriculum provides the
educational foundation for open source
processes and solutions, whilst meeting a key
requirement of the OpenChain Specification.
Conformance
OpenChain Conformance allows
organizations to display their adherence to
these requirements.
CC BY-SA 4.0

8. OpenChain materials will provide strong OSS governance throughout
the whole supply chain.
OSS
Report
Tier 2
We’d like to follow the
OpenChain specification
to set up our OSS
governance system.
Tier 1
Software Software
OSS
OSS
Report
OEM
Let’s promote
OpenChain
conformance!
OSS
OpenChain
Specification
OpenChain
Curriculum
Follow the OpenChain
standard to manage
OSS.
Let’s use OpenChain
materials for in-
house education!
We can grasp
all OSS
in our product.
Pros of applying OpenChain to the Supply Chain
13CC BY-SA 4.0

9. Community
9
CC BY-SA 4.0

10. 10
Platinum Members
CC BY-SA 4.0

11. Companies with a Public OpenChain Conformant Program
11
CC BY-SA 4.0

12. OpenChain Japan Work Group
Toyota, Hitachi and Sony set up Japan WG in 2017.
Each Sub-WG makes materials for OSS compliance and uploads to GitHub.
SUB Working Groups
-Planning SWG
-FAQ SWG
-Leaflet to Supplier SWG
-Education material for roles SWG
-License information exchange SWG
-Tooling SWG
-Promotion SWG
https://wiki.linuxfoundation.org/openchain/openchain-japanese-working-group
https://github.com/OpenChain-Project/Onboarding-JWG
12
CC BY-SA 4.0

13. OpenChain
Automotive
WG Proposal
18CC BY-SA 4.0

14. Awareness of the issues
•It is inefficient for each company to create similar educational materials.
•Having different OEM management methods consumes extra resources.
•Even if Tier 1 or OEM have strong processes problems like snippets may occur.
CC BY-SA 4.0 14
Tier 2 Tier 1
Software
OSS
OEM
Risk of OSS being
mixed into supplier
software.
How can we
manage OSS
licenses?
Educating all
suppliers is
difficult.
Updating
educational
material is hard.
Which OSS
include our
product?
OSS
Report
Software
OSS

15. Purpose
•Share information to support best practices in the industry
•Build a future industry standard for OSS SCM
•Raise awareness about the importance of OSS compliance in the industry
CC BY-SA 4.0 15

16. Example of the ML Members’ company
CC BY-SA 4.0 16
Platinum Members of OpenChain
OpenChain Conformant Program
Organizations
SuppliersAutomakers
*Companies are NOT Linux Foundation members also can attend OpenChain WG for free of charge.

17. Milestone of the WG
CC BY-SA 4.0 17
2019 2020 2021
Developing a base of
Information Sharing
July: 1st F2F@Tokyo
Oct: 2nd F2F@Lyon
Release materials to
promote OSS SCM in the industry
Release Industry Standard
(If it is needed.)

18. CC BY-SA 4.0 24
Next F2F Meeting @ US on 14th Jan 2020?
(Next Week of CES)

19. 19
Thanks
CC BY-SA 4.0 19