|
Work item:
|
X.ota-sec
|
|
Subject/title:
|
Implementation and evaluation of security functions to support over-the-air (OTA) update capability in connected vehicles
|
|
Status:
|
Under study
|
|
Approval process:
|
AAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
2025-09 (Medium priority)
|
|
Liaison:
|
UNECE WP.29 GRVA TF CS/OTA, ISO/TC 22/SC 32
|
|
Supporting members:
|
Korea (Republic of), ETRI, Hyundai Motors
|
|
Summary:
|
Vehicle manufacturers need to keep vehicles secure by considering cybersecurity throughout their whole lifecycle of them. Vehicles are required to be monitored even after mass production, and responses are also required to be made as soon as possible when attacks or vulnerabilities from a cybersecurity perspective are detected. To this end, OTA-related functions must be installed in the vehicles as well as security features. The UN has regulated software update management systems through UN Regulation No.156.
Since most vehicles will be equipped with OTA update functions, ensuring that the OTA update features are securely applied, the unique characteristics, potential vulnerabilities, and security requirements of these functions should be considered. OTA-related security technologies and evaluation methodologies also should be considered from a technical point of view.
Considering the above environment, this draft Recommendation identifies several security functions to support OTA update capability in connected vehicles. These functions include those of using cryptographic algorithms, secure diagnostics, secure debugging, and secure storage. With these security functions, this draft Recommendation provides how to implement the security functions and how to evaluate these functions. Moreover, this draft Recommendation additionally provides security threat analysis and security requirements for OTA update capability based on X.1373, X.1373rev and X.1371.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2023-03-06 09:44:00
|
|
Last update:
2024-03-12 09:49:49
|
