|
Work item:
|
X.ota-sec
|
|
Subject/title:
|
Implementation and evaluation of security functions to support over-the-air (OTA) update capability in connected vehicles
|
|
Status:
|
Under study [Issued from previous study period]
|
|
Approval process:
|
AAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
2027-01 (Medium priority)
|
|
Liaison:
|
UNECE WP.29 GRVA TF CS/OTA, ISO/TC 22/SC 32
|
|
Supporting members:
|
Korea (Republic of), ETRI, Hyundai Motors
|
|
Summary:
|
Vehicle manufacturers need to keep vehicles secure by considering cybersecurity throughout their entire lifecycle. Vehicles are required to be monitored even after mass production, and responses are also required to be made as soon as possible when attacks or vulnerabilities from a cybersecurity perspective are detected. To this end, OTA-related functions must be installed in the vehicles as well as security measures. The UN has regulated software update management systems through UN Regulation No.156.
Since most vehicles will be equipped with OTA update functions, ensuring that the OTA update features are securely applied, the unique characteristics, potential vulnerabilities, and security requirements of these measures should be considered. OTA-related security technologies and evaluation methodologies should also be considered from a technical point of view.
Considering the above environment, this draft Recommendation identifies several security measures to support OTA update capability in connected vehicles. These measures include those of security update log, using cryptographic algorithms, secure access and authentication of UDS, secure storage, secure communication and recovery capability. With these security measures, this draft Recommendation explains how to implement and evaluate them. Moreover, this draft Recommendation additionally provides security threat analysis for OTA update capability based on X.1373, X.1373rev and X.1371.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2023-03-06 09:44:00
|
|
Last update:
2026-10-20 14:30:59
|
