Electronic Registration Identification (ERI)



Similar documents
Security risk analysis approach for on-board vehicle networks

Vehicular On-board Security: EVITA Project

Concept for a cryptographic infrastructure for measurement components in smart grids

Network Security Protocols

Cryptography and Network Security Overview & Chapter 1. Network Security. Chapter 0 Reader s s Guide. Standards Organizations.

Cloud Security and Managing Use Risks

How To Use Pki On A Pc (For A Non-Profit)

Connected Vehicles: New Directions and Opportunities. AASHTO Connected Vehicle Task Force December 3, 2014 Irvine, CA. Leidos. All rights reserved.

Safety Pilot Security System

2012 ISO TC46/SC4/WG11 N246

siemens.com/tolling Back-office system Sitraffic Sensus Server Supplies all front-end data. Suitable for any GNSS tolling back-office.

Central Agency for Information Technology

Technologies and Techniques for Collecting Floating Car Data. Mike Hayward Head of Vehicle Telematics WS Atkins Transport Systems

Mobile MasterCard PayPass Testing and Approval Guide. December Version 2.0

Part I. Universität Klagenfurt - IWAS Multimedia Kommunikation (VK) M. Euchner; Mai Siemens AG 2001, ICN M NT

Information security controls. Briefing for clients on Experian information security controls

Lecture II : Communication Security Services

Always one step ahead.

Advanced Diagnostics Limited ( We ) are committed to protecting and respecting your privacy.

Module 1: e- Learning

Digital Certificates (Public Key Infrastructure) Reshma Afshar Indiana State University

ETSI TR V1.1.1 ( ) Technical Report. Intelligent Transport Systems (ITS); Security; Threat, Vulnerability and Risk Analysis (TVRA)

Certified Information Systems Auditor (CISA)

Preventing fraud in epassports and eids

THE PROSPECTS FOR ELECTRONIC FEE COLLECTION (EFC) USING VEHICLE POSITIONING SYSTEMS (VPS)

Securing Wireless Access for Vehicular Environments (WAVE)

SSL ACCELERATION DEPLOYMENT STRATEGIES FOR ENTERPRISE SECURITY

Frequently Asked Questions. Frequently Asked Questions SSLPost Page 1 of 31 support@sslpost.com

A Secure RFID Ticket System For Public Transport

An Effective Approach to Open Payment Systems

INTELLIGENT AND INNOVATIVE TRANSPORT SYSTEMS

New Mobile App. Virtual Inspector revolutionizes vehicle inspections

Safety and security related features in AUTOSAR

An introduction to Cryptosoft

ETSI TC ITS RELEASE PROCESS

GOALS (2) The goal of this training module is to increase your awareness of HSPD-12 and the corresponding technical standard FIPS 201.

Privacy and Data Protection Impact Assessment Framework for RFID Applications. 12 January 2011

BSc (Hons.) Computer Science with Network Security. Examinations for 2011/ Semester 2

Savitribai Phule Pune University

RF-Enabled Applications and Technology: Comparing and Contrasting RFID and RF-Enabled Smart Cards

FIDO Trust Requirements

White Paper How Noah Mobile uses Microsoft Azure Core Services

mobile payment acceptance Solutions Visa security best practices version 3.0

EMV-TT. Now available on Android. White Paper by

TURPAK Vehicle ID Solution Solution Overview for Oil Companies

Fit and proper person guidelines. for inspecting organisations and vehicle inspectors

IIS Smart Roadside Takes the Lead in Roadside Safety and Enforcement

Information Security Policy September 2009 Newman University IT Services. Information Security Policy

TOP SECRETS OF CLOUD SECURITY

Car Data New access via telematic systems. Maja Berends, ADAC. 12 September SEPT 1

Advanced Authentication

International Working Group on Data Protection in Telecommunications

An Implementation of Secure Online Voting System

BIOMETRIC AUTHENTICATION SECURITY AND USABILITY

End-to-End Security in Wireless Sensor Networks (WSNs) Talk by Claudio Anliker Supervised by Dr. Corinna Schmitt University of Zurich

G-Cloud Service Definition. Atos Information Security Wireless Scanning Service

Current and Future Research into Network Security Prof. Madjid Merabti

DIVISION OF INFORMATION SECURITY (DIS)

A SECURITY ARCHITECTURE FOR AGENT-BASED MOBILE SYSTEMS. N. Borselius 1, N. Hur 1, M. Kaprynski 2 and C.J. Mitchell 1

What Are Certificates?

Fleet management solutions for your business

Snow Agent System Pilot Deployment version

Swedbank Payment Portal Implementation Overview

How To Be A Successful Company

Transformation of POS Operations at

CPA SECURITY CHARACTERISTIC DATA AT REST ENCRYPTION: ALWAYS-ON MOBILE DEVICES

Wireless traffic Safety network between Cars. CoMoSeF TULEVAT TRENDIT AUTOJEN M2M KOMMUNIKAATIOSSA WISAFECAR JA COMOSEF PROJEKTIT

Required changes to Table 6 2 in FIPS 201

Core Fittings C-Core and CD-Core Fittings

eidas as blueprint for future eid projects cryptovision mindshare 2015 HJP Consulting Holger Funke

Technical regulation in the scope of ERA-GLONASS emergency response system deployment

Security Engineering Part III Network Security. Security Protocols (II): IPsec

Security in Vehicle Networks

Best Practices for the Use of RF-Enabled Technology in Identity Management. January Developed by: Smart Card Alliance Identity Council

TICSA. Telecommunications (Interception Capability and Security) Act Guidance for Network Operators.

(Instructor-led; 3 Days)

Trustis FPS PKI Glossary of Terms

Sage Accpac CRM 5.8. Self Service Guide

The Vision of Vehicle Infrastructure Integration (VII)

APWG. (n.d.). Unifying the global response to cybecrime. Retrieved from

Transcription:

Electronic Registration Identification (ERI) Concept, architecture and current status Murcia, 18th June 2009

Overview The ERI standard User requirements Architecture Current status 2 Electronic Registration Identification (ERI) 18 juni 2009

The ERI standard: Scope ISO/TS 24524 Electronic Registration Identification (ERI) A standard for identifying vehicles by electronic means Suitable for: Identification of local and foreign vehicles by authorities Vehicle manufacturing, vehicle life cycle management Safety related purposes Crime reduction Commercial services Adhering to privacy/data protection regulations 3 Electronic Registration Identification (ERI) 18 juni 2009

The ERI standard: History A CEN and ISO standard (part 5 is ISO only) A basic variant: Basis ERI Work started in spring 2003 Participants from: US, Mexico, Japan, several EU countries 2004: Expert opinions security & feasibility Currently a Technical Specification (TS) In transition to an International Standard (IS) unanimous positive vote in June 4 Electronic Registration Identification (ERI) 18 juni 2009

The ERI standard: 5 parts and Basic ERI 24534-1: Architecture 24534-2: Operational Requirements 24535: Basic ERI 24534-3: Vehicle data 24534-4: Secure communications Using asymmetrical techniques Basic ERI : allows for proprietary security implementations Part 4: Security may vary from very modest to highly secure Part 5: Used in Japan 24534-5: Secure communications Using symmetrical techniques Focus on application layer communication, lower layers are only referenced 5 Electronic Registration Identification (ERI) 18 juni 2009

User requirements: Identification Two types of identification: Specific vehicle identification Vehicle vicinity identification Safe, no hindrance to the driver Mandatory: no due diligence assumed Under all traffic and whether conditions Irrespective of the vehicle s speed Readable with roadside, mobile & handheld equipment 6 Electronic Registration Identification (ERI) 18 juni 2009

User requirements: Security Adaptable to user needs from very modest to highly secure Identification usable as legal evidence Authenticity (as needed) Is the ERT attached to the right vehicle Is it a genuine (not a fake) ERT ERT inoperable when removed Confidentiality (to the roadside) (as needed) privacy and protection against attack Read authorisation of authorities / third parties Support of international vehicle sales ERT key management / diversification 7 Electronic Registration Identification (ERI) 18 juni 2009

User requirements: ERI data Vehicle Id Vehicle Identification Number VIN (ISO 3779) Or, registration authority specific (WMI + e.g. a chassis number) Additional ERI data (optional) More then 60 different items E.g. vehicle registration certificate data Registration authority specific data 8 Electronic Registration Identification (ERI) 18 juni 2009

ERI: Architecture Overview: Basics Overall system concept The ERI system Two board variants In-vehicle architecture 9 Electronic Registration Identification (ERI) 18 juni 2009

Architecture: Basics For an acquirer: Architecture = Procurement policy! Only distinguish components if more than one party will be involved, i.e.: Different suppliers / maintenance companies Different owners / users do not specify internal details /interfaces Focus on behaviour / interfaces: Vehicle road-side (the main interface) In-vehicle (to support other onboard applications & architectures) ERI part 4 defines complete interfaces 10 Electronic Registration Identification (ERI) 18 juni 2009

Architecture: Overall system concept Vehicle Reader (writer) (Registration) authority Road Road-side (garage) Back office 11 Electronic Registration Identification (ERI) 18 juni 2009

Architecture: The ERI system ERI system ERT ERI reader/ writer Sensor system Onboard Non-ERI equipment ERI back office system E.g. a (registration) authority Vehicle 12 Electronic Registration Identification (ERI) 18 juni 2009

Architecture: Two onboard variants One single onboard component: ERT + DSRC tag Multiple onboard components: ERT ERR Other DSRC application module Onboard communication DSRC beacon ERI readers or readers/writers (ERRs) DSRC beacon Vehicle Road side 13 Electronic Registration Identification (ERI) 18 juni 2009

Architecture: In-vehicle architecture ERI standard interface ERI standard interface ERI Device Inductive coupling Internal reader /writer Other In vehicle device In vehicle communication Comm. device Air Interface e.g. ISO 14443 e.g. ISO 15628 / CEN 12834 14 Electronic Registration Identification (ERI) 18 juni 2009

Architecture: The ERT life cycle Customisation to a vehicle Writing vehicle data into the ERT Commissioning by a registration authority (RA) who may: assigns himself as the vehicle s RA enable / disable signing / encryption capabilities allow others to access ERT data Deployment, i.e. customised and commissioned Withdrawn (customised with revoked commissioning) 15 Electronic Registration Identification (ERI) 18 juni 2009

Current status ERI standard: Last steps in transition from TS to IS In the Netherlands: a TNO RDW project (see e.g. www.tno.nl) For 2 use cases: The inspector Rush hour avoidance Proprietary environment (=> secret keys) Multiple tags per vehicle to prevent identity fraud 16 Electronic Registration Identification (ERI) 18 juni 2009

In summary The ERI standard TS 24534 with part 4: Defines a complete interface with the OBE Allows a variety of onboard architectures Security is adaptable to user needs 17 Electronic Registration Identification (ERI) 18 juni 2009

Thank you for your attention For further information: Jan Vis jan.vis@rws.nl +31 6 2451 4776 http://www.xs4all.nl/~visjpmm/vianova/index.html 18 Electronic Registration Identification (ERI) 18 juni 2009