SAFESPOT SP2 Meeting September 14 th and 15 th 2006 Rome 1 Integrated Project Co-operative Systems for Road Safety “Smart Vehicles on Smart Roads” Tamas Lovas & Arpad Barsi Budapest University of Technology and Economics SAFESPOTSAFESPOT

SAFESPOT SP2 Meeting September 14 th and 15 th 2006 Rome 2 About SEVECOM  SeVeCom (Secure Vehicular Communication) is an EU-funded project that focuses on providing a full definition and implementation of security requirements for vehicular communications.   Last meeting: September 4-5. Budapest

SAFESPOT SP2 Meeting September 14 th and 15 th 2006 Rome 3 Sevecom missions and objectives  Identification of the variety of threats: attacker's model and potential vulnerabilities; in particular, study of attacks against the radio channel and transferred data, but also against the vehicle itself through internal attacks, e.g., against TCU (Telematics Control Unit), ECU (Electronic Control Unit) and the internal control bus.  Specification of an architecture and of security mechanisms which provide the right level of protection. It will address issues such as the apparent contradiction between liability and privacy, or the extent to which a vehicle can check the consistency of claims made by other vehicles. The following topics will be fully addressed : Key and identity management, Secure communication protocols (including secure routing), Tamper proof device and decision on crypto- system, Privacy. The following topics will be investigated in preparation of further work: Intrusion Detection, Data consistency, Secure positioning, Secure user interface.  The definition of cryptographic primitives which take into account the specific operational environment. The challenge is to address (1) the variety of threats, (2) the sporadic connectivity created by moving vehicles and the resulting real-time constraints, (3) the low-cost requirements of embedded systems in vehicles. These primitives will be adaptations of existing cryptosystems to the VC environment.

SAFESPOT SP2 Meeting September 14 th and 15 th 2006 Rome 4 Sevecom consortium

SAFESPOT SP2 Meeting September 14 th and 15 th 2006 Rome 5 Sevecom Budapest meeting  The participating groups are:  Sevecom,  CVIS,  SafeSpot,  Coopers,  COMeSafety,  Prime,  GST,  C2C.  The main objective of the workshop is to assess the impact of security on the architecture of V2V/V2I communication.

SAFESPOT SP2 Meeting September 14 th and 15 th 2006 Rome 6 From the Agenda…  Session on eSafety Architecture, chaired by Amer Aijaz (VW / COMeSafety)  FRAME ITS Architecture, Peter Jesty (Peter Jesty Consulting Ltd / Frame ITS)  CVIS vVewpoint, (Technolution / CVIS)  SafeSpot viewpoint, Achim Brakemeier (DaimlerChrysler / SafeSpot)  Coopers viewpoint  Discussion, chaired by Amer Aijaz (VW / COMeSafety)  FRAME ITS starting point to a high-level architecture?  Agreement on a common design pattern architecture?  Short term architecture decisions? Technology dependent architecture decisions?  Session on Security Architecture, chaired by Laurent Bousis (Philips / Sevecom)  Principles for Secure Communication  GST Approach, D. DeCock (KU Lueven / GST)  Principles for Identity Management and Privacy  PRIME Approach, Susan Hohenberger (IBM Zurich / PRIME)  Secure Vehicular Communication Architecture, Panos Papadimitratos (EPFL / Sevecom)

SAFESPOT SP2 Meeting September 14 th and 15 th 2006 Rome 7 From the presentations…  FRAME (Peter Jetsy)  EU ITS architecture; user needs and functions (no security, no physical viewpoint!)  Detecting errors between the system design and requirement definition phase (70% of errors are requirement errors!)  High level architecture is technology independent!  CVIS-COOPERS-SAFESPOT-OTHER ITS projects: EU ITS architecture (saving cost, decreasing redundancy etc.)  CVIS  mobile network for transportation (handheld unit - traffic service centers – in vehicle units – roadside units)  3 domains: VI – VV – in vehicle  COOPERS  Vehicle communication with road infrastructure  COOPERS, SAFESPOT, CVIS will use FRAME as starting point  COOPERS and CVIS use FRAME  SAFESPOT and CVIS have common architecture

SAFESPOT SP2 Meeting September 14 th and 15 th 2006 Rome 8 Expectations/Outcome  Objective of the meeting:  Bring closer the architecture-designers and security people  Mission accomplished:  Security people got an overview about the architectures of the particular projects  The project members recognized what problems have to the security people deal with  Next steps:  Insert the security architecture into the system architecture  The system architectures are different in the projects -> the security architecture has to be abstracted  Issues relevant to V2I  Presentations will be uploaded