1. Japan’s proposal for security regulation
16-18, Jan. 2018, 10th London

2. Background
The TF had worked on the recommendation aiming for providing useful knowledge to assure vehicle security. The current content of the recommendation will be suitable for use with Resolution.
Feedback from ITS/AD in November 2017:
The Task Force should deliver Regulation and Resolution on Cyber Security.
> To respond to them, Japan proposes possible terms of security regulation respecting for the manner of regulations on the 1958 agreement.

3. Ideas behind the proposal
Security is important but is not sufficient for vehicle level safety because the direct propose of security measures is to assure the integrity of data/software.
Regulations of the 1958 agreement* cover test methods to validate vehicle level performances. Thus, a regulation regards to security should provide a method which can validate vehicle level performance (on safety).
Vehicle Level Safety
Mechanical
strength
Speedy
response
Accurate
sensing
positioning
Security
*Reference : UN/ECE/TRANS/505/Rev.3

4. (nearly equal to the current Recommendation)
Ideas behind the proposal
To catch up to “Best practice” timely, security controls (mainly mitigation) should be separated from Regulation. The recommendation which reflects the security controls should be consolidated as Resolution. (This approach is to answer to the feedback from ITS/AD and to maintain CSTF’s output as it is.)
Stationary
Regulation
Referring
Standards include ISO could be reflected in this part.
Flexible
Resolution
(nearly equal to the current Recommendation)

5. Proposal for possible security regulation
(Pre attack)
Cyber security risks to the functions which are defined in [“CONSTRUCTION PROVISIONS” of R79, R13 and R13H] shall be assessed appropriately.
The assessment shall be done with taking the level of automated driving into the consideration.
In applying for type approval, the manufacturer shall provide documents that the vehicle type to be approved complies with the requirement of paragraph 1. of this Regulation.
The vehicle manufacturer may refer to [the Recommendation] in assessing cyber security risks.

6. Proposal for possible security regulation
(Post attack)
When the vehicle detects fraudulent manipulation by a cyber-attack, the vehicle shall respond appropriately with taking the level of automated driving into the consideration.
In applying for type approval, the manufacturer shall provide documents that the vehicle type to be approved complies with the requirement of paragraph 5. of this Regulation.
The vehicle manufacturer may refer to [the Recommendation] for the documents.

7. NOTE “Text of the 1958 Agreement”, E/ECE/TRANS/505/Rev.3 :
*Agreement concerning the Adoption of Harmonized Technical United Nations Regulations for Wheeled Vehicles, Equipment and Parts which can be Fitted and/or be Used on Wheeled Vehicles and the Conditions for Reciprocal Recognition of Approvals Granted on the Basis of these United Nations Regulations
According to “E/ECE/TRANS/505/Rev.3”*, The UN Regulation shall cover the following:
(a) Wheeled vehicles, equipment or parts concerned
(b) Technical requirements, which shall be performance oriented wherever appropriate and not design-restrictive, that give objective consideration to available technologies, costs and benefits as appropriate, and may include alternatives
(c) Test methods by which any performance requirements are to be demonstrated
(d) Conditions for granting type approval and their reciprocal recognition including administrative provisions, any approval markings and conditions for ensuring conformity of production
(e) The date(s) on which the UN Regulation enters into force, including the date when Contracting Parties applying it can issue approvals pursuant to that UN Regulation, and the date from which they shall accept approvals (if different)
(f) An information document to be provided by the manufacturer.
The term "wheeled vehicles, equipment and parts" shall include any wheeled vehicles, equipment and parts whose characteristics have a bearing on vehicle safety, protection of the environment, energy saving and the performance of anti-theft technology.