Working Party on Automated and Connected Vehicles | Session 6 | 3-4 Mar 2020
Geneva
Agenda Item 4.
Cyber security and (over-the-air) software updates

15. The Secretary presented, in the absence of leadership of the group, GRVA-06-05 informing GRVA on the activities performed by the Task Force on Cyber Security and OTA issues since the fifth session of GRVA.

16. GRVA worked on the basis of GRVA-05-05-Rev.1 prepared by the Secretary at the end of the fifth session of GRVA.

17. The expert from CEMA introduced GRVA-06-03 proposing to remove the vehicle categories S, R and T from the scope of the draft Regulation on Cyber Security and Cyber Security Management Systems. GRVA noted the concern expressed by the expert from Austria about the fact that modern vehicles of these categories were highly connected and automated and were also involved in road traffic. GRVA agreed with the position expressed by CEMA at this stage, as these vehicle categories were not specifically considered when drafting the regulation. GRVA invited the experts from CEMA to review the draft regulation.

18. The expert from FIGIEFA introduced corrections to the wording that they proposed at the fifth session of GRVA. GRVA agreed with the corrections proposed for paragraph 1.4. GRVA referred the part of the proposal addressing the Interpretation Document to the Task Force on CS/OTA for detailed review.

19. The expert from OICA presented GRVA-06-08-Rev.1 introducing GRVA-06-07 proposing amendments to the scope, clarifications in para. 5.1.3., paras. 7.2.2.2-7.2.2.4. and para. 7.3.7., a proposed way forward for the resolution of the discussion on paras. 5.3.1-5.3.4, transitional provisions in para. 7.3.1. and the deletion to the reference to Part. C in Annex 5.

20. The expert from Germany introduced an alternative amendment proposal to the transitional provision para. 7.3.1..

21. The expert from the European Commission introduced GRVA-06-17 and GRVA-06-17-Rev.1, aimed at resolving the Contracting Parties discussion on paras. 5.3.1.-5.3.4. GRVA could not reach consensus on the proposal. GRVA agreed to make further progress until the June 2020 session of WP.29 along the following agreed principles:

  1. Introduction of prescriptions regarding the competencies of the Technical Services involved;
  2. Introduction of provisions on the upload of the type approvals in DETA;
  3. Introduction of a peer review concept that prevents sovereignty issues regarding the issuance of Type Approvals;
  4. Introduction of a reference to Schedule 6 of the 1958 Agreement.

22. The expert from Spain introduced GRVA-06-18 aimed at specifying security definition requirements for the vehicle type. GRVA agreed to consider a revised proposal at its September 2020 session.

23. GRVA adopted GRVA-06-19-Rev.1 and requested the secretariat to submit it (without paras 5.3.1.-5.3.4.) as draft UN Regulation on Cyber Security and Cyber Security Management Systems to WP.29 and AC.1 for consideration and vote at their June 2020 session.

Documentation
GRVA-05-05/Rev.1 Cybersecurity: Proposal for amendments to the draft UN Regulation
GRVA-06-07 Cybersecurity: Suggestion for amendments to GRVA-05-05-Rev.1 (CLEPA and OICA)
GRVA-06-17 Cybersecurity: Proposal for amendments to the draft UN Regulation (EC)
GRVA-06-19/Rev.1 Cybersecurity: Draft proposal for a new UN Regulation