Presentation on the work of the Task Force on Cybersecurity and Over-the-Air Software Updates.
40. The expert from the United Kingdom, Co-Chair of the Task Force CS/OTA reported (GRVA-03-03) on the outcome of the group on software updates (recommendations, provisions regarding the approval of a manufacturer software updates management system and the approval of a vehicle with regards to software updates as well as a proposal for a generic annex for relevant UN Regulations for the implementation of the Software Identification Number for a give Regulations “RxSWIN”) including the ongoing test phase.
41. The expert from CLEPA invited GRVA to think about the role of suppliers in this context. The Task Force Co-Chair answered that the software update process is not dependent upon the origin of the base version, it is an end-to-end process for which a non-corrupted software is transmitted to the vehicle, at the right place and the right time.
42. GRVA discussed the appropriate way to involve the Type Approval Authority in the decision, whether or not an updated software triggers a new RxSWIN.
43. The expert from the European Commission supported the work done. He proposed to inform and involve the other WP.29 subsidiary bodies (“GRs”). He added that, for this purpose, clarifications about the benefits and the added value of this work should be provided in written. He also asked for clarifications about the definition of a vehicle type for the the purpose of the draft regulatory texts proposed.
44. The Chair of GRVA inquired whether the group made progress on making the outcome of the work suitable for use under the 1998 Agreement.
45. The expert from the United States of America confirmed that they provided comments. He mentioned the need for a delicate balance because the work under the 1958 Agreement would be continued and consideration should also be given to its suitability for later adaptation for the 1998 Agreement.
46. The expert from OICA supported the work done. He mentioned that this exercise provided for the first time a systematic link between the software, the hardware and the type approval. He explained that the concept “RxSWIN” was defined under the 1958 Agreement but that it could be used outside of the context of the Agreement. He encouraged is all Countries to use it.
47. GRVA discussed the next steps of the work. GRVA noted that the outcome of the test phase would be presented at the next Task Force meeting end of August in Geneva. GRVA discussed the need for a workshop to include type approval and certification experts in the discussion. GRVA requested the Co-Chairs of the Task Force and the GRVA secretary to liaise and organize the workshop.