CS/OTA Task Force (TFCS) reports to GRVA
Documents
23 Jan 2017 Draft minutes of the first Cybersecurity Task Force session TFCS-01-11 2017-01-23
23 Jan 2017 List of participants from the first Cybersecurity Task Force session TFCS-01-12 2017-01-23
17 Jan 2017 Provisional agenda for the 2nd TFCS task force session TFCS-02-01/Rev.1 2017-01-17
2 Feb 2017 Updated terms of reference for the Task Force on Cybersecurity and Over-the-Air Updates (marked) TFCS-02-02/A/Rev.1 2017-02-02
23 Jan 2017 Draft terms of reference for the Task Force on Cybersecurity and Over-the-Air Updates following Japan review (Japan) TFCS-02-02/Rev.1 2017-01-23 Japanese revisions to the draft ToR. Japan
2 Feb 2017 Updated terms of reference for the Task Force on Cybersecurity and Over-the-Air Updates (clean) TFCS-02-02/Rev.1 2017-02-02
23 Jan 2017 How to reach the OICA offices in Paris (for the 3rd TFCS session) 2017-01-23
15 Feb 2017 Draft agenda for the 3rd Cybersecurity Task Force session TFCS-03-01/Rev.2 2017-02-15
7 Feb 2017 Draft minutes of the 2nd Cybersecurity and OTA Updates Task Force TFCS-03-03 2017-02-07
6 Feb 2017 Cybersecurity and OTA Update Task Force draft terms of reference (clean version) TFCS-03-04 2017-02-06
6 Feb 2017 Cybersecurity and OTA Update Task Force draft terms of reference (tracked version) TFCS-03-04/Alt. 2017-02-06
15 Feb 2017 Draft list of terms and definitions related to cybersecurity and data protection (UK) TFCS-03-05/Rev.1 2017-02-15 UK
6 Feb 2017 Initial list of possible cybersecurity risks and threats (DfT) TFCS-03-06 2017-02-06 DfT
20 Feb 2017 Draft Intelligent Transport System (ITS) & Connected and Automated Vehicle (CAV) Cybersecurity Principles TFCS-03-07/Rev.1 2017-02-20
6 Feb 2017 US NHTSA Federal Guidance for Improving Motor Vehicle Cybersecurity (NHTSA and USA) TFCS-03-08 2017-02-06 NHTSA USA
10 Feb 2017 Cyber Security and Resilience of smart cars: Good practices and recommendations (ENISA) TFCS-03-09 2017-02-10 ENISA
10 Feb 2017 Template for the proposed mutual resolution on cybersecurity and data protection TFCS-03-10 2017-02-10
20 Feb 2017 China proposals for cybersecurity (China) TFCS-03-11 2017-02-20 China
20 Feb 2017 Presentation on vehicle software updates (OICA) TFCS-03-12 2017-02-20 OICA
15 Feb 2017 Example of type approval for software updates: Steering systems with ACSF (OICA) TFCS-03-13 2017-02-15 OICA
20 Feb 2017 Overview of outcomes of the 3rd TFCS session TFCS-03-14 2017-02-20
28 Jan 2017 Provisional agenda for the 4th Cybersecurity Task Force session TFCS-04-01 2017-01-28
9 Mar 2017 Revised minutes of the 3rd TFCS subgroup session TFCS-04-02/Rev.1 2017-03-09
17 Mar 2017 Cybersecurity threats table draft pursuant to the Ad Hoc Threats group discussions TFCS-04-03/Rev.3 2017-03-17 Draft table pursuant to the discussions on the second day of the task force session.
8 Mar 2017 TRL study on the assessment and certification of automated vehicles (EC and TRL) TFCS-04-04 2017-03-08 EC TRL
8 Mar 2017 Approaches for Vehicle Information Security (IPA) TFCS-04-05 2017-03-08 IPA
10 Mar 2017 Japan presentation on type-approval issues raised by software updates of automated vehicles (Japan and NTSEL) TFCS-04-06/Rev.1 2017-03-10 Japan NTSEL
8 Mar 2017 G7 Principles and Actions on Cybersecurity (OICA) TFCS-04-07 2017-03-08 OICA
8 Mar 2017 Joint Declaration by G7 Information and Communication Technology (ICT) Ministers (OICA) TFCS-04-08 2017-03-08 OICA
13 Mar 2017 Introduction to the ITU-T SG17 study group on communications security (ITU and NICT) TFCS-04-10 2017-03-13 ITU NICT
13 Mar 2017 ITU-T request for input concerning standardization of communications security (ITU and NICT) TFCS-04-11 2017-03-13 Request for input on motor-vehicle cybersecurity. ITU NICT
14 Mar 2017 Type approval of software updates (Netherlands) TFCS-04-12 2017-03-14 Netherlands
14 Mar 2017 Cybersecurity reference model TFCS-04-13 2017-03-14
14 Mar 2017 Outcomes of the 4th Cybersecurity Task Force session TFCS-04-14 2017-03-14
10 May 2017 Agenda for the 5th Cybersecurity Task Force (TFCS) session TFCS-05-01/Rev.1 2017-05-10
10 Apr 2017 Minutes of the 4th Cybersecurity Task Force session TFCS-05-02 2017-04-10
10 Apr 2017 Cybersecurity matrix on the impact of software updates on type approval and registration TFCS-05-03 2017-04-10 Task force draft table considering levels of importance that software updates might have on the validity of type approvals/registrations of automated vehicles.
28 Apr 2017 Minutes of the 2nd ad hoc session on cybersecurity threats TFCS-05-04 2017-04-28
22 Apr 2017 Table of potential cybersecurity threats as agreed during the second "Threats" ad hoc group session TFCS-05-05 2017-04-22 Clean version of the draft document developed during the ad hoc group session.
11 May 2017 Table of potential cybersecurity threats as agreed during the 5th TFCS session TFCS-05-05/Rev.1 2017-05-11
8 Jun 2017 Table of potential cybersecurity threats with explanations and definitions TFCS-05-05/Rev.2 2017-06-08
28 Apr 2017 Type approval issues and vehicle software updates (Japan and NTSEL) TFCS-05-06 2017-04-28 Summary of discussions, including related to the International Whole Vehicle Type Approval, on issues raised by the prospects for automated vehicle software updates under the type approval system. Japan NTSEL
28 Apr 2017 Japan suggestion for a summarizing process to unite technical items with cybersecurity principles (Japan) TFCS-05-07 2017-04-28 Japan
28 Apr 2017 OICA input concerning software updates under type approval and periodic techical inspections (OICA) TFCS-05-08 2017-04-28 OICA
28 Apr 2017 Rationale for updates made to the cybersecurity threats matrix (Netherlands) TFCS-05-09 2017-04-28 Netherlands
4 May 2017 UK reasoning behind its additions to the cybersecurity threats matrix (UK) TFCS-05-10 2017-05-04 UK
9 May 2017 FIA Draft Definitions on Data Privacy and Authorisation (FIA Foundation) TFCS-05-11 2017-05-09 FIA Foundation
11 May 2017 General overview of ISO-SAE 21434 Cybersecurity Engineering (CLEPA and OICA) TFCS-05-12 2017-05-11 CLEPA OICA
11 May 2017 Reference Architecture Model Automotive (RAMA) (Germany) TFCS-05-13 2017-05-11 Germany
11 May 2017 Summary of UNECE cybersecurity mitigations (UK) TFCS-05-14 2017-05-11 This is an extraction and abridged summary of recommendations from papers on vehicle cybersecurity. UK
11 May 2017 Cybersecurity principles identified by the UK Department for Transport (DfT) TFCS-05-15 2017-05-11 DfT
11 May 2017 Table of cybersecurity threats and principles (UK) TFCS-05-16 2017-05-11 UK
11 May 2017 ITU definitions of cybersecurity-related terms (September 2016 revision) (ITU) TFCS-05-17 2017-05-11 ITU
11 May 2017 Document references concerning the mitigation of cybersecurity threats TFCS-05-18 2017-05-11
16 May 2017 Outcomes of the 5th Cybersecurity Task Force session TFCS-05-19 2017-05-16
12 May 2017 OICA-CLEPA presentation of an extended approach to cybersecurity protection goals (CLEPA and OICA) TFCS-05-20 2017-05-12 CLEPA OICA
12 Jun 2017 Provisional agenda for the 6th Cybersecurity Task Force (TFCS) session TFCS-06-01/Rev.2 2017-06-12
8 Jun 2017 Minutes of the 5th Cybersecurity Task Force session TFCS-06-02 2017-06-08
2 Jun 2017 Software updates and type approval discussion paper (Germany and KBA) TFCS-06-03 2017-06-02 Germany's type-approval authority (KBA) input on monitoring and assessing changes to vehicle software applications that impact criteria used in the type approval of vehicles and component systems. The presentation discusses the possibilities for type approval of software applications and for the use of periodic technical inspections to detect significant anomalies. Germany KBA
6 Jun 2017 Type approval and control of software configurations (CLEPA and OICA) TFCS-06-04 2017-06-06 Proposal first presented to the ACSF informal group for a type-approval mechanism to control for updates to software dependent systems. CLEPA OICA
8 Jun 2017 Table of cybersecurity threats with principles for cybersecurity (UK) TFCS-06-05/Rev.1 2017-06-08 UK
7 Jun 2017 Japan draft of cybersecurity threats including cybersecurity principles drafts (Japan) TFCS-06-06 2017-06-07 Japan
7 Jun 2017 Japan proposal for next Cybersecurity Task Force actions based on the cybersecurity threats table (Japan) TFCS-06-07 2017-06-07 Japan
7 Jun 2017 Japan presentation on the development of a common proposal to address issues raised by software updates of automated vehicles (Japan and NTSEL) TFCS-06-08 2017-06-07 Japan NTSEL
7 Jun 2017 Japan proposal concerning procedures for vehicle software updates by wireless technology (Japan) TFCS-06-09 2017-06-07 Procedures in relation to type approval, etc. concerning update of vehicle systems by wireless communication technology. Japan
7 Jun 2017 OICA-CLEPA table of cybersecurity threats including extended CIA approach plus mitigations (CLEPA and OICA) TFCS-06-10 2017-06-07 CLEPA OICA
7 Jun 2017 OICA-CLEPA presentation on cybersecurity mitigation principles (CLEPA and OICA) TFCS-06-11 2017-06-07 CLEPA OICA
7 Jun 2017 UK analysis of the cybersecurity threats table in view of the Department for Transport cyber principles (sub-principles) (DfT) TFCS-06-12 2017-06-07 DfT
9 Jun 2017 Japan updated table on cybersecurity threats and mitigations (Japan) TFCS-06-13 2017-06-09 Table on CS threats prepared by Japan with extended CIA approach including mitigations from OICA, UK DfT principles and ITS-AD Guidelines. Japan
13 Jun 2017 Vehicle cybersecurity case studies: Identification of threats and vulnerabilities (ITU and NICT) TFCS-06-14 2017-06-13 ITU NICT
14 Jun 2017 Overview of the Uptane motor vehicle cybersecurity (Uptane) TFCS-06-15/Rev.1 2017-06-14 Introduction to a US research consortium developing an architecture in collaboration with major automotive companies to prevent third-party intrusion into vehicle software systems. Uptane
14 Jun 2017 Netherlands update of the cybersecurity threats matrix with comments on the OICA mitigations (Netherlands) TFCS-06-16 2017-06-14 Netherlands
14 Jun 2017 Progress report on OTA software updates and type approval TFCS-06-17 2017-06-14 Review of the TFCS work considering eventual regulatory responses to the impact of software updates on the validity of type approvals.
14 Jun 2017 ITU reponses to OICA-CLEPA proposals for cybersecurity threat mitigation principles (ITU and NICT) TFCS-06-18 2017-06-14 ITU NICT
14 Jun 2017 Outcomes of the 6th Cybersecurity Task Force session TFCS-06-19 2017-06-14
19 Jun 2017 Status report of the Cybersecurity and OTA updates task force TFCS-06-20 2017-06-19
24 Aug 2017 Draft agenda for the 7th Cybersecurity/OTA task force session TFCS-07-01/Rev.4 2017-08-24
13 Jul 2017 Minutes of the 6th Cybersecurity/OTA task force session TFCS-07-02 2017-07-13
24 Aug 2017 Update from ITU-T Study Group 17 (ITU) TFCS-07-03 2017-08-24 ITU
24 Aug 2017 Summary of mitigations identified in the cybersecurity threats matrix table TFCS-07-04 2017-08-24
24 Aug 2017 TFCS working draft for a new regulation on vehicle systems software TFCS-07-05 2017-08-24 Working draft towards establishing a UN Regulation for the approval of performance-critical software systems and for tracking and approving updates to such software systems.
24 Aug 2017 UN Regulation No. 79 software provisions draft (Netherlands) TFCS-07-06 2017-08-24 Netherlands proposal for incorporating the UN Regulation on software systems (under development within the Cybersecurity/OTA task force) into UN Regulation No. 79 on steering. UN R79 is being updated to address the approval of automated steering functions. This document is a version of the regulation with a new paragraph 5.1.11.: "The performance of the steering system shall not be adversely affected by the software present in the system. This shall be demonstrated by compliance with the technical requirements and transitional provisions of Regulation No. X[Software Regulations], series of amendments or any later series of amendments." Netherlands
30 Aug 2017 Japan opinion on the software identification number (SWIN) (Japan) TFCS-07-07/Rev.1 2017-08-30 Japan
24 Aug 2017 Discussion paper on handling of the Cybersecurity Task Force recommendations within WP.29 TFCS-07-08 2017-08-24 The Cybersecurity Task Force has been developing recommendations on cybersecurity threat mitigation. This presentation opens a discussion on how such recommendations might be codified under the 1958 Agreement and Consolidated Resolution on the Construction of Vehicles (RE3).
28 Aug 2017 Case studies on software updates (Japan) TFCS-07-09 2017-08-28 Japan
30 Aug 2017 Cybersecurity threat mitigations table as revised during Day 1 of the 7th TFCS session TFCS-07-10 2017-08-30
31 Aug 2017 Cybersecurity threat mitigations table as finalized during Day 2 of the 7th TFCS session TFCS-07-10/Rev.1 2017-08-31
30 Aug 2017 Working draft recommendations on cybersecurity threat mitigation TFCS-07-11 2017-08-30 Initial outline for the recommendations to WP.29 from the Task Force on Cybersecurity and Over-The-Air Updates (TFCS).
31 Aug 2017 Presentation to the Cybersecurity/OTA Updates Task Force on the Data Exchange for Type Approvals (Netherlands) TFCS-07-12 2017-08-31 Netherlands
31 Aug 2017 Presentation to the Cybersecurity/OTA Updates Task Force on the the European Car and driving license Information System (EUCARIS) (Netherlands) TFCS-07-13 2017-08-31 Netherlands
12 Sep 2017 Outcomes of the 7th Cybersecurity Task Force session TFCS-07-14/Rev.1 2017-09-12
29 Jun 2017 Logistical information for the 8th Cybersecurity/OTA task force session 2017-06-29
6 Oct 2017 Draft agenda for the 8th Cybersecurity task force session TFCS-08-01/Rev.1 2017-10-06
4 Oct 2017 Minutes of the 7th Cybersecurity task force session TFCS-08-02 2017-10-04
25 Sep 2017 Cybersecurity threat mitigations table (clean version) TFCS-08-03 2017-09-25
6 Oct 2017 Draft Recommendations on Cybersecurity (version 3) TFCS-08-04/Rev.1 2017-10-06 Working draft "Recommendation of the Task Force on Cyber Security and Over-the-air issues".
4 Oct 2017 Reference Architecture Model Automotive (RAMA) (Germany) TFCS-08-05 2017-10-04 RAMA is a graphical representation to model vehicular information and communication technology of (connected) vehicles. It models the integration of vehicles in their environment as well as the whole vehicular life cycle from the beginning of the development till scrapping. RAMA is an adaptation of the Reference Architectural Model Industrie 4.0 (RAMI 4.0) of the VDI, VDE and ZVEI for the automotive domain [1]. Germany
4 Oct 2017 Safety aspects of software updates (KBA) TFCS-08-06 2017-10-04 KBA
5 Oct 2017 Draft categorization of security controls (ITU) TFCS-08-07 2017-10-05 Draft framework for cybersecurity and data management guidelines. ITU
11 Oct 2017 Japan suggestions concerning software updates (Japan) TFCS-08-08/Rev.1 2017-10-11 Japan
11 Oct 2017 Netherlands presentation on software regulation (Netherlands) TFCS-08-09 2017-10-11 Discussion of the possibilities for regulating critical vehicle software systems. Netherlands
14 Oct 2017 Draft Recommendations on Cybersecurity pursuant to TFCS-8 TFCS-08-10 2017-10-14 Updated and amended working draft of the cybersecurity recommendations for regulators pursuant to the 8th (October 2017) Cybersecurity and Over-the-Air Updates Task Force session.
23 Oct 2017 Amended draft on Recommendations for Software Updates following TFCS-08 - cleaned TFCS-08-11 2017-10-23
4 Oct 2017 Directions to OICA for the 9th TFCS session 2017-10-04
9 Nov 2017 Draft agenda for the 9th Cybersecurity task force session TFCS-09-01/Rev.1 2017-11-09
9 Nov 2017 Minutes of the 8th Cybersecurity Task Force session TFCS-09-02/Rev.1 2017-11-09
1 Nov 2017 Overview slide on Software Updates TFCS-09-03 2017-11-01
1 Nov 2017 Draft paper on Recommendations for Cyber Security - commented version TFCS-09-04 2017-11-01
2 Nov 2017 Draft paper on Recommendations for Cyber Security - clean version TFCS-09-04/Rev.1 2017-11-02
6 Nov 2017 Draft paper on Recommendations for Cyber Security - clean version with updates TFCS-09-04/Rev.2 2017-11-06
2 Nov 2017 Software validation: Japan comments on the German proposal regarding safety aspects of software updates (Japan) TFCS-09-05 2017-11-02 Japan
6 Nov 2017 Draft paper on Recommendations for Software Updates - tracked changes TFCS-09-06 2017-11-06
6 Nov 2017 Draft paper on Recommendations for Software Updates - clean version TFCS-09-06/Rev.1 2017-11-06
9 Nov 2017 Identification of Over-the-Air Update safety issues (Japan) TFCS-09-07 2017-11-09 Japan
9 Nov 2017 Japan comments on draft software updates recommendations paper (Japan) TFCS-09-08 2017-11-09 Japan
9 Nov 2017 Software updates flowchart (Netherlands) TFCS-09-09 2017-11-09 Netherlands
10 Nov 2017 Korea proposals for cybersecurity mitigations paper (Korea) TFCS-09-10 2017-11-10 Korea
10 Nov 2017 Cybersecurity mitigations table as updated during the 9th Cybersecurity Task Force session TFCS-09-11 2017-11-10
10 Nov 2017 Cybersecurity overview slide: Reference model TFCS-09-12 2017-11-10
28 Nov 2017 Draft Recommendation on Cyber Security (v0.2) TFCS-09-14 2017-11-28 Draft paper from the Task Force on Cyber Security and Over-the-Air Updates following its 9th session, including a new format and numbering.
11 Dec 2017 Draft cyber security recommendations paper following 8 Dec 2017 teleconference TFCS-09-14/Rev.1 2017-12-11 Working draft of cyber security recommendations with changes agreed during the Cyber Security and OTA Updates task force teleconference on 8 December 2017.
28 Nov 2017 Draft Recommendation on Software Updates (v0.2) TFCS-09-15 2017-11-28 Draft paper of the Task Force on Cyber Security and Over-the-Air Updates pursuant to its 9th session, including a new format and numbering.
8 Dec 2017 Draft Recommendation on Software Updates (v0.3 as of 7 December 2017) TFCS-09-15/Rev.1 2017-12-08 Working draft with tracked changes pursuant to the first ad hoc session on "Recommendation on Software Updates" held by telephone on 7 December 2017.
15 Dec 2017 Draft Recommendations on Software Updates (v0.4 as of 15 December 2017) TFCS-09-15/Rev.2 2017-12-15 Draft paper pursuant to the ad hoc group teleconference on 15 December 2017.
27 Dec 2017 Draft paper on Recommendations for Software Updates – with suggested amendments TFCS-10-04 2017-12-27
27 Dec 2017 Germany comments on the draft paper on Recommendations for Software Updates (Germany) TFCS-10-05 2017-12-27 Germany