Proposals harmonising vehicle onboard authorisation concept and data privacy.

The document addresses on-board authentication and authorization in connected vehicles, a complex area involving multiple stakeholders, use cases, implementations, and standards. The core challenge is distinguishing legitimate remote interactions from misuse, manipulation, and integrity loss. Discussions have occurred since 2023 across GRVA, CS/OTA, and WP.29. FIA seeks feedback on establishing the topic and will develop a scoping document and demonstrator based on select use cases including accident investigation, law enforcement, emergency response, energy monitoring, battery tracking, parts replacement, and ITS-related safety. Contracting parties are invited to submit comments and use cases by 15 June 2026 for consideration at the November WP.29 session.

FIA convened a group of interested parties to develop a scoping document on on-board authentication and authorization. Participants expressed support and called for proof of concept built around use cases. Harmonizing access methods was suggested to reduce cybersecurity fragmentation. Key question raised: which authority authenticates and grants access to legitimate parties? Next steps include establishing concrete use cases and providing a recommendation for WP.29 in November. Planned activities prior to the 200th Session of WP.29 in November include finalizing meetings with GR leaderships and other stakeholders, assembling a Group of Core CPs (GCC) to set scope based on use cases, conducting internal work, aligning with the GCC, and updating WP.29 with objective to obtain a mandate for formal work on the topic.