63. The expert from the Japanese National Traffic Safety and Environment Laboratory presented GRVA-14-46, reporting on the outcome of workshops on the implementation of UN Regulation No. 155. He recalled the purpose of these workshops, gathering Type Approval Authorities and Technical Services nominated by the contracting parties of the 1958 Agreement. He explained that the outstanding issue discussed by the group was the conditions for acceptance of foreign cyber security management system certificates in the contexts of multi-brand projects and multi-stage type approval. GRVA noted that the workshop activities would come to an end soon and discussed the potential need for similar activities related to UN Regulation No. 156 and software update management systems. GRVA welcomed the report received and noted that the work could result in an amendment proposal to the interpretation document for UN Regulation No. 155 or draft amendments to UN Regulations that could be reviewed by IWG on CS/OTA before submission to GRVA.

59. The expert from CEMA presented GRVA-14-33, detailing the standardization activities and corresponding timeline of the agricultural vehicle industry regarding cyber security and software updates. He clarified, upon request by the expert from the United States of America, that his delegation would support the establishment of a new working group to deal with this issue.

60. The expert from Italy supported the process and activities presented by CEMA. The expert from Germany agreed to review the document prepared by CEMA. The expert from the United Kingdom of Great Britain and Northern Ireland noted that the deliverables of the IWG on Cyber Security (CS) and Over the Air (OTA) issues were very generic, i.e. risk assessment-based requirements and felt that waiting until the standardization process was completed would be too long. The expert from Canada confirmed that the work of the Group was general enough to encompass agricultural vehicles and explained that he was not convinced that there would be many other requirements that the IWG on CS/OTA should review.

61. GRVA noted that some delegations needed more time to consider the CEMA proposal. GRVA encouraged CEMA to liaise with the IWG on CS/OTA. GRVA agreed to keep GRVA-14-33 and GRVA-14-34 on its agenda for the January 2023 session.

59. The expert from CEMA presented GRVA-14-33, detailing the standardization activities and corresponding timeline of the agricultural vehicle industry regarding cyber security and software updates. He clarified, upon request by the expert from the United States of America, that his delegation would support the establishment of a new working group to deal with this issue.

60. The expert from Italy supported the process and activities presented by CEMA. The expert from Germany agreed to review the document prepared by CEMA. The expert from the United Kingdom of Great Britain and Northern Ireland noted that the deliverables of the IWG on Cyber Security (CS) and Over the Air (OTA) issues were very generic, i.e. risk assessment-based requirements and felt that waiting until the standardization process was completed would be too long. The expert from Canada confirmed that the work of the Group was general enough to encompass agricultural vehicles and explained that he was not convinced that there would be many other requirements that the IWG on CS/OTA should review.

61. GRVA noted that some delegations needed more time to consider the CEMA proposal. GRVA encouraged CEMA to liaise with the IWG on CS/OTA. GRVA agreed to keep GRVA-14-33 and GRVA-14-34 on its agenda for the January 2023 session.

64. The expert from SAE International recalled his presentation at the previous session of GRVA. He introduced ECE/TRANS/WP.29/2022/17 and ECE/TRANS/WP.29/2022/18 (GRVA-14-06 provides a version of ECE/TRANS/WP.29/2022/18 with tracked changes), aimed at seeking clarification of the requirements of Annex 5, regarding the authentication of Global Navigation Satellite System (GNSS) messages. The proposals received comments from CLEPA and OICA (GRVA-14-11). GRVA agreed to transmit these four documents listed in this paragraph to IWG on CS/OTA for further discussion.

62. The expert from the Japanese National Traffic Safety and Environment Laboratory presented GRVA-14-07, summarizing the outcome of the workshop on Vehicle Cyber Security, organized for the contracting parties of the 1958 and 1998 Agreements by NTSEL and the secretariat, upon request of GRVA (ECE/TRANS/WP.29/GRVA/13, paras. 48-50). GRVA noted the workshop conclusions: (a) the main impact of UN Regulation No. 155 was due to the Threat Analysis and Risk Assessment (TARA) related requirements, (b) Annex 5 should not become the primary focus or the checklist otherwise the consequence could be a less effective impact of the requirements. GRVA welcomed this report. GRVA agreed on the possibility of organizing another workshop for the contracting parties of the 1958 and especially 1998 Agreements, if requested by a contracting party.

64. The expert from SAE International recalled his presentation at the previous session of GRVA. He introduced ECE/TRANS/WP.29/2022/17 and ECE/TRANS/WP.29/2022/18 (GRVA-14-06 provides a version of ECE/TRANS/WP.29/2022/18 with tracked changes), aimed at seeking clarification of the requirements of Annex 5, regarding the authentication of Global Navigation Satellite System (GNSS) messages. The proposals received comments from CLEPA and OICA (GRVA-14-11). GRVA agreed to transmit these four documents listed in this paragraph to IWG on CS/OTA for further discussion.

64. The expert from SAE International recalled his presentation at the previous session of GRVA. He introduced ECE/TRANS/WP.29/2022/17 and ECE/TRANS/WP.29/2022/18 (GRVA-14-06 provides a version of ECE/TRANS/WP.29/2022/18 with tracked changes), aimed at seeking clarification of the requirements of Annex 5, regarding the authentication of Global Navigation Satellite System (GNSS) messages. The proposals received comments from CLEPA and OICA (GRVA-14-11). GRVA agreed to transmit these four documents listed in this paragraph to IWG on CS/OTA for further discussion.

64. The expert from SAE International recalled his presentation at the previous session of GRVA. He introduced ECE/TRANS/WP.29/2022/17 and ECE/TRANS/WP.29/2022/18 (GRVA-14-06 provides a version of ECE/TRANS/WP.29/2022/18 with tracked changes), aimed at seeking clarification of the requirements of Annex 5, regarding the authentication of Global Navigation Satellite System (GNSS) messages. The proposals received comments from CLEPA and OICA (GRVA-14-11). GRVA agreed to transmit these four documents listed in this paragraph to IWG on CS/OTA for further discussion.

69. The expert from AUTOSAR introduced his organization (GRVA-13-46), in line with the decision of AC.2 at its June 2021 session.

51. The expert from SAE International presented GRVA-13-28/Rev.1, introducing GRVA-13-26 and GRVA-13-29, proposing updates to references to ISO/SAE 21343 in the interpretation document for UN Regulation No. 155 and proposing clarifications in UN Regulation No. 155 regarding the authentication of Global Navigation Satellite System (GNSS) messages. GRVA requested the secretariat to distribute GRVA-13-26 and GRVA-13-29 with official symbols at the next session with the necessary changes to produce: (i) an amendment proposal to UN Regulation No. 155 and (ii) an amendment proposal to the interpretation document.

45. The expert from Japan, co-organizer (together with the secretariat) of 10 workshops on the implementation of UN Regulation No. 155, reported on recent activities (GRVA-13-16). He highlighted one of the key elements discussed during the workshops related to CSMS in the case of collaborations between two manufacturers or in the case of a product sold under several brands. GRVA thanked Japan and the Secretary for these efforts to build capacity and support uniform application of the Regulation.

46. GRVA noted the importance of these activities, supporting the uniform application of UN Regulations by the Contracting Parties and allowing exchange among the type approval authorities. GRVA noted the limit of virtual meetings for such activities and encouraged the organizers to consider some in-person sessions. GRVA also noted that the outcome of this work could form the basis for future amendments to the Interpretation document of UN Regulation No. 155.

47. The expert from OICA welcomed these activities and offered potential contributions of the industry if some sessions would be open for participation by industry. GRVA agreed to consider the organization model used during the first session, held on 8 July 2021.

48. The expert from China introduced GRVA-13-31, explaining the activities performed in China regarding the elaboration of a national standard on the basis of UN Regulation No.155, the difficulty related to the lack of pass/fail criteria in the Regulation and mentioning the difficulty for China to perform the peer review as prescribed in para. 5.3. to the regulation, in the absence of access to the Database for Exchange of Type Approval documentation (DETA).

49. The expert from the United States of America pointed out at ECE/TRANS/WP.29/2022/60 and suggested to develop that document further, if needed, to address China’s concern.

50. GRVA agreed to address China’s request and decided to organize, before the summer break, a technical workshop on the implementation of Cyber Security provisions under the 1958 and 1998 Agreements, on the model of those already organized for the implementation of UN Regulation No. 155. GRVA invited Japan and the Secretary to organize it as a virtual meeting in English only. GRVA hoped to receive a report on this workstream at the September 2022 session of GRVA.

51. The expert from SAE International presented GRVA-13-28/Rev.1, introducing GRVA-13-26 and GRVA-13-29, proposing updates to references to ISO/SAE 21343 in the interpretation document for UN Regulation No. 155 and proposing clarifications in UN Regulation No. 155 regarding the authentication of Global Navigation Satellite System (GNSS) messages. GRVA requested the secretariat to distribute GRVA-13-26 and GRVA-13-29 with official symbols at the next session with the necessary changes to produce: (i) an amendment proposal to UN Regulation No. 155 and (ii) an amendment proposal to the interpretation document.

51. The expert from SAE International presented GRVA-13-28/Rev.1, introducing GRVA-13-26 and GRVA-13-29, proposing updates to references to ISO/SAE 21343 in the interpretation document for UN Regulation No. 155 and proposing clarifications in UN Regulation No. 155 regarding the authentication of Global Navigation Satellite System (GNSS) messages. GRVA requested the secretariat to distribute GRVA-13-26 and GRVA-13-29 with official symbols at the next session with the necessary changes to produce: (i) an amendment proposal to UN Regulation No. 155 and (ii) an amendment proposal to the interpretation document.

102. The Chair of GRVA recalled the purpose of the interpretation document for UN Regulation No. 155. He presented ECE/TRANS/WP.29/2022/61, proposing updates to the interpretation document that were reflecting the published final version of the ISO/SAE 21434 standard referred to in that document. He announced that GRVA would potentially submit further amendments for consideration at the March 2023 session of WP.29.

103. WP.29 adopted that document with the following amendments:

Section Y, amend the quote of para. 7.3.1 in UN Regulation No. 155, to read:

67. The Chair of GRVA recalled the purpose of ECE/TRANS/WP.29/2022/55, proposing amendments to the Interpretation document on UN Regulation No. 155 (ECE/TRANS/WP.29/2021/59).

68. WP.29 adopted ECE/TRANS/WP.29/2022/55.

91. The Chair of WP.29 recalled the discussions on this topic and the adoption of document ECE/TRANS/WP.29/2022/55 by WP.29 under agenda item 4.2.3. (see paras. 67-68 above).

46. The expert from CLEPA presented GRVA-12-37 with corrections proposals to references to the standard ISO/SAE 21434. GRVA adopted the document GRVA-12-37 and requested the secretariat to submit it to WP.29 for consideration and vote at its June 2022 session.

35. The expert from Japan, co-organizer (together with the secretariat) of workshops on the implementation of UN Regulation No. 155, reported on recent activities (GRVA-12-21). GRVA thanked Japan and the secretariat for these efforts to build capacity and support uniform application of the regulation.

37. The expert from CEMA presented GRVA-12-05, recalling the CEMA position regarding UN Regulations Nos. 155 and 156. He also recalled the request of CEMA to remove the Categories S, R and T from the scope of UN Regulation No. 156. He claimed that the vehicles of these categories, even though similar, were different from other vehicle categories (such as trucks). He acknowledged that over-the-air software updates were performed by vehicle types of these three categories. He pointed at the case of all-terrain vehicles, that were either belonging to the Category L (and as such not being subject to UN Regulation No. 156), or to the Category T (and be subject to UN Regulation No. 156).

38. The expert from Germany mentioned that a market analysis exercise showed that vehicles of Categories S, R and T included automated driving systems on field; such equipment was mature and well developed. She noted that such vehicles were also driven on public roads and that, even though their maximum speed was lower than the one of other vehicles, they were characterized by their high torque and were therefore hard to stop. These vehicles, as such, were therefore posing a risk in traffic that could be addressed by that regulation. She supported the inclusion of these vehicle categories in the scope of UN Regulation No. 155 and to keep them in UN Regulation No. 156. She added that lead-time could be envisaged, and she suggested a transition period of five years.

39. The expert from Italy suggested to remove these three vehicle categories from the scope of UN Regulation No. 156, until appropriate work is conducted.

40. The expert from the European Commission confirmed that the European Union did not mandate the application of UN Regulation No. 156 and that this topic was not considered as a priority for the region. He recalled that the Category L was included in the scope of UN Regulation No. 155, but limited to automated vehicles.

41. The expert from United Kingdom of Great Britain and Northern Ireland recalled that vehicles of Category L were exempted because they were unlikely to be connected vehicles. He stressed that many new vehicles of the Category T were connected and automated. He therefore supported that they were subject to cyber security requirements. He added that he struggled to understand why Category T vehicle manufacturers would struggle to implement UN Regulation No. 156, as its provisions were primarily about software management. He assumed that reputable firms would already comply with such requirements.

42. The experts from Luxembourg and the Netherlands supported the experts from Germany and from the United Kingdom of Great Britain and Northern Ireland.

43. The expert from Denmark stated that he was not in the position to express any position on this matter as such matters would be relevant for another ministry in his country.

44. The expert from Spain agreed with the expert from Italy.

45. GRVA agreed to keep the three Categories S, R and T in the scope of UN Regulation No. 156 and to resume consideration of this item at the next session in order to develop a road map for their future inclusion in UN Regulation No. 155.

52. GRVA noted that CEMA would present a roadmap proposal concerning the vehicle categories S, R, T with regards to the scopes of UN Regulations Nos. 155 and 156. The expert from CEMA detailed that CEMA had taken necessary steps to organize the work from the industry side, divided over different groups with CEMA being the steering committee, the Agricultural industry Electronics Foundation (AEF) taking the lead in the content development, and the German Mechanical Engineering Industry Association (VDMA) being in charge of the standardization actions within the subcommittee 19 of the technical committee 23 of ISO.

53. GRVA recalled the purpose of GRVA-12-05 tabled by the expert from CEMA and dealt with this item together with item 5(a). The expert from CEMA clarified that their activities, reported above under item 5(a), were also relevant under agenda item 5(b).