FIA convened a group of interested parties to develop a scoping document on on-board authentication and authorization. Participants expressed support and called for proof of concept built around use cases. Harmonizing access methods was suggested to reduce cybersecurity fragmentation. Key question raised: which authority authenticates and grants access to legitimate parties? Next steps include establishing concrete use cases and providing a recommendation for WP.29 in November. Planned activities prior to the 200th Session of WP.29 in November include finalizing meetings with GR leaderships and other stakeholders, assembling a Group of Core CPs (GCC) to set scope based on use cases, conducting internal work, aligning with the GCC, and updating WP.29 with objective to obtain a mandate for formal work on the topic.

China supports establishing a new task force or informal working group on vehicle data security and sees the need for a dedicated UN Regulation or Global Technical Regulation. Work can begin with applicability analysis of existing regulations, gradually establishing the main framework of the standard, the scope of data management, and handling of special cases. China is ready to act as a key contributor, offering typical use cases, design questionnaires based on GB 44497 and GB 44464, delivering terms of reference with other Contracting Parties, and proposing basic framework and specific requirements by February 2028.

The document addresses on-board authentication and authorization in connected vehicles, a complex area involving multiple stakeholders, use cases, implementations, and standards. The core challenge is distinguishing legitimate remote interactions from misuse, manipulation, and integrity loss. Discussions have occurred since 2023 across GRVA, CS/OTA, and WP.29. FIA seeks feedback on establishing the topic and will develop a scoping document and demonstrator based on select use cases including accident investigation, law enforcement, emergency response, energy monitoring, battery tracking, parts replacement, and ITS-related safety. Contracting parties are invited to submit comments and use cases by 15 June 2026 for consideration at the November WP.29 session.

CITA presented PTI-42-02 to link the PTI informal group’s work to the approval of the EU Roadworthiness Package. FSD proposed work to introduce PTI provisions into UN Regulations under the 1958 Agreement. Japan, Russia, and FSD provided brief updates on the use of diagnostic devices to access to in-vehicle data. CITA updated the group on its views concerning PTI for ADS vehicles. CITA explained GRVA/2025/43, GRVA/2025/44, GRVA/2025/34, and GRVA-23-18/Rev.1 on Electromechanical Braking and Parking Lock Devices which will be considered by WP.29 in March.