In its regulatory frenzy, the European Commission has once again found itself a new patch of turf to conquer: connected and automated vehicles. Because apparently a sector already covered by type-approval law, dedicated cyber rules, software update rules, data protection law, artificial intelligence law and assorted compliance machinery was still looking a bit too relaxed. So now the idea is to...
The IMDEA Networks research group, together with academic and government partners, has published a new paper on a long-standing problem (e.g. 1, 2, 3, and 4) in vehicle security and privacy: TPMS wheel sensors still tend to broadcast tyre telemetry over the air in clear text and include identifiers that remain stable for long periods. The paper’s central claim is not that this is a new weakness...
English version: The after-effects of the CSMS certification required for market access in Korea, based on UN R155, are multifaceted. They do not play out in isolation within individual OEMs; they have also become a topic in the discussions around amending a free trade agreement (FTA) between the European Union and Korea. How are the two connected? From the perspective of the OEMs that, over...
English Version: Connected vehicles are a near-perfect illustration of how readily Europe can default to a familiar policy pattern: define technical minimum standards, mandate processes, audit artefacts, and assume that “cybersecurity” has thereby been dealt with. In the automotive context, this approach is well institutionalised in Europe, above all through UN Regulation No. 155, with its CSMS...
Mit der Reform des europäischen Roadworthiness Package wird ein altes Prüfregime in eine neue Welt gezwungen. Periodische technische Inspektionen (PTI) und Roadside Inspections (RSI) sollen nicht mehr nur mechanische Zustände, sichtbare Mängel und klassische OBD-Artefakte abklopfen, sondern zunehmend das prüfen, was moderne Fahrzeuge tatsächlich steuert: elektronische Sicherheitssysteme. In...