European Framework for C-ITS Security 6 th of March 2018 Gerhard Menzel European Commission

Transcription

1 European Framework for C-ITS Security 6 th of March 2018 Gerhard Menzel European Commission

2

3 Key EU Policy Milestones to deliver C-ITS in Europe by 2019 Cooperative Intelligent Transport Systems A European Strategy on Cooperative Intelligent Transport Systems, November 2016 Connected Vehicles European Certificate & Security Policy for Deployment and Operation of European C-ITS, June & December 2017 Automated Vehicles Commission Delegated Act on Cooperative Intelligent Transport Systems, foreseen 2018

4 C-ITS Platform Phase I Setting the scene for the Pan-European Deployment of Cooperative, Connected and Automated Vehicles Common vision and identification of open issues C-ITS Platform Phase II Implement recommendations of first phase Analyse how cooperation, connectivity and automation converge C-ITS platform final report & Annexes available at:

5 EU C-ITS Strategy COM (2016) 766 C-ITS Strategy COM (2016) A European strategy on Cooperative Intelligent Transport Systems, a milestone towards cooperative, connected and automated mobility Clear path on C-ITS Security in the EU from the Commission ort/themes/its/c-its_en

6 June / December 2017: C-ITS Certificate & Security Policy published! transport/themes/its/ c-its_en

7 C-ITS Security EU Trust Model

8 Policy Authority EU Coordination Role "TLM/CPOC" EU Root CA run by the EC for all who don t run their own Root CA 1 Root CA 2 e.g. run by Member State 1 e.g. privately run by a manufacturer Root CA 2 e.g. run by Member State 2... Root CA N in theory many Root CAs are possible run by public or private Scope of EU CCMS pilot phase Legend: TLM Trust List Manager CPOC C-ITS Point of Contact CA Certificate Authority

9 European Union C-ITS Security Credential Management System Pilot Phase (EU CCMS) 4 year fully financed pilot operation of an European C-ITS Credential Management System ("PKI") implemented and operated by the European Commission Funds of CEF Public Support Action (Work Programme 2016) Provision of common European elements: Full setup of CPOC, TLM and EU Root CA to support initial C-ITS deployment in Europe as defined in Release 1 of the certificate & security policy documents Time Horizon Pilot Phase:

10 European Union C-ITS Security Credential Management System Pilot Phase (EU CCMS) First Tenders expected to be launched 2018, currently in preparation mainly for CPOC protocol definitions and TLM setup Goal is to provide a first prototype version of the TLM / CPOC functionalities already in 2018 for early deployment initatives for testing purposes (e.g. C-Roads Member States or single OEMs) to be confirmed Open to all stakeholders and C-ITS Day 1 deployment initiatives

11 C-ITS Security: Current topics (1/4) Timely Update of Certificate Policy Release 1 is needed Alignment with Security Policy Release 1 Update of yellow items & inconsistencies, some commitments for the update of the Certificate Policy were already taken in December C-ITS Security Workshop in Brussels, e.g.: Protection Profiles SOG-IS process AT Validity period 1 week, max. 100 ATs valid in parallel TS v1.3.1 applies migration needs! (e.g. EU CCMS TLM/CPOC will not support old versions of this standard) Workshop planned spring 2018 details & invitations will follow

12 C-ITS Security: Current topics (2/4) Update of ETSI Standards Urgent Call for ETSI to release new version of ETSI TS in alignment with TS v1.3.1 Updated ETSI is needed for all deployment initiatives as well as the EU CCMS activities!

13 C-ITS Security: Current topics (3/4) Applicability of EU Certificate & Security Policy (CP/SP) Reminder: C-ITS services and hence C-ITS security needs to be fully interoperable. There is only 1 single trust domain in Europe. The CP/SP are fully communication technology layer agnostic. They equally and fully apply to short range (e.g. ITS-G5) or long range cellular based technologies (Hybrid!). Secure communication is NOT enough! (e.g. through proprietary solutions) ITS stations sign messages with certificates to ensure Authenticity (from a trusted source) & Integrity (not modified). ALL ITS stations need to comply to CP/SP and EU CCMS for EU wide interoperability, no matter the communication technology.

14 C-ITS Security: Current topics (4/4) Protection Profiles for C-ITS Stations CP/SP demands protection profiles certified through SOG-IS process At this moment no publicly available protection profile exists for mobile or fixed C-ITS stations Any updates on that by the C-ITS community? EC happy to assist wherever possible and needed.

15 More Information Cooperative, connected and automated mobility (C-ITS): Thank you for your attention! Gerhard Menzel European Commission - DG JRC E.3: Cyber & Digital Citizens Security