Making Security & Privacy Protection Open Source. Christophe Jouvray, Michel Sall , Stockholm

Transcription

1 Making Security & Privacy Protection Open Source Christophe Jouvray, Michel Sall , Stockholm

2 Structure of the Presentation General Information Open Source VSS Kit Compliance with standards Availability Conclusion Making Security & Privacy Prot. Open Source

3 General Information Security stack for V2X Communications Compliant with current standards IEEE D12 ETSI TS v ( ) Already integrated & deployed NEC/Drive C2X Denso Hitachi Stack for ETSI Plugtests PRESERVE Hybrid FOT (25 units) Compass4D - Planed Making Security & Privacy Prot. Open Source

4 Flexibility of the VSS Kit Multi-platform Denso (ppc) MK3 (arm) Nexcom (x86 32 bits) Linkbird (MIPS) x86 64 bits Several possible configurations With a HSM Full software based on Cycurlib library (escrypt) OpenSSL library Adaptable convergence layer for integration with a communication stack Making Security & Privacy Prot. Open Source

5 Content of the VSS Kit Libraries for all platforms and configurations Some documentations User guide Registration, enrollment and pseudonym update process information Meta data information related to permissions, encryption,... Licenses (e.g. LGPL2) Making Security & Privacy Prot. Open Source

6 Implemented Functionalities Sign/Verify Encrypt/Decrypt Pseudonym management Pseudonym change According to the defined policy (e.g., periodic, maximum number of usage) Information are sent to all registered components in order to update all IDs Making Security & Privacy Prot. Open Source

7 Structure of the Presentation General Information Open Source VSS Kit Compliance with standards Availability Conclusion Making Security & Privacy Prot. Open Source

8 Compliance with Standards IEEE D12 ETSI TS v ( ) Participation to the two last ETSI Plugtest Workshops Fully interoperable with 3 other solutions Mostly passed all compliance tests Missing 2 tests concerning polygonal regions Planed a new private test round in order to be fully compliant Making Security & Privacy Prot. Open Source

9 Availability Possible to download the last version via the PRESERVE website ~ 50 times (16 th of June 2015) Making Security & Privacy Prot. Open Source

10 Number of Downloads December 2014 January 2015 February 2015 March 2015 April 2015 May 2015 June 2015 Making Security & Privacy Prot. Open Source

11 Profile of the downloaders Companies 6 car makers 21 solution providers 10 laboratories 5 standardization groups + some anonyms Countries From Europe (Germany, France, UK, Austria, Lithuania) Outside Europe (China, India, Japan, Mexico, US, Israel, Taiwan) Making Security & Privacy Prot. Open Source

12 Exploitations of Results Software-only VSS Kit 2 Managed by TRIALOG Already available (under LGPL2 license) Sources will be uploaded to a public repository Maintenance will continue after the end of the project Implementation of the new features In the context of ISE project (French collaborative project) Support & consultancy (e.g., porting to another platform, develop other functionalities) christophe.jouvray@trialog.com support.preserve@trialog.com Making Security & Privacy Prot. Open Source

13 Exploitations of Results ASIC-based HSM Managed by ESCRYPT Advanced prototype currently available in small numbers for testing and integration Support & Consultancy Development to product depending on commercial interest Contact: Making Security & Privacy Prot. Open Source

14 Exploitations of Results PKI Two independent, interoperable implementations Managed by Fraunhofer SIT & ESCRYPT Operation of productive systems Support & Consultancy Testing of solutions Contacts Making Security & Privacy Prot. Open Source

15 Thank you for your attention Making Security & Privacy Prot. Open Source