Click to edit Master text styles

Second level

Third level

Fourth level

Fifth level

Briefing for use at TRB 2012 and SAE Government Industry Meeting 2012.

This briefing provides the context and design direction for the security measures that will be put in place for the Safety Pilot/Model Deployment.

•Safety Pilot/Model Deployment is a U.S. Department of Transportation research program conducted by the Research and Innovative Technology Administration (RITA) and the National Highway Traffic Safety Administration (NHTSA). The Department is working with the Crash Avoidance Metrics Partnership (CAMP), a research consortium of eight automobile manufacturers, to develop technology that will help cars, trucks, buses and other vehicles avoid crashes by communicating with nearby vehicles and roadway infrastructure such as traffic signals, dangerous road segments and grade crossings.

•Six Safety Pilot Driver Acceptance Clinics for drivers to test new technologies that will help the department learn more about how drivers respond to vehicle-to-vehicle communications that can help reduce traffic accidents and save lives.

• The Safety Pilot Model Deployment will include the installation of wireless devices in up to 3,000 vehicles in one location to evaluate the effectiveness of connected vehicle technology to prevent crashes. It will take place on the streets and highways of Ann Arbor, MI from August, 2012 to August, 2013 and will test connected vehicle technology in an everyday environment.

•Both the driver clinics and the model deployment results will help NHTSA decide, in 2013, if the technology is sufficiently advanced enough for NHTSA to begin to consider a series of rulemakings

•The CAMP vehicle safety consortium includes: Ford Motor Co., General Motors Corp., Honda Motor Co., Hyundai Kia Automotive Group, Mercedes-Benz, Nissan Technical Center North America, Toyota Motor Corp. and Volkswagen Group of America.

•The plan needs to be complete. All circumstances of a full deployment need to be taken into account.

•This is a new situation for our device makers and test conductors. Most of their previous experience has been with small, isolated, well-controlled installations.

•Security provisions of the system are a direct result of the nature of the complete Connected Vehicle System.

•Devices used in Safety Pilot/Model Deployment noted on the Core System Diagram to show context.

•Cellular over-the-air will be experimented with for IP data delivery (security credential material).

•

•All provisioning and maintenance will take place using local interfaces. No means for modifying devices via the Internet will be allowed.

•All interactions that cause a result to occur in a device will be initiated by the most vulnerable party to the interaction. Onboard equipment will initiate interactions with roadside equipment. Roadside equipment will initiate interactions with Internet-based equipment.

•The Test Conductor will have final responsibility for access and control to HIA, ASD, and RSE devices used in the Safety Pilot/Model deployment during the. CAMP will have final responsibility for access and control of Integrated Vehicle devices. The assigned contractors will have final responsibility for access and control of heavy vehicle and transit vehicle devices.

•Devices used in Safety Pilot/Model Deployment noted on the Core System Diagram to show context.

•Cellular over-the-air will be experimented with for IP data delivery (security credential material).

•

•All communications will be signed using a common cryptographic process.

•The receiving party of a communication will be responsible for determining the authenticity of any message.

•Internet-based device provisioning will be deferred until proper processes can be defined.

•

•Specific communication pathways used during Safety Pilot/Model Deployment shown.

•A number of pathways available in a full deployment will not be used.

•Builds on work initiated under agreements with CAMP – concentrated on cryptographic process for signing a BSM and the process for managing the cryptographic material.

•Started an overall plan for the installation – all elements of the system.

•Includes USDOT and 4 external groups/contractors – embodied in device specifications, operating practices.

•All parts need to be in place by the start of the Model Deployment – August 21, 2012.

•