EU: In-Vehicle Information - Secure Wireless Internet (EU)
Description:
This solution is used within Australia and the E.U.. It combines standards associated with EU: In-Vehicle Information with those for I-M: Secure Wireless Internet (EU). The EU: In-Vehicle Information standards include upper-layer standards required to provide a visualisation of static and/or dynamic traffic sign information inside a vehicle. The I-M: Secure Wireless Internet (EU) standards include lower-layer standards that support secure communications between two entities, either or both of which may be mobile devices, but they must be stationary or only moving within wireless range of a single wireless access point (e.g., a parked car). Security is based on X.509 certificates. A non-mobile (if any) endpoint may connect to the service provider using any Internet connection method.Relevant Regions:
- Australia
- European Union
Comm Profile: I-M: Secure Wireless Internet (EU)
Comm Class: WAN - Wide Area Network
Standards in Profile:
| Level | Standard |
|---|---|
| Access | Wireless Internet Alternatives (EU) |
| Mgmt | Bundle: SNMPv3 MIB |
| Security | Secure Session Alternatives |
| TransNet | Internet Transport Alternatives |
| TransNet | IP Alternatives |
Data Profile: EU: In-Vehicle Information
Standards in Profile:
| Level | Standard |
|---|---|
| Facilities | ISO 14823 TTI Graphic DD |
| ITS Application Entity | ISO 17425 In-Vehicle presentation of road and traffic data |
| ITS Application Entity | ISO 19321 IVI Data Dictionary |
Solution Issues Severity: 12
The severity issue score calculation only includes issues associated with standards that are included by default.
Solution Issues:
| Default | Severity | Name | Type | Description |
|---|---|---|---|---|
| True | Medium | Outdated security reference | Security Gap | The standard solution includes an outdated security reference. |
| True | Medium | Secure data access not provided | Security Gap | The solution does not define rules on how the application entity authenticates requests to accept or provide data. |
| True | Medium | Still under development | Standardization Gap | A draft of the standard has been developed by the working group, but it was still under development at the time this analysis was performed. |
| True | Medium | Use case not considered in design (medium) | ITS Info Gap | While the indicated standards nominally address the information flow, the design may not meet practical constraints because this particular use case was not the focus of the design effort. |
| False | Medium | Option not standardized | Standardization Gap | The option set includes at least one option that is not (yet) defined in a standard. |
| False | Medium | Uncertainty about trust revocation mechanism | Security Gap | The mechanisms used to prevent bad actors from sending authorized messages is unproven. |
Solution to Triples
This solution is used on the following information flow triples: