Division 2.2 F1
United Kingdom
Access to vehicle security features used by authorised dealers and repair shops shall be made available to independent operators under protection of security technology according to the following requirements:
- (i)
data shall be exchanged ensuring confidentiality, integrity and protection against replay;
- (ii)
the standard https//ssl-tls (RFC4346) shall be used;
- (iii)
security certificates in accordance with ISO 20828 shall be used for mutual authentication of independent operators and manufacturers;
- (iv)
the independent operator’s private key shall be protected by secure hardware.
The Forum on Access to Vehicle Information provided for by paragraph 9 of Article 13 will specify the parameters for fulfilling these requirements according to the state-of-the-art.
The independent operator shall be approved and authorised for this purpose on the basis of documents demonstrating that they pursue a legitimate business activity and have not been convicted of relevant criminal activity.