# Commission Regulation (EC) No 692/2008 of 18 July 2008 implementing and amending Regulation (EC) No 715/2007 of the European Parliament and of the Council on type-approval of motor vehicles with respect to emissions from light passenger and commercial vehicles (Euro 5 and Euro 6) and on access to vehicle repair and maintenance information (Text with EEA relevance), Division 2.2

Extent: E+W+S+N.I.

Access to vehicle security features used by authorised dealers and repair shops shall be made available to independent operators under protection of security technology according to the following requirements:
(i) data shall be exchanged ensuring confidentiality, integrity and protection against replay;
(ii) the standard https//ssl-tls (RFC4346) shall be used;
(iii) security certificates in accordance with ISO 20828 shall be used for mutual authentication of independent operators and manufacturers;
(iv) the independent operator’s private key shall be protected by secure hardware.
The Forum on Access to Vehicle Information provided for by paragraph 9 of Article 13 will specify the parameters for fulfilling these requirements according to the state-of-the-art.
The independent operator shall be approved and authorised for this purpose on the basis of documents demonstrating that they pursue a legitimate business activity and have not been convicted of relevant criminal activity.

---
Source: https://www.legislation.gov.uk/eur/2008/692/annex/XIV/division/2/division/2.2 (the official version)
Page: https://openlegislation.uk/eu-regulation-2008-692/annex-XIV/division-2/division-2.2
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.