Division 2.2 Access to vehicle security features used by authorised dealers and repair shops shall be made available to independent operators under protection of security technology according to the following requirements:

1. (i)

   data shall be exchanged ensuring confidentiality, integrity and protection against replay;

2. (ii)

   the standard https//ssl-tls (RFC4346) shall be used;

3. (iii)

   security certificates in accordance with ISO 20828 shall be used for mutual authentication of independent operators and manufacturers;

4. (iv)

   the independent operator’s private key shall be protected by secure hardware.

F1The Secretary of State may by regulations specify the parameters for fulfilling these requirements according to the state-of-the-art.

F2Article 15 of Regulation (EC) No 715/2007 applies to regulations made by the Secretary of State under this paragraph as it applies to regulations made under Regulation (EC) No 715/2007.

The independent operator shall be approved and authorised for this purpose on the basis of documents demonstrating that they pursue a legitimate business activity and have not been convicted of relevant criminal activity.