IEC 63246-2:2022

Configurable car infotainment services (CCIS) - Part 2: Requirements

IEC 63246-2:2022 specifies the CCIS requirements, which include the general, functional and service requirements for CCIS.

Services d'infodivertissements configurables pour les véhicules (CCIS) - Partie 2 : Exigences

L'IEC 63246-2:2022 spécifie les exigences relatives au CCIS, qui incluent les exigences générales, fonctionnelles et de service du CCIS.

General Information

• Status: Published
• Publication Date: 26-Jan-2022
• ICS: 33.160.99 - Other audio, video and audiovisual equipment
• ICS: 43.040.15 - Car informatics. On board computer systems
• Technical Committee: TA 17 - Multimedia systems and equipment for vehicles
• Drafting Committee: PT 63246 - TC 100/TA 17/PT 63246
• Current Stage: PPUB - Publication issued
• Start Date: 27-Jan-2022
• Completion Date: 15-Feb-2022

Overview

IEC 63246-2:2022 is an international standard published by the International Electrotechnical Commission (IEC) that specifies the requirements for Configurable Car Infotainment Services (CCIS). This standard focuses on defining the general, functional, and service requirements essential for the effective management and control of car infotainment systems. It is part 2 of the series IEC 63246, which collectively addresses the overall framework, protocols, and general considerations needed to enhance user interaction with in-vehicle multimedia and infotainment systems.

With the rapid growth of car infotainment technologies – including navigation, communication, multimedia playback, and device connectivity – IEC 63246-2 offers a standardized approach that supports the interoperability, security, and usability of configurable infotainment services within vehicles.

Key Topics

• General Requirements
  Specifies user and device registration/deregistration processes, device monitoring and control, profile management, and content delivery oversight within a vehicle infotainment environment.

• Functional Entity Requirements
  Defines the roles and responsibilities of core CCIS components:

  • CCIS Users – authentication, authorization, device control, and content consumption.
  • CCIS Devices – registration, status reporting, interaction for control, and content delivery mechanisms.
  • CCIS Masters – central controller managing user and device registrations, control, monitoring, and content provisioning.

• Service Requirements for Users
  Categorizes different user profiles such as car owners, temporary owners, private and public clients, detailing specific service needs and access levels.

• Security Requirements
  Presents mandatory security protocols to ensure authorized access, data protection, and safe communication between users, devices, and the master system.

• Communication and Control Models
  Establishes how infotainment entities interact, register, and exchange information to deliver seamless infotainment experiences.

Applications

IEC 63246-2:2022 is critical for automotive manufacturers, infotainment system developers, and service providers aiming to design and implement configurable and interoperable in-car infotainment solutions. Its applications include:

• Vehicle Infotainment Systems
  Supports integration of varied multimedia devices such as navigation units, cameras, displays, and audio equipment, allowing customizable configurations tailored to user preferences.

• Smart Device Connectivity
  Enables smartphones, tablets, and other portable devices to connect securely with in-vehicle infotainment frameworks, facilitating content sharing and control.

• User Profile Management
  Helps manage multiple user access levels and preferences in shared vehicle environments, ensuring personalized infotainment services.

• Safety and Security Enhancement
  Ensures authentication and authorization procedures to safeguard infotainment systems from unauthorized usage or cyber threats.

Implementing IEC 63246-2 leads to improved user experience by standardizing infotainment service configuration, device interoperability, and secure content delivery within modern vehicles.

Related Standards

• IEC 63246-1: Configurable Car Infotainment Services – Part 1: General
  Provides foundational definitions, system models, and user types applicable to CCIS.

• IEC 63246-3: Configurable Car Infotainment Services – Part 3: Framework
  Details the architecture and information flow that underpin CCIS operations.

• IEC 63246-4: Configurable Car Infotainment Services – Part 4: Protocol
  Specifies communication protocols, message structures, and procedural guidelines for CCIS implementation.

These related parts collectively offer a comprehensive approach to developing measurable, secure, and user-friendly car infotainment ecosystems compliant with international best practices.

---

By adhering to IEC 63246-2:2022 requirements, stakeholders can foster advanced, customizable, and secure infotainment systems that meet growing consumer demands and automotive technology trends worldwide.

Standards Content (Sample)

IEC 63246-2 ®
Edition 1.0 2022-01
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
Configurable car infotainment services (CCIS) –
Part 2: Requirements
Services d'infodivertissements configurables pour les véhicules (CCIS) –
Partie 2: Exigences
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form
or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from
either IEC or IEC's member National Committee in the country of the requester. If you have any questions about IEC
copyright or have an enquiry about obtaining additional rights to this publication, please contact the address below or
your local IEC member National Committee for further information.

Droits de reproduction réservés. Sauf indication contraire, aucune partie de cette publication ne peut être reproduite
ni utilisée sous quelque forme que ce soit et par aucun procédé, électronique ou mécanique, y compris la photocopie
et les microfilms, sans l'accord écrit de l'IEC ou du Comité national de l'IEC du pays du demandeur. Si vous avez des
questions sur le copyright de l'IEC ou si vous désirez obtenir des droits supplémentaires sur cette publication, utilisez
les coordonnées ci-après ou contactez le Comité national de l'IEC de votre pays de résidence.

IEC Secretariat Tel.: [phone]
3, rue de Varembé [e-mail]
CH-1211 Geneva 20 www.iec.ch
Switzerland
About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.

About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigendum or an amendment might have been published.

IEC publications search - webstore.iec.ch/advsearchform IEC Products & Services Portal - products.iec.ch
The advanced search enables to find IEC publications by a Discover our powerful search engine and read freely all the
variety of criteria (reference number, text, technical publications previews. With a subscription you will always
committee, …). It also gives information on projects, replaced have access to up to date content tailored to your needs.
and withdrawn publications.
Electropedia - www.electropedia.org
IEC Just Published - webstore.iec.ch/justpublished
The world's leading online dictionary on electrotechnology,
Stay up to date on all new IEC publications. Just Published
containing more than 22 300 terminological entries in English
details all new publications released. Available online and
and French, with equivalent terms in 19 additional languages.
once a month by email.
Also known as the International Electrotechnical Vocabulary

(IEV) online.
IEC Customer Service Centre - webstore.iec.ch/csc
If you wish to give us your feedback on this publication or
need further assistance, please contact the Customer Service
Centre: [e-mail].
A propos de l'IEC
La Commission Electrotechnique Internationale (IEC) est la première organisation mondiale qui élabore et publie des
Normes internationales pour tout ce qui a trait à l'électricité, à l'électronique et aux technologies apparentées.

A propos des publications IEC
Le contenu technique des publications IEC est constamment revu. Veuillez vous assurer que vous possédez l’édition la
plus récente, un corrigendum ou amendement peut avoir été publié.

Recherche de publications IEC - IEC Products & Services Portal - products.iec.ch
webstore.iec.ch/advsearchform Découvrez notre puissant moteur de recherche et consultez
La recherche avancée permet de trouver des publications IEC gratuitement tous les aperçus des publications. Avec un
en utilisant différents critères (numéro de référence, texte, abonnement, vous aurez toujours accès à un contenu à jour
comité d’études, …). Elle donne aussi des informations sur adapté à vos besoins.
les projets et les publications remplacées ou retirées.

Electropedia - www.electropedia.org
IEC Just Published - webstore.iec.ch/justpublished
Le premier dictionnaire d'électrotechnologie en ligne au
Restez informé sur les nouvelles publications IEC. Just
monde, avec plus de 22 300 articles terminologiques en
Published détaille les nouvelles publications parues.
anglais et en français, ainsi que les termes équivalents dans
Disponible en ligne et une fois par mois par email.
19 langues additionnelles. Egalement appelé Vocabulaire

Electrotechnique International (IEV) en ligne.
Service Clients - webstore.iec.ch/csc

Si vous désirez nous donner des commentaires sur cette
publication ou si vous avez des questions contactez-nous:
[e-mail].
IEC 63246-2 ®
Edition 1.0 2022-01
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
Configurable car infotainment services (CCIS) –

Part 2: Requirements
Services d'infodivertissements configurables pour les véhicules (CCIS) –

Partie 2: Exigences
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 33.160.99; 43.040.15 ISBN 978-2-8322-1070-8

– 2 – IEC 63246-2:2022 © IEC 2022
CONTENTS
FOREWORD . 3
INTRODUCTION . 5
1 Scope . 6
2 Normative references . 6
3 Terms and definitions . 6
4 General requirements . 6
4.1 General . 6
4.2 User registration and deregistration . 6
4.3 Device registration and deregistration . 7
4.4 Profile management . 7
4.5 Service provisioning according to authority . 7
4.6 Device monitoring . 7
4.7 Device control . 7
4.8 Content delivery . 7
5 Functional requirements for functional entity . 7
5.1 General . 7
5.2 CCIS user . 8
5.2.1 General . 8
5.2.2 Registration and deregistration . 8
5.2.3 Authentication and authorization . 8
5.2.4 Device control. 9
5.2.5 Content delivery . 9
5.3 CCIS device . 9
5.3.1 General . 9
5.3.2 Registration and deregistration . 9
5.3.3 Status report . 9
5.3.4 Interaction for device control. 9
5.3.5 Interaction for content delivery . 9
5.4 CCIS master . 10
5.4.1 General . 10
5.4.2 Registration of CCIS users . 10
5.4.3 Device registration . 10
5.4.4 Device control. 10
5.4.5 Device monitoring . 10
5.4.6 Content delivery . 10
6 Service requirements for CCIS users . 11
6.1 General . 11
6.2 Car owner . 11
6.3 Temporary owner . 11
6.4 Private client . 11
6.5 Public client . 11
7 Security requirements . 11
Bibliography . 13

Table 1 – CCIS functions required for CCIS entities . 8
Table 2 – Security requirements for CCIS functions . 12

INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
CONFIGURABLE CAR INFOTAINMENT SERVICES (CCIS) –

Part 2: Requirements
FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote international
co-operation on all questions concerning standardization in the electrical and electronic fields. To this end and
in addition to other activities, IEC publishes International Standards, Technical Specifications, Technical Reports,
Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC Publication(s)”). Their
preparation is entrusted to technical committees; any IEC National Committee interested in the subject dealt with
may participate in this preparatory work. International, governmental and non-governmental organizations liaising
with the IEC also participate in this preparation. IEC collaborates closely with the International Organization for
Standardization (ISO) in accordance with conditions determined by agreement between the two organizations.
2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
consensus of opinion on the relevant subjects since each technical committee has representation from all
interested IEC National Committees.
3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
misinterpretation by any end user.
4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications
transparently to the maximum extent possible in their national and regional publications. Any divergence between
any IEC Publication and the corresponding national or regional publication shall be clearly indicated in the latter.
5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any
services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this publication.
7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and
members of its technical committees and IEC National Committees for any personal injury, property damage or
other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and
expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC
Publications.
8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of patent
rights. IEC shall not be held responsible for identifying any or all such patent rights.
IEC 63246-2 has been prepared by technical area 17: Multimedia systems and equipment for
vehicles, of IEC technical committee 100: Audio, video and multimedia systems and equipment.
It is an International Standard.
The text of this International Standard is based on the following documents:
Draft Report on voting
100/3508/CDV 100/3627/RVC
Full information on the voting for its approval can be found in the report on voting indicated in
the above table.
The language used for the development of this International Standard is English.
A list of all parts in the IEC 63246 series, published under the general title Configurable car
infotainment services (CCIS), can be found on the IEC website.

– 4 – IEC 63246-2:2022 © IEC 2022
This document was drafted in accordance with ISO/IEC Directives, Part 2, and developed in
accordance with ISO/IEC Directives, Part 1 and ISO/IEC Directives, IEC Supplement, available
at www.iec.ch/members_experts/refdocs. The main document types developed by IEC are
described in greater detail at www.iec.ch/standardsdev/publications.
The committee has decided that the contents of this document will remain unchanged until the
stability date indicated on the IEC website under webstore.iec.ch in the data related to the
specific document. At this date, the document will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.
INTRODUCTION
The market for car infotainment services (also known as "in-vehicle infotainment systems") has
been growing rapidly, as reflected by the growth of the associated industries. It is expected that
a variety of car infotainment (or multimedia) devices and services will be developed in the future.
Such devices include navigation, cameras, speakers, headrest displays, air-conditioners,
thermometers, heated seats, and lights. It is also expected that some devices will be developed
to provide 4-dimensional experiences for users.
Car infotainment systems typically include A/V features (such as standard radio and CD players),
and two-way communications tools, as well as hands-free phone connections, vehicle voice
commands, and other types of interactive audios or videos. Car infotainment systems have
evolved to allow passengers to watch movies and other visual media (for example, DVD players
installed on the rear seats). Another distinctive feature of future car infotainment systems is
mobile device connectivity. Newer vehicles will provide a wide range of systems that allow
devices (e.g. smartphones and laptops) to be connected to a variety of services embedded in
the vehicle.
From this observation, there is a crucial need for standardization to provide car infotainment
users with more enhanced services so as to easily manage and control infotainment devices as
well as content within a car.
The purpose of the IEC 63246 series is to specify the general considerations, requirements,
framework, and protocols to provide car users with the functionality of managing and controlling
device and content resources within a car.
The IEC 63246 series consists of the following parts:
– Part 1: General;
– Part 2: Requirements;
– Part 3: Framework; and
– Part 4: Protocol.
IEC 63246-1 describes the general considerations of CCIS, which includes the CCIS system
model and the types of CCIS users with the associated service flows.
IEC 63246-2 describes the requirements for CCIS, which include the CCIS functional entities,
the communication model, and the functional requirements.
IEC 63246-3 describes the CCIS framework, which includes the information flows between
functional entities and the CCIS operations, such as registration, device monitoring and control,
and data transfer.
IEC 63246-4 describes the CCIS protocol, which includes the protocol messages and
parameters, protocol procedures, implementation guidelines, etc.

– 6 – IEC 63246-2:2022 © IEC 2022
CONFIGURABLE CAR INFOTAINMENT SERVICES (CCIS) –

Part 2: Requirements
1 Scope
This part of IEC 63246 specifies the CCIS requirements, which include the general, functional
and service requirements for CCIS.
2 Normative references
The following document is referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies.
For undated references, the latest edition of the referenced document (including any
amendments) applies.
IEC 63246-1, Configurable car infotainment services – Part 1: General
3 Terms and definitions
For the purposes of this document, the terms and definitions given in IEC 63246-1 apply.
ISO and IEC maintain terminological databases for use in standardization at the following
addresses:
• IEC Electropedia: available at http://www.electropedia.org/
• ISO Online browsing platform: available at http://www.iso.org/obp
4 General requirements
4.1 General
Clause 4 describes the general requirements for CCIS. CCIS can provide a wide variety of
services for CCIS users, with the help of a CCIS master and CCIS devices. CCIS shall be able
to support multiple users and to control and monitor many infotainment devices.
In general, CCIS shall provide the following functionalities:
• user registration and deregistration;
• device registration;
• service provisioning as per the authority;
• device monitoring
• device control; and
• content delivery.
4.2 User registration and deregistration
CCIS provides the services for one or more users at the same time via the CCIS master. Each
user shall have a different level of authority to access the devices. To effectively support many
users, all users shall be registered and certified with the CCIS master. The profile of the public

client shall be temporarily stored in the CCIS master, whereas the profile of the car owner, the
temporary owner, and the private client shall be stored long-term by the CCIS master.
CCIS users shall obtain authorization through the appropriate authentication process before
accessing the CCIS devices. Such authentication or authority information shall be generated
with a security index that is specific to the client. Once the clients have registered with the CCIS
master and have been authorized, they can use the CCIS services with the security index.
4.3 Device registration and deregistration
CCIS should be able to support the dynamic addition and removal of CCIS devices to provide
CCIS services. For this purpose, all devices shall be registered with the CCIS master. The
registration process begins with the identification notification of a CCIS device to the CCIS
master. The CCIS master shall maintain all profiles of CCIS devices.
4.4 Profile management
To provide enhanced CCIS services, all CCIS users/devices should be registered with the CCIS
master. The CCIS master continues to keep and update the profile information of registered
CCIS users/devices, and the profile information can be used to provide enhanced CCIS services,
such as authorization check.
4.5 Service provisioning according to authority
The CCIS users are divided into the four types: car owner, temporary owner, private client, and
public client. Each user has different level of authority for service usage. Car owners and
temporary owners have a high level of authority for CCIS services, whereas private clients and
public clients shall use a subset of CCIS services and they can need to obtain permission from
car owners or temporary owners. When a CCIS user asks the CCIS master for a service, the
CCIS master verifies the authority level of the client. If the CCIS user has the proper authority
and the concerned device is available, the user can use the associated CCIS service.
4.6 Device monitoring
All CCIS devices shall be monitored by the CCIS master. The CCIS master shall be able to
provide the CCIS users with the monitored information on the status of CCIS devices.
4.7 Device control
CCIS users can control the CCIS devices via the CCIS master. For example, car owners can
change the status of a specific CCIS device by requesting the associated control to the CCIS
master.
4.8 Content delivery
CCIS shall support the exchange of various audio and video contents among CCIS users, the
CCIS master and CCIS devices. For example, CCIS users shall download or upload the
multimedia contents from or to CCIS devices via the CCIS master. For this purpose, the CCIS
user can request a metadata list of available contents from the CCIS master, such as file name,
file size, type, creation date, modification date, and so on.
5 Functional requirements for functional entity
5.1 General
Clause 5 describes the functional requirements for CCIS entities, as summarized in Table 1.

– 8 – IEC 63246-2:2022 © IEC 2022
Table 1 – CCIS functions required for CCIS entities
CCIS user CCIS device CCIS master
Registration and deregistration ✓ ✓ ✓
Profile management
✓ ✓
Service provisioning ✓ ✓ ✓
Device monitoring ✓ ✓
Device control
✓ ✓ ✓
Content delivery ✓ ✓ ✓
5.2 CCIS user
5.2.1 General
CCIS users exploit a variety of CCIS services associated with the CCIS devices. CCIS users
shall have a different level of authority for each service or device, depending on the type of
CCIS user. CCIS users shall meet the following functional requirements:
• registration and deregistration;
• authentication and authorization;
• device control; and
• content delivery.
5.2.2 Registration and deregistration
To use the CCIS services, each CCIS user shall be registered with the CCIS master. For this
purpose, the CCIS user shall deliver its own profile information to the CCIS master in the
registration process. Such information shall include user type, user identifier, security index,
and the authority level to services and devices.
Car owners and temporary owners shall be registered with the CCIS master in the initialization
phase, before the CCIS service starts. In the meantime, private clients and public clients shall
be registered with the CCIS master during the CCIS service phase, in which these clients shall
be authenticated and authorised by the car owner or the temporary owner.
The profile information stored in the CCIS master may be kept permanently or temporarily. The
profile information registered by the car owner is permanently stored, but the profile information
registered by the temporary owner, the private client and the public client may be stored with a
specific time limit.
The deregistration functionality of the CCIS users shall also be provided. Temporary owners
and public clients have a specific expiration time. These users will be deregistered automatically
after the specific time limit. Private clients registered by temporary owners shall be deregistered
when the temporary owner is deregistered. In addition, the CCIS user performs the
deregistration process explicitly by requesting the deletion of the associated information to the
CCIS master.
5.2.3 Authentication and authorization
Authentication is performed for each user. Before using the CCIS service, the CCIS user shall
receive an authentication key from the CCIS master through a certification procedure. This
authentication key shall always be included in the request messages that are exchanged for
CCIS services.
Car owners or temporary owners have the authority to allow private clients or public clients
through the authentication and authorization process.

5.2.4 Device control
CCIS users can control CCIS devices via the CCIS master, according to their authority level.
For this purpose, CCIS users shall ask the CCIS master for the list of CCIS devices available.
Based on such information, the CCIS user shall issue the device control message.
5.2.5 Content delivery
CCIS users shall be able to perform the content delivery operation with CCIS devices via the
CCIS master. For this purpose, CCIS users shall first get a profile list of available devices and
services from the CCIS master. Each user will then upload or download the content data to or
from the CCIS master or a specific CCIS device. All CCIS contents shall be transferred via the
CCIS master.
5.3 CCIS device
5.3.1 General
All CCIS devices shall be registered and managed with the CCIS master in order to provide the
service for CCIS users. Each device can be controlled by CCIS users via the CCIS master.
Each CCIS device shall meet the following requirements:
• registration and deregistration with the CCIS master;
• status report to the CCIS master;
• interaction with the CCIS master for device control; and
• interaction with the CCIS master for content delivery.
5.3.2 Registration and deregistration
The CCIS device shall be registered with the CCIS master. In the registration process, the
following information needs to be delivered to the CCIS master:
• device type (e.g. speaker, display);
• device features (e.g. shared by many clients, or dedicated to a specific client); and
• device parameters (to be controlled by clients).
5.3.3 Status report
For device monitoring, each CCIS device shall send its profile, such as status information, to
the CCIS master. The profile information shall include the operational status of device (e.g.
keep-aliveness) and the device-specific information (e.g. the volume of speakers). For this
purpose, each CCIS device transmits periodic report messages to the CCIS master.
5.3.4 Interaction for device control
CCIS users can control CCIS devices via the CCIS master. When CCIS users request the CCIS
master to control one or more CCIS devices, the CCIS master will send some messages for
device control to the concerned CCIS devices. For this purpose, each CCIS device shall be
able to interact with the CCIS master for such device control operations.
5.3.5 Interaction for content delivery
CCIS users can exchange multimedia contents with CCIS devices via the CCIS master. For
content delivery, CCIS users request permission from the CCIS master to upload or download
the associated contents to or from CCIS devices, and then the CCIS master interacts with the
concerned CCIS devices for content delivery. For this purpose, each CCIS device shall be able
to interact with the CCIS master for such content-delivery operations.

– 10 – IEC 63246-2:2022 © IEC 2022
5.4 CCIS master
5.4.1 General
The CCIS master performs the overall management for CCIS users and devices. The CCIS
master shall provide the following functionalities:
• registration of CCIS users;
• device registration and discovery;
• device control;
• device monitoring; and
• content delivery.
5.4.2 Registration of CCIS users
All CCIS users shall be registered with the CCIS master. In CCIS, it is assumed that car owners
and temporary owners are registered with the CCIS master in the initialization process, before
the CCIS services begin. On the other hand, private clients and public clients shall be registered
with the CCIS master in the registration process, after CCIS services begin.
For registration, some messages will be exchanged between the CCIS master and the
concerned clients. During the registration process, appropriated authentication and
authorization operations shall be performed between CCIS clients and the CCIS master. The
authentication and authorization of private clients and public clients shall need the permission
of the car owner or the temporary owner.
5.4.3 Device registration
All CCIS devices shall be registered with the CCIS master. The CCIS master is responsible for
the registration of CCIS devices. When a CCIS device is powered on and ready for
communication, it shall perform the registration operation with the CCIS master. The CCIS
devices shall be registered with the CCIS master through the device discovery operation. The
CCIS master will initiate the registration process to discover the unregistered CCIS devices by
sending a periodic advertisement message to the concerned CCIS devices. In this way, all CCIS
devices shall be registered with the CCIS master with the help of device registration or a
discovery process. In addition, the CCIS master shall be able to dynamically add new CCIS
devices and remove unused CCIS devices.
5.4.4 Device control
The CCIS master should support CCIS users to control CCIS devices. For example, the profile
of CCIS devices can be changed in the device control process. When a user wants to control a
specific device, it shall send the device occupation and control request message to the CCIS
master. Based on this request, the CCIS master shall perform the functional interaction with the
concerned device and give feedback to the requesting client.
5.4.5 Device monitoring
The CCIS master shall be able to manage and monitor all CCIS devices so as to keep up-to-
date information about all devices. For this purpose, the CCIS master shall exchange the
associated messages with all CCIS devices periodically.
5.4.6 Content delivery
The CCIS master shall be able to support the content delivery operation between CCIS users
and CCIS devices. All CCIS clients and devices shall perform the content delivery operation
through the CCIS master. The CCIS master shall be able to relay the contents between CCIS
users and CCIS devices.
6 Service requirements for CCIS users
6.1 General
Clause 6 describes the service requirements for each CCIS user. The types of CCIS users can
be classified as car owners, temporary owners, private clients, and public clients.
6.2 Car owner
Car owners shall meet the following service requirements:
• they shall be registered with CCIS master before the CCIS services begin;
• they shall have full authority over the CCIS master and all CCIS devices; and
• they shall control all CCIS clients and devices.
6.3 Temporary owner
Temporary owners shall meet the following service requirements:
• their authority can be limited, compared to car owners;
• their service usage time shall be limited, and the service expiration time shall be pre-
specified and registered with the CCIS master; and
• they shall control all CCIS clients and devices.
6.4 Private client
Private clients shall meet the following service requirements:
• they shall be registered with the CCIS master;
• their registration requires permission from the car owner or the temporary owner;
• they shall have limited level of authority for CCIS services; and
• they shall not add or remove CCIS devices.
6.5 Public client
Public clients shall meet the following service requirements:
• they shall be registered with the CCIS master;
• their registration requires permission from the car owner or temporary owner;
• their service usage time shall be limited and specified;
• they shall have the same or lower authority level than private clients;
• they shall not add or remove CCIS devices.
7 Security requirements
Clause 7 describes the security requirements for CCIS services. Secure communication is
required between the CCIS master and CCIS users/devices for enhanced CCIS services.
• For secure communication from CCIS users/devices to the CCIS master, the CCIS master
may use the public-private key mechanism with CCIS users and devices. In this case, the
CCIS master shall be able to provide its public key to CCIS users and devices. CCIS
users/devices shall be able to store and handle the public keys of the CCIS master.
• For secure communication from the CCIS master to CCIS users/devices, the CCIS master
may use the secret key mechanism with CCIS users and devices. In this case, these secret
key values are generated by the CCIS master and informed to CCIS users/devices in the
registration process.
– 12 – IEC 63246-2:2022 © IEC 2022
The security requirement level for each CCIS function is summarized in Table 2.
Table 2 – Security requirements for CCIS functions
CCIS functions Secure communication
Registration Mandatory
Device monitoring Mandatory
Device control Mandatory
Content delivery Optional
Bibliography
The following standards are useful to understand the security aspects of CCIS.
ISO/IEC 27034-1:2011, Information technology – Security techniques – Application security –
Part 1: Overview and concepts
ISO/IEC 27034-2:2015, Information technology – Security techniques – Application security –
Part 2: Organization normative framework
ISO/IEC 27034-3:2018, Information technology – Security techniques – Application security –
Part 3: Application security management process
ISO/IEC 27034-5:2017, Information technology – Security techniques – Application security –
Part 4: Protocols and application security control data structure
ISO/IEC 27034-6:2016, Information technology – Security techniques – Application security –
Part 5: Case studies
ISO/IEC 27034-7:2018, Information technology – Security techniques – Application security –
Part 6: Assurance prediction framework
IEEE 1363:2000, IEEE Standard Specification for Public-Key Cryptography

___________
– 14 – IEC 63246-2:2022 © IEC 2022
SOMMAIRE
AVANT-PROPOS . 15
INTRODUCTION . 17
1 Domaine d'application . 18
2 Références normatives . 18
3 Termes et définitions . 18
4 Exigences générales . 18
4.1 Généralités . 18
4.2 Enregistrement et désenregistrement des utilisateurs . 19
4.3 Enregistrement et désenregistrement des dispositifs . 19
4.4 Gestion des profils . 19
4.5 Fourniture de services selon l'autorité . 19
4.6 Surveillance des dispositifs . 19
4.7 Contrôle des dispositifs . 19
4.8 Diffusion de contenu . 19
5 Exigences fonctionnelles d'une entité fonctionnelle . 20
5.1 Généralités . 20
5.2 Utilisateur CCIS . 20
5.2.1 Généralités . 20
5.2.2 Enregistrement et désenregistrement . 20
5.2.3 Authentification et autorisation . 21
5.2.4 Contrôle des dispositifs . 21
5.2.5 Diffusion de contenu . 21
5.3 Dispositif CCIS . 21
5.3.1 Généralités . 21
5.3.2 Enregistrement et désenregistrement . 21
5.3.3 Rapport de statut . 22
5.3.4 Interaction pour le contrôle des dispositifs . 22
5.3.5 Interaction pour la diffusion de contenu . 22
5.4 CCIS maître . 22
5.4.1 Généralités . 22
5.4.2 Enregistrement des utilisateurs CCIS . 22
5.4.3 Enregistrement des dispositifs . 22
5.4.4 Contrôle des dispositifs . 23
5.4.5 Surveillance des dispositifs . 23
5.4.6 Diffusion de contenu . 23
6 Exigences de service des utilisateurs CCIS . 23
6.1 Généralités . 23
6.2 Propriétaire de voiture . 23
6.3 Propriétaire temporaire . 23
6.4 Client privé . 24
6.5 Client public . 24
7 Exigences de sécurité. 24
Bibliographie . 25

Tableau 1 – Fonctions CCIS exigées des entités CCIS . 20
Tableau 2 – Exigences de sécurité des fonctions CCIS . 24

COMMISSION ÉLECTROTECHNIQUE INTERNATIONALE
____________
SERVICES D'INFODIVERTISSEMENTS
CONFIGURABLES POUR LES VÉHICULES (CCIS) –

Partie 2: Exigences
AVANT-PROPOS
1) La Commission Electrotechnique Internationale (IEC) est une organisation mondiale de normalisation composée
de l'ensemble des comités électrotechniques nationaux (Comités nationaux de l’IEC). L’IEC a pour objet de
favoriser la coopération internationale pour toutes les questions de normalisation dans les domaines de
l'électricité et de l'électronique. À cet effet, l’IEC – entre autres activités – publie des Normes internationales,
des Spécifications techniques, des Rapports techniques, des Spécifications accessibles au public (PAS) et des
Guides (ci-après dénommés "Publication(s) de l’IEC"). Leur élaboration est confiée à des comités d'études, aux
travaux desquels tout Comité national intéressé par le sujet traité peut participer. Les organisations
internationales, gouvernementales et non gouvernementales, en liaison avec l’IEC, participent également aux
travaux. L’IEC collabore étroitement avec l'Organisation Internationale de Normalisation (ISO), selon des
conditions fixées par accord entre les deux organisations.
2) Les décisions ou accords officiels de l’IEC concernant les questions techniques représentent, dans la mesure du
possible, un accord international sur les sujets étudiés, étant donné que les Comités nationaux de l’IEC intéressés
sont représentés dans chaque comité d’études.
3) Les Publications de l’IEC se présentent sous la forme de recommandations internationales et sont agréées
comme telles par les Comités nationaux de l’IEC. Tous les efforts raisonnables sont entrepris afin que l’IEC
s'assure de l'exactitude du contenu technique de ses publications; l’IEC ne peut pas être tenue responsable de
l'éventuelle mauvaise utilisation ou interprétation qui en est faite par un quelconque utilisateur final.
4) Dans le but d'encourager l'uniformité internationale, les Comités nationaux de l’IEC s'engagent, dans toute la
mesure possible, à appliquer de façon transparente les Publications de l’IEC dans leurs publications nationales
et régionales. Toutes divergences entre toutes Publications de l’IEC et toutes publications nationales ou
régionales correspondantes doivent être indiquées en termes clairs dans ces dernières.
5) L’IEC elle-même ne fournit aucune attestation de conformité. Des organismes de cert
...