ISO/TS 15638-4:2020

Intelligent transport systems - Framework for cooperative telematics applications for regulated commercial freight vehicles (TARV) - Part 4: System security requirements

Security requirements address both hardware and software aspects. This document addresses the security requirements for: - the transfer of TARV data from an IVS to an application service provider across a wireless communications interface; - the receipt of instructions from an application service provider to a TARV IVS; - the communications aspects of handling of software updates for the IVS over wireless communications. This document defines the requirements for telematics applications for regulated commercial vehicles for: a) threat, vulnerability and risk analysis; b) security services and architecture; c) identity management; d) security architecture and management; e) identity-trust and privacy management; f) security-access control; g) security-confidentiality services. This document provides: - general specifications for the security of TARV; - specifications for the security of TARV transactions and data within an ITS-station "bounded secure managed domain" (BSMD); - specifications for the security of TARV transactions and data transacted with a predetermined address outside of a BSMD. IVS security requirements are dealt with by the prime service provider and application service provider (See ISO 15638-1). Application service provision security is dealt with by the application service provider (and could be the subject of a separate TARV standards deliverable).

Systèmes intelligents de transport — Cadre pour applications télématiques collaboratives pour véhicules de fret commercial réglementé (TARV) — Partie 4: Exigences des systèmes de sécurité

General Information

• Status: Published
• Publication Date: 17-Feb-2020
• ICS: 03.220.20 - Road transport
• ICS: 35.240.60 - IT applications in transport
• Technical Committee: ISO/TC 204 - Intelligent transport systems
• Drafting Committee: ISO/TC 204/WG 7 - General fleet management and commercial/freight
• Current Stage: 9060 - Close of review
• Completion Date: 02-Sep-2026

Overview

ISO/TS 15638-4:2020 specifies system security requirements for cooperative telematics applications for regulated commercial freight vehicles (TARV). It focuses on protecting communications and data exchanged between an in‑vehicle system (IVS) and application service providers (ASPs) over wireless links - including transfer of TARV data, receipt of remote instructions, and over‑the‑air (OTA) software update processes. The technical specification establishes requirements for threat/risk analysis, security services and architecture, identity and trust management, access control, confidentiality and privacy for regulated telematics services.

Key topics and technical requirements

• Scope of protection: hardware and software aspects of IVS communications, TARV transactions within an ITS‑station bounded secure managed domain (BSMD), and transactions to predetermined addresses outside a BSMD.
• Threat, vulnerability and risk analysis (TVRA): formal assessment requirements to identify and mitigate risks to TARV communications and devices.
• Security architecture and services: definitions of security roles and functions required for secure transfer, reception and software update handling.
• Identity and trust management: identity, authentication and lifecycle of credentials for IVS, ASPs and other TARV entities.
• Access control and confidentiality: rules for authorization, data confidentiality and controlled access to TARV data and services.
• Privacy management: guidance aligned with ITS privacy considerations for handling personal and vehicle data.
• BSMD vs. non‑BSMD scenarios: specifications differentiating secure peer‑to‑peer ITS‑station domains (BSMD) and security requirements when communicating outside these domains.
• Operational concerns: quality of service, test requirements, exception handling, cross‑border harmonization and marking/labeling expectations.

Applications and who uses this standard

ISO/TS 15638-4:2020 is applied where regulatory telematics services require secure wireless communications, for example:

• Digital tachograph reporting, tolling and charging, hazardous goods tracking, e‑call, access monitoring, on‑board mass and speed monitoring. Primary users and stakeholders:
• Vehicle manufacturers and in‑vehicle system (IVS) designers
• Telematics and telematics security vendors
• Application service providers (ASPs) and prime service providers
• Government regulators, approval authorities and certification bodies
• Cybersecurity architects and integrators working on ITS deployments

Related standards

Key referenced documents and complementary standards include:

• ISO 15638-1 (framework & architecture) and ISO 15638-3 (operating/approval requirements)
• ISO 21217, ISO 21210 (CALM/ITS station and IPv6 networking)
• ISO 17423 (communications profile selection)
• ISO/TR 12859 (privacy aspects), ISO/IEC 15408 (IT security evaluation)
• ETSI TS 102 940 (ITS communications security architecture)
• ISO 24102-3 (ITS station management)

ISO/TS 15638-4:2020 enables consistent, auditable security practices for TARV deployments, helping stakeholders implement interoperable, privacy‑respecting and resilient telematics for regulated commercial freight vehicles.

Standards Content (Sample)

TECHNICAL ISO/TS
SPECIFICATION 15638-4
First edition
2020-02
Intelligent transport systems —
Framework for cooperative telematics
applications for regulated commercial
freight vehicles (TARV) —
Part 4:
System security requirements
Systèmes intelligents de transport — Cadre pour applications
télématiques collaboratives pour véhicules de fret commercial
réglementé (TARV) —
Partie 4: Exigences des systèmes de sécurité
Reference number
©
ISO 2020
© ISO 2020
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2020 – All rights reserved

Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 2
3 Terms and definitions . 2
4 Abbreviated terms . 5
5 General overview and framework . 5
6 Requirements . 8
6.1 Threat, vulnerability and risk analysis . 8
6.2 Functional requirements for security of targets of evaluation (TOEs). 8
6.2.1 TOE — In-vehicle systems . 8
6.2.2 TOE — Application service provider systems . 8
6.2.3 TOE — TARV data transfer . 9
6.2.4 Means of TARV data transfer . 9
6.2.5 TARV data security requirements . 9
6.3 General specifications for the security of TARV . 9
6.3.1 Destined to a predetermined IPv6 address (URI) . 9
6.3.2 ASP or jurisdiction determines security requirements .10
6.4 Low security data transfers via an ITS-station.10
6.5 TARV Data transfers via an ITS-station with C-ITS security (BSMD) .10
6.5.1 Within ISO 21217 ITS-station environment .10
6.5.2 Within ISO 21210 networking environment .10
6.5.3 Within ISO 17423 selection of communications profile requirements .10
6.5.4 When accessing specific wireless media .10
6.6 TARV data transfers including defined security, but outside a BSMD .11
6.6.1 General.11
6.6.2 Security data .12
6.6.3 IVS TARV security module .12
6.7 Identity management .12
6.8 Trust and privacy management .12
6.9 Access control .12
6.10 Confidentiality services .12
6.11 Data privacy .12
6.12 Integrity of trailer identification .13
6.13 Exception handling .13
6.14 Cross-border operations and harmonization .13
7 Quality of service requirements .13
8 Test requirements .13
9 Marking, labelling and packaging .13
Annex A (informative) Example TARV security in a regulatory domain .14
Bibliography .15
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/ directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www .iso .org/ patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to the
World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see www .iso .org/
iso/ foreword .html.
This document was prepared by Technical Committee ISO/TC 204, Intelligent transport systems.
A list of all parts in the ISO 15638 series can be found on the ISO website.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www .iso .org/ members .html.
iv © ISO 2020 – All rights reserved

Introduction
Many ITS technologies have been embraced by commercial transport operators and freight owners, in
the areas of fleet management, safety and security. Telematics applications have also been developed
for governmental use. While the regulatory services in use or being considered varies from country
to country, these include services such as charging, digital tachograph, hazardous goods tracking and
e-call. Additional applications with a regulatory impact being developed include access monitoring, on-
board mass monitoring, fatigue management, speed monitoring.
In such an emerging environment of regulatory and commercial applications, it is timely to consider an
overall architecture (business and functional) that could support these functions from a single platform
within a commercial vehicle that operate within such regulations. Such International Standards will
allow for a speedy development and specification of new applications that build upon the functionality
of a generic specification platform. The ISO 15638-4 series of standards describes and defines the
framework and requirements so that the on-board equipment can be commercially designed in an open
market to meet common requirements.
The ISO 15638 series of standards:
— provides the basis for future development of cooperative telematics applications for regulated
commercial freight vehicles. Many elements to accomplish this are already available. Existing
relevant standards will be referenced, and the specifications will use existing standards (such as
published CALM documents) wherever practicable.
— allows for a powerful platform for highly cost-effective delivery of a range of telematics applications
for regulated commercial freight vehicles.
— is a business architecture based on a (multiple) service provider oriented approach.
— addresses legal and regulatory aspects for the approval and auditing of service providers.
The ISO 15638 series of standards is timely as many governments (Europe, North America, Asia and
Australia/New Zealand) are considering the use of telematics for a range of regulatory purposes.
Ensuring that a single in-vehicle platform can deliver a range of services to both government and
industry through open standards and competitive markets is a strategic objective.
This document provides general specifications for security for communications and data exchange
aspects of candidate regulated applications which are specified in ISO 15638-8 (and Parts 8 to 21 at the
time of developing this document, but further parts may be added later if a requirement for additional
regulated applications to be standardised are identified), the selection and implementation for all or
any of which remain a decision for the implementing jurisdiction.
NOTE 1 The definition of what comprises a ‘regulated’ vehicle is regarded as an issue for National decision, and
can vary from jurisdiction to jurisdiction. The ISO 15638 series of standards does not impose any requirements
on nations in respect of how they define a regulated vehicle.
NOTE 2 The definition of what comprises a ‘regulated’ service is regarded as an issue for National decision, and
may vary from jurisdiction to jurisdiction. The ISO 15638 series of standards does not impose any requirements
on nations in respect of which services for regulated vehicles jurisdictions will require, or support as an option,
but will provide standardised sets of requirements descriptions for identified services to enable consistent and
cost-efficient implementations where implemented.
TECHNICAL SPECIFICATION ISO/TS 15638-4:2020(E)
Intelligent transport systems — Framework for
cooperative telematics applications for regulated
commercial freight vehicles (TARV) —
Part 4:
System security requirements
1 Scope
Security requirements address both hardware and software aspects.
This document addresses the security requirements for:
— the transfer of TARV data from an IVS to an application service provider across a wireless
communications interface;
— the receipt of instructions from an application service provider to a TARV IVS;
— the communications aspects of handling of software updates for the IVS over wireless
communications.
This document defines the requirements for telematics applications for regulated commercial
vehicles for:
a) threat, vulnerability and risk analysis;
b) security services and architecture;
c) identity management;
d) security architecture and management;
e) identity-trust and privacy management;
f) security-access control;
g) security-confidentiality services.
This document provides:
— general specifications for the security of TARV;
— specifications for the security of TARV transactions and data within an ITS-station “bounded secure
managed domain” (BSMD);
— specifications for the security of TARV transactions and data transacted with a predetermined
address outside of a BSMD.
IVS security requirements are dealt with by the prime service provider and application service provider
(See ISO 15638-1).
Application service provision security is dealt with by the application service provider (and could be
the subject of a separate TARV standards deliverable).
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
ISO/TR 12859, Intelligent transport systems — System architecture — Privacy aspects in ITS standards
and systems
ISO/IEC 15408-1, Information technology — Security techniques — Evaluation criteria for IT security —
Part 1: Introduction and general model
ISO 15638-1, Intelligent transport systems — Framework for collaborative Telematics Applications for
Regulated commercial freight Vehicles (TARV) — Part 1: Framework and architecture
ISO 15638-3, Intelligent transport systems — Framework for collaborative telematics applications for
regulated commercial freight vehicles (TARV) — Part 3: Operating requirements, ‘Approval Authority’
procedures, and enforcement provisions for the providers of regulated services
ISO 17423, Intelligent transport systems — Cooperative systems — Application requirements and objectives
ISO 21210, Intelligent transport systems — Communications access for land mobiles (CALM) — IPv6
Networking
ISO 21217, Intelligent transport systems — Communications access for land mobiles (CALM) — Architecture
ISO 24102-3, Intelligent transport systems — ITS station management — Part 3: Service access points
ETSI TS 102 940, Intelligent Transport Systems (ITS); Security; ITS communications security architecture
and security management
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO 15638-1 and the following apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https:// www .iso .org/ obp
— IEC Electropedia: available at http:// www .electropedia .org/
3.1
access
admittance, entry, permit to use the road network and/or associated infrastructure, e.g. bridges, tunnels
3.2
access monitoring
observation and recording of vehicle related data when using the road network and/or associated
infrastructure, e.g. bridges, tunnels
3.3
application service
service provided by a service provider (3.24) enabled by accessing data from the in-vehicle system (IVS)
(3.14) of a regulated vehicle via a wireless communications network
3.4
application service provider
ASP
party that provides an application service (3.3)
2 © ISO 2020 – All rights reserved

3.5
architecture
formalised description of the design of the structure of TARV and its framework (3.13)
3.6
authentication
function intended to establish and verify a claimed identity
3.7
bounded secure managed domain
BSMD
secure peer-to-peer communications between entities (ITS-stations (3.16)) that are themselves capable
of being secured and remotely managed;
Note 1 to entry: The bounded nature is derived from the requirement for ITS-stations to be able to communicate
amongst themselves, i.e. peer-to-peer, as well as with devices that are not secured (referred to as ‘other ITS-
stations’), and realizing that to achieve this in a secure manner often requires distribution and storage of
security-related material that must be protected within the boundaries of the ITS-stations, leads to the secured
nature of the entity, as there is great flexibility to achieve desired communication goals, there is a requirement
that this flexibility be managed; within C-ITS and ISO 21217 such ITS-stations are defined as operating within
BSMD, or outside of the BSMD.
3.8
communications access for land mobiles
CALM
layered solution that enables continuous or quasi continuous communications between vehicles and
the infrastructure, or between vehicles, using such (multiple) wireless telecommunications media that
are available in any particular location, and which have the ability to migrate to a different available
media where required and where media selection is at the discretion of user (3.27) determined
parameters by using a suite of standards based on ISO 21217 (CALM architecture) and ISO 21210
(CALM networking) that provide a common platform for a number of standardised media using ITS-
stations (3.16) to provide wireless support for applications, such that the application is independent of
any particular wireless medium
3.9
commercial application(s)
ITS applications in regulated vehicles for commercial (non-regulated) purposes
EXAMPLE Asset tracking, vehicle and engine monitoring, cargo security, driver management.
3.10
cooperative ITS
C-ITS
ITS applications for both regulatory and commercial purposes that require the exchange of data
between uncontracted parties using multiple ITS-stations (3.16) communicating with each other and
sharing data with other parties with whom they have no direct contractual relationship to provide one
or more ITS services (3.15)
3.11
data pantry
secure area of memory in IVS (3.14) where data values are stored
Note 1 to entry: See ISO 15638-1.
3.12
facilities
layer that sits on top of the communication stack and helps to provide data interoperability and reuse,
and to manage applications and enable dynamic real time loading of new applications
3.13
framework
particular set of beliefs and ideas referred to in order to describe a scenario or solve a problem
3.14
in-vehicle system
IVS
ITS-station (3.16) and connected equipment on board a vehicle
3.15
ITS service
communication functionality offered by an ITS-station (3.16) to an ITS-station application
3.16
ITS-station
ITS-s
entity in a communication network, comprised of application, facilities (3.12), networking and access
layer components specified in ISO 21217 that operate within a bounded secure management domain
3.17
jurisdiction
government, road or traffic authority which owns the regulatory applications (3.21)
EXAMPLE Country, state, city council, road authority, government department (customs, treasury,
transport).
3.18
jurisdiction regulator
agent of the jurisdiction (3.17) appointed to regulate and manage TARV within the domain of the
jurisdiction, which may or may not be the approval authority (regulatory)
3.19
operator
fleet manager of a regulated vehicle
3.20
prime service provider
service provider (3.24) who is the first contractor to provide regulated application services (3.22) to
the regulated vehicle, or a nominated successor on termination of that initial contract, and who is
responsible to maintain the installed IVS (3.14) and if the IVS was not installed during the manufacture
of the vehicle, the prime service provider (3.20) is also responsible to install and commission the IVS
3.21
regulated application
regulatory application
application arrangement using TARV utilised by jurisdictions (3.17) for granting certain categories
of commercial vehicles rights to operate in regulated circumstances subject to certain conditions, or
indeed to permit a vehicle to operate within the jurisdiction and which may be mandatory or voluntary
at the discretion of the jurisdiction
3.22
regulated application service
TARV application service (3.3) to meet the requirements of a regulated application (3.21) that is mandated
by a regulation imposed by a jurisdiction (3.17), or is an option supported by a jurisdiction
4 © ISO 2020 – All rights reserved

3.23
regulated commercial freight vehicle
regulated commercial regulated vehicle
vehicle that is subject to regulations determined by the jurisdiction (3.17) as to its use on the road
system of the jurisdiction in regulated circumstances, subject to certain conditions, and in compliance
with specific regulations for that class of regulated vehicle and which at the option of jurisdictions may
require the provision of information via TARV or provide the option to do so
3.24
service provider
party which is approved by an approval authority (regulatory) as suitable to provide regulated or
commercial ITS application services (3.3)
3.25
specification
explicit and detailed description of the nature and functional requirements and minimum performance
of equipment, service or a combination of both
3.26
telematics
use of wireless media to obtain and transmit (data) from a distant source
3.27
user
individual or party that enrols in and operates within a regulated or commercial application (3.9) service
EXAMPLE Driver, transport operator (3.19), freight owner.
4 Abbreviated terms
ADR European Agreement concerning the international carriage of Dangerous goods by
Road/Accord européen relatif au transport international des marchandises Dangereuses
par Route
ASP application service provider (3.4)
BSMD bounded secure managed domain
CALM communications access for land mobiles (3.8)
C-ITS cooperative intelligent transport systems (3.10)
ID identity
IP internet protocol
ITS-s ITS-station (3.16)
IVS In-vehicle system (3.14)
TARV telematics (3.26) applications for regulated vehicles
UNECE United Nations Economic Commission for Europe
5 General overview and framework
ISO 15638-1 provided a framework and architecture for TARV. It provided a general description of the
roles of the actors in TARV and their relationships.
To understand clearly the TARV framework the reader is referred to ISO 15638-1.
Clause 6 contains security related requirements for the roles in the framework. The three-step security
evaluation process outlined in ISO/IEC 15408-1 is used. In many cases security functions are inherited
from a specific referenced ISO document, in particular, the security functions inherited from ITS-
station. Security requirements for non-ITS-station compliant IVS are also described.
Figure 1 shows the role model conceptual architecture showing the key actors and their relationships.
Figure 1 — Role model conceptual architecture
(Source: ISO 15638-1)
The ISO 15638 series of standards addresses and defines the framework for a range of cooperative
telematics applications for regulated commercial freight vehicles (e.g. access monitoring, driver fatigue
management, speed monitoring, on-board mass monitoring). The overall scope includes the concept
of operation, legal and regulatory issues, and the generic cooperative ITS service platform (ITS-
station). The framework is based on a (multiple) service provider-oriented approach provision for the
certification and auditing of service providers.
— ISO 15638-1:2012, TARV — Framework and architecture
— ISO 15638-2:2013, TARV — Common platform parameters using CALM
6 © ISO 2020 – All rights reserved

— ISO 15638-3:2013, TARV — Operating requirements, 'Approval Authority' procedures, and enforcement
provisions for the providers of regulated services
— ISO/TS 15638-4:2020, TARV — System security requirements (this document)
— ISO 15638-5:2013, TARV — Generic vehicle information
— ISO 15638-6:2014, TARV — Regulated applications
— ISO 15638-7:2013, TARV — Other applications
— ISO 15638-8:2014, TARV — Vehicle access management
1)
— ISO 15638-9:— , TARV — Remote digital tachog
...