Security and Privacy in Car-to-X Communication: Legislation, Standardization and Field Operational Trials

Inhalt:
Car-to-X (C2X) communication must, in order to fulfill the user requirements of privacy and trust in the received messages, be protected against security and privacy attacks. For this purpose, a major trend towards using a Public Key Infrastructure (PKI) and a frequent changing of pseudonyms can be identified, respectively. In this context signatures are used to authenticate messages. The respective keys are assumed to be issued by a certification authority (CA). Although there is a basic agreement on using PKI to secure C2X communication, the complexity of this scheme is still a major issue. This is attributed to the severe constraints on C2X communication regarding channel bandwidth, communication overhead, and costs related to the available computation power. In this paper we identify the main security and privacy objectives of C2X communication. Based on this analysis we present related countermeasures as they are currently deployed within Field Operational Trials (FOT) and are further refined by standardization bodies.