Brigitte Lonc

Risk analysis study of ITS communication architecture

Intelligent Transportation Systems (ITS) are cooperative systems based on vehicular communications. They involve different actors like manufacturers, transportations authorities and users and enable diverse ITS applications to enhance safety in transportation systems. One of the ultimate design goals of ITS is to have a robust system that resists to various security attacks. Thus, security remains a major challenge before the deployment of such systems. In this paper, we present the ITS framework and communication architecture in Europe. Then, we identify inherent threats in this architecture. Finally, and using ETSI threat analysis methodology, we propose a risk analysis of ITS.

Cooperative ITS security framework: Standards and implementations progress in Europe

A number of standardization organizations and European projects dealt with security and privacy issues in Cooperative Intelligent Transport Systems (C-ITS). In this paper, we present recent standardization activities and implementations of security services in various cooperative driving applications (Release 1 use cases and next stages). We discuss the validation of C-ITS embedded systems security standards and the Public Key Infrastructure (PKI) implementation plans. We present already standardized messages as well as a new proposal for standardization. Already standardized messages focus on vehicular safety and traffic efficiency, while our proposal targets service advertisement.

Towards a Cooperative ITS Vehicle Application Oriented Security Framework

Automotive industry is interested to ITS as it provides attractive services for connected vehicles aiming at creating a new and very promising business market. However, the security remains a major challenge for the ITS deployment as several critical threats has been identified. In this paper, we present our Cooperative ITS Vehicle Application Oriented Security Framework CIVAS for vehicle ITS stations. Our focus is given first to ITS vehicle security requirements and constraints. Then, we provide an overview of the “Defense-in-Depth” model that we adapted for securing ITS vehicle. The proposed security framework follows a modular design and is application oriented. To illustrate the interaction between designed CIVAS layers, we consider a vehicle stationary as example of a road safety use case.

How to secure ITS applications

Intelligent Transportation Systems (ITS) based on vehicular communication enable cooperative applications to improve road safety and traffic efficiency. Security remains a major challenge because it has a great impact on implementation and deployment of ITS applications. In this paper, based on recent standardization activities, we give an overview of ITS applications and we detail a classification of road safety applications. Then, we investigate the security issues of cooperative ITS applications and we present their security profiles. Taking into account the communication architecture of an ITS Station, we advance a new application oriented security approach.

Security of C-ITS messages: A practical solution the ISE project demonstrator

Cooperative Intelligent Transport Systems (C-ITS) offer innovative ways of wireless communication between Intelligent Transport Systems (ITS) stations and ITS road-side stations. They favour the development of ITS applications to improve traffic management, road safety, mobility and other comfort services. C-ITS systems have to guarantee communication security, especially in heterogeneous network environments. Safety critical applications require authentication to avoid attackers to send spoofed or reforged information, nevertheless, cars and drivers privacy must be maintained. We present a demonstration of the C-ITS security management infrastructure of the ITS-Security (ISE) project [1]. Through our demonstrator we show how ISE provides message authentication without violating cars and drivers privacy. Our demonstrator allows the public to run an attack scenario with and without the ISE security system, making evident importance of securing ITS communications.

TLS for Cooperative ITS Services

TLS is currently receiving much attention and seems to be the most promising candidate as a secure protocol for the current and future online services. Many security protocols have been developed to handle security problems in various circumstances. However, these protocols are often limited and related to precised contexts and architectures and cannot answer special application and networks needs such as securing transactions between several vehicles in vehicular networks. In this paper, we propose to extend the Transport Layer Security (TLS) protocol by using ETSI and IEEE certificates to securely exchange data between multiple vehicular network components through a single TLS session. We propose a formal validation of our extension with the HLPSL language using AVISPA. The proposed extension is currently being implemented over OPENSSL.