Ministry Of Industry And Information Technology Strengthens Data And Network Security Management To Escort The Explosive Growth Of Intelligent Connected Vehicles

On August 12, the Ministry of industry and information technology officially issued the opinions on strengthening the management of intelligent networked vehicle manufacturers and products access (hereinafter referred to as the opinions), which compacted the main responsibility of enterprises, strengthened the management of automobile data security, network security, software upgrade, functional safety and expected function safety, so as to ensure product quality and production consistency, Promote the high-quality development of the intelligent Internet connected automobile industry.

"The formulation of the" opinions "is not only the need to promote the development of the industry, but also the requirement to stick to the safety bottom line." The Ministry of industry and information technology (MIIT) pointed out in its interpretation of the opinions that while the development of automobile intelligence and networking brings convenience, it will also bring about data security problems such as unauthorized personal information and important data collection and utilization, network attack, network intrusion and other network security problems, and road traffic safety problems caused by random failure and insufficient function of driving automation system, And online upgrade (also known as OTA upgrade) may lead to the security risk of changing vehicle function and performance.

"The publication of the opinions is just in time. Intelligent networking has become the development strategy of many countries. In the next decade, it will usher in a golden period of rapid development. However, a large amount of data has been generated by intelligent network connected vehicles, and its data security problem can not be ignored. " Some insiders told reporters of the 21st century economic report.

Strengthen data and network security management

In recent years, with the continuous evolution of technology, the penetration rate of intelligent connected vehicles is increasing.

"China Internet development report (2021)" shows that in 2020, the sales volume of intelligent connected vehicles in China will be 3.032 million, with a year-on-year increase of 107%, and the penetration rate will remain at about 15%. In the first quarter of 2021, the market penetration rate of L2 class (semi-automatic driving) intelligent connected vehicles will reach 17.8%, and that of new energy vehicles will reach 30.9%.

It is estimated that by 2025, the sales of L2 and L3 intelligent connected vehicles (realizing partial automatic driving operation in specific environment) will account for 50% of the total vehicle sales, and L4 (fully automatic driving) intelligent connected vehicles will enter the market, and the new output value can reach 800 billion yuan.

However, as the innovation driving force of the automobile industry upgrading, intelligence and networking are not only the important engines for the transformation and upgrading of the automobile industry, but also bring unprecedented security risks to the industry development. With the gradual commercialization of ICV, data security, information security, functional security, privacy protection, accident liability and other issues are increasingly prominent.

With the continuous evolution of automobile intelligence, the network security attacks of intelligent network connected vehicles are increasing year by year. At the same time, with the use of a large number of cameras, radars, tachometers, navigators and other sensors, the car is changing from an information island to a networked information node. In the use of intelligent vehicles, there are data security risks in the whole life cycle from data acquisition to transmission, and then to processing and use.

According to the 21st century economic report, the opinions put forward two core requirements around the above issues. One is to provide security requirements for the data security and network security of intelligent connected vehicles, and the other is the safety management of products with auxiliary driving function and automatic driving function.

According to the opinions, the ability of data security management should be strengthened. Enterprises should establish and improve the automobile data security management system, establish data asset management accounts, and build technical measures for data security protection.

In terms of strengthening the ability to guarantee network security, the opinions clearly states that enterprises should establish an automobile network security management system, implement the network security level protection system and the real name registration management requirements of vehicle network card in accordance with the law, and clarify the responsible department and person in charge of network security. It has the technical measures to protect the automotive electronic and electrical systems, components and functions from network threats, and has the technical conditions for the detection and disposal of automobile network security risk monitoring, network security defects and loopholes, so as to ensure that the vehicle and its functions are in a protected state.

In addition, the Ministry of industry and information technology has also clearly strengthened the safety management of combined driving auxiliary function products and automatic driving function products to ensure the safe operation of vehicles. Among them, automatic driving function products should meet the requirements of functional safety, expected functional safety, network security and other process assurance requirements.

It is worth noting that for cross-border data transmission, the Opinions also clearly stipulates that personal information and important data collected and generated in the operation within the territory of the people's Republic of China shall be stored at home in accordance with the relevant laws and regulations. If data needs to be provided overseas, it shall pass the data exit security assessment.

The relevant standards are increasingly improved

With the rapid development of intelligent connected vehicles in the world, the main automobile countries and regions in the world are creating a good regulatory and policy environment for the development of intelligent connected vehicles.

In China, standards and regulations have also played an important role in the foundation and guidance of the development of the industry. According to incomplete statistics, more than 10 national industry standards have been formulated and released by relevant departments.

However, in the view of the industry, the number of relevant standards for intelligent connected vehicles is far from enough.

The Ministry of industry and information technology also pointed out in the interpretation of the opinions that "intelligent connected vehicles are the strategic direction of the development of the automobile industry, and are in the early stage of commercialization of rapid technological evolution and industrial layout acceleration. There are great differences between intelligent connected vehicles and traditional vehicles in product structure, function realization and other aspects. The basic characteristics and technical parameters related to vehicle safety are still changing. "

It is worth noting that the relevant national departments are also accelerating the research on policies and regulations and the establishment of technical standard system.

As early as April 12, this year, the state Internet Information Office issued several regulations on the safety management of automobile data (Draft for comments), which clearly defines the types of automobile data to be managed and the main principles that operators adhere to in the process of processing personal information and important data. At the same time, it also puts forward that personal information or important data should be stored in China according to law and should be provided to overseas, It shall pass the data exit security assessment organized by the state network and information department.

A few days ago, Guo Huanxin, deputy director of the standard technology management department of the State Administration of market supervision and administration, revealed at the 7th icv2021 International Exchange Conference on Intelligent Internet connected vehicle technology, standards and regulations (icv2021), the information security of automobile information, the information security of electric vehicle remote management system, the information security of on-board information interaction system Four national standards for automobile information security of automobile gateway are about to be released and implemented, and three compulsory national standards including remote upgrade system, automatic driving data recording system and vehicle information security elements, as well as national standards for automobile data collection security requirements, are being organized and carried out.

In addition, according to the information on the website of the Ministry of industry and information technology, six relevant national standards will be implemented in the near future, and more than 30 standards are in the stage of research and formulation. The standards for intelligent connected vehicles have entered an intensive period of formulation and will be released in the future.