Analysis of OBE-related SCMS Security Requirements and Evaluation Procedures in V2X Environment

Abstract—As technologies for next-generation intelligent transport systems (C-ITS) emerge, automotive security and safety are becoming important issues. C-ITS is a system that exchanges or shares traffic information through mutual communication between road, driver, and pedestrian while driving a vehicle for complete autonomous driving. With the introduction of C-ITS, unexpected accidents can be prevented by transmitting/receiving individual location, speed information, and surrounding traffic conditions through wireless communication between vehicles. The main requirement of C-ITS is that reliability is guaranteed, and driver privacy is protected. SCMS, which is applied in the US, is a message security solution for vehicle-to-vehicle communication developed through the US Department of Transportation (USDOT) and Crash Avoidance metrics partnership (CAMP). Vehicles registered through SCMS can authenticate and verify communication messages with valid certificates. SCMS is an important part for driver security and safety in the C-ITS environment, but if the vehicle does not operate in accordance with the SCMS standard, it is exposed to many threats as it cannot guarantee the reliability between the driver's personal information and the transmitted/received messages. Therefore, it is necessary to guarantee that vehicles operate SCMS correctly. We review the main functions of SCMS developed by CAMP and recent related research. In addition, we analyze 67 vehicle-related requirements among all the requirements specified in CAMP and presents an evaluation procedure to confirm 27 requirements. Keywords-Security, Cooperative driving, C-ITS, SCMS, Security Requiremen