(S.12) Device Security

 View Only
Back to discussions
Expand all | Collapse all

Device Security Taskforce Meeting Minutes (7/21 - 7/22) Alexandria, VA

  • 1.  Device Security Taskforce Meeting Minutes (7/21 - 7/22) Alexandria, VA

    Posted 6 days ago
    Edited by Lloyd Keefer 6 days ago

    Attendees

    Jonatan Mars,Lee Lackey, Ben Gardiner, Amy Kofoed, and LLoyd Keefer

    Task Force Meeting Notes – Device Security

    The task force met to refine the scope and align on a scalable, focused direction for the Device Security Recommended Practices (RPs). Rather than focusing solely on Security Gateways, the group agreed to pursue a broader Vehicle Data and Access Governance approach applicable to Legacy, Modern, and Future vehicle architectures. As technology evolves, this work is expected to result in multiple RPs that provide guidance across a range of vehicle architectures.

    Guiding Device Security Principle:

    Move from "Can a device connect to the vehicle?" to "What data or services is a device authorized to access, under what controls and accountability mechanisms?"

    This direction supports evolving vehicle technologies while remaining flexible and implementation-agnostic.

    Notable Discussions

    • Agreed that any RP drafted should address both vehicle protection and data governance.
    • Identified priority use cases including remote diagnostics, telematics, and connected vehicle services.
    • Discussed organizing guidance around vehicle architecture and use-case categories rather than specific technologies.
    • Aligned on developing principles that can accommodate future vehicle technologies without prescribing specific solutions or imposing specific restrictions.

    Next Steps

    Refine the original draft for industry review during the TMC's fall event ensuring that it covers the following:

    • Continue advancing the Recommended Practice (RP) frameworks to support each Legacy, Modern, and Future vehicle architectures. Expected to be multiple RPs.
    • Establish core principles for vehicle data governance, authorization, access control, and accountability.
    • Develop practical, implementation, agnostic guidance, that enables fleets to evaluate connected vehicle technologies while balancing operational needs, security, and data access considerations.


    ------------------------------
    Lloyd Keefer
    Solutions Architect, Principal
    ABF Freight System, Inc.
    Fort Smith AR
    ------------------------------