Technological advances are overwhelming. The pace of innovation is difficult to understand for those who were not born in the world of digitization, the internet of things and connectivity. There are many films that speak of an apocalyptic future due to this uncontrolled development of devices, machines and connections. However, Europe is clear that it will not exceed the limits without legislating them, hence the advance of the autonomous vehicle is slower than in other continents such as the United States. An example of this is the UNECE / R155 regulation , which measures and evaluates the level of cybersecurity of a vehicle by applying the ESTP methodology . This rating came into effect in January 2021 and until now, with the NUUK electric motorcycle safety approval, no vehicle has ever surpassed it. This title certifies that the solutions introduced in this model are effective in minimizing a cracker attack.
The NUUK Cargopro electric motorcycle belongs to a ‘start-up’ called Nuuk Mobility Solutions , located in Bizkaia and dedicated to the commercialization of light and intelligent zero-emission mobility solutions. The model that has passed the tests is, specifically, a unit dedicated to professionals, derived from the Cargo line of the firm’s portfolio . After passing this AENOR audit, it is the first brand to launch a model in accordance with cybersecurity regulations that all vehicles must comply with from July 2021. The design and development of NUUK motorcycles is carried out by the Catalan manufacturer Rieju, which has the facilities in that territory.
A pioneering title
Since vehicles introduce so much technology and prioritize connectivity they have become vulnerable to cyber attacks. It is a fact and since 2012 remote car thefts are more common, with “kidnappings” based on blocking the owner’s access to their vehicle. The electronics are crackable so that, from Europe, they have put in place a safety plan for the vehicles that should arrive in the coming years. The UNECE (United Nations Economic Commission for Europe) has launched a cybersecurity regulation that focuses on cars through article UNECE / R155 .
Eurocybcar, a technology company present in Vitoria, has developed the world’s first test that, using its own ESTP methodology, measures this level of vehicle cybersecurity according to the requirements of this European article. That is, progress has been made to the regulations evaluating the adjustments that the old continent considers important also in the field of two wheels, not included in the order because they are not “sufficiently connected”. Something that Eurocybcar does not defend.
Tests passed
As both companies explain to us, the vehicles that pass the Eurocybcar test obtain a certificate that shows that they implement means to minimize a cyberattack by a cracker , focused on the privacy of the owners. The points that are evaluated in this test are:
- Physical Access: it is checked, for example, if a cybercriminal could manipulate the security and mechanical functions of the vehicle , such as the ABS, its brakes or its steering. Also on the possibility of, through a USB port, introducing a virus that paralyzes the vehicle’s systems.
- Remote Access: the wireless connections that connect with the owners’ smartphones, or their keys, to open or close the vehicle are analyzed.
- Application Testing: Vehicles have more and more applications, so they must be secure to connect with the user’s phone. What’s more, some of these applications allow the user to control various vehicle parameters from their smartphone, such as access, routes, loading or air conditioning, among others.
