As the strategic direction of the development of the automobile industry, intelligent networked vehicles are in the early stage of commercialization with rapid technological evolution and accelerated industrial layout.
At the same time, the development of automobile intelligence and networking has also generated data security issues such as unauthorized personal information and important data collection and utilization, network security issues such as network attacks and network intrusions, and random failures and functions of driving automation systems, traffic safety problems caused by inadequacy, etc., as well as safety risks that may be introduced by online upgrades (also known as OTA upgrades) that change vehicle functions and performance.
In order to promote the high-quality development of the intelligent networked automobile industry, the Ministry of Industry and Information Technology issued on the 12th the Opinions on Strengthening the Management of Intelligent Networked Automobile Manufacturers and Product Access (hereinafter referred to as the Opinions), requesting the strengthening of automobile data security, network security, and software upgrade, functional safety and expected functional safety management to ensure product quality and production consistency.
The Opinions puts forward 11 specific opinions in terms of strengthening data and network security management, regulating software online upgrades, strengthening product management, and safeguarding measures.
Data management has attracted much attention. In terms of strengthening data security management capabilities, the Opinions clarified that an automobile data security management system should be established and completed, and data security protection obligations should be fulfilled in accordance with the law; data security protection technical measures should be established to ensure that data continues to be effectively protected and legally used. The status of data security risk assessment, data security incident reporting and other requirements are implemented in accordance with laws and regulations.
It is particularly worth noting that the Opinions points out that personal information and important data collected and generated during operations within the territory of the People’s Republic of China should be stored in China in accordance with relevant laws and regulations. If data needs to be provided abroad, it should pass a data export security assessment.
The Opinions also emphasizes that companies should establish data asset management accounts, implement data classification and hierarchical management, and strengthen the protection of personal information and important data.
For intelligent connected car products, safety is the red line. The Opinions requires that if an enterprise produces automotive products with online upgrade functions, the online upgrade ensures the consistency of product production. Without approval, it is not allowed to add or update auto-driving functions of vehicles through online software upgrades.
When an enterprise produces auto products with autonomous driving functions, it should ensure that the auto products have human-computer interaction functions and display the operating status of the autopilot system. If the driver is required to perform dynamic driving tasks under certain conditions, it shall have the function of recognizing the ability of the driver to perform dynamic driving tasks. Vehicles should be able to interact with other road users by reasonably using light signals, sounds, and other methods in accordance with laws and regulations.
In order to effectively review accidents, automotive products should have an event data recording system and an automatic driving data recording system for accident reconstruction, responsibility determination, and cause analysis.
In addition, companies should ensure that automotive products have safe and reliable satellite positioning and timing functions, which can effectively provide information such as location, speed, and time. The Opinions encouragés and supports intelligent networked automotive products to accept Beidou satellite navigation system signals.
The Ministry of Industry and Information Technology stated that in the follow-up, it will focus on the preparation and introduction of relevant technical specifications for intelligent networked car products with autonomous driving functions to promote the implementation of the Opinions.
