Standard No.:	GB/T 40855-2021
English Name:	Technical requirements and test methods for cybersecurity of remote service and management system for electric vehicles
Chinese Name:	电动汽车远程服务与管理系统信息安全技术要求及试验方法
Chinese Classification:	T40    Automobiles in general
Professional Classification:	GB    National Standard
Issued by:	SAMR; SAC
Issued on:	2021-10-11
Implemented on:	2022-5-1
Status:	valid
Language:	English
File Format:	PDF
Word Count:	8000 words
Price(USD):	240.0
Delivery:	via email in 1 business day

Codeofchina.com is in charge of this English translation. In case of any doubt about the English translation, the Chinese original shall be considered authoritative. This standard is developed in accordance with the rules given in GB/T 1.1-2020 Directives for standardization — Part 1: Rules for the structure and drafting of standardizing documents. Attention is drawn to the possibility that some of the elements of this standard may be the subject of patent rights. The issuing body of this standard shall not be held responsible for identifying any or all such patent rights. This standard was proposed by the Ministry of Industry and Information Technology of the People's Republic of China. This standard is under the jurisdiction of the National Technical Committee of Auto Standardization (SAC/TC 114). Technical requirements and test methods for cybersecurity of remote service and management system for electric vehicles 1 Scope This standard specifies the technical requirements and test methods for information security of remote service and management system for electric vehicles. This standard is applicable to data communication among on-board terminal, vehicle enterprise service and management platform, and public service and management platform of battery electric vehicle, plug-in hybrid electric vehicle and fuel cell electric vehicle. 2 Normative references The following documents contain provisions which, through reference in this text, constitute provisions of this standard. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. GB/T 19596 Terminology of electric vehicles GB/T 32960.1-2016 Technical specifications of remote service and management system for electric vehicles — Part 1: General principle GB/T 32960.3-2016 Technical specifications of remote service and management system for electric vehicles — Part 3: Communication protocol and data format 3 Terms and definitions For the purposes of this standard, the terms and definitions given in GB/T 19596, GB/T 32960.1-2016, GB/T 32960.3-2016 and the following apply. 3.1 remote service and management system for electric vehicles system that collects, processes and manages electric vehicle information and provides information services for network users, which consists of public service and management platform, enterprise service and management platform and on-board terminal [Source: GB/T 32960.1-2016, 3.1]  3.2 public service and management platform platform established by the national and local governments or their designated agencies for data collection and unified management of electric vehicles within their jurisdiction [Source: GB/T 32960.1-2016, 3.2] 3.3 enterprise service and management platform platform where whole vehicle enterprises build or entrust a third-party technical unit to manage the electric vehicles and users within the service scope, and provide safe operation services and management [Source: GB/T 32960.1-2016, 3.3] 3.4 on-board terminal device or system which is installed on the vehicle to collect and save the key state parameters of the whole vehicle and system components and send them to the platform [Source: GB/T 32960.1-2016, 3.4] 3.5 client platform platform as the remote service and management platform of the vehicle data sender during the data interaction between the two platforms [Source: GB/T 32960.3-2016, 3.1] 3.6 server platform platform as the remote service and management platform of the vehicle data receiver during the data interaction between the two platforms [Source: GB/T 32960.3-2016, 3.2] 3.7 trusted verification integrity verification of the target program of the device based on the trusted root 4 Abbreviations For the purposes of this standard, the following abbreviations apply. AES: Advanced Encryption Standard IP: Internet Protocol JTAG: Joint Test Action Group LTE: Long Term Evolution PCB: Printed Circuit Board SPI: Serial Peripheral Interface SSL: Secure Sockets Layer TCP: Transmission Control Protocol TLS: Transport Layer Security UART: Universal Asynchronous Receiver/Transmitter USB: Universal Serial Bus UTC: Universal Time Coordinated 5 Information security requirements 5.1 Overall structure diagram The overall structure diagram of information security of remote service and management system for electric vehicles is shown in Figure 1.

Foreword i 1 Scope 2 Normative references 3 Terms and definitions 4 Abbreviations 5 Information security requirements 5.1 Overall structure diagram 5.2 Security requirements for on-board terminal 5.3 Communication security requirements between platforms 5.4 Security requirements for communications between on-board terminals and platforms 5.5 Security requirements for platforms 6 Test methods 6.1 General 6.2 Requirements for information security test samples of on-board terminals 6.3 Information security test environment of on-board terminal 6.4 Information security test of on-board terminal 6.5 Test of communication security between platforms 6.6 Test of communication security between on-board terminal and platform