29.7.2022
EN
Official Journal of the European Union
C 288/29
USE CASE VM 7.
Vehicle manufacturer supplies information to local authorities
Actor
Vehicle manufacturer
Goal
Supplying information to relevant authority.
Use Case Input
Customer contacts local authorities.
Inquiry by relevant authorities via manual process (no additional IT service required).
Use Case Output
Information about the vehicle (e.g. history of actions performed on a specific VIN).
Description
Customer reports an offence punishable by national laws.
Gives VIN or transaction information.
The competent authority contacts the specific vehicle manufacturer with an inquiry regarding a specific VIN.
In the case of a stolen vehicle, if the vehicle is recovered the relevant authority informs the vehicle manufacturer and the status of the vehicle is restored to normal (audit trail contains information about event).
USE CASE.
Technical requirements 1.1.
Secure communication requirements Any digital communication or transfer of identification, approval and authorization data among CAB, TC and VM is done by secure means i.e. using https-ssl/tls and mutual authentication based on X.509 certificates. 1.2.
Data management description In the SERMI-scheme only the CAB is collecting and using personal information: The following diagram describes a minimal set of attributes that are to be stored in each entity information system in order to be able to implement defined processes and use cases.
Figure 6 Example of data storage as per ISO 18541-1 Use Case Cluster 1 CAB
TC
Vehicle manufacturer
The CAB shall collect and use for the approval inspection of the IO legal representative the data described in chapter 6.3.3 and for the authorization inspection of the IO employees the data described in chapter 6.3.5 The CAB sends the following data by using the web service: — IOEUID — IOUID — Activation password
The TC receives from the CAB the following data: — IOEUID — IOUID — Activation password Additionally the TC generates and uses the following data: — CABUID — Serial number of the electronic cer­ tificate — Validity of the electronic certificate — Authorization status
The VM generates and uses the following data: — Data according ISO 18541-1 use case cluster 1 — Username and password associated to an IOEUID — IOEUID — IOUID — CABUID — Serial number of the electronic cer­ tificate