In order to participate in this service package, each physical object should meet or exceed the following security levels.
In order to participate in this service package, each information flow triple should meet or exceed the following security levels.
| Information Flow Security |
| Source |
Destination |
Information Flow |
Confidentiality |
Integrity |
Availability |
| Basis |
Basis |
Basis |
| Basic Vehicle |
Vehicle |
driver input information |
Moderate |
High |
High |
| Internal vehicle flow that if reverse engineered could enable third party vehicle control. Largely a competitive question, could be set LOW if manufacturer and operator are not concerned with this type of compromise. |
Includes vehicle control commands, which must be timely and accurate to support safe vehicle operation. |
Includes vehicle control commands, which must be timely and accurate to support safe vehicle operation. |
| Basic Vehicle |
Vehicle |
host vehicle status |
Low |
Moderate |
High |
| Unlikely that this includes any information that could be used against the originator. |
This can be MODERATE or HIGH, depending on the application: This is used later on to determine whether a vehicle is likely going to violate a red light or infringe a work zone. This needs to be correct in order for the application to work correctly. |
Since this monitors the health and safety of the vehicle and that information is eventually reported to the driver, it should be available at all times as it directly affects vehicle and operator safety. |
| Connected Vehicle Roadside Equipment |
ITS Roadway Equipment |
detected obstacles |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Connected Vehicle Roadside Equipment |
ITS Roadway Equipment |
detected unequipped vehicles and VRUs |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Connected Vehicle Roadside Equipment |
ITS Roadway Equipment |
wrong way vehicle detected |
Not Applicable |
Moderate |
Moderate |
| This data could eventually be transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
| Connected Vehicle Roadside Equipment |
Other Connected Vehicle Roadside Equipment |
detected unequipped vehicles and VRUs |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Connected Vehicle Roadside Equipment |
Other Connected Vehicle Roadside Equipment |
wrong way vehicle detected |
Not Applicable |
Moderate |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
| Connected Vehicle Roadside Equipment |
Vehicle |
detected obstacles |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Connected Vehicle Roadside Equipment |
Vehicle |
detected unequipped vehicles and VRUs |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Connected Vehicle Roadside Equipment |
Vehicle |
wrong way vehicle detected |
Not Applicable |
Moderate |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
| Driver |
Vehicle |
driver input |
Moderate |
High |
High |
| Data included in this flow may include origin and destination information, which should be protected from other's viewing as it may compromise the driver's privacy. |
Commands from from the driver to the vehicle must be correct or the vehicle may behave in an unpredictable and possibly unsafe manner |
Commands must always be able to be given or the driver has no control. |
| ITS Roadway Equipment |
Connected Vehicle Roadside Equipment |
detected obstacles |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| ITS Roadway Equipment |
Connected Vehicle Roadside Equipment |
detected unequipped vehicles and VRUs |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| ITS Roadway Equipment |
Connected Vehicle Roadside Equipment |
wrong way vehicle detected |
Not Applicable |
Moderate |
Moderate |
| This data could eventually be transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
| Other Connected Vehicle Roadside Equipment |
Connected Vehicle Roadside Equipment |
detected unequipped vehicles and VRUs |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Other Connected Vehicle Roadside Equipment |
Connected Vehicle Roadside Equipment |
wrong way vehicle detected |
Not Applicable |
Moderate |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
| Other Vehicles |
Vehicle |
detected obstacles |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Other Vehicles |
Vehicle |
detected unequipped vehicles and VRUs |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Other Vehicles |
Vehicle |
vehicle control event |
Low |
Moderate |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This message is an indication of a potential hazard and should not be easy to forge. False messages here may lead to confusion that causes a traffic accident. From NYC: Integrity would need to be high if there were no mitigations against bad data in incoming BSMs. In fact, there are two mitigations: plausibility checking, and misbehavior reporting plus revocation. Taking these into account we believe, with [18], that the security requirements are met by requiring an integrity level of MODERATE on these information flows. RES: Sided with NYC due to mitigation documentation. |
This message is an indication of a potential hazard. If it isn’t received it increases the risk to other road users. If a vehicle is infringing on an intersection, it must report this. From NYC: Even moderate availability of BSMs will enable a large majority of collisions between equipped vehicles to be avoided. |
| Other Vehicles |
Vehicle |
vehicle environmental data |
Low |
Moderate |
Moderate |
| Little abusive potential for capturing the information in this flow as designed. Could be moderate if this contains PII related information, but considered for now to not include any PII; DISC: WYO believes Vehicle to Center versions of this flow to be MODERATE as center penetrations could more easily garner aggregate user data that might be used for mischief. |
This could be used for safety applications, and in areas of severe weather a corrupted field could have significant consequences; however, any vehicle will use other inputs before triggering automatic safety facilities, so MODERATE should be sufficient. DISC: WYO believes this to be HIGH. |
This data is required for the system to operate properly. If this data is not available, the system cannot give accurate warning information. |
| Other Vehicles |
Vehicle |
vehicle hazard event |
Low |
High |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This message is an indication of a potential hazard and should not be easy to forge. False messages here may lead to confusion that causes a traffic accident. |
This message is an indication of a potential hazard. If it isn’t received it increases the risk to other road users. If a vehicle is infringing on an intersection, it must report this. |
| Other Vehicles |
Vehicle |
vehicle location and motion |
Not Applicable |
High |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. Much of its information content can also be determined via other visual indicators |
BSM info needs to be accurate and should not be tampered with |
BSM must be broadcast regularly to make data available for other vehicle OBEs, but availability cannot be guaranteed over a wireless medium |
| Other Vehicles |
Vehicle |
vehicle path prediction |
Not Applicable |
High |
Moderate |
| This data is intentionally transmitted to other vehicles operating in a cluster. |
Vehicle path data is critical to the performance of a group of vehicles in a vehicle cluster scenario. Incorrect data here could trigger a severe accident scenario. |
Some vehicle cluster scenarios cannot function without this flow. Worst case is that some vehicles will drop from the platoon however, which while significant to mobility does not have a direct severe consequence. |
| Other Vehicles |
Vehicle |
wrong way vehicle detected |
Not Applicable |
Moderate |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
| Potential Obstacles |
ITS Roadway Equipment |
physical presence |
|
|
|
|
|
|
| Potential Obstacles |
Vehicle |
physical presence |
|
|
|
|
|
|
| Roadway Environment |
Vehicle |
environmental conditions |
Not Applicable |
Low |
Low |
| Sensor-based information flows by definition have no confidentiality concerns. |
While typically security concerns related to sensing ignored, if considered this would be LOW, as the obfuscation or failure of any given environmental sensor is likely to be overcome by the mass of data necessary to draw environmental concluisions. |
While typically security concerns related to sensing ignored, if considered this would be LOW, as the obfuscation or failure of any given environmental sensor is likely to be overcome by the mass of data necessary to draw environmental concluisions. |
| Roadway Environment |
Vehicle |
roadway characteristics |
Not Applicable |
Low |
Low |
| Sensor-based information flows by definition have no confidentiality concerns. |
While typically security concerns related to sensing ignored, if considered this would be LOW, as the obfuscation or failure of any given environmental sensor is likely to be overcome by the mass of data necessary to draw environmental concluisions. |
While typically security concerns related to sensing ignored, if considered this would be LOW, as the obfuscation or failure of any given environmental sensor is likely to be overcome by the mass of data necessary to draw environmental concluisions. |
| Vehicle |
Basic Vehicle |
driver update information |
Low |
Moderate |
Moderate |
| This information is all presented to the vehicle operator. Encrypting this information may make it harder to reverse engineer vehicle systems, and may defeat criminal tracking tools when the vehicle has already been compromised. Unless those scenarios are of concern to the operator or manufacturer, this can safely be set LOW. |
Any information presented to the operator of a vehicle should be both accurate and timely. By definition this includes safety information, but given that the driver has other means of learning about most threats, it seems difficult to justify HIGH. If HIGH is warranted, it should apply to both availability and integrity. |
Any information presented to the operator of a vehicle should be both accurate and timely. By definition this includes safety information, but given that the driver has other means of learning about most threats, it seems difficult to justify HIGH. If HIGH is warranted, it should apply to both availability and integrity. |
| Vehicle |
Basic Vehicle |
vehicle control |
Moderate |
High |
High |
| Internal vehicle flow that if reverse engineered could enable third party vehicle control. Largely a competitive question, could be set LOW if manufacturer and operator are not concerned with this type of compromise. |
Includes vehicle control commands, which must be timely and accurate to support safe vehicle operation. |
Includes vehicle control commands, which must be timely and accurate to support safe vehicle operation. |
| Vehicle |
Connected Vehicle Roadside Equipment |
detected obstacles |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Vehicle |
Connected Vehicle Roadside Equipment |
detected unequipped vehicles and VRUs |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Vehicle |
Connected Vehicle Roadside Equipment |
wrong way vehicle detected |
Not Applicable |
Moderate |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
| Vehicle |
Driver |
driver updates |
Not Applicable |
Moderate |
Moderate |
| This data is informing the driver about the safety of a nearby area. It should not contain anything sensitive, and does not matter if another person can observe it. |
This is the information that is presented to the driver. If they receive incorrect information, they may act in an unsafe manner. However, there are other indicators that would alert them to any hazards, such as an oncoming vehicle or crossing safety lights. |
If this information is not made available to the driver, then the system has not operated correctly. |
| Vehicle |
Other Vehicles |
detected obstacles |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Vehicle |
Other Vehicles |
detected unequipped vehicles and VRUs |
Not Applicable |
High |
Moderate |
| This data is intended to be shared with all nearby vehicles, traffic control devices and vulnerable road users; it is essentially public. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. If manipulated or incorrect, a crash may occur; though vehicles able to use this data also have sensory capabilities, this flow will often contain data describing objects/vehicles/VRUs that are obscured and not observable by on-board sensors. |
This data may be used as input to vehicle situational awareness and thus trigger crash-avoidance actions. This data enable collision avoidance actions that are impractical without it, as vehicles able to use this data to sense-by-proxy other vehicles/VRUs/obstacles that are obscured by on-board sensors. Considered MODERATE and not HIGH only because the lack of availability reverts to existing operations and does not actively make safety worse. |
| Vehicle |
Other Vehicles |
vehicle control event |
Low |
Moderate |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
BSM info needs to be accurate and should not be tampered with, suggesting HIGH. From NYC: Integrity would need to be high if there were no mitigations against bad data in incoming BSMs. In fact, there are two mitigations: plausibility checking, and misbehavior reporting plus revocation. Taking these into account we believe, with [18], that the security requirements are met by requiring an integrity level of MODERATE on these information flows. RES: Sided with NYC due to mitigation documentation. |
BSM must be broadcast regularly to make data available for other vehicle OBEs, but cannot guarantee wireless communication |
| Vehicle |
Other Vehicles |
vehicle environmental data |
Low |
Moderate |
Moderate |
| Little abusive potential for capturing the information in this flow as designed. Could be moderate if this contains PII related information, but considered for now to not include any PII; DISC: WYO believes Vehicle to Center versions of this flow to be MODERATE as center penetrations could more easily garner aggregate user data that might be used for mischief. |
This could be used for safety applications, and in areas of severe weather a corrupted field could have significant consequences; however, any vehicle will use other inputs before triggering automatic safety facilities, so MODERATE should be sufficient. DISC: WYO believes this to be HIGH. |
This data is required for the system to operate properly. If this data is not available, the system cannot give accurate warning information. |
| Vehicle |
Other Vehicles |
vehicle hazard event |
Low |
High |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This message is an indication of a potential hazard and should not be easy to forge. False messages here may lead to confusion that causes a traffic accident. |
This message is an indication of a potential hazard. If it isn’t received it increases the risk to other road users. If a vehicle is infringing on an intersection, it must report this. |
| Vehicle |
Other Vehicles |
vehicle location and motion |
Not Applicable |
High |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. Much of its information content can also be determined via other visual indicators |
BSM info needs to be accurate and should not be tampered with |
BSM must be broadcast regularly to make data available for other vehicle OBEs, but availability cannot be guaranteed over a wireless medium |
| Vehicle |
Other Vehicles |
vehicle path prediction |
Not Applicable |
High |
Moderate |
| This data is intentionally transmitted to other vehicles operating in a cluster. |
Vehicle path data is critical to the performance of a group of vehicles in a vehicle cluster scenario. Incorrect data here could trigger a severe accident scenario. |
Some vehicle cluster scenarios cannot function without this flow. Worst case is that some vehicles will drop from the platoon however, which while significant to mobility does not have a direct severe consequence. |
| Vehicle |
Other Vehicles |
wrong way vehicle detected |
Not Applicable |
Moderate |
Moderate |
| This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
This information could lead directly to an severe incident, however other mechanisms exist to confirm this data, thus availability and integrity are set to MODERATE instead of HIGH. |
| Vehicle Characteristics |
ITS Roadway Equipment |
vehicle characteristics |
|
|
|
|
|
|
| Vehicle Characteristics |
Vehicle |
vehicle characteristics |
|
|
|
|
|
|
| Vulnerable Road Users |
ITS Roadway Equipment |
vulnerable road user presence |
|
|
|
|
|
|
| Vulnerable Road Users |
Vehicle |
vulnerable road user presence |
|
|
|
|
|
|