Council Regulation (EEC) No 3821/85Show full title

[F1 [F2 4.7. Reliability of service U.K.

4.7.1. Tests U.K.

[RLB_201] All commands, actions or test points, specific to the testing needs of the manufacturing phase of the VU shall be disabled or removed before the VU activation. It shall not be possible to restore them for later use.

[RLB_202] The VU shall run self tests, during initial start-up, and during normal operation to verify its correct operation. The VU self tests shall include a verification of the integrity of security data and a verification of the integrity of stored executable code (if not in ROM).

[RLB_203] Upon detection of an internal fault during self test, the SEF shall:

• generate an audit record (except in calibration mode) (VU internal fault),

• Preserve the stored data integrity.

4.7.2. Software U.K.

[RLB_204] There shall be no way to analyse or debug software in the field after the VU activation.

[RLB_205] Inputs from external sources shall not be accepted as executable code.

4.7.3. Physical protection U.K.

[RLB_206] If the VU is designed so that it can be opened, the VU shall detect any case opening, except in calibration mode, even without external power supply for a minimum of six months. In such a case, the SEF shall generate an audit record (It is acceptable that the audit record is generated and stored after power supply reconnection).

If the VU is designed so that it cannot be opened, it shall be designed such that physical tampering attempts can be easily detected (e.g. through visual inspection).

[RLB_207] After its activation, the VU shall detect specified (TBD by manufacturer) hardware sabotage.

[RLB_208] In the case described above, the SEF shall generate an audit record and the VU shall: (TBD by manufacturer).

4.7.4. Power supply interruptions U.K.

[RLB_209] The VU shall detect deviations from the specified values of the power supply, including cut-off.

[RLB_210] In the case described above, the SEF shall:

• generate an audit record (except in calibration mode),

• preserve the secure state of the VU,

• maintain the security functions, related to components or processes still operational,

• preserve the stored data integrity.

4.7.5. Reset conditions U.K.

[RLB_211] In case of a power supply interruption, or if a transaction is stopped before completion, or on any other reset conditions, the VU shall be reset cleanly.

4.7.6. Data availability U.K.

[RLB_212] The VU shall ensure that access to resources is obtained when required and that resources are not requested nor retained unnecessarily.

[RLB_213] The VU must ensure that cards cannot be released before relevant data have been stored to them (requirements 015 and 016)

[RLB_214] In the case described above, the SEF shall generate an audit record of the event.

4.7.7. Multiple applications U.K.

[RLB_215] If the VU provides applications other than the tachograph application, all applications shall be physically and/or logically separated from each other. These applications shall not share security data. Only one task shall be active at a time.] ]

Textual Amendments

F1 Inserted by Council Regulation (EC) No 2135/98 of 24 September 1998 amending Regulation (EEC) No 3821/85 on recording equipment in road transport and Directive 88/599/EEC concerning the application of Regulations (EEC) No 3820/85 and (EEC) No 3821/85.

F2 Substituted by Commission Regulation (EC) No 1360/2002 of 13 June 2002 adapting for the seventh time to technical progress Council Regulation (EEC) No 3821/85 on recording equipment in road transport (Text with EEA relevance).