xmlns:atom="http://www.w3.org/2005/Atom" xmlns:atom="http://www.w3.org/2005/Atom"

Please note that the date you requested in the address for this web page is not an actual date upon which a change occurred to this item of legislation. You are being shown the legislation from , which is the first date before then upon which a change was made.

ANNEX I CU.K. Requirements for construction, testing, installation, and inspection

Appendix 12

POSITIONING BASED ON GLOBAL NAVIGATION SATELLITE SYSTEM (GNSS) U.K.

4.VEHICLE UNIT WITH AN EXTERNAL GNSS FACILITYU.K.
4.2. Communication between the external GNSS facility and the vehicle unit U.K.
4.2.1 Communication Protocol U.K.
GNS_14The communication protocol between the external GNSS facility and the vehicle unit shall support three functions:U.K.
1.

The collection and distribution of GNSS data (e.g., position, timing, speed),

2.

The collection of the configuration data of the external GNSS facility,

3.

The management protocol to support the coupling, mutual authentication and session key agreement between the external GNSS facility and the VU.

GNS_15The communication protocol shall be based on standard ISO/IEC 7816-4:2013 with the VU Secure Transceiver playing the master role and the GNSS Secure Transceiver playing the slave role. The physical connection between the external GNSS facility and the vehicule unit is based on ISO/IEC 7816-12:2005 or another standard able to support ISO/IEC 7816-4:2013U.K.
[F1GNS_16 In the communication protocol, extended length fields shall not be supported.] U.K.
GNS_17The communication protocol of ISO 7816 (both *-4:2013 and *-12:2005) between the external GNSS facility and the VU shall be set to T = 1.U.K.
[F1GNS_18 Regarding the functions 1) the collection and distribution of GNSS data and 2) the collection of the configuration data of the external GNSS facility and 3) management protocol, the GNSS Secure Transceiver shall simulate a smart card with a file system architecture composed by a Master File (MF), a Dedicated File (DF) with Application Identifier specified in Appendix 1 chapter 6.2 ( FF 44 54 45 47 4D ) and with 3 EFs containing certificates and one single Elementary File (EF.EGF) with file identifier equal to 2F2F as described in Table 1.] U.K.
GNS_19The GNSS Secure Transceiver shall store the data coming from the GNSS receiver and the configuration in the EF.EGF. This is a linear, variable-length record file with an identifier equal to ‘2F2F’ in hexadecimal format.U.K.
[F1GNS_20 The GNSS Secure Transceiver shall use a memory to store the data and be able to perform at least 20 millions write/read cycles. Apart from this aspect, the internal design and implementation of the GNSS Secure Transceiver is left to the manufacturers. U.K.

The mapping of record numbers and data is provided in Table 1. Note that there are five GSA sentences for the GNSS constellations and Satellite-Based Augmentation System (SBAS).]

GNS_21The file structure is provided in Table 1. For the access conditions (ALW, NEV, SM-MAC) see Appendix 2 chapter 3.5.U.K.
Table 1
File Structure
Access conditions
FileFile IDReadUpdateEncrypted
MF3F00
EF.ICC0002ALW

NEV

(by VU)

No
DF GNSS Facility0501ALWNEVNo
EF EGF_MACertificateC100ALWNEVNo
EF CA_CertificateC108ALWNEVNo
EF Link_CertificateC109ALWNEVNo
EF.EGF2F2FSM-MAC

NEV

(by VU)

No
File / Data elementRecord noSize (bytes)Default values
MinMax
MF5521 031
EF.ICC
sensorGNSSSerialNumber88
DF GNSS Facility 612 1 023
EF EGF_MACertificate 204 341
EGFCertificate204341{00..00}
EF CA_Certificate 204 341
MemberStateCertificate204341{00..00}
EF Link_Certificate 204 341
LinkCertificate204341{00..00}
EF.EGF
RMC NMEA Sentence‘01’8585
1st GSA NMEA Sentence‘02’8585
2nd GSA NMEA Sentence‘03’8585
3rd GSA NMEA Sentence‘04’8585
4th GSA NMEA Sentence‘05’8585
5th GSA NMEA Sentence‘06’8585
Extended serial-number of the external GNSS facility defined in Appendix 1 as SensorGNSSSerialNumber.‘07’88
Operating system identifier of the GNSS Secure Transceiver defined in Appendix 1 as SensorOSIdentifier.‘08’22
Type approval number of the external GNSS facility defined in Appendix 1 as SensorExternalGNSSApprovalNumber.‘09’1616
Identifier of the security component of the external GNSS facility defined in Appendix 1 as SensorExternalGNSSSCIdentifier‘10’88
RFU — Reserved for Future UseFrom ‘11’ to ‘FD’
4.2.2 Secure transfer of GNSS data U.K.
GNS_22The secure transfer of GNSS position data shall be allowed only in the following conditions:U.K.
1.

The coupling process has been completed as described in Appendix 11. Common security mechanisms.

2.

The periodic mutual authentication and session key agreement between the VU and the external GNSS facility also described in Appendix 11. Common security mechanisms has been executed with the indicated frequency.

GNS_23Every T seconds, where T is a value lower or equal to 10, unless coupling or mutual authentication and session key agreement takes place, the VU requests from the external GNSS facility the position information on the basis of the following flow:U.K.
1.

The VU requests location data from the External GNSS facility together with Dilution of Precision data (from the GSA NMEA sentence). The VU Secure Transceiver shall use the ISO/IEC 7816-4:2013 SELECT and READ RECORD(S) command in secure messaging authentication-only mode as described in Appendix 11 section 11.5 with the file identifier ‘2F2F’ and RECORD number equal to ‘01’ for RMC NMEA sentence and ‘02’,‘03’,‘04’,‘05’,‘06’ for GSA NMEA sentence.

2.

The last location data received is stored in the EF with identifier ‘2F2F’ and the records described in Table 1 in the GNSS secure transceiver as the GNSS secure transceiver receives NMEA data with a frequency of at least 1 Hz from the GNSS receiver through the GNSS data interface.

3.

The GNSS Secure Transceiver sends the response to the VU Secure Transceiver by using the APDU response message in secure messaging authentication-only mode as described in Appendix 11 section 11.5.

4.

The VU Secure Transceiver checks the authenticity and integrity of the received response. In case of positive outcome, the location data is transferred to the VU processor through the GNSS data interface.

5.

[F1The VU processor checks the received data extracting the information (e.g., latitude, longitude, time) from the RMC NMEA sentence. The RMC NMEA sentence includes the information if the position is valid. If the position is not valid, the location data is not available yet and it cannot be used to record the position of the vehicle. If the position is valid, the VU processor also extracts the values of HDOP from GSA NMEA sentences and calculate the minimum value on the available satellite systems (i.e., when the fix is available).]

6.

The VU processor stores the received and processed information such as latitude, longitude, time and speed in the VU in the format defined in Appendix 1 Data Dictionary as GeoCoordinates together with the value of HDOP calculated as the minimum of the HDOP values collected on the available GNSS systems.

4.2.3 Structure of the Read Record command U.K.

This section describes in detail the structure of the Read Record command. Secure messaging (authentication-only mode) is added as described in Appendix 11 Common security mechanisms.

GNS_24The command shall support the Secure Messaging authentication-only-mode, see Appendix 11.U.K.
GNS_25Command MessageU.K.
ByteLengthValueDescription
CLA1‘0Ch’Secure messaging asked.
INS1‘B2h’Read Record
P11‘XXh’Record number (‘00’ references the current record)
P21‘04h’Read the record with the record number indicated in P1
Le1‘XXh’Length of data expected. Number of Bytes to be read.
GNS_26The record referenced in P1 becomes the current record.U.K.
ByteLengthValueDescription
#1-#XX‘XX..XXh’Data read
SW2‘XXXXh’Status Words (SW1,SW2)
GNS_27The GNSS Secure Transceiver shall support the following tachograph generation 2 commands specified in Appendix 2:U.K.
CommandReference
SelectAppendix 2 chapter 3.5.1
Read BinaryAppendix 2 chapter 3.5.2
Get ChallengeAppendix 2 chapter 3.5.4
PSO: Verify CertificateAppendix 2 chapter 3.5.7
External AuthenticateAppendix 2 chapter 3.5.9
General AuthenticateAppendix 2 chapter 3.5.10
MSE:SETAppendix 2 chapter 3.5.11