1.1 Background and expected benefits of first-mount OBE
It could be foreseen that in future the DSRC OBE will be delivered by car manufacturer as a feature of the
vehicle as they do today with car radio which are parts of the most sold vehicles. For the vehicle owner, the
OBE supplier is the car manufacturer acting as an OEM (Original Equipment Manufacturer).
The integration of first mount OBE by car manufacturer is the only way to create a future mass market for EFC
application based upon DSRC as well as GNSS/CN, as at present the integration of this type of OBEs cannot
be achieved except for heavy goods vehicles. Regarding DSRC, this is also an opportunity to extend the
capability of today’s EFC technologies by providing increased quality of service, and possibly a greater range
of services using in-vehicle electronics and resources.
1.2 Personalisation concept
The personalisation procedure is the procedure where the EFC Service Provider initialize, customise, and
finally activate the EFC interoperable service to OBE, for a customer with or without existing account. Two
different kinds of personalisation methods can be defined:
a) the personalisation procedure can be done “over the air”. In such case, personalisation data can be
encoded in the OBE by the Service Provider over a secure air-link, or
b) personalisation data can be loaded directly by the driver into the OBE or Service Provider via a personal
storage media.
Theses are two fundamentally different approaches. The second method is perfectly fitted for critical
initialisation data, such as encryption keys, to enable the driver to use the same EFC contract in different
vehicles, and also to send personalisation data via post to a large number of customers.
In any case, the personalisation procedure shall be implemented in a practical way. It was reminded that the
very large majority of Service Provider distribution networks (and related point of sales) are not suited to allow
point-to-point communication with vehicles. They are suited mainly for front-desk operations such as
initialisation of an account, data collection of user information, and so on.
For both methods, all access protection information, OBE contract information, shall be stored in a secure
storage area within the OBE. During the personalisation procedure, any OBE and Service Provider service
point will only communicate, but only further to a successful check of access rights.
The use of an air-link for personalisation purposes includes some risks with respect to the security of the EFC
system. The present document addresses appropriate measures to counteract these risks. Security services
such as integrity protection and authentication protocols shall be defined to prevent unauthorised access to
the content of the OBE memory area retaining personalisation data. This statement of principles summarises
essential aspects to be taken into account for the personalisation of OBE. These principles are valid:
a) whether the EFC system is based upon DSRC, GNSS-CN, or a combination of both technologies;
b) for permanently installed OBE;
c) for both original equipment manufacturers (first mount) and after sales permanently attached to the
vehicle by OBE manufacturers.
BS PD CEN/TR 16152:2011 Referenced Document
CEN ISO/TS 17575-1 Electronic fee collection - Application interface definition for autonomous systems - Part 1: Charging
EN ISO 14906 Electronic fee collection - Application interface definition for dedicated short-range communication (ISO 14906:2022)*, 2023-01-11 Update
ISO 11568-2 Financial services - Key management (retail) - Part 2: Symmetric ciphers, their key management and life cycle*, 2012-02-01 Update
prEN ISO 17573 Electronic fee collection - System architecture for vehicle-related tolling - Part 3: Data dictionary (ISO/DIS 17573-3:2022)
BS PD CEN/TR 16152:2011 history
2011BS PD CEN/TR 16152:2011 Electronic fee collection. Personalisation and mounting of first mount OBE