The Ministry of Road Transport and Highways has proposed the drafting of new rules to make cybersecurity and software update management mandatory for vehicles which incorporate advanced technology.
The new law comes amidst rising cyber threats against vehicles as they become smarter and incorporate more software systems which increase the risk of malware and other cyber attacks.
Read more: Higher performance guarantees from lower bids in highway projects: Road transport ministry
The proposed cybersecurity rules will apply to passenger and commercial vehicles as well as tractors equipped with at least one electronic control unit (ECU) with Level-3 or higher automated driving capability.
Vehicle models such as Mercedes-Benz S Class, Audi A8, and BMW 7 Series, which incorporate Level-3 automation and above must comply with cybersecurity and cybersecurity management systems from October. The law would also be applicable for existing models from April next year. The next phase -- between April and October 2028 -- vehicles which can receive over-the-air (OTA) software updates are in line to comply with the new rules, followed by vehicles with software update capability from October 2029.
Cars which receive over-the-air (OTA) software, firmware or system updates through WiFi or cellular networks operate similarly to smartphone updates. The system eliminates the need to physically visit dealerships to diagnose repairs, enhancements or bring in new software updates.
Read more: NHAI suspends officials after Delhi-Dehradun Expressway section cave-in video goes viral
Officials said that there is a need for vehicle manufacturers to increase security in their coding for their battery management systems designed to manage the operations of a battery pack, which includes its health.
( With inputs from TOI )
