Ensure a secure software update with UN Regulation No. 156

• Even newly launched vehicle types must also ensure compliance with the regulation by July 2022
• All newly produced cars must comply with the regulation by July 2024 at the latest
• The European Union has already adapted UN R156 into applicable law, meaning that the respective requirements are legally binding in the EU
• Non-European car manufacturers who want to sell their cars in UNECE member states, are required to adopt equivalent principles to UN R156 and demonstrate compliance

Thus, there is a significant pressure on the automotive value chain to act in order to correctly set the course for the newly defined requirements for software updates, the software update management system and over-the-air updates in practice.

Our experts at CYRES have prepared a comprehensive Guide to UN R156, ISO 24089 and their effect on SUMS.

In order to understand all the various aspects affected by UN Regulation No. 156 when it comes to ensuring secure software updates, it helps to structure the requirements. Therefore, in order to perform a secure software update in accordance with UN R156, it is necessary to correctly consider certain requirements. These concern:

• the Original Equipment Manufacturer in cooperation with its suppliers,
• the vehicle type
• the proper consideration of the vehicle owner/user as part of the update process

At the same time it is important to understand that the requirements of UN Regulation No 156 cover the level of the organization, the specific project (across all phases of the entire product lifecycle) and the respective Software Update Campaign.

Which processes have to be addressed in this context? What are the exact requirements regarding information handling and documentation? You can get a first knowledge boost with our new video learning course on the CYRES Academy Online Learning Platform: UN Regulation No. 156 video course (€)

This is a video snippet from our video learning course “UN Regulation No. 156” (in total consisting of seven videos).

After taking this course, you will be able to explain the scope of the UN R156, estimate the impact of the UN R156 on your organization and be able to discuss the UN R156 with colleagues and customers. The contents of the video course at a glance:

• Intro to UN Regulation No. 156
  Get a first understanding of what UN R156 is
• Importance of UN Regulation No. 156
  Why UN R156 is relevant for the whole automotive industry
• Roots and scope of UN Regulation No 156
  Learn the roots and scope of the UN R156, where, and when it is mandatory
• Structure and requirements of UN Regulation No 156
  Get a deeper understanding of Software Update Management System requirements: at the vehicle manufacturer, supplier, vehicle types levels and further aspects including the RXSWIN
• Requirements for the SUMS for the vehicle manufacturer
  In this part we will provide an overview of the requirements for the Software Update Management System on the side of the vehicle manufacturer. Furthermore we will describe the vehicle type approval process for approving the Software Update Management System.
• Who is responsible?
  After having seen what is required by the UN Regulation No 156, in this part we explain who is responsible and accountable.
• Closing summary
  Finally, here we will sum up what you have learned about UN Regulation No. 156 and its requirements.

For the overall security and integrity of the software update process, it is not only necessary to involve all players in the value chain, but it is also important to take the software update requirements into consideration.

In the context of the pre-update, it is important to ensure that the preconditions for the update are properly in place – from the update infrastructure to the vehicle and more.

For the execution of the actual over-the-air update, it is also necessary to ensure certain parameters.

And afterwards, in the post-update phase, further requirements have to be met, e.g. with regard to documentation, etc.

The RXSWIN (the Regulation X Software Identification Number) plays a crucial role in the UN R156 assessment. The RXSWIN can be thought of as a dedicated identifier for the type approval relevant software of the Electronic Control System, defined by the vehicle manufacturer.

Please note: The presented offer of CYRES Consulting UN R156 assessment is a non-binding offer. Please use the form for your first non-binding inquiry. In the following dialogue we will present you the scope of our specific services and define the organizational details together with you.

Phone: +49 (0) 89 9542 808 00
E-Mail: office (at) cyres-consulting.com