TrafficAuth
ISS TrafficAuth Services for Secure Traffic Management Center operations
The ISS TrafficAuth family of services enables Infrastructure Owners and Operators (IOOs) to maintain a highly secured and fully compliant Traffic Management Center (TMC) network while also adding and supporting new connected vehicle (V2X) applications.
ISS TrafficAuth: Authority (formerly TMCA)
The V2X ecosystem requires that cryptographic signing keys be protected against hackers and other adversaries. The ISS Traffic Management Center Authority (TMCA) Service, now called TrafficAuth:Authority, provides secure automated IEEE 1609.2 signing of MAP, Traveler Information Messages (TIM) and other sensitive messages which originate from an IOO’s Network Operations Center. The Service reduces the threat surface by storing the cryptographic signing keys within ISS’s FIPS 140-2 Level 3 HSMs. Communications between the NOC and TMCA Service are protected using TLS v1.2 and mutual authentication. Centrally signing messages using the TMCA Service protects against hackers submitting their own messages to RSUs and having those RSUs sign and broadcast them to the surrounding vehicles potentially causing serious disruptions (if MAPs are corrupted) or citizen annoyance (if disturbing TIMs are displayed in their vehicles). The TMCA Service can also provide central encryption/decryption of probe data (or other sensitive data) if required by your applications. The TMCA Service seamlessly integrates with the ISS SCMS to obtain the V2X application certificates necessary for its operations.
ISS TrafficAuth: Gateway
Modern Integrated Traffic Management Systems (ITS) equipment require connections to external network services. However, TMC networks were never built to support external, internet facing connections. ISS TrafficAuth:Gateway is a secure solution to reliably enable and manage external connectivity for your advanced ITS assets including V2X RoadSide Units (RSUs) that need to contact an SCMS service to top-off security certificates. The same solution can be used for other cloud-based data logging and reporting solutions. A secure portal allows network administrators to have clear visibility into which devices are enabled for external connectivity and manage secure access. Audit logs track all device activity as required for compliance. Contact ISS for additional details on how TrafficAuth:Gateway can facilitate secure, compliant, external network connections for your modern ITS devices.
- V2V, V2G, V2I, C2C, and C2I certificates
- V2X: CAMP, IEEE 1609.2-2022, IEEE 1609.2.1-2022, ETSI TS 103 097, CCSA LTE compliant
- V2G: ISO 15118-20 and ISO 15118-2 compliant
- Worldwide support: North America, Europe, China, Japan, Korea
- Test and Production Keys
- SCMS Infrastructure Certificates
- Multiple years of Pseudonym Certificates per unit
- Continuing compliance with developing V2V and C-ITS specifications
- Current Certificate Revocation List
- Over-the-air certificate top-offs over any network
- Uninterrupted production with redundant power, database, and network failover