This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.
The Biscayan firm anticipates the UNECE/R155 regulation that will require that all vehicles that are approved in Europe from next summer and are sold (from July 2024), have a cybersecurity certificate
The Biscayan start-up NUUK Mobility Solutions (NMS) -specialized in the design and development of intelligent light electric vehicle solutions- is the first automotive company in the world to obtain the Vehicle Cybersecurity certificate in one of its developments after passing the corresponding AENOR audit. The Basque firm anticipates demanding European regulations that have already entered into force and that will require that all vehicles that are homologated in Europe from next July be cyber-secure: they protect the privacy and lives of people traveling on board, as well as the integrity of the vehicle’s systems. In this way, EUROCYBCAR, -a pioneering Basque firm in measuring the cybersecurity of all types of vehicles, according to the UNECE/R155 regulation- and AENOR, which will audit and certify that NUUK’s electric motorcycle model, the CargoPro, has passed the EUROCYBCAR test and, therefore, has a sufficient degree of cybersecurity in accordance with the requirements specified in the UNECE/R155 regulation.
It is estimated that by 2023 there will be 775 million connected vehicles in the world. In addition, autonomous vehicles -which equip more complex software-, will also be on the rise: it is estimated that in 2026 another 50 million driverless vehicles will circulate on roads around the world.
A cyberattack on these vehicles could, from activate remotely or deactivating the airbag, stealing the car or ‘locking you up’ if the vehicle’s smart key was ‘cracked’, or spying on, blackmailing or impersonating passengers in the case of accessing technologies such as bluetooth or wifi.
In the case of motorcycles, it happens the same. If they aren’t enough cyber-protected, a cybcercriminal can modify parameters that control the power of the motor to overheat it and cause a fire; access the braking system and block it; connect to the vehicle’s control unit to obtain user’s data and routes he has traveled, and even steal the vehicle.
To get an idea of the problem, a study carried out by the Basque company EUROCYBCAR, has documented more than 200 calls for review due to software problems and more than 450 cyber attacks carried out since 2012, on 45 automotive firms from all over the world.
To prevent the new risks of connected vehicles, the ONU has studied dfor years how to imporve the elements linked to the cibersecurity of vehicles. One of the firsts measures implemented, has been the entry into force last January of the cybersecurity regulation of the UNECE/R155 regulation, by which all vehicles that are approved in the European Union -Japan has also adhered, South Korea, Russia, Australia, and South Africa will need to have a cybersecurity certificate.
Most restrictive regulation in the EU
Moreover, the European Union has taken this risk very seriously by adopting this UN standard and making it even more restrictive, in such a way that in July 2024 all models that are for sale in member countries must have a certificate mandatory cybersecurity for cars, buses, trucks, vans, motorhomes… but not motorcycles because the UNECE considers that they are not sufficiently connected, when in fact they have higher levels of connectivity every day, especially in professional fleets.
The new regulations are therefore intended to ensure that manufacturers address cybersecurity risks in cars by setting clear performance and audit requirements for manufacturers.
The regulation in question (UNECE/R155) is very demanding with the cybersecurity requirements that all vehicles must meet (cars, vans, trucks, buses, motorhomes, trailers…).
The test must verify that the models could overcome possible cyberattacks to the integrity of the vehicle’s computer systems, to the physical safety of the driver or passengers, but it also stops to defend the privacy of the people who travel on board those vehicles.
As stated by the CEO of EUROCYBCAR, Azucena Hernández, “this is a very ambitious regulation for the EU, which will close the market to vehicles that are not cyber-secure much earlier, even, than those with combustion engines. The new regulation provides a framework for the automotive sector to identify and manage cybersecurity risks from the very design phase of a vehicle until it is definitively withdrawn”.
NUUK Mobility Solutions (NMS), a worldwide pioneer
The Biscayan firm NUUK Mobility Solutions (NMS) -which develops and markets intelligent light electric vehicle solutions- has become the first automotive firm in the world to offer one of its electric motorcycle models with a cybersecurity certificate for vehicles under the NUUK brand, according to the new European cybersecurity regulations. After passing the EUROCYBCAR cybersecurity test, AENOR will audit compliance and issue a certificate that will be valid for three years.
Specifically, the firm -located in the AIC de Amorebieta (Bizkaia), an electric mobility research center in the Basque Country- confirms cybersecurity for its main model, the CargoPro electric motorcycle, with the first cybersecurity certificate in the world for vehicles. With this certification, it is ahead of European regulations, since, for the time being, electric motorcycles are not required to pass this exam.
“It is a source of pride that NUUK -explains Ixone Busturia, deputy director of the Basque firm- is the first vehicle brand in the world to obtain the Cybersecurity certificate for Vehicles issued by AENOR, according to the requirements of the UNECE/R155 regulation”. “It is an important milestone in the company that, as an agent for the transition to intelligent electric mobility, we seek safe solutions in all aspects and cybersecurity is a necessary requirement for our vehicles and systems.” “In addition -she adds- this project has had the support of Grupo SPRI -Basque Agency for Business Development- through the Industrial Cybersecurity 2021 program”.
In the opinion of this person in charge, “it gives us great peace of mind to have the knowledge of EUROCYBCAR, which, for months, has been testing and proposing improvements so that NUUK successfully reaches this historic moment and, together, we are laying the foundations for a brighter future. cyber insurance for society”.
First cybersecurity test for vehicles developed by EUROCYBCAR
The NUUK motorcycle has been subjected to the EUROCYBCAR Test, the first test in the world that measures the level of cybersecurity of vehicles according to the ESTP methodology and according to the UNECE/R155 regulation. In this way, just as there are the EuroNCAP tests -which measure the safety of cars in the event of an accident- and the GreenNCAP -which indicates if it is ecological-, now with EUROCYBCAR, it is already possible to know what level of cybersecurity a vehicle offers.
The firm -located in the Miñano Technology Park, in Álava, and under the umbrella of the Basque Cybersecurity Centre, BCSC, one of the leading European centers in cybersecurity- has developed the ESTP, an innovative methodology that allows identifying, and Evaluate the risks that affect the cybersecurity of vehicles, as well as fleet management systems and telecommunications infrastructures, according to the requirements of current cybersecurity regulations. The test in question analyzes up to 70 specific cybersecurity threats included in the demanding UN regulations.
The vehicles that pass the EUROCYBCAR Test and obtain the certificate demonstrate that they implement effective means to minimize the risk of a cyberattack against the privacy and life of the people traveling on board, as well as the integrity of the vehicle systems.
EUROCYBCAR and the historic cybersecurity milestone of a vehicle
For Azucena Hernández, CEO of EUROCYBCAR, “. It is an unprecedented milestone that EUROCYBCAR has been the first technological company to successfully create and apply its own methodology, unique in the world, which allows issuing a Cybersecurity certificate for Vehicles, according to the requirements of the UNECE/R155 regulation” .
“It is also an unprecedented milestone -continues this person in charge- that NUUK, a motorcycle brand from the Basque Country, is going to obtain the first Cybersecurity certificate for Vehicles”. And he concludes: “Having AENOR allows us to continue advancing and take another step towards our objective of achieving cybersecure mobility so that drivers and passengers travel on board cybersecure vehicles, because their privacy is at stake, but, above all, their lives”.
According to Rafael García Meiro, CEO of AENOR “For the development of technology and innovation it is essential that there is trust between all the parties involved; and very especially among the users regarding that this innovation will respond to what is expected of it; this is the value of the certification. AENOR is firmly committed to promoting innovation in Spain, both by creating and certifying references that favor it, and by supporting cutting-edge initiatives on a global scale, as is the case here”.
Estíbaliz Hernáez Laviña, Deputy Minister of Technology, Innovation and Digital Transformation of the Basque Government: “There is often talk of the importance of R&D&i for the strengthening and growth of the economy of a region or a country, which is why I am proud that two Basque companies, oriented towards innovation and led by women, are the protagonists of a historic moment for mobility in Europe. The time has come to demonstrate the technological and innovative potential that we have in the Basque Country and that, of course, we will contribute to this important transition towards a new, more cyber-secure mobility”.
Galo Gutiérrez-Monzonís, General Director of Industry and SMEs: “From the Ministry of Industry we are committed to supporting projects that can become a European benchmark in the new evolution of the mobility industry and, for this reason, this year we have considered to EUROCYBCAR deserving of having the financing of ENISA, through the program aimed at Digital Entrepreneurs 2021 “.
