< < CVO15 : CVO16 : CVO17 > >

CVO16: Electronic Work Diaries

The Electronic Work Diaries service package is designed to collect information salient to the operation of a commercial vehicle, to log driver activity (work), and to report that information to regulators as well as fleet managers, while operating under various privacy regimes including that of the fleet manager, the local government and the national government.

International Icon Origin: Australia

Relevant Regions: Australia, Canada, and European Union

Enterprise

Development Stage Roles and Relationships

Installation Stage Roles and Relationships

Operations Stage Roles and Relationships
(hide)

Source Destination Role/Relationship
Commercial Vehicle Administration Center Manager Commercial Vehicle Administration Center Manages
Commercial Vehicle Administration Center Owner Commercial Vehicle Administration Center Owns
Commercial Vehicle Administration Center Owner Commercial Vehicle Administration Center Manager Operations Agreement
Commercial Vehicle Administration Center Supplier Commercial Vehicle Administration Center Owner Warranty
Commercial Vehicle Check Equipment Manager Commercial Vehicle Check Equipment Manages
Commercial Vehicle Check Equipment Manager Commercial Vehicle Inspector System Usage Agreement
Commercial Vehicle Check Equipment Owner Commercial Vehicle Check Equipment Owns
Commercial Vehicle Check Equipment Owner Commercial Vehicle Check Equipment Manager Operations Agreement
Commercial Vehicle Check Equipment Owner Commercial Vehicle Service Provider Center Owner Information Exchange Agreement
Commercial Vehicle Check Equipment Owner Security Credentials Registry Owner Information Provision Agreement
Commercial Vehicle Check Equipment Supplier Commercial Vehicle Check Equipment Owner Warranty
Commercial Vehicle Driver Commercial Vehicle OBE Operates
Commercial Vehicle Driver Driver Identification Card Operates
Commercial Vehicle Inspector Commercial Vehicle Check Equipment Operates
Commercial Vehicle OBE Manager Commercial Vehicle Driver System Usage Agreement
Commercial Vehicle OBE Manager Commercial Vehicle OBE Manages
Commercial Vehicle OBE Owner Commercial Vehicle OBE Owns
Commercial Vehicle OBE Owner Commercial Vehicle OBE Manager Operations Agreement
Commercial Vehicle OBE Owner Commercial Vehicle Service Provider Center Owner Information Provision Agreement
Commercial Vehicle OBE Supplier Commercial Vehicle OBE Owner Warranty
Commercial Vehicle Service Provider Center Manager Commercial Vehicle Service Provider Center Manages
Commercial Vehicle Service Provider Center Owner Commercial Vehicle Administration Center Owner Information Provision Agreement
Commercial Vehicle Service Provider Center Owner Commercial Vehicle Check Equipment Owner Information Exchange Agreement
Commercial Vehicle Service Provider Center Owner Commercial Vehicle Service Provider Center Owns
Commercial Vehicle Service Provider Center Owner Commercial Vehicle Service Provider Center Manager Operations Agreement
Commercial Vehicle Service Provider Center Owner Fleet and Freight Management Center Owner Information Provision Agreement
Commercial Vehicle Service Provider Center Owner Other Commercial Vehicle Service Provider Centers Owner Information Exchange Agreement
Commercial Vehicle Service Provider Center Owner Security Credentials Registry Owner Information Provision Agreement
Commercial Vehicle Service Provider Center Supplier Commercial Vehicle Service Provider Center Owner Warranty
Driver Identification Card Manager Commercial Vehicle Driver System Usage Agreement
Driver Identification Card Manager Driver Identification Card Manages
Driver Identification Card Owner Driver Identification Card Owns
Driver Identification Card Owner Driver Identification Card Manager Operations Agreement
Driver Identification Card Supplier Driver Identification Card Owner Warranty
Fleet and Freight Management Center Manager Fleet and Freight Management Center Manages
Fleet and Freight Management Center Owner Fleet and Freight Management Center Owns
Fleet and Freight Management Center Owner Fleet and Freight Management Center Manager Operations Agreement
Fleet and Freight Management Center Supplier Fleet and Freight Management Center Owner Warranty
Other Commercial Vehicle Service Provider Centers Manager Other Commercial Vehicle Service Provider Centers Manages
Other Commercial Vehicle Service Provider Centers Owner Commercial Vehicle Service Provider Center Owner Information Exchange Agreement
Other Commercial Vehicle Service Provider Centers Owner Other Commercial Vehicle Service Provider Centers Owns
Other Commercial Vehicle Service Provider Centers Owner Other Commercial Vehicle Service Provider Centers Manager Operations Agreement
Other Commercial Vehicle Service Provider Centers Supplier Other Commercial Vehicle Service Provider Centers Owner Warranty
Security Credentials Registry Manager Security Credentials Registry Manages
Security Credentials Registry Owner Security Credentials Registry Owns
Security Credentials Registry Owner Security Credentials Registry Manager Operations Agreement
Security Credentials Registry Supplier Security Credentials Registry Owner Warranty

Maintenance Stage Roles and Relationships

Functional

This service package includes the following Functional View PSpecs:

Physical Object Functional Object PSpec Number PSpec Name
Commercial Vehicle Check Equipment CVCE Safety and Security Inspection 2.3.1 Produce Commercial Vehicle Driver Message at Roadside
2.3.3.1 Provide Commercial Vehicle Checkstation Communications
2.3.3.2 Provide Commercial Vehicle Inspector Handheld Terminal Interface
2.3.3.3 Administer Commercial Vehicle Roadside Safety Database
2.3.3.4 Carry-out Commercial Vehicle Roadside Safety Screening
2.3.3.5 Carry-out Commercial Vehicle Roadside Inspection
2.3.4 Detect and Classify Commercial Vehicles and Freight Equipment
2.3.5 Provide Commercial Vehicle Roadside Operator Interface
2.3.6 Provide Commercial Vehicle Reports
Commercial Vehicle OBE CV Driver Work Records 2.4.10 Communicate Commercial Vehicle On-board Data to Service Provider
2.4.2 Collect On-board Commercial Vehicle Sensor Data
2.4.3 Analyze Commercial Vehicle On-board Data
2.4.4 Provide Commercial Vehicle Driver Interface
2.4.5 Communicate Commercial Vehicle On-board Data to Vehicle Manager
2.4.6 Provide Commercial Vehicle On-board Data Store Interface
2.4.7 Manage CV On-board Data
Commercial Vehicle Service Provider Center CVOBE-SP Information Exchange 2.9.1 Collect Information from Commercial Vehicles
2.9.2 Manage Commercial Vehicle Service Provider Data
2.9.4 Coordinate Commercial Vehicle Services
CVOBE-SP Safety and Security Administration 2.9.1 Collect Information from Commercial Vehicles
2.9.2 Manage Commercial Vehicle Service Provider Data
2.9.3 Manage Commercial Vehicle Permits
2.9.4 Coordinate Commercial Vehicle Services
Fleet and Freight Management Center Freight Administration and Management 2.1.1.2 Manage Commercial Vehicle Routes
2.1.1.4 Provide HAZMAT Incident Support
2.1.1.5 Manage Commercial Vehicle Fleet Map Data
2.1.1.6 Monitor Commercial Vehicle Route
2.1.1.7 Monitor Assignment Identities
2.1.3 Provide Fleet Manager Commercial Vehicle Communications
2.1.5 Manage Driver Instruction Store
2.1.6 Manage Commercial Vehicle Incidents
2.1.7 Schedule Commercial Vehicle Servicing
2.6.1 Provide Commercial Vehicle Manager Tag Data Interface
2.7.1 Manage Freight Incidents
2.7.2 Monitor Freight Equipment Route
2.7.3 Manage Freight Equipment Fleet
2.7.4 Manage Freight Equipment Maintenance
2.7.5 Process Freight Integrity Data
2.7.6 Provide Freight Manager Interface
2.7.7 Provide Shipper Booking Interface

Physical

The physical diagram can be viewed in SVG or PNG format and the current format is SVG.
SVG Diagram
PNG Diagram


Display Legend in SVG or PNG

Includes Physical Objects:

Physical Object Class Description
Commercial Vehicle Administration Center Center The 'Commercial Vehicle Administration Center' performs administrative functions supporting credentials, tax, and safety regulations associated with commercial vehicles. It issues credentials, collects fees and taxes, and supports enforcement of credential requirements. It communicates with motor carriers to process credentials applications and collect fuel taxes, weight/distance taxes, and other taxes and fees associated with commercial vehicle operations. It also receives applications for, and issues special Oversize/Overweight and HAZMAT permits in coordination with cognizant authorities. It coordinates with other Commercial Vehicle Administration Centers (in other states/regions) to support nationwide access to credentials and safety information for administration and enforcement functions. It communicates with field equipment to enable credential checking and safety information collection at the roadside. It makes safety information available to qualified stakeholders to identify carriers and drivers that operate unsafely.
Commercial Vehicle Check Equipment Field 'Commercial Vehicle Check Equipment' supports automated vehicle identification at mainline speeds for credential checking, roadside safety inspections, and weigh-in-motion using two-way data exchange. These capabilities include providing warnings to the commercial vehicle drivers, their fleet managers, and proper authorities of any safety problems that have been identified, accessing and examining historical safety data, and automatically deciding whether to allow the vehicle to pass or require it to stop with operator manual override. Commercial Vehicle Check Equipment also provides supplemental inspection services such as expedited brake inspections, the use of operator hand-held devices, mobile screening sites, on-board safety database access, and the enrollment of vehicles and carriers in the electronic clearance program.
Commercial Vehicle Driver Vehicle The 'Commercial Vehicle Driver' represents the people that operate vehicles transporting goods, including both long haul trucks and local pick-up and delivery vans. This physical object is complementary to the Driver physical object in that it represents those interactions which are unique to Commercial Vehicle Operations. Information flowing from the Commercial Vehicle Driver includes those system inputs specific to Commercial Vehicle Operations.
Commercial Vehicle Inspector Field The people who perform regulatory inspection of Commercial Vehicles in the field. CVO Inspectors support roadside inspection, weighing, and checking of credentials either through automated preclearance or manual methods. The Commercial Vehicle Inspector is an inspection and enforcement arm of regulatory agencies with frequent direct interface with Commercial Vehicles and their Drivers.
Commercial Vehicle OBE Vehicle The Commercial Vehicle On-Board Equipment (OBE) resides in a commercial vehicle and provides the sensory, processing, storage, and communications functions necessary to support safe and efficient commercial vehicle operations. It provides two-way communications between the commercial vehicle drivers, their fleet managers, attached freight equipment, and roadside officials. A separate 'Vehicle OBE' physical object supports vehicle safety and driver information capabilities that apply to all vehicles, including commercial vehicles. The Commercial Vehicle OBE supplements these general ITS capabilities with capabilities that are specific to commercial vehicles.
Commercial Vehicle Service Provider Center Center The 'Commercial Vehicle Service Provider Center' is an Australia-specific physical object that provides data exchange and commercial vehicle tracking services to other parties involved in commercial vehicle management. It also manages CV OBEs and the operational software on those devices.
Driver Identification Card Vehicle 'Driver Identification Card' represents the card or device that enables the transfer of electronic identification information for a driver. This may include license information, biometrics, and other data to identify the driver. Typically the card will be issued by a government agency (e.g. a state driver licensing agency).
Fleet and Freight Management Center Center The 'Fleet and Freight Management Center' provides the capability for commercial drivers and fleet-freight managers to receive real-time routing information and access databases containing vehicle and/or freight equipment locations as well as carrier, vehicle, freight equipment and driver information. The 'Fleet and Freight Management Center' also provides the capability for fleet managers to monitor the safety and security of their commercial vehicle drivers and fleet.
Other Commercial Vehicle Service Provider Centers Center 'Other Commercial Vehicle Service Provider Centers' is an Australia-specific physical object that is used when the transport operator contracts more than one service provider or when a driver works for two companies and the operator also needs the driver log from the drivers other work.
Security Credentials Registry Support The 'Security Credentials Registry' is an Australia-specific physical object that provides access information (e.g., the network address) of the commercial vehicle driver logs and security credentials that enable secure traceable access to driver logs. The SCR receives frequent updates of driver activity to determine the CVOBE-SP(s) that store the driver logs. In terms of US physical objects, the SCR is a Cooperative ITS Credentials Management System (CCMS) with included Object Registration and Discovery Service (ORDS) functionality and specific driver log monitoring extensions.

Includes Functional Objects:

Functional Object Description Physical Object
CV Driver Work Records 'CV Driver Work Records' is an Australia-specific functional object that monitors the commercial vehicle driver's working hours and hours of rest. The collected driver log information is made available to third party monitoring services. Commercial Vehicle OBE
CVCE Safety and Security Inspection 'CVCE Safety and Security Inspection' supports the roadside safety inspection process, including wireless roadside inspections that are conducted remotely. It reads on-board safety data at mainline speeds to rapidly check the vehicle and driver and accesses historical safety data after identifying vehicles at mainline speeds or while stopped at the roadside. The capabilities to process safety data and issue pull-in messages or provide warnings to the driver, carrier, and enforcement agencies are also provided. It includes hand held or automatic devices to rapidly inspect the vehicle and driver. Results of screening and summary safety inspection data are stored and maintained.

Since a vehicle may cross jurisdictional boundaries during a trip, it supports the concept of a last clearance event record carried on the vehicle tag. The last clearance event record reflects the results of the roadside verification action. For example, if the vehicle is pulled over in State A and undergoes credential, weight, and safety checks, the results of the clearance process are written to the vehicle s tag. If the vehicle continues the trip and passes a roadside station in State B, the State B station has access to the results of the previous pull-in because it can read the last clearance event record written by the State A roadside station. It associates high-risk cargo with the container/chassis, manifest, carrier, vehicle and driver transporting it.
Commercial Vehicle Check Equipment
CVOBE-SP Information Exchange 'CVOBE-SP Information Exchange' is an Australia-specific functional object that provides the data collection functions necessary for third party monitoring services to collect information from commercial vehicles and provide it to the appropriate Commercial Vehicle Administration Center. Data is processed by the CV Service Provider so that only breaches of conditions are reported to the CV Administration Center. Commercial Vehicle Service Provider Center
CVOBE-SP Safety and Security Administration 'CVOBE-SP Safety and Security Administration' is an Australia-specific functional object that provides the rules by which commercial vehicle monitoring data is collected and exchanged. It facilitates changing of those rules, access management and authorization management functions. It collects commercial vehicle information including vehicle speeds, weights, and operating parameters, and a log of driver activity. The information is shared with regulators as well as fleet managers, while operating under various privacy regimes including that of the fleet manager, the local government and the Australian national government. Commercial Vehicle Service Provider Center
Freight Administration and Management 'Freight Administration and Management' manages the movement of freight from source to destination. It interfaces to intermodal customers to setup and schedule transportation and coordinates with intermodal terminals and freight consolidation stations to coordinate the shipment. It coordinates with the appropriate government agencies to expedite the movement of trucks, their drivers, and their cargo across international borders. The application monitors the status of the freight and freight equipment (container, trailer, or chassis) and monitors freight location and compares it against the planned route. Fleet and Freight Management Center

Includes Information Flows:

Information Flow Description
check driver log activity The CV Service Provider periodically checks the Security Credentials Registry for driver log data collected by another CV Service Provider. If there is data available, the CV Service Provider will download that data directly from the other CV Service Provider so that a complete driver log can be provided. This is relevant when a driver uses multiple OBEs from different CV Service Providers to enter their driver log.
cv driver credential Driver information (e.g., identity, biometrics, address, date of birth, endorsements, restrictions) stored on a driver's license or other official identification card used to identify a driver of commercial vehicles.
CVO inspector information This flow represents the visual or auditory interface with ITS equipment containing credential, safety, and preclearance information and instructions to the commercial vehicle inspector.
CVO inspector input This flow represents the tactile or auditory interface with ITS equipment containing requests from the commercial vehicle inspector to operate the commercial vehicle inspection station.
driver log A daily log showing hours in service for the current driver. The query flow is not explicitly shown.
driver log address The Security Credentials Registry returns the web address to access the driver log (return flow for 'request driver log address').
driver operations feedback The CV OBE provides feedback to the driver based on their hours of service, for example, a warning of upcoming rest time.
malfunction report The CV Service Provider reports malfunctions of both individual OBEs it monitors and its ICT system to the CV Administration Centre so that it aware of outages and errors.
on-board vehicle data Information about the commercial vehicle stored on-board (for maintenance purposes, gate access, cargo status, lock status, etc.). The request flow is not explicitly shown.
request driver log address CV Check Equipment requests the web address to access the driver log from the Security Credentials Registry.
request for driver log CV Check Equipment requests access to the driver log from the CV Service Provider using the address provided by 'request driver log address'. The security credentials provided by the Security Credentials Registry are attached to this request.
request security credentials CV Check Equipment requests security credentials to access the driver log stored by the CV Service Provider.
security credentials The material used by an end-entity (vehicle, personal device, field device, center system etc.) to ensure privacy, integrity and authenticability of its data transmissions. This includes certificates with associated public and private verifying/signing and decrypting/encrypting keys.
update driver log activity The CV Service Provider periodically updates the Security Credentials Registry with information about the driver logs it has available and when those logs were last updated. This flow supports the 'check driver log activity' and 'request driver log address' flows.
work and rest declarations The CV driver enters his/her hours of service via a user interface of the CV OBE. This is done via a work declaration at the start of a driving period and a rest declaration at the end of a driving period.

Goals and Objectives

Associated Planning Factors and Goals

Planning Factor Goal

Associated Objective Categories

Objective Category

Associated Objectives and Performance Measures

Objective Performance Measure


 
Since the mapping between objectives and service packages is not always straight-forward and often situation-dependent, these mappings should only be used as a starting point. Users should do their own analysis to identify the best service packages for their region.

Needs and Requirements

Need Functional Object Requirement
01 Commercial Vehicle Service Providers need to collect and manage driver log information in order provide the information to the appropriate regulators and to make Fleet and Freight Management aware that their vehicles are being operated safely. CV Driver Work Records 01 The vehicle shall be able to send driver logs to commercial vehicle service providers.
02 The vehicle shall accept work and rest inputs from the commercial vehicle driver in order to develop an electronic driver activity log.
CVCE Safety and Security Inspection 12 The roadside check facility equipment shall request and collect driver hours of service information from service providers.
13 The roadside check facility equipment shall request and collect driver security credentials information from the credentials registry.
CVOBE-SP Information Exchange 01 The commercial vehicle service center shall be able to send driver activity logs to peer centers including commercial vehicle administration centers, fleet management centers, and other commercial vehicle service providers.
02 The commercial vehicle service center shall be able to receive driver activity logs from peer centers such as other commercial vehicle service providers.
Freight Administration and Management 17 The center shall collect driver hours of service information from service providers.
02 Commercial Vehicle Administration needs to securely access driver log information in order to support roadside inspections to ensure vehicles are being operated safely. CVOBE-SP Information Exchange 03 The commercial vehicle service center shall be able to send driver activity logs to commercial vehicle field stations.
CVOBE-SP Safety and Security Administration 01 The commercial vehicle service center shall collect commercial vehicle information from equipped commercial vehicles.
02 The commercial vehicle service center shall collect driver activity logs from equipped commercial vehicles.
03 The commercial vehicle service center shall collect security credentials from Commercial Vehicle Check Equipment.
04 The commercial vehicle service center shall process the received data to create a driver log that assures company and driver privacy.  

Related Sources

Document Name Version Publication Date
Electronic Work Diary Functional and Technical Specification Draft 8/1/2013


Security

In order to participate in this service package, each physical object should meet or exceed the following security levels.

Physical Object Security
Physical Object Confidentiality Integrity Availability Security Class
Commercial Vehicle Administration Center Moderate Moderate Moderate Class 2
Commercial Vehicle Check Equipment High High Moderate Class 4
Commercial Vehicle OBE High High Moderate Class 4
Commercial Vehicle Service Provider Center High High Moderate Class 4
Driver Identification Card High Moderate Moderate Class 4
Fleet and Freight Management Center High High Moderate Class 4
Other Commercial Vehicle Service Provider Centers High High Moderate Class 4
Security Credentials Registry High High Moderate Class 4



In order to participate in this service package, each information flow triple should meet or exceed the following security levels.

Information Flow Security
Source Destination Information Flow Confidentiality Integrity Availability
Basis Basis Basis
Commercial Vehicle Check Equipment Commercial Vehicle Inspector CVO inspector information Not Applicable High High
Commercial Vehicle Operations human interfaces should not be casually viewable for competitive reasons. Data should be correct as it relates to CVO, and given that this is the primary interface between inspector and inspection results, must be HIGH for both integrity and availability or the inspection regime breaks down. Data should be correct as it relates to CVO, and given that this is the primary interface between inspector and inspection results, must be HIGH for both integrity and availability or the inspection regime breaks down.
Commercial Vehicle Check Equipment Commercial Vehicle Service Provider Center request for driver log High High Moderate
Driver log contains PII, at least a code or identifier assoicated with a driver, and also implies a response that contains more detailed PII. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. There are alternative mechanisms for exchanging the driver log, though all have a negative impact on the driver's time, which is why MODERATE and not LOW.
Commercial Vehicle Check Equipment Commercial Vehicle Service Provider Center security credentials High High Moderate
Credentials need to be delivered to their intended target only. Interception and potential use by a third party compromises the C-ITS trust model. Credentials need to be correct and intact on delivery, or they will not be functional. Without functional credentials, the end entity cannot operate Credentials will be granted as needed but generally not in real-time; that is, an end entity will request credentials a significant time in advance of actually needing them. Thus, occasional downtime can be managed. For those entities accessing the CCMS through wireless mediums only, the additional uncertainties provided by those mediums reinforce MODERATE availability.
Commercial Vehicle Check Equipment Security Credentials Registry request driver log address High High Moderate
Driver log contains PII, at least a code or identifier assoicated with a driver, and also implies a response that contains more detailed PII. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. There are alternative mechanisms for exchanging the driver log, though all have a negative impact on the driver's time, which is why MODERATE and not LOW.
Commercial Vehicle Check Equipment Security Credentials Registry request security credentials High High Moderate
Credentials contain PII and proprietary information including trip data. This is private and competitive. If revealed, could provide leverage over carrier and/or vehicle. Incorrect or unavailable credentials information could delay clearance, could result in incorrect assessment of penalties. HIGH because the impact should be extensive as this flow could include credentials information for large numbers of carriers and vehicles.. Incorrect or unavailable credentials information could delay clearance, could result in incorrect assessment of penalties. MODERATE because while the impact could be extensive due to the number of vehicles involved, the flow can be reestablished and any issues fixed relatively quickly.
Commercial Vehicle Driver Commercial Vehicle OBE work and rest declarations Moderate Moderate Moderate
Commercial Vehicle Operations human interfaces should not be casually viewable for competitive and physical security reasons. Data should be correct as it relates to CVO, however there is generally another mechanism to double-check this data, which is why it is MODERATE and not HIGH. Flow should be available as it relates to CVO, however there is generally another mechanism through which this data might be received, which is why it is MODERATE and not HIGH.
Commercial Vehicle Inspector Commercial Vehicle Check Equipment CVO inspector input Not Applicable High High
Commercial Vehicle Operations human interfaces should not be casually viewable for competitive reasons. Data should be correct as it relates to CVO, and given that this is the primary interface between inspector and inspection results, must be HIGH for both integrity and availability or the inspection regime breaks down. Data should be correct as it relates to CVO, and given that this is the primary interface between inspector and inspection results, must be HIGH for both integrity and availability or the inspection regime breaks down.
Commercial Vehicle OBE Commercial Vehicle Driver driver operations feedback Not Applicable Moderate Moderate
This data is informing the driver about the operations of the vehicle. It should not contain anything sensitive, and does not matter if another person can observe it. Data should be correct as it relates to CVO, however there is generally another mechanism to double-check this data, which is why it is MODERATE and not HIGH. Flow should be available as it relates to CVO, however there is generally another mechanism through which this data might be received, which is why it is MODERATE and not HIGH.
Commercial Vehicle OBE Commercial Vehicle Service Provider Center driver log High High Moderate
Driver log contains PII, personal identification and work conditions and by definition, log of hours worked. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. There are alternative mechanisms for exchanging the driver log, though all have a negative impact on the driver's time, which is why MODERATE and not LOW.
Commercial Vehicle OBE Commercial Vehicle Service Provider Center on-board vehicle data Moderate Moderate Moderate
Contains identifiers, location and other data related to freight systems. Interception of this information would compromise the owner and/or operator of the commercial vehicle. Sensitivity of data will vary depending on what is being requested and what the commercial vehicle is carrying. In the most extreme case this could be data describing the condition of a hazardous material, which should be correct and timely to avoid the OBE Service Provider erroneously taking emergency-related actions. Sensitivity of data will vary depending on what is being requested and what the commercial vehicle is carrying. In the most extreme case this could be data describing the condition of a hazardous material, which should be correct and timely to avoid the FFMC erroneously taking emergency-related actions.
Commercial Vehicle Service Provider Center Commercial Vehicle Administration Center malfunction report Moderate Moderate Moderate
May include PII, identifying the vehicle and device. Malfunction reports will trigger repair-related actions, which if not taken will lead to an operator not properly monitored, and if taken in error will waste resources. Frequency is likely low, however when malfunctions happen this flow needs to operate or vehicles may not be properly repaired for extended periods. Considering the operating environment for many heavy vehicles, this could entail thousands of miles of operation without proper monitoring, which has a safety impact.
Commercial Vehicle Service Provider Center Commercial Vehicle Check Equipment driver log High High Moderate
Driver log contains PII, personal identification and work conditions and by definition, log of hours worked. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. There are alternative mechanisms for exchanging the driver log, though all have a negative impact on the driver's time, which is why MODERATE and not LOW.
Commercial Vehicle Service Provider Center Fleet and Freight Management Center driver log High High Moderate
Driver log contains PII, personal identification and work conditions and by definition, log of hours worked. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. There are alternative mechanisms for exchanging the driver log, though all have a negative impact on the driver's time, which is why MODERATE and not LOW.
Commercial Vehicle Service Provider Center Other Commercial Vehicle Service Provider Centers driver log High High Moderate
Driver log contains PII, personal identification and work conditions and by definition, log of hours worked. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. There are alternative mechanisms for exchanging the driver log, though all have a negative impact on the driver's time, which is why MODERATE and not LOW.
Commercial Vehicle Service Provider Center Security Credentials Registry check driver log activity High High Moderate
Driver log contains PII, at least a code or identifier assoicated with a driver, and also implies a response that contains more detailed PII. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. This flow is used for near-real time driver logs (work diaries) for commercial vehicle operators. It needs to be timely and correct so that operators are not unnecessarily delayed or penalized.
Commercial Vehicle Service Provider Center Security Credentials Registry update driver log activity High Moderate Moderate
Driver log contains PII, at least a code or identifier assoicated with a driver, and also implies a response that contains more detailed PII. This is personal and competitive with regulatory use. It should be available only to the intended recipient. This flow is used for near-real time driver logs (work diaries) for commercial vehicle operators. It needs to be timely and correct so that operators are not unnecessarily delayed or penalized. This flow is used for near-real time driver logs (work diaries) for commercial vehicle operators. It needs to be timely and correct so that operators are not unnecessarily delayed or penalized.
Driver Identification Card Commercial Vehicle OBE cv driver credential High Moderate Moderate
Credentials contain PII and proprietary information. This is private and competitive. If revealed, could provide leverage over carrier and/or vehicle. Incorrect or unavailable credentials information could delay clearance, could result in incorrect assessment of penalties. MODERATE because the impact should be limited to a single vehicle per instance. Incorrect or unavailable credentials information could delay clearance, could result in incorrect assessment of penalties. MODERATE because the impact should be limited to a single vehicle per instance.
Other Commercial Vehicle Service Provider Centers Commercial Vehicle Service Provider Center driver log High High Moderate
Driver log contains PII, personal identification and work conditions and by definition, log of hours worked. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. There are alternative mechanisms for exchanging the driver log, though all have a negative impact on the driver's time, which is why MODERATE and not LOW.
Security Credentials Registry Commercial Vehicle Check Equipment driver log address High High Moderate
Driver log contains PII, personal identification and work conditions and by definition, log of hours worked. This is personal and competitive with regulatory use. It should be available only to the intended recipient. Driver log data is covered under commercial regulatory schemes in most jurisdictions. Forgery of driver log data would have significant competitive implications, not to mention being a regulatory violation. There are alternative mechanisms for exchanging the driver log, though all have a negative impact on the driver's time, which is why MODERATE and not LOW.
Security Credentials Registry Commercial Vehicle Check Equipment security credentials High High Moderate
Credentials need to be delivered to their intended target only. Interception and potential use by a third party compromises the C-ITS trust model. Credentials need to be correct and intact on delivery, or they will not be functional. Without functional credentials, the end entity cannot operate Credentials will be granted as needed but generally not in real-time; that is, an end entity will request credentials a significant time in advance of actually needing them. Thus, occasional downtime can be managed. For those entities accessing the Credentials Registry through wireless mediums only, the additional uncertainties provided by those mediums reinforce MODERATE availability.

Standards

Currently, there are no standards associated with the physical objects in this service package. For standards related to interfaces, see the specific information flow triple pages.