< < MC06 : MC07 : MC08 > >

MC07: Work Zone Safety Monitoring

This service package provides warnings to maintenance personnel within a work zone about potential hazards within the work zone. It enables vehicles or the infrastructure to provide warnings to workers in a work zone when a vehicle is moving in a manner that appears to create an unsafe condition (e.g., moving at high speed or entering the work zone).

Relevant Regions: Australia, Canada, European Union, and United States

Enterprise

Development Stage Roles and Relationships

Installation Stage Roles and Relationships

Operations Stage Roles and Relationships
(hide)

Source Destination Role/Relationship
Connected Vehicle Roadside Equipment Manager Connected Vehicle Roadside Equipment Manages
Connected Vehicle Roadside Equipment Owner Connected Vehicle Roadside Equipment Owns
Connected Vehicle Roadside Equipment Owner Connected Vehicle Roadside Equipment Manager Operations Agreement
Connected Vehicle Roadside Equipment Owner ITS Roadway Equipment Owner Information Exchange and Action Agreement
Connected Vehicle Roadside Equipment Owner Maint and Constr Management Center Owner Information Exchange Agreement
Connected Vehicle Roadside Equipment Owner Maint and Constr Vehicle OBE Owner Expectation of Information Provision
Connected Vehicle Roadside Equipment Owner Personnel Device Owner Expectation of Information Provision
Connected Vehicle Roadside Equipment Owner Vehicle OBE Owner Expectation of Information Provision
Connected Vehicle Roadside Equipment Supplier Connected Vehicle Roadside Equipment Owner Warranty
ITS Roadway Equipment Manager ITS Roadway Equipment Manages
ITS Roadway Equipment Manager Maint and Constr Field Personnel System Usage Agreement
ITS Roadway Equipment Owner Connected Vehicle Roadside Equipment Owner Information Exchange and Action Agreement
ITS Roadway Equipment Owner ITS Roadway Equipment Owns
ITS Roadway Equipment Owner ITS Roadway Equipment Manager Operations Agreement
ITS Roadway Equipment Owner Maint and Constr Management Center Owner Information Exchange Agreement
ITS Roadway Equipment Owner Maint and Constr Vehicle OBE Owner Expectation of Information Provision
ITS Roadway Equipment Supplier ITS Roadway Equipment Owner Warranty
Maint and Constr Field Personnel ITS Roadway Equipment Operates
Maint and Constr Field Personnel Personnel Device Operates
Maint and Constr Management Center Manager Maint and Constr Management Center Manages
Maint and Constr Management Center Owner Connected Vehicle Roadside Equipment Owner Information Exchange Agreement
Maint and Constr Management Center Owner ITS Roadway Equipment Owner Information Exchange Agreement
Maint and Constr Management Center Owner Maint and Constr Management Center Owns
Maint and Constr Management Center Owner Maint and Constr Management Center Manager Operations Agreement
Maint and Constr Management Center Owner Maint and Constr Vehicle OBE Owner Information Exchange Agreement
Maint and Constr Management Center Supplier Maint and Constr Management Center Owner Warranty
Maint and Constr Vehicle OBE Manager Maint and Constr Vehicle OBE Manages
Maint and Constr Vehicle OBE Owner Maint and Constr Management Center Owner Information Exchange Agreement
Maint and Constr Vehicle OBE Owner Maint and Constr Vehicle OBE Owns
Maint and Constr Vehicle OBE Owner Maint and Constr Vehicle OBE Manager Operations Agreement
Maint and Constr Vehicle OBE Owner Other MCV OBEs Owner Expectation of Data Provision
Maint and Constr Vehicle OBE Owner Vehicle OBE Owner Expectation of Data Provision
Maint and Constr Vehicle OBE Supplier Maint and Constr Vehicle OBE Owner Warranty
Other MCV OBEs Manager Other MCV OBEs Manages
Other MCV OBEs Owner Maint and Constr Vehicle OBE Owner Expectation of Data Provision
Other MCV OBEs Owner Other MCV OBEs Owns
Other MCV OBEs Owner Other MCV OBEs Manager Operations Agreement
Other MCV OBEs Supplier Other MCV OBEs Owner Warranty
Personnel Device Manager Maint and Constr Field Personnel System Usage Agreement
Personnel Device Manager Personnel Device Manages
Personnel Device Owner Personnel Device Owns
Personnel Device Owner Personnel Device Manager Operations Agreement
Personnel Device Supplier Personnel Device Owner Warranty
Vehicle OBE Manager Vehicle OBE Manages
Vehicle OBE Owner Maint and Constr Vehicle OBE Owner Expectation of Data Provision
Vehicle OBE Owner Vehicle OBE Owns
Vehicle OBE Owner Vehicle OBE Manager Operations Agreement
Vehicle OBE Supplier Vehicle OBE Owner Warranty

Maintenance Stage Roles and Relationships

Physical

The physical diagram can be viewed in SVG or PNG format and the current format is SVG.
SVG Diagram
PNG Diagram


Display Legend in SVG or PNG

Includes Physical Objects:

Physical Object Class Description
Connected Vehicle Roadside Equipment Field 'Connected Vehicle Roadside Equipment' (CV RSE) represents the Connected Vehicle roadside devices that are used to send messages to, and receive messages from, nearby vehicles using Dedicated Short Range Communications (DSRC) or other alternative wireless communications technologies. Communications with adjacent field equipment and back office centers that monitor and control the RSE are also supported. This device operates from a fixed position and may be permanently deployed or a portable device that is located temporarily in the vicinity of a traffic incident, road construction, or a special event. It includes a processor, data storage, and communications capabilities that support secure communications with passing vehicles, other field equipment, and centers.
Driver Vehicle The 'Driver' represents the person that operates a vehicle on the roadway. Included are operators of private, transit, commercial, and emergency vehicles where the interactions are not particular to the type of vehicle (e.g., interactions supporting vehicle safety applications). The Driver originates driver requests and receives driver information that reflects the interactions which might be useful to all drivers, regardless of vehicle classification. Information and interactions which are unique to drivers of a specific vehicle type (e.g., fleet interactions with transit, commercial, or emergency vehicle drivers) are covered by separate objects.
ITS Roadway Equipment Field 'ITS Roadway Equipment' represents the ITS equipment that is distributed on and along the roadway that monitors and controls traffic and monitors and manages the roadway. This physical object includes traffic detectors, environmental sensors, traffic signals, highway advisory radios, dynamic message signs, CCTV cameras and video image processing systems, grade crossing warning systems, and ramp metering systems. Lane management systems and barrier systems that control access to transportation infrastructure such as roadways, bridges and tunnels are also included. This object also provides environmental monitoring including sensors that measure road conditions, surface weather, and vehicle emissions. Work zone systems including work zone surveillance, traffic control, driver warning, and work crew safety systems are also included.
Maint and Constr Field Personnel Field Represents the people that perform maintenance and construction field activities including vehicle and equipment operators, field supervisory personnel, field crews, and work zone safety personnel. Information flowing from the Maintenance and Construction Field Personnel will include those system inputs specific to maintenance and construction operations, such as information regarding work zone status, or the status of maintenance actions. The field personnel are also monitored within the work zone to enhance work zone safety. Information provided to Maintenance and Construction Field Personnel includes dispatch requests, maintenance and construction actions to be performed, and work zone safety warnings.
Maint and Constr Management Center Center The 'Maint and Constr Management Center' monitors and manages roadway infrastructure construction and maintenance activities. Representing both public agencies and private contractors that provide these functions, this physical object manages fleets of maintenance, construction, or special service vehicles (e.g., snow and ice control equipment). The physical object receives a wide range of status information from these vehicles and performs vehicle dispatch, routing, and resource management for the vehicle fleets and associated equipment. The physical object participates in incident response by deploying maintenance and construction resources to an incident scene, in coordination with other center physical objects. The physical object manages equipment at the roadside, including environmental sensors and automated systems that monitor and mitigate adverse road and surface weather conditions. It manages the repair and maintenance of both non-ITS and ITS equipment including the traffic controllers, detectors, dynamic message signs, signals, and other equipment associated with the roadway infrastructure. Weather information is collected and fused with other data sources and used to support advanced decision support systems.

The physical object remotely monitors and manages ITS capabilities in work zones, gathering, storing, and disseminating work zone information to other systems. It manages traffic in the vicinity of the work zone and advises drivers of work zone status (either directly at the roadside or through an interface with the Transportation Information Center or Traffic Management Center physical objects.)

Construction and maintenance activities are tracked and coordinated with other systems, improving the quality and accuracy of information available regarding closures and other roadway construction and maintenance activities.
Maint and Constr Vehicle OBE Vehicle The 'Maint and Constr Vehicle OBE' resides in a maintenance, construction, or other specialized service vehicle or equipment and provides the processing, storage, and communications functions necessary to support highway maintenance and construction. All types of maintenance and construction vehicles are covered, including heavy equipment, supervisory vehicles, unmanned remote controlled field maintenance robots, and sensory platforms that may be wheeled or low altitude aerial vehicles (e.g. drones, balloons). The MCV OBE provides two-way communications between drivers/operators and dispatchers and maintains and communicates current location and status information. A wide range of operational status is monitored, measured, and made available, depending on the specific type of vehicle or equipment. A snow plow for example, would monitor whether the plow is up or down and material usage information. The Maint and Constr Vehicle OBE may also contain capabilities to monitor vehicle systems to support maintenance of the vehicle itself. A separate 'Vehicle OBE' physical object supports the general vehicle safety and driver information capabilities that apply to all vehicles, including maintenance and construction vehicles. The Maint and Constr Vehicle OBE supplements these general capabilities with capabilities that are specific to maintenance and construction vehicles.
Other MCV OBEs Vehicle This represents on-board equipment on other maintenance and construction vehicles. It provides a source and destination for ITS information transfers between maintenance and construction vehicles. These information transfers allow vehicle operational status, environmental information, and work zone intrusion warnings or alarms to be shared between vehicles.
Personnel Device Personal 'Personnel Device' represents devices used by emergency personnel or maintenance and construction personnel in the field. In the case of emergency personnel, the devices would include body cameras or smartphones (and their peripherals) that can be used by emergency personnel to provide images or video as well as send or receive data regarding the incident. The devices could also be used for incident scene safety messages to the personnel. In the case of maintenance and construction field personnel, the devices could be cellular phones or specialized safety devices that would be used for work zone safety messages to the personnel.
Vehicle OBE Vehicle The Vehicle On-Board Equipment (OBE) provides the vehicle-based sensory, processing, storage, and communications functions that support efficient, safe, and convenient travel. The Vehicle OBE includes general capabilities that apply to passenger cars, trucks, and motorcycles. Many of these capabilities (e.g., see the Vehicle Safety service packages) apply to all vehicle types including personal vehicles, commercial vehicles, emergency vehicles, transit vehicles, and maintenance vehicles. From this perspective, the Vehicle OBE includes the common interfaces and functions that apply to all motorized vehicles. The radio(s) supporting V2V and V2I communications are a key component of the Vehicle OBE. Both one-way and two-way communications options support a spectrum of information services from basic broadcast to advanced personalized information services. Route guidance capabilities assist in formulation of an optimal route and step by step guidance along the travel route. Advanced sensors, processors, enhanced driver interfaces, and actuators complement the driver information services so that, in addition to making informed mode and route selections, the driver travels these routes in a safer and more consistent manner. This physical object supports all six levels of driving automation as defined in SAE J3016. Initial collision avoidance functions provide 'vigilant co-pilot' driver warning capabilities. More advanced functions assume limited control of the vehicle to maintain lane position and safe headways. In the most advanced implementations, this Physical Object supports full automation of all aspects of the driving task, aided by communications with other vehicles in the vicinity and in coordination with supporting infrastructure subsystems.

Includes Functional Objects:

Functional Object Description Physical Object
MCM Work Zone Safety Management 'MCM Work Zone Safety Management' remotely monitors work zone safety systems that detect vehicle intrusions in work zones and warns crew workers and drivers of imminent encroachment. Crew movements are also monitored so that the crew can be warned of movement beyond the designated safe zone. Maint and Constr Management Center
MCV Vehicle Safety Monitoring 'MCV Vehicle Safety Monitoring' detects vehicle intrusions in the vicinity of the vehicle and warns crew workers and drivers of imminent encroachment. Crew movements are also monitored so that the crew can be warned of movement beyond the designated safe zone. It can be used for stationary work zones or in mobile applications where a safe zone is maintained around the moving vehicle. Maint and Constr Vehicle OBE
Personnel Work Zone Safety 'Personnel Work Zone Safety' improves maintenance and construction crew safety by providing crew location information to the infrastructure that can be used to avoid collisions involving the work crew. The application may also alert workers if they travel beyond the designated safe zone. The information provided and the user interface delivery mechanism (visual, audible, or haptic) can also be tailored to the needs of the user that is carrying or wearing the device that hosts the application. Personnel Device
Roadway Work Zone Safety 'Roadway Work Zone Safety' includes field elements that detect vehicle intrusions in work zones and warns crew workers and drivers of imminent encroachment. Crew movements are also monitored so that the crew can be warned of movement beyond the designated safe zone. ITS Roadway Equipment
RSE Work Zone Safety 'RSE Work Zone Safety' communicates with Connected Vehicles and Personal Information Devices carried or worn by the work crew to detect vehicle intrusions in work zones and warn crew workers and drivers of imminent encroachment. Crew movements are also monitored so that the crew can be warned of movement beyond the designated safe zone. Connected Vehicle Roadside Equipment

Includes Information Flows:

Information Flow Description
driver information Regulatory, warning, and guidance information provided to the driver while en route to support safe and efficient vehicle operation.
personnel location The current location (latitude, longitude, and elevation) reported by the personnel device.
personnel monitoring Sensed presence of personnel within a work zone or incident scene that is monitored to enhance safety in work areas proximate to moving traffic.
personnel safety warning Safety alerts and warnings provided to a personnel device. The provided information would identify safety threats (e.g., vehicle encroachment into a work area, personnel infringement into a travel lane)
personnel updates Alerts and warnings provided to emergency personnel or work crew members. This includes visual, audio, and haptic outputs that may be customized to support individual needs.
traffic detector control Information used to configure and control traffic detector systems such as inductive loop detectors and machine vision sensors.
traffic detector data Raw and/or processed traffic detector data which allows derivation of traffic flow variables (e.g., speed, volume, and density measures) and associated information (e.g., congestion, potential incidents). This flow includes the traffic data and the operational status of the traffic detectors
traffic image meta data Meta data that describes traffic images. Traffic images (video) are in another flow.
traffic images High fidelity, real-time traffic images suitable for surveillance monitoring by the operator or for use in machine vision applications. This flow includes the images. Meta data that describes the images is contained in another flow.
traffic situation data Current, aggregate traffic data collected from connected vehicles that can be used to supplement or replace information collected by roadside traffic detectors. It includes raw and/or processed reported vehicle speeds, counts, and other derived measures. Raw and/or filtered vehicle control events may also be included to support incident detection.
vehicle location and motion Data describing the vehicle's location in three dimensions, heading, speed, acceleration, braking status, and size.
vehicle signage data In-vehicle signing data that augments regulatory, warning, and informational road signs and signals. The information provided would include static sign information (e.g., stop, curve warning, guide signs, service signs, and directional signs) and dynamic information (e.g., local traffic and road conditions, lane restrictions, work zones, detours, closures, advisories, and warnings).
video surveillance control Information used to configure and control video surveillance systems.
work zone safety application info Work zone safety application configuration data and warning parameters and thresholds. This includes work zone configuration including geofenced crew areas and travel lanes that provide a safety boundary between work zone personnel and passing vehicles. This flow also supports remote control of the application so the application can be taken offline, reset, or restarted.
work zone safety application status Work zone safety application status reported by the RSE. This includes current operational state and status of the RSE and a record of identified work zone safety alerts and warnings issued.
work zone warning Warnings provided to field personnel, indicating a work zone emergency or safety issue such as the intrusion of a vehicle into the work zone area or movement of personnel into the travel lanes.
work zone warning device control Data used to configure and control work zone safety monitoring and warning devices.
work zone warning notification Notification of a work zone emergency or safety issue. This flow identifies that a work zone emergency or safety issue has occurred so that warnings may be generated by more than one system in the work zone.
work zone warning status Status of a work zone safety monitoring and warning devices. This flow documents system activations and includes additional supporting information (e.g., an image) that allows verification of the alarm.

Goals and Objectives

Associated Planning Factors and Goals

Planning Factor Goal
B. Increase the safety of the transportation system for motorized and nonmotorized users; Achieve a significant reduction in traffic fatalities and serious injuries on all public roads
G. Promote efficient system management and operation; Improve the efficiency of the surface transportation system

Associated Objective Categories

Objective Category
Safety: Vehicle Crashes and Fatalities
Safety: Worker Safety
Work Zone Management: Travel Time Reliability

Associated Objectives and Performance Measures

Objective Performance Measure
Enhance safety of workers Number of crashes and fatalities in work zones
Enhance safety of workers Number of workers injured by vehicles in work zones
Reduce vehicle-hours of total delay in work zones caused by incidents (e.g., traffic crashes within or near the work zone). Vehicle-hours of delay due to incidents related to work zones.
Safeguard public safety personnel while they are at roadway incidents and emergencies Number of public safety personnel struck by vehicle at incident/emergency site
Safeguard public safety personnel while they are at roadway incidents and emergencies Number of public safety vehicles struck at incident/emergency site


 
Since the mapping between objectives and service packages is not always straight-forward and often situation-dependent, these mappings should only be used as a starting point. Users should do their own analysis to identify the best service packages for their region.

Needs and Requirements

Need Functional Object Requirement
01 Maintenance and Construction operations need to be able to provide warnings about hazards in the work zone to maintenance personnel, such as a vehicle moving in a manner that appears to create an unsafe condition. MCV Vehicle Safety Monitoring 04 The maintenance and construction vehicle shall present work zone warnings to the vehicle operator or field personnel using direct warning signals or in-vehicle signage functions.
05 The maintenance and construction vehicle shall monitor the crew movements to identify when a crew member is crossing the boundary between a work zone and vehicle traffic and issue an alert to the crew member.
Personnel Work Zone Safety 02 The field element shall use data input from the roadside or vehicles to alert workers of a work zone emergency or safety issue such as the intrusion of a vehicle into the work zone or movement of field personnel into the travel lanes. Alert could be visual, audible, or other means.
Roadway Work Zone Safety 03 The field element shall include work zone intrusion alerting devices that alert crew workers of a work zone emergency or safety issue such as the intrusion of a vehicle into the work zone area or movement of field crew into the travel lanes or vehicles approaching at an unsafe speed.
04 The field element shall include work zone intrusion alerting devices that notify crew via maintenance vehicles of a work zone emergency or safety issue such as the intrusion of a vehicle into the work zone area or movement of field crew into the travel lanes.
05 The field element shall include work zone intrusion alerting devices that alert drivers that they have intruded upon the perimeter of the work zone, or are about to do so; may provide alerts to drivers directly or via in-vehicle signing.
RSE Work Zone Safety 02 The field element shall communicate with Personal Information Devices carried or worn by the work crew to warn crew workers a of imminent encroachment.
03 The field element shall communicate with Connected Maintenance and Construction Vehicles to warn drivers of a work zone encroachment or speeds too fast for the work zone.
04 The field element shall communicate with Connected Vehicles to warn drivers of a work zone encroachment or speeds too fast for the work zone.
02 Maintenance and Construction operations need to be able to monitor for hazards in the work zone. MCV Vehicle Safety Monitoring 01 The maintenance and construction vehicle shall detect that a vehicle has intruded upon the boundary of a work zone. The boundary of the work zone represents an area around the maintenance and construction vehicle, which may be stationary or moving.
02 The maintenance and construction vehicle shall provide work zone warnings to the field equipment at the roadside or other maintenance and construction vehicles.
03 The maintenance and construction vehicle shall receive work zone warnings from the field equipment at the roadside or other maintenance and construction vehicles.
Personnel Work Zone Safety 01 The field element shall provide crew location information to the roadside field elements and connected maintenance and construction vehicles that can be used to avoid collisions involving the work crew.
Roadway Work Zone Safety 01 The field element shall include work zone intrusion detection devices that detect when a vehicle has intruded upon the boundary of a work zone, under center control.
02 The field element shall include work zone intrusion detection devices that detect when crew workers have crossed the boundary between the work zone and vehicle traffic, under center control.
RSE Work Zone Safety 01 The field element shall monitor Connected Vehicles' location and motion data to detect vehicle intrusions in work zones.
05 The field element shall provide traffic situation data near a work zone to nearby field equipment
03 Maintenance and Construction operations need to be able to monitor operational status of work zone safety devices. MCM Work Zone Safety Management 01 The center shall provide remote monitoring and control of work zone safety devices - including intrusion detection devices that have been installed in work zones or maintenance areas.
02 The center shall provide remote monitoring and control of intrusion alert devices that have been installed in work zones or maintenance areas.
03 The center shall collect status information of work zone safety device status from field equipment or the maintenance and construction vehicles.
04 The center shall collect and store work zone data collected from work zone monitoring devices (such as intrusion detection or alert devices and speed monitoring devices) on-board the vehicle and at the roadside.
MCV Vehicle Safety Monitoring 06 The maintenance and construction vehicle shall provide status of the work zone warning systems to the center.
Roadway Work Zone Safety 06 The field element shall provide operational status for the work zone intrusion detection devices to the maintenance center.
07 The field element shall provide fault data for the work zone intrusion detection devices to the maintenance center for repair.
08 The field element shall provide operational status for the work zone intrusion alerting devices to the maintenance center.
09 The field element shall provide fault data for the work zone intrusion alerting devices to the maintenance center for repair.
RSE Work Zone Safety 06 The field element shall provide status of the work zone warning application, including faults with the equipment to the center.

Related Sources

Document Name Version Publication Date
ITS User Services Document 1/1/2005
SAE J3067- Candidate Improvements to Dedicated Short Range Communications (DSRC) Message Set Dictionary (SAE J2735)Using Systems Engineering Methods 8/15/2014


Security

In order to participate in this service package, each physical object should meet or exceed the following security levels.

Physical Object Security
Physical Object Confidentiality Integrity Availability Security Class
Connected Vehicle Roadside Equipment Moderate High Moderate Class 3
ITS Roadway Equipment Moderate Moderate Moderate Class 2
Maint and Constr Management Center Moderate High Moderate Class 3
Maint and Constr Vehicle OBE Moderate High Moderate Class 3
Other MCV OBEs Not Applicable Moderate Moderate Class 1
Personnel Device Not Applicable High Moderate Class 3
Vehicle OBE Low High Moderate Class 3



In order to participate in this service package, each information flow triple should meet or exceed the following security levels.

Information Flow Security
Source Destination Information Flow Confidentiality Integrity Availability
Basis Basis Basis
Connected Vehicle Roadside Equipment ITS Roadway Equipment traffic situation data Moderate Moderate Moderate
Aggregated messages may have more privacy implications than individual ones, especially if an attacker can attack more than one RSE-to-TMC connection at once. This information is used to help with incident detection. It should be verified to ensure that it is not incorrectly influencing this.THEA: only limited adverse effect if raw/processed connected vehicle data is bad/compromised; could be LOW for ISIG This information is used as supplemental information. It should operate correctly if not every single message is received. THEA: only limited adverse effect if info is not timely/readily available, could be LOW for ISIG
Connected Vehicle Roadside Equipment ITS Roadway Equipment work zone warning notification Not Applicable Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. This information should be accurate, but an incorrect information should not have a direct impact causing the loss of life or limb. The system should be able to operate properly if it misses a few messages. If a message is not received, the ITS RE should know.
Connected Vehicle Roadside Equipment Maint and Constr Management Center work zone safety application status Moderate Moderate Low
This information could be of interest to a malicious individual who is attempting to determine the best way to accomplish a crime. As such it would be best to not make it easily accessible. If this is compromised, it could send unnecessary maintenance workers, or cause the appearance of excessive traffic violations, leading to further unnecessary investigation. A delay in reporting this may cause a delay in necessary maintenance, but (a) this is not time-critical and (b) there are other channels for reporting malfunctioning. Additionally, there is a message received notification, which means that RSE can ensure that all intersection safety issues are delivered.
Connected Vehicle Roadside Equipment Maint and Constr Vehicle OBE work zone warning notification Not Applicable Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. This information should be accurate, but an incorrect information should not have a direct impact causing the loss of life or limb. The system should be able to operate properly if it misses a few messages. If a message is not received, the RSE should know.
Connected Vehicle Roadside Equipment Personnel Device personnel safety warning Not Applicable High Low
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. A few false warnings should not have a bad consequence. When an emergency personnel receives a warning they can look around and verify whether or not a vehicle is actually headed towards them. However, a message saying it is safe when there is a car coming could lead to an emergency personnel not moving when they were in danger. It would be better to receive any messages than to not have this application available due to availability requirements. However, the higher the availability here, the more useful the application will be and the more emergency personnel can rely on it.
Connected Vehicle Roadside Equipment Vehicle OBE vehicle signage data Low Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It is meant to augment other signage data, and by definition is meant to be shared with everyone. These signs are meant to augment other visual cues to the driver. They should be accurate, but any inaccuracies should be corrected for by other means. These notifications are helpful to a driver, but if the driver does not receive this notification immediately, there should still be other visual cues.
ITS Roadway Equipment Connected Vehicle Roadside Equipment work zone warning notification Not Applicable Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. This information should be accurate, but an incorrect information should not have a direct impact causing the loss of life or limb. The system should be able to operate properly if it misses a few messages. If a message is not received, the ITS RE should know.
ITS Roadway Equipment Driver driver information Not Applicable High Moderate
This data is sent to all drivers and is also directly observable, by design. This is the primary signal trusted by the driver to decide whether to go through the intersection and what speed to go through the intersection at; if it's wrong, accidents could happen. If the lights are out you have to get a policeman to direct traffic – expensive and inefficient and may cause a cascading effect due to lack of coordination with other intersections.
ITS Roadway Equipment Maint and Constr Field Personnel work zone warning Not Applicable Moderate Low
Human Interfaces do not receive confidentiality ratings. A few false warnings should not have a bad consequence. When field personnel receive a warning they can look around and verify whether or not a vehicle is actually headed towards them. It would be better to receive any messages than to not have this application available due to availability requirements. However, the higher the availability here, the more useful the application will be and the more field personnel can rely on it.
ITS Roadway Equipment Maint and Constr Management Center traffic detector data Low Moderate Moderate
No impact if someone sees the data Some minimal guarantee of data integrity is necessary for all C-ITS flows. THEA believes this to be LOW.only limited adverse effect if raw/processed traffic detector data is bad/compromised; DISC: WYO believes this to be HIGH Only limited adverse effect of info is not timely/readily available, however without this information it will be difficult to perform traffic management activities, thus MODERATE. If not used for management, may be LOW.
ITS Roadway Equipment Maint and Constr Management Center work zone warning status Moderate Moderate Moderate
There could potentially be sensitive information in the system activation or supporting information. This information flow also contains supporting verification, such as an image, that can also be used to verify the integrity of the message. The system should be able to operate properly if it misses a few messages. If a message is not received, the ITS RE should know. This is not the only source of information regarding an incident. If an incident is severe enough to need an immediate response, there are other indicators (such as someone calling 911) that would help alert people to the situation.
ITS Roadway Equipment Maint and Constr Vehicle OBE traffic detector data Low Moderate Moderate
No impact if someone sees the data Some minimal guarantee of data integrity is necessary for all C-ITS flows. THEA believes this to be LOW.only limited adverse effect if raw/processed traffic detector data is bad/compromised; DISC: WYO believes this to be HIGH Only limited adverse effect of info is not timely/readily available, however without this information it will be difficult to perform traffic management activities, thus MODERATE. If not used for management, may be LOW.
ITS Roadway Equipment Maint and Constr Vehicle OBE traffic image meta data Low Moderate Moderate
Traffic image data is generally intended for public consumption, and in any event is already video captured in the public arena, so this must be LOW. While accuracy of this data is important for decision making purposes, applications should be able to cfunction without it. Thus MODERATE generally. While accuracy of this data is important for decision making purposes, applications should be able to function without it. Thus MODERATE generally.
ITS Roadway Equipment Maint and Constr Vehicle OBE traffic images Low Moderate Moderate
Traffic image data is generally intended for public consumption, and in any event is already video captured in the public arena, so this must be LOW. Generally transportation coordination information should be correct between source and destination, or inappropriate actions may be taken. Often this flow will be used to support personal worker safety, which justifies MODERATE.
Maint and Constr Field Personnel ITS Roadway Equipment personnel monitoring Not Applicable Moderate Low
This is directly observable. Should be correct or the ITS Roadway Equipment may take actions that are inconsistent with personnel's actual location If not available, equipment will likely not take any action. This is the current situation, so until this data is expected to always be there, this should be LOW.
Maint and Constr Field Personnel Maint and Constr Vehicle OBE personnel monitoring Not Applicable Moderate Low
This is directly observable. Should be correct or the ITS Roadway Equipment may take actions that are inconsistent with personnel's actual location If not available, equipment will likely not take any action. This is the current situation, so until this data is expected to always be there, this should be LOW.
Maint and Constr Management Center Connected Vehicle Roadside Equipment work zone safety application info Low Moderate Moderate
This information flow does not contain any secret data. Information such as the geofenced crew areas will intentionally be broadcast at a later point. This may be raised if it contains sensitive data, as determined by the supplier (for example, because this flow contains proprietary or security-sensitive information about the device). The geofenced crew areas must be tracked accurately, otherwise a crew member may be injured by passing vehicles. However, inaccurate information here does not directly lead to the injury of a crew member because there are other indicators of where the incident work zone is. This data should be received in a timely manner after it is sent. This will determine which lanes are blocked off, for maintenance vehicle use
Maint and Constr Management Center ITS Roadway Equipment traffic detector control Moderate Moderate Low
Control flows, even for seemingly innocent devices, should be kept confidential to minimize attack vectors. While an individual installation may not be particularly impacted by a cyberattack of its sensor network, another installation might be severely impacted, and different installations are likely to use similar methods, so compromising one leads to compromising all. DISC: THEA, WYO believe this to be LOW: encrypted, authenticated, proprietary; but should not cause severe damage if seen Control flows, even for seemingly innocent devices, should have MODERATE integrity at minimum, just to guarantee that intended control messages are received. Incorrect, corrupted, intercepted and modified control messages can or will result in target field devices not behaving according to operator intent. The severity of this depends on the type of device, which is why some devices are set MODERATE and some HIGH.. From THEA: should be accurate and not be tampered with; could enable outside control of traffic sensors but should not cause severe harm, but could cause issues with traffic sensor data received and be detrimental to operations Control flow availability is related to the criticality of being able to remotely control the device. For most devices, this is MODERATE. For purely passive devices with no incident relationship, this will be LOW. All devices should have default modes that enable them to operate without backhaul connectivity, so no device warrants a HIGH.. From THEA: want updates but delayed information will not be severe; should be able to operate from a previous/default control/config. DISC: WYO believes this to be MODERATE
Maint and Constr Management Center ITS Roadway Equipment work zone warning device control Moderate High Moderate
Control flows, even for seemingly innocent devices, should be kept confidential to minimize attack vectors. While an individual installation may not be particularly impacted by a cyberattack of its sensor network, another installation might be severely impacted, and different installations are likely to use similar methods, so compromising one leads to compromising all. Control flows, even for seemingly innocent devices, should have MODERATE integrity at minimum, just to guarantee that intended control messages are received. Incorrect, corrupted, intercepted and modified control messages can or will result in target field devices not behaving according to operator intent. The severity of this depends on the type of device, which is why some devices are set MODERATE and some HIGH. Control flow availability is related to the criticality of being able to remotely control the device. For most devices, this is MODERATE. For purely passive devices with no incident relationship, this will be LOW. All devices should have default modes that enable them to operate without backhaul connectivity, so no device warrants a HIGH.
Maint and Constr Management Center Maint and Constr Vehicle OBE work zone warning device control Not Applicable Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. This information should be accurate, but an incorrect information should not have a direct impact causing the loss of life or limb. The system should be able to operate properly if it misses a few messages. If a message is not received, the ITS RE should know.
Maint and Constr Vehicle OBE Connected Vehicle Roadside Equipment work zone warning notification Not Applicable Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. This information should be accurate, but an incorrect information should not have a direct impact causing the loss of life or limb. The system should be able to operate properly if it misses a few messages. If a message is not received, the RSE should know.
Maint and Constr Vehicle OBE Driver driver information Not Applicable Moderate Moderate
This data is sent to all drivers and is also directly observable, by design. There are currently other visual and auditory indicators of an incident. Police will park their car with the lights (and possibly siren) on to indicate that a lane is closed. If incorrect information is sent to the driver, they will still have other cues indicating that an incident has occurred. If the current indicators are fully replaced by this system, then this would be raised to a HIGH. There are currently other visual and auditory indicators of an incident. Police will park their car with the lights (and possibly siren) on to indicate that a lane is closed. If incorrect information is sent to the driver, they will still have other cues indicating that an incident has occurred. If the current indicators are fully replaced by this system, then this would be raised to a HIGH.
Maint and Constr Vehicle OBE ITS Roadway Equipment traffic detector control Moderate Moderate Low
Control flows, even for seemingly innocent devices, should be kept confidential to minimize attack vectors. While an individual installation may not be particularly impacted by a cyberattack of its sensor network, another installation might be severely impacted, and different installations are likely to use similar methods, so compromising one leads to compromising all. DISC: THEA, WYO believe this to be LOW: encrypted, authenticated, proprietary; but should not cause severe damage if seen Control flows, even for seemingly innocent devices, should have MODERATE integrity at minimum, just to guarantee that intended control messages are received. Incorrect, corrupted, intercepted and modified control messages can or will result in target field devices not behaving according to operator intent. The severity of this depends on the type of device, which is why some devices are set MODERATE and some HIGH.. From THEA: should be accurate and not be tampered with; could enable outside control of traffic sensors but should not cause severe harm, but could cause issues with traffic sensor data received and be detrimental to operations Control flow availability is related to the criticality of being able to remotely control the device. For most devices, this is MODERATE. For purely passive devices with no incident relationship, this will be LOW. All devices should have default modes that enable them to operate without backhaul connectivity, so no device warrants a HIGH.. From THEA: want updates but delayed information will not be severe; should be able to operate from a previous/default control/config. DISC: WYO believes this to be MODERATE
Maint and Constr Vehicle OBE ITS Roadway Equipment video surveillance control Moderate Moderate Moderate
Control flows, even for seemingly innocent devices, should be kept confidential to minimize attack vectors. While an individual installation may not be particularly impacted by a cyberattack of its sensor network, another installation might be severely impacted, and different installations are likely to use similar methods, so compromising one leads to compromising all. Control flows, even for seemingly innocent devices, should have MODERATE integrity at minimum, just to guarantee that intended control messages are received. Incorrect, corrupted, intercepted and modified control messages can or will result in target field devices not behaving according to operator intent. The severity of this depends on the type of device, which is why some devices are set MODERATE and some HIGH. Control flow availability is related to the criticality of being able to remotely control the device. For most devices, this is MODERATE. For purely passive devices with no incident relationship, this will be LOW. All devices should have default modes that enable them to operate without backhaul connectivity, so no device warrants a HIGH.
Maint and Constr Vehicle OBE Maint and Constr Field Personnel work zone warning Not Applicable Moderate Low
This is directly observable data. A few false warnings should not have a bad consequence. When field personnel receive a warning they can look around and verify whether or not a vehicle is actually headed towards them. It would be better to receive any messages than to not have this application available due to availability requirements. However, the higher the availability here, the more useful the application will be and the more field personnel can rely on it.
Maint and Constr Vehicle OBE Maint and Constr Management Center work zone warning status Moderate Moderate Moderate
There could potentially be sensitive information in the system activation or supporting information. This information flow also contains supporting verification, such as an image, that can also be used to verify the integrity of the message. The system should be able to operate properly if it misses a few messages. If a message is not received, the emergency vehicle OBE should know. This is not the only source of information regarding an incident. If an incident is severe enough to need an immediate response, there are other indicators (such as someone calling 911) that would help alert people to the situation.
Maint and Constr Vehicle OBE Other MCV OBEs work zone warning notification Not Applicable Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. This information should be accurate, but an incorrect information should not have a direct impact causing the loss of life or limb. The system should be able to operate properly if it misses a few messages. If a message is not received, the RSE should know.
Maint and Constr Vehicle OBE Personnel Device personnel safety warning Not Applicable High Low
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. A few false warnings should not have a bad consequence. When an emergency personnel receives a warning they can look around and verify whether or not a vehicle is actually headed towards them. However, a message saying it is safe when there is a car coming could lead to an emergency personnel not moving when they were in danger. It would be better to receive any messages than to not have this application available due to availability requirements. However, the higher the availability here, the more useful the application will be and the more emergency personnel can rely on it.
Maint and Constr Vehicle OBE Vehicle OBE vehicle signage data Low Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It is meant to augment other signage data, and by definition is meant to be shared with everyone. These signs are meant to augment other visual cues to the driver. They should be accurate, but any inaccuracies should be corrected for by other means. These notifications are helpful to a driver, but if the driver does not receive this notification immediately, there should still be other visual cues.
Other MCV OBEs Maint and Constr Vehicle OBE work zone warning notification Not Applicable Moderate Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. This information should be accurate, but an incorrect information should not have a direct impact causing the loss of life or limb. The system should be able to operate properly if it misses a few messages. If a message is not received, the RSE should know.
Personnel Device Connected Vehicle Roadside Equipment personnel location Not Applicable High Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. An incorrect locations message, could lead to a false warning or lack of warning. A lack of warning can have obvious catastrophic consequences, while a false warning could lead to users ignoring warnings due to perceived inaccuracy. Given that this triple may apply to highly dynamic environments (such as work zones), its accuracy is paramount, and thus if sent, must have HIGH integrity. There are other visual indicators about the geofenced areas. Personnel device users in dynamic environments (incident and work zones) should know when they are leaving a geofenced area. As long as they remain in the geofenced area, this information is not as necessary. Not all personnel will carry a personnel device, and the system should be able to operate without this information.
Personnel Device Maint and Constr Field Personnel personnel updates Low High Moderate
This data is informing the user of safety-related issues in the local transportation environment. It probably does not contain anything sensitive, and should not matter if another person can observe it. This is the information that is presented to the individual in a work zone or incident response area that may be unpredictable in its formation. If the user receives incorrect information, they may act in an unsafe manner. If this information is not made available to the pedestrian, then the user may be endangered. This is the not only mechanism the user may have to avoid potential dangers (they can observe directly).
Personnel Device Maint and Constr Vehicle OBE personnel location Not Applicable High Moderate
This data is intentionally transmitted to everyone via a broadcast. It can also be determined via other visual indicators. An incorrect locations message, could lead to a false warning or lack of warning. A lack of warning can have obvious catastrophic consequences, while a false warning could lead to users ignoring warnings due to perceived inaccuracy. Given that this triple may apply to highly dynamic environments (such as work zones), its accuracy is paramount, and thus if sent, must have HIGH integrity. There are other visual indicators about the geofenced areas. Personnel device users in dynamic environments (incident and work zones) should know when they are leaving a geofenced area. As long as they remain in the geofenced area, this information is not as necessary. Not all personnel will carry a personnel device, and the system should be able to operate without this information.
Vehicle OBE Connected Vehicle Roadside Equipment vehicle location and motion Not Applicable High Moderate
This data is intentionally transmitted to everyone via a broadcast. Much of its information content can also be determined via other visual indicators Incorrect information could lead to the system not operating properly. If the system does not properly know where the vehicle is, it cannot make an accurate decision about whether there is going to be a pedestrian in the crosswalk that the vehicle is approaching. This can have a safety impact.; DISC: NYC believes this to be MODERATE This data is required for the system to operate properly. If this data is not available, the system cannot give accurate warning information.
Vehicle OBE Maint and Constr Vehicle OBE vehicle location and motion Not Applicable High Moderate
This data is intentionally transmitted to everyone via a broadcast. Much of its information content can also be determined via other visual indicators Incorrect information could lead to the system not operating properly. If the system does not properly know where the vehicle is, it cannot make an accurate decision about whether there is going to be a pedestrian in the crosswalk that the vehicle is approaching. This can have a safety impact. This data is required for the system to operate properly. If this data is not available, the system cannot give accurate warning information.

Standards

The following table lists the standards associated with physical objects in this service package. For standards related to interfaces, see the specific information flow triple pages.

Name Title Physical Object
ITE ATC ITS Cabinet Intelligent Transportation System Standard Specification for Roadside Cabinets ITS Roadway Equipment
NEMA TS 8 Cyber and Physical Security Cyber and Physical Security for Intelligent Transportation Systems ITS Roadway Equipment
Maint and Constr Management Center
USDOT RSU Dedicated Short-Range Communications Roadside Unit Specifications (FHWA-JPO-17-589) Connected Vehicle Roadside Equipment