Access Control for a Connected Vehicle Ecosystem

In recent years, vehicles became a complex network of ECUs and sensors that communicate with each other and their environment. Vehicle data from these connected vehicles is processed and shared with multiple 3rd party applications via cloud vehicle data platforms or aftermarket products for added value. The rise of connected vehicles has also opened attacks on services that tamper with data. Thus, an increased risk of security and privacy in the automotive domain has to be mitigated. In this paper, we present a vehicle data use case to identify the requirements and challenges for security and privacy in the automotive domain. Furthermore, we conduct a literature review of access control models and evaluate them against the identified requirements. Based on our findings, we conclude that the Attribute Based Access Control (ABAC) model fulfils most of our vehicle specific requirements.