By Dan Beres, Managing Partner, Recall Masters
I recently attended a Connected Car Show, and one of the most interesting presentations was cybersecurity for connected cars — why we should care and pay attention to this topic. It was, in fact, rather eye-opening.
For example, ponder this data for a minute:
70M+ cars are produced each year
The software in vehicles is replicated
They all have the same flaws
Across hundreds of thousands or millions of units
A single exploit can simultaneously impact ALL of those units
So yes, it is something that should be on the radar of anyone in the auto industry.
Just about everyone these days has a smartphone. We have our lives contained on them. We input all of our contacts into these devices. Our phones also contain our personal and business emails. We have private text messages. Apps we download contain a ton of personal information that we input. Most of us have passwords, thumbprint or facial recognition security in place to protect that data. It’s hard to argue that this data isn’t ours, correct? We certainly don’t want anyone who isn’t authorized to access it. It takes court orders via subpoenas for anyone who does not have expressed permission to access this data. It’s more than personal privacy – it crosses over into areas of safety and security.
However, have you ever thought about how your cellphone tracks everything you do, everywhere you go, and houses a tremendous amount of details about you? Who has access to that information? Your cellphone providers (at the minimum). Even if you were to turn off all GPS and tracking on every app on your phone, the cellphone provider would still know where you are. Why? Because they need to know your location to connect your phone to the nearest cellphone tower, delivering service to your device so that it can operate correctly.
Now, let’s rewind to the topic of connected cars. Today’s modern vehicles have an increasing number of technological amenities integrated into them that provide a wealth of information. Services such as OnStar relay vehicle condition information, including tire pressure warnings or alerts about upcoming vehicle service that is due.
What do those services do with the data they retrieve? They collect it and transmit it to your “preferred” dealership. Now add in the newer technologies, such as Apple Play and Google Play. These features are cool, but what are they mostly doing? They integrate your cellphone information into your vehicle. Yes, it is more convenient, but it also adds to the data that car manufacturers can access.
I am pretty sure that OEMs that know what the oil level is, and the current location of the driver, can also access the cellphone data which the consumer (voluntarily) downloaded into their car. Also, who owns that data?
The natural and most common-sense answer is that the vehicle owner does. However, is that true? According to the U.S. Vehicle Data Access Coalition, it may not be. Access to this information by the vehicle owner is often hidden behind technology barriers or technology hardware (such as the vehicle’s on-board diagnostics). In my opinion, just as the owner of a cellphone should own the data inside it, they should also own any data that is collected – and transmitted – by their vehicle.
Currently, legislation is before Congress that, if passed, will make ownership and access to any vehicle’s data entirely up to the owner. Once the bill is approved, owners will be able to securely access and control the data directly through their car within a secured interface. They will dictate what information is collected and transmitted to any third party.
As is the case with any personal consumer data and information, the data collected by vehicles about their owners should be protected. Most consumers would be concerned should they learn how cellphone carriers are hijacking that data. And, many were angered when they did discover this to be the case. However, currently, thinking about their vehicles in this way is too new for the majority of consumers to care.
However, with 70M+ cars produced each year; and all the new smart, connected technology that is installed; the day will come when our vehicles collect just as much data – if not more – than our cellphones. So that is why we need to pay attention.
A whole other issue is the cybersecurity aspect. The software in cars is replicated. They all have the same flaws. Across hundreds of thousands or millions of units. But that is fodder for a future blog. So, stay tuned!
About the Author
Dan Beres oversees Enterprise Services for Recall Masters, which includes OEM and strategic partnerships. Dan has 20 years of experience selling and managing technology/marketing solutions in the auto industry. Dan held position of EVP and seven-year managing partner of MyCustomerData in Aliso Viejo, CA.
