UN R161 — Supplement 1 to the 00 series of amendments

In the definition of “Key”, the words “mechanical and/or electronic solution” replace “device”. The definition now says “to be operated by that mechanical and/or electronic solution” in place of “to be operated only by that device”.

A “Primary user” is a user who is able to authorize digital keys, and there can be more than one primary user (paragraph 2.10.). A “Digital key” means a key designed to be transferred to multiple devices by the primary user(s) through dedicated processes (paragraph 2.11.). “Close proximity” means a distance of less than 6 m (paragraph 2.12.).

Paragraph 5.1.16. says that, in addition, digital keys must comply with the provisions of Annex 9. New Annex 9 has the title “Safety provisions for digital keys”. Its purpose is to specify documentation and verification requirements for digital keys used to operate the ‘device to prevent unauthorized use’ of the vehicle. New Annex 8 is reserved.

For type approval, the vehicle manufacturer must provide a description of the authorization process, the revocation process and the boundary of functional operation. The manufacturer must also provide a description of the safety measures designed within the digital key revocation process for safe operation of the vehicle. Detailed information must be in the owner's manual of the vehicle, or given by any other communication means in the vehicle (paragraph 4.4.). As a minimum, this information must include the method(s) for authorization and the method(s) for revocation of the digital key. Verification of the functionality of the digital key must be conducted with support of the manufacturer's documentation as specified in paragraph 3.

“Authorization process” means any method to provide the digital key which can operate the ‘device to prevent unauthorized use’ of the vehicle. “Revocation process” means any method to prevent the digital key to operate the ‘device to prevent unauthorized use’ of the vehicle. A digital key must only be transferred to a device through the authorization process (paragraph 4.1.). There must be a revocation process, and revocation of a digital key must not result in an unsafe condition (paragraphs 4.2. and 4.2.1.). The annex also describes a risk reduction analysis of the risk to vehicle occupants caused by revocation of a digital key. It must be possible for the primary user(s) to identify the number of authorized registered digital keys (paragraph 4.2.2.).

“Boundary of functional operation” defines the external physical limits (for example, distance) for the digital key to operate the vehicle's ‘device to prevent unauthorized use’. Unlocking of the device to prevent unauthorized use must require detection of an authorized registered digital key in the vehicle interior or in close proximity. Close proximity means a distance of less than 6 m (paragraph 2.12.). The requirements in paragraph 4.3.1. do not apply during a remote control manoeuvring and remote control parking as defined in UN Regulation No. 79.

The effectiveness of the system must not be adversely affected by cyber-attacks, cyber threats and vulnerabilities (paragraph 5.). The effectiveness of the security measures must be demonstrated by compliance with UN Regulation No. 155. The assessments under the annex must only be conducted by auditors/assessors with the technical and administrative knowledge necessary for such purposes. They must in particular be competent as auditor/assessor for ISO 26262-2018 and ISO/PAS 21448. They must also be able to make the necessary link with cybersecurity aspects in accordance with UN Regulation No. 155 and ISO/SAE 21434. This competence should be demonstrated by appropriate qualifications or other equivalent training records.