REMOTO    /    Cloud-Based Connected Car Platform
Technical information

Security

Security and privacy information for OEMs, NSC and dealerships
The connected car is a very sensitive environment associated with consumer safety. OEMs, National Sales Companies, and dealership groups care about their customers and work to improve cyber-security. Customers today have high requirements for cyber-security, and one of the strategic focuses of our company’s practical activity is to counter cyber-threats. Bright Box has taken steps to ensure security and data privacy.
1
ISO/IEC 27001:2013 Certified Information Seсurity
ISO/IEC 27001:2013 certification confirms the compliance of Bright Box’s practices with the requirements for establishing, implementing, maintaining, and improving information security management within the organization. We also consider risk assessment and the treatment of risk with respect to information security for our connected car customers. Bright Box has been certified as a global vendor of solutions and platforms for the connected car industry by the British Standards Institution or BSI.
2
Penetration tests
(HW, embedded software, apps, IT platform)
White-box test
Information security experts (white hackers) analyze the source code and attack the platform using the analysis outcome
Black-box testing
White hackers attack the platform using the publicly available information only
Bright Box development
Its own information security management system checked by BSI (ISO 27001)
All of the personal data in the app is protected via two-factor authentication using a phone number.
SMS Verification
Biometric Authentication
In order to connect to the vehicle the driver's application is assigned a PIN code, which is sent to the user's smartphone via text message. The next step is biometric authentication. This could be a fingerprint sensor, HYPR secure eye recognition, or facial or voice recognition depending on the model of smartphone.
We have dedicated a good deal of attention to the transferring of vehicle ownership, which occurs when the vehicle
changes hands from one user to another. Bright Box facilitates the process of transferring ownership.
No personal data is stored on the phone. Everything is stored in cloud services.
Best сloud storage services
that protect privacy
The data is not accumulate
in the phone
Connected cars send about 25 gigabytes of private data to the cloud every hour. This could include the driver's average speed, fuel consumption, trip history, average trip duration, popular destinations, and driving style. We store all of this data in highly protected clouds. No data is stored on the user's smartphone. Therefore, even if the user's phone is lost or stolen, identity thieves cannot gain access to private information, since this still requires authentication in cloud storage.
All network communication is carried out in accordance with security protocols and standards.
TLS 1.2 Secure
encryprion protocol
Firewall
(networking)
In order to ensure the security of the connection between the car and the cloud and the smartphone and the cloud we use aTLS 1.2 secure encryption protocol. The user is also protected by a firewall (networking) on the server side in order to monitor security and the traffic between the device, the car, and the server, which prevents unidentified vehicles from accessing the server. The car also has a special proprietary authentication protocol for our cloud that makes it impossible for unauthorized devices to access it.
3
Data Privacy Policy covering all geographical areas where connected vehicle solution Remoto is available
ISO/IEC 27001:2013 certification confirms the compliance of Bright Box’s practices with the requirements for establishing, implementing, maintaining, and improving information security management within the organization. We also consider risk assessment and the treatment of risk with respect to information security for our connected car customers. Bright Box has been certified as a global vendor of solutions and platforms for the connected car industry by the British Standards Institution or BSI.
See
also
Empower your business today with artificial intelligence!
By submitting this form, you agree to send your info to Remoto who agrees to use it according to their privacy policy
CLOSE VIDEO