ISO 20078-3:2019

Road vehicles — Extended vehicle (ExVe) web services — Part 3: Security ISO 20078-3:2019

Publication date:   Apr 30, 2019

Scope

This document defines how to authenticate users and Accessing Parties on a web services interface. It also defines how a Resource Owner can delegate Access to its Resources to an Accessing Party. Within this context, this document also defines the necessary roles and required separation of duties between these in order to fulfil requirements stated on security, data privacy and data protection.
All conditions and dependencies of the roles are defined towards a reference implementation using OAuth 2.0 compatible framework and OpenID Connect 1.0 compatible framework.