UN R156

Articles, guides, and products tagged "UN R156" — a combined view of every catalogue resource on this topic.

User guide

E-scooter Configuration Management engineering as the 34th engineering axis: configuration-discipline meta-axis — ISO 10007:2017 + IEEE 828:2012 + SAE EIA-649C + DO-178C SCM + ISO 26262-8 + ITIL 4 + CMMI v2.0 + NIST SP 800-128

Engineering deep-dive into configuration management (CM) engineering as the 34th engineering axis and 7th process meta-axis. Describes the systematic discipline that answers the question "what exactly is installed in this specific physical and digital product at this specific moment, how do we know, how can we change it under control, and how can we prove it after the fact?" Covers: ISO 10007:2017 *Quality management — Guidelines for configuration management* (non-prescriptive guidance above all other CM standards, aligned with ISO 9001:2015); IEEE 828-2012 *Standard for Configuration Management in Systems and Software Engineering* (minimum requirements for CM processes, CM Plan structure, life-cycle integration); SAE EIA-649C:2019 *Configuration Management Standard* (5 CM functions + 37 principles, national consensus standard); SAE EIA-649-1A:2020 *Configuration Management Requirements for Defense Contracts*; DO-178C airborne software SCM (Section 7 + Table A-8 with 6 SCM objectives applicable to software levels A/B/C/D); ISO 26262-8:2018 automotive functional-safety supporting processes (clause 7 configuration management + clause 8 change management + clause 9 verification + clause 10 documentation); ITIL 4 *Service Configuration Management* practice + CMDB (Configuration Management Database) + CMS (Configuration Management System); CMMI v2.0 *Configuration Management* practice area (2 capability levels); NIST SP 800-128 *Guide for Security-Focused Configuration Management of Information Systems* (SecCM); MIL-STD-973 (cancelled 2000) + MIL-STD-3046 (interim, US Army); ISO/IEC/IEEE 24765:2017 vocabulary; CM principal artifacts (CMP / configuration item / configuration baseline / change request / CCB / SCAR / FCA / PCA); CM concepts (identification / change control / status accounting / verification + audit / build management / release management); e-scooter-specific concerns (firmware versioning of BMS + ESC + display controller + companion app + OTA-update integrity; BOM revisions + part interchangeability matrix; serial number / lot number → BOM revision lookup; recall management workflow per NHTSA + EU Safety Gate + UK PSD; TSB (Technical Service Bulletin) lifecycle; software bill of materials SBOM per NTIA + EO 14028 + EU CRA Annex I § 1.2.f). A 33-row cross-axis matrix maps the CM concept to each of the 33 prior engineering axes (battery cell lot traceability + brake-pad compound revision + motor stator winding revision + tire compound revision + EMC pre-compliance vs production unit + cybersecurity firmware signing + DPIA-relevant data-processor changes + V&V test-report revision); 8-step DIY owner CM "tells" checklist (firmware-version visibility in display/app + serial-number sticker location + BOM revision letter on the PCB silkscreen + recall lookup via VIN/serial + service-manual revision date + warranty BOM verification + change-log discipline for OTA updates + spare-part interchangeability documentation).

15 min read

User guide

E-scooter cybersecurity engineering: ETSI EN 303 645 V3.2.0:2024-12 baseline (13 provisions for consumer IoT — no default password, vulnerability disclosure RFC 9116, secure update, secure storage, secure communication), ISO/SAE 21434:2021 road-vehicle cybersecurity engineering (TARA threat analysis + risk assessment), ISO/SAE 24089:2023 software update engineering, UNECE R155 CSMS (Cybersecurity Management System) mandatory for new vehicle type-approvals from 07-2022, UNECE R156 SUMS (Software Update Management System), EU Cyber Resilience Act 2024/2847 (Regulation 2024-10-23, applicability 2027-12-11 + reporting obligations 2026-09-11), NIST SP 800-193:2018 Platform Firmware Resilience Guidelines (Protection-Detection-Recovery RoT), NIST SP 800-183 IoT Networks of Things, IEC 62443-4-1/-4-2 secure product development lifecycle, Bluetooth Core 5.4 LE Secure Connections with ECDH P-256 (replacing Just Works as baseline), IEEE 802.11i WPA3-Personal SAE Dragonfly key exchange, RFC 9116 security.txt responsible-disclosure, attack surface (BLE pairing Just Works/Numeric Comparison/Passkey Entry/OOB, Bluetooth protocol attacks KNOB CVE-2019-9506 + BIAS CVE-2020-10135 + BLURtooth CVE-2020-15802 + BLESA CVE-2020-9770, firmware via JTAG/SWD/USB DFU, motor controller CAN bus, mobile app↔cloud TLS, OTA update channel signing, GPS spoofing, smart-battery BMS handshake, hardware UART debug eFuse), mitigation (LE Secure Connections ECDH P-256 + mutual TLS certificate pinning + secure boot signed bootloader + signed firmware AES-256 + anti-rollback monotonic counter + HSM/secure element ATECC608B/NXP A1006/SE050 + SBOM SPDX CycloneDX + RFC 9116 security.txt + Coordinated Vulnerability Disclosure ISO/IEC 29147:2018 + penetration testing ISTQB), incidents (Xiaomi M365 BLE anti-lock bypass 2019 Zimperium Rani Idan, Lime BLE replay attack 2019, Bird/Lime API IDOR 2020, Ninebot ES1/ES2/ES4 BLE pwd 888888 vulnerability, Tier/Voi unauthorized unlock 2022, hoverboard CVE catalogue 2018)

Engineering deep-dive into e-scooter cybersecurity as the fourth cross-cutting infrastructure axis — parallel to [fastener engineering as joining-axis](@/guide/fastener-and-bolted-joint-engineering.md), [thermal management as heat-dissipation axis](@/guide/thermal-management-engineering.md), and [EMC/EMI as interference-mitigation axis](@/guide/emc-emi-engineering.md). Covers: 10-row standards matrix (ETSI EN 303 645 V3.2.0:2024-12 consumer IoT baseline, ISO/SAE 21434:2021 road-vehicle TARA, ISO/SAE 24089:2023 SW update engineering, UNECE R155 CSMS, UNECE R156 SUMS, EU CRA 2024/2847, NIST SP 800-193 firmware RoT, IEC 62443-4-1 secure SDLC, Bluetooth Core 5.4 LE Secure Connections, IEEE 802.11i WPA3-SAE); 7-row attack-surface matrix (BLE pairing methods + KNOB/BIAS/BLURtooth/BLESA + firmware JTAG/SWD/DFU + mobile↔cloud TLS + OTA signing + GPS spoofing + smart-battery handshake); 6-row mitigation matrix (LE Secure Connections + mutual TLS + secure boot + signed firmware + anti-rollback + HSM/SE); 6-row real-incident matrix (Xiaomi M365 2019 + Lime BLE 2019 + Bird IDOR 2020 + Ninebot pwd 888888 + Tier/Voi 2022 + hoverboard catalogue); 8-step DIY security check; 6-step DIY remediation; EU Cyber Resilience Act timeline (2024-12-10 entry into force, 2026-09-11 reporting obligations, 2027-12-11 full applicability); 16 numbered sections.

17 min read

User guide

Software and firmware engineering for embedded ECUs of an electric scooter as the 29th engineering axis: UN R156 SUMS + ISO/SAE 21434 + Automotive SPICE 4.0 + MISRA C:2023 + ISO 26262-6:2018 + AUTOSAR Classic R23-11 + ISO/IEC/IEEE 12207:2017 + ISO/IEC/IEEE 29148:2018 + ISO/IEC 25010:2023 + CISA SBOM Minimum Elements + CWE/CVE + CVSS v4.0

Engineering deep-dive into software & firmware engineering as the 29th engineering axis and the twelfth cross-cutting infrastructure axis — describes how firmware of e-scooter embedded ECUs (motor controller + BMS + dashboard + IoT gateway + charger MCU) is developed under MISRA C:2023, validated through the Automotive SPICE 4.0 V-model + SWE.1–SWE.6 + SYS.1–SYS.5 + HWE.1–HWE.4 + MLE.1–MLE.4, OTA-updated under UN R156 SUMS (L-category mandate: Dec 2027 new types / June 2029 existing types), traced through the ISO/IEC/IEEE 12207:2017 software lifecycle's 30 processes in 4 groups (Agreement + Organizational Project-Enabling + Technical Management + Technical), documented via SBOM per CISA Minimum Elements 2025 (Supplier + Component + Version + Unique-IDs + Dependencies + Author + Timestamp + Hash + License + Tool + Generation-Context) in SPDX 2.3 and CycloneDX 1.6 formats, versioned through the ISO/IEC 25010:2023 product quality model's 8 characteristics, qualified at the toolchain level per ISO 26262-8 Clause 11 (TCL1/TCL2/TCL3 + TD1/TD2/TD3), and monitored through CWE Top 25 + CVSS v4.0 (Base + Threat + Environmental + Supplemental). 18 numbered sections.

15 min read