July 14, 2025
Article
iWave’s telematics portfolio of TCUs, Telematic Gateways and loggers feature cybersecurity by design. As connected automotive and telematics systems grow, robust cybersecurity is critical, driven by EU regulations like the Cyber Resilience Act (CRA) and the Radio Equipment Directive Delegated Act (RED DA).
iWave Telematics products are made secure by embedding robust technical and process controls that align with key international and EU standards, including ISO/SAE 21434, ISO 24089, UNECE WP.29 (UN R155, UN R156), CRA, RED DA, and the EN 18031 series. Meeting these standards is essential for compliance, trust, and market access in the evolving landscape.
UNECE world forum for Harmonization of Vehicle Regulations (WP.29) has adopted two regula-tions UN R155 & UN R156. UN R155 sets the legal obligation for approval of vehicles under cyber security management system (CSMS) It references ISO/SAE 21434 on Road Vehicles – Cy-bersecurity. ISO/SAE 21434 provides the detailed engineering framework, outlining how to im-plement these security measures through processes like Threat Analysis and Risk Assessment (TARA) and rigorous penetration testing. Adherence to ISO/SAE 21434 is the primary method to demonstrate compliance with UN R155’s requirements.
This regulation mandates secure and traceable software updates. iWave’s telematics devices, equipped with Secure Boot / Encrypted Boot, feature the robust hardware foundation for UN R156-compliant Over-the-Air (OTA) updates. Most of these devices also include key components like Crypto Accelerators and Secure Elements to ensure authenticity and integrity.
This standard complements UN R156 by providing a detailed framework for managing software updates securely and reliably across the vehicle lifecycle. It covers update integrity, authentici-ty, delivery mechanisms, and traceability.
The CRA applies to all digital products, including telematics devices, requiring security by design and throughout the product lifecycle. It promotes transparency and protection against vulner-abilities. Our security solutions align closely with CRA requirements.
Effective August 2025, RED DA establishes cybersecurity rules for internet-connected radio de-vices to protect networks, personal data, and prevent fraud. The EN 18031 standards provide detailed guidelines to meet these requirements.
Through meticulous adherence to international and EU standards such as ISO/SAE 21434’s engi-neering processes and UN R155’s regulatory mandates, iWave’s telematics portfolio ensures high-assurance security. Our integrated hardware and software controls provide the resilience required for critical connected vehicle applications across the European market.
We appreciate you contacting iWave.
Our representative will get in touch with you soon!