From September 4th to 6th, the 16th China Automotive Industry Development (TEDA) International Forum co-sponsored by China Automotive Technology Research Center Co., Ltd., China Automotive Engineering Society, China Automotive Industry Association and China Automotive News Agency was grandly held. Among them, Zhao Zhiguo, Director of the Cyber ​​Security Administration Bureau of the Ministry of Industry and Information Technology, delivered a wonderful speech at the "Opening Conference · Business Restructuring Driven by Both Policies and Markets" forum held on September 5.

Zhao Zhiguo, Director of the Cyber ​​Security Administration of the Ministry of Industry and Information Technology

The following is a record of the live speech::

    Dear leaders, experts, and guests, good morning! I am very happy to participate in the 2020 China Automotive Industry Development International Forum. On behalf of the Cyber ​​Security Administration of the Ministry of Industry and Information Technology, I would like to extend my warm congratulations to the opening of the forum.

    The automobile industry is the leading industry for the new round of technological revolution. The emerging industry ecology represented by the Internet of Vehicles is currently booming, driving the deep integration of automotive electronics, information communications, transportation and other industries to promote the high-quality development of manufacturing and accelerate Economic transformation and upgrading are an important driving force for building a new development pattern. Developed countries such as Europe and the United States also regard the Internet of Vehicles as a new highland for industrial innovation and development. They have intensively introduced relevant policies. In the EU's 2019 Strategic Value Chain Report to Enhance the EU's Future Industries, it has established the promotion of EU competitiveness and global leadership. Six major areas include the Internet of Vehicles and network security.

    In this context, this forum was held to focus on the dual upgrading of industrial consumption, reconstruct the theme of the new ecological pattern, explore new technologies, new models, and new business formats, explore new development momentum and paths, and seize the opportunities of new infrastructure construction. It is of great significance to promote the integrated development of the Internet of Vehicles industry.

    The Party Central Committee and the State Council attach great importance to the development of the Internet of Vehicles industry and the security of the network. The 19th National Congress of the Communist Party of China put forward the development goals of building a strong manufacturing country, a network power country, and a transportation power country. General Secretary Xi Jinping clearly requested to accelerate the promotion of high-quality automobile manufacturing in my country It also emphasizes that safety and development must be promoted simultaneously, which provides a basis for us to promote the high-quality development of the Internet of Vehicles.

    As the competent department of the industry, the Ministry of Industry and Information Technology attaches great importance to the development of the Internet of Vehicles, closely integrates the commercial applications of 5G, accelerates the integration and innovation of 5G and the Internet of Vehicles, gives full play to the advantages of my country’s network industry and finance system market, and actively builds a pilot area for the Internet of Vehicles. The Internet of Vehicles has accelerated from testing and demonstration to a new stage of pilot application. The Internet of Vehicles in my country is showing a vigorous development trend.

    At the same time, we always adhere to the synchronization of safety and development, accelerate the exploration of new paths and new patterns for the safe development of the Internet of Vehicles, in order to strengthen the top-level planning and design, and actively implement the deployment of the National Manufacturing Leading Group for the Development of the Internet of Vehicles Industry Development Committee Requirements, based on the actual safety of the Internet of Vehicles, research and plan in advance, and continuously enrich the policy reserve. In the released policy documents such as the Internet of Vehicles and Intelligent Connected Automobile Industry Development Action Plan, the basic principles of strengthening management and ensuring safety have been clarified, and the safety management system has been improved to improve the ability of safety protection, promote the construction of safety technology means, and implement In terms of corporate responsibilities and other aspects, a systematic deployment has been made for the Internet of Vehicles and network security.

    The second is to accelerate the establishment of the basis for standards. Leading the development of safety with standards, implement the guidelines for the construction of the national vehicle networking industry development system, accelerate the research and compilation of the construction of a standard system for vehicle networking network security, and initially clarify the list of more than 80 basic and urgently needed standard items. At present, six domestic standards have been issued to implement the protection of the Internet of Vehicles information service platform, wireless communication technology security, data security, and user personal information protection. It supports the establishment of 4 international standards including communication data security and road and vehicle unit security.

    The third is to strengthen the monitoring and prevention of risks. Organize the China Technology Center and other units to comprehensively investigate the potential risks of network security for 22 industry chain entities such as the vehicle networking platform and electronic components, and initially find out the security of the car networking. Focus on major issues such as 5G vertical applications and cross-border data flow, deepen security assessments, enrich policy reserves, strengthen forward-looking responses, and rely on the existing basic network and industrial Internet security mature mechanisms, means, and resources to initially achieve more than 80 Internet of Vehicles Enterprises, more than 200 million Internet of Vehicles terminals conduct safety inspections. In addition, it has established monitoring, notification and co-processing mechanisms with key enterprises in the Internet of Vehicles industry chain to actively strengthen the response to the security risks of Internet of Vehicles.

    The fourth is to promote innovation in safety practices and strengthen technological innovation. Relying on major projects such as industrial Internet innovation and development projects, the Internet of Vehicles has been regarded as an important track and key direction. In the past three years, a total of 1.3 billion has been invested, and more than 10 projects such as encryption certification of Internet of Vehicles, security situation awareness, and smart car security testing will be given priority. , To promote breakthroughs in key security technologies for the Internet of Vehicles, support business innovation, guide the construction of a trusted support platform for Internet of Vehicles, and create an end-to-end security trust mechanism and network trust system. Currently, there are many hosts such as GAC, BYD, Great Wall, Geely, etc. Factory access to the platform to realize the mutual recognition of network identities, promote program innovation, rely on network security technology, application pilot demonstrations, 5G security competitions and other platforms, and select more than 10 outstanding security scenarios around 5G+ car networking integration applications and other key scenarios The solution to the solution effectively guides and promotes model innovation and application. While the Internet of Vehicles network security work is innovated, we must also clearly see that compared with the vigorous development of Internet of Vehicles and the accelerated and deepening of networking and intelligence, Internet of Vehicles network security is still in the initial stage of exploration, which is essential for related safety. The understanding of characteristics and laws needs to be further deepened. There is still a long way to go for the security of the Internet of Vehicles. From the perspective of the dynamic monitoring of the Internet of Vehicles, network attacks have extended to the field of Internet of Vehicles. Since the beginning of this year, more than 2.8 million malicious attacks have been discovered by vehicle companies and related companies and platforms such as Internet of Vehicles information service providers. , The risks of platform vulnerabilities, communication hijacking, and privacy leakage are very serious, and the harm is even more severe.

    From the perspective of the actual network security of Internet of Vehicles enterprises, related enterprises in the industry chain, especially traditional automobile enterprises, have insufficient network security awareness, insufficient protection capabilities, and insufficient security investment. The problems are also prominent. In the special survey and testing last year, it was found that 85 % Of the key components have security vulnerabilities, more than 80% of the Internet of Vehicles platforms and IPPs have hidden dangers such as lack of identity authentication and clear text reorganization of data. Nearly 60% of enterprises lack automated network security monitoring and response capabilities, and support capabilities from the Internet of Vehicles security industry. Look, there is insufficient innovation and insufficient supply of specific technical products and solutions for the safety of the Internet of Vehicles. …The security protection mode of key in-vehicle systems based on the bus still needs innovation and breakthroughs, and comprehensive service guarantee schemes for new scenarios such as people, vehicles, roads, cloud collaboration, and autonomous driving still need to be explored quickly.

    Distinguished guests, cars are closely related to millions of households. They are directly related to the safety of people’s lives and the public safety of the society. It can be said that without safety, there will be no healthy and sustainable development of the Internet of Vehicles industry. The Internet of Vehicles is a fusion of cloud, network, road and terminal , Human elements, involving multiple industries, multiple fields, and multiple subjects such as information and communication, electronic automobile transportation, etc. The Internet of Vehicles network security is not only a single-point security issue, but also presents the characteristics of integration and integrity. It is necessary to build an integrated industrial chain. A coordinated network security comprehensive service guarantee system. The next step will be to work with various departments and industry to address the evolutionary needs of intelligent environment, perception decision-making, high-performance networked communication interaction, multi-level edge services, and large-scale transportation linkage management. Policies, standards, systems, technology, industry and other measures focus on building a trustworthy car networking network security ecology, escorting the high-quality development of the car networking industry, and accelerating the construction of a safety ecology within the enterprise.

    The key to the network security of the Internet of Vehicles lies in the main bodies of the industry chain. Explore the establishment of a hierarchical and classified management model for enterprise network security in the Internet of Vehicles industry chain, clarify the security requirements of various enterprises, improve guidance and enhance the level of enterprise network security, and focus on solving the whole machine and vehicle The issue of the company’s lack of awareness of cybersecurity, guide companies to establish and improve internal cybersecurity management systems, and build the ability of vehicle companies to comprehensively integrate innovation and service assurance for cybersecurity, focusing on the Internet of Vehicles platform, vehicle key equipment, and remote service applications Actively build a network security monitoring, certification and evaluation system that integrates enterprise self-inspection, third-party evaluation, and government supervision to improve the security level of key equipment and key links in the Internet of Vehicles.

    The second is to actively create a service ecosystem for safety supervision. Based on the needs of industrial safety development, strengthen the supply of safety policies for the Internet of Vehicles, improve the closed-loop management mechanism of hazard monitoring, information sharing, supervision and inspection, and co-processing, promote the development and practice of Internet of Vehicles safety standards, organize pilot projects, and guide enterprises Benchmarking, evaluating and reaching standards, improving safety protection capabilities, speeding up the construction of platforms for IoV situational awareness and intelligent networked vehicle safety detection, creating a database of IoV security vulnerabilities, improving the capability of IoV security public services, and facing key vehicles Networked companies regularly publish reports on the safety of the Internet of Vehicles and report incidents to guide them to prevent risks and rectify hidden dangers.

    The third is to promote the development of an ecosystem of industrial integration and innovation. Coordinating relevant policy resources, facing the security needs of front-end perception, networked communications, vehicle control, edge services, smart facilities, etc., intensify and strengthen technical research, play the leading role of leading car companies, and use network security technology applications and pilot demonstrations as carriers , Summarize and refine excellent practical cases of car networking safety, create a batch of replicable and extendable solutions, support the construction of demonstration areas for car networking network security and technological innovation, guide the accumulation of resources in the upstream and downstream of the industry chain, and accelerate the promotion of mature technology Industrial application. Incubate a number of high-quality enterprises and cultivate the momentum for industrial development.

    The fourth is to actively build a safety ecology for end users, and provide information services for Internet of Vehicles users, give full play to the scale of my country's automobile industry, information and communication service capabilities, digital technology and data resources, and actively develop high-quality, high-performance, and high-security The Internet of Vehicles products and services can better meet the needs of users for safe consumption, and create a good terminal security ecology and market environment for the healthy development of Internet of Vehicles. Accelerate the improvement of relevant policy standards for key issues such as data security, clarify baseline requirements for Internet of Vehicles data security management and personal information protection, strengthen data cross-border security management, clearly ensure Internet of Vehicles data security, effectively protect the rights and interests of users, and face user security concepts Enhance, give full play to the main role of auto companies, information and communication companies, etc., strengthen the publicity and education of car networking network security, and enhance the safety awareness and capabilities of end users.

    Distinguished guests, the Internet of Vehicles enterprise has a new form, a large industry span, and a wide range of technical fields. To do well in the Internet of Vehicles security work requires everyone to explore and practice together. I hope that we can base on a new starting point, aim at new development, concentrate on new developments, and make breakthroughs in reform. The healthy development of the industry contributes even more strength. Finally, I wish the forum a complete success. Thank you!