SAE J3101-3_202407

This document provides an information report to the readers for the management of confidential data associated with hardware protected security environment (HPSE). The scope of the present document is common principles of confidential data, methodologies, conformance of SAE J3101 with regulations and standards, and use cases. A vehicle component could contain and use several types of confidential data: secret elements such as customer identification, keys, and any confidential data for applications. These data elements could be stored in the hardware protected security environment (HPSE) or outside of HPSE. While SAE J3101 provides guidance and requirements on key management inside HPSE, providing more technical guidance on the management of information identified as confidential data could help stakeholders. The definition of confidentiality is in Section 3. Additionally, confidential data management could be based on OEM policy and government regulations. The scope of this information report is to address the current state of the art in managing confidential data in technical and regulatory aspects. The report will identify and discuss as enumerated below. Common principles of data confidentiality are outlined in one or more informative illustrative examples to provide the context of the role of an HPSE. SAE J3101 hardware support for technical aspects of secure management of confidential data. SAE J3101 hardware support necessary for secure deletion/erase. SAE J3101 hardware to achieve consistent secure management of confidential data. Achieve conformance with common principles in privacy regulations and standards. Describe use cases for confidential data management.