|
BMW said officials at German motorist association ADAC had
identified the problem, which affected cars equipped with the
company's ConnectedDrive software using on-board SIM cards -- the
chips used to identify authorized users of mobile devices.
BMW drivers can use the software and SIM cards to activate door
locking mechanisms, as well as a range of other services including
real-time traffic information, online entertainment and air
conditioning.
The security risk occurred when data was transmitted, BMW said,
adding it did not impede the car's critical functions of driving,
steering or braking.
BMW said it was not aware of any examples where the data had been
used to compromise the security of a vehicle.
In recent years, cyber security experts have criticized the
automotive industry for failing to do more to secure internal
communications of vehicles with network-connected features.
The danger, they say, is that once external security is breached,
hackers can have free rein to access onboard vehicle computer
systems which manage everything from engines and brakes to air
conditioning.
They fear it is only a matter of time before hackers might break
into wireless networks on cars to exploit software glitches and
other vulnerabilities to try to harm drivers.
ADAC's security researchers were able to simulate the existence of a
fake phone network, which BMW cars attempted to access, allowing
hackers to manipulate functions activated by a SIM card.
BMW said it had taken steps to eliminate possible breaches by
encrypting the communications inside the car using the same HTTPS
(Hypertext Transfer Protocol Secure) standard used in Web browsers
for secure transactions such as ecommerce or banking.
BMW said it was able to update its ConnectedDrive software
automatically, when the vehicle connects up to the BMW Group server
or the driver calls up the service configuration manually.
"The online capability of BMW Group ConnectedDrive allowed the gap
to be closed quickly and safely in all vehicles," BMW said. "There
was no need for vehicles to go to the workshop."
(Reporting by Edward Taylor; Editing by Eric Auchard and Mark
Potter)
[© 2015 Thomson Reuters. All rights
reserved.] Copyright 2015 Reuters. All rights reserved. This material may not be published,
broadcast, rewritten or redistributed.
 |
|
