GB/T 32960.2-2025Technical specifications for remote service and management system for electric vehicles — Part 2: On-board terminal (English PDF)

3.1 Integrated on-board terminal

An on-board terminal designed to be integrated with other devices or systems of the vehicle.

3.2 Independent on-board terminal

An on-board terminal designed as a standalone device or system.

3.3 Digital signature

Data attached to a data unit or a cryptographic transformation performed on the data unit.

NOTE: this data or transformation is used by the recipient of the data unit to verify the source and integrity of the data unit and to prevent data forgery or repudiation by others (e.g., the recipient). [source: GB/T 15843.1-2017, 3.11, modified]

3.4 Key

A symbol sequence used to control cryptographic transformation operations, typically an asymmetric key pair.

NOTE 1: a key consists of a public key and a private key. The private key is used for signature or decryption, while the public key is used for signature verification or encryption.

NOTE 2: the cryptographic transformation operations refer to encryption, decryption, cryptographic check function calculation, signature generation or signature verification, etc. [source: GB/T 15843.1-2017, 3.16, modified]

4.1 General Requirements

If the on-board terminal shares hardware with other information interaction systems, then, the entire device's hardware and software shall also satisfy the requirements of this document.

4.2 Functional Requirements

4.2.1 Activation

The on-board terminal shall be activated upon first use. Activation information shall be added with a digital signature using the private key stored in the vehicle chip with hardware security protection mechanisms, and then, transmitted to the server platform. The activation information shall include the chip identification number (ID), the public key stored in the vehicle chip, and the vehicle identification number (VIN).

4.2.2 Time and date

After each startup and before data collection, the on-board terminal shall perform time calibration using the Global Navigation Satellite System (GNSS), Network Time Protocol (NTP), or other calibration sources.

The on-board terminal shall provide the time and date. The time shall be accurate to the second, and the date shall be accurate to the day. The time error between the calibrated time and the standard time should be within the range of ±5 seconds.

4.2.3 Positioning

The on-board terminal's positioning shall comply with the requirements for positioning information in GB 45672-2025 (excluding environmental requirements).

NOTE: the relevant requirements for Category-M and Category-N vehicles specified in this document respectively refer to the relevant requirements for Category-M1 and Category- N1 vehicles in GB 45672-2025.

4.2.4 Data collection

After each wake-up, the real-time data collected by the on-board terminal shall at least meet the data upload items required by the public platform in GB/T 32960.3-2025, and the collection frequency shall not be less than 1 Hz.

4.2.5 Data storage

4.2.5.1 Storage of collected data

The on-board terminal shall store the collected real-time data in internal storage media.

4.2.5.2 Storage capacity

The internal storage media of the on-board terminal shall have sufficient capacity for at least 7 days of real-time data storage. When the internal storage media of the on-board terminal is full, it shall have an automatic overwriting function for the internally stored data.

4.2.5.3 Data readability

The data internally stored in the on-board terminal shall be readable.

4.2.5.4 Power-off storage

When the on-board terminal loses power and ceases operation, all data stored in the internal media before the power outage shall be completely preserved.

4.2.6 Data transmission

4.2.6.1 The on-board terminal shall be able to transmit the collected real-time data to the enterprise platform.

4.2.6.2 The transmission interval and data type of real-time data uploaded by the on-board terminal to the enterprise platform shall comply with the relevant requirements of GB/T 32960.3-2025.

4.2.7 Data retransmission

When the on-board terminal experiences a communication abnormality, the on-board terminal shall store the collected real-time data on local storage media and retransmit the real-time data after communication is restored. The retransmitted data and mode shall comply with the relevant requirements of GB/T 32960.3-2025.

4.2.8 Data security

The on-board terminal shall be equipped with a vehicle chip with hardware security protection mechanisms. The vehicle chip shall meet the following requirements.

---With a unique chip identification ID ("chip ID" for short). The chip ID consists of a four-digit chip model identifier and self-defined characters (up to twelve) by the vehicle manufacturer;

---Store the chip ID and key. The chip ID and public key are readable, while the private key is unreadable and unalterable;

---The security level meets the requirements of Security Level 2 in GM/T 0008, or a product security assurance level of at least EAL4+, or meets the requirements of national or industry standards for automotive chip information security;

---The key length is at least 256 bits.

The on-board terminal shall provide technically feasible security strategies to ensure that all product performance and functions remain within a safe range. The on-board terminal shall not contain high-risk or higher security vulnerabilities that were published 6 months ago and unaddressed by a vulnerability platform approved by the automotive industry authorities, so as to ensure the security of the stored data.

NOTE: the hardware security protection mechanisms refer to information security functions implemented by vehicle chip circuits and designed to meet the information security demands of automotive systems in terms of integrity, confidentiality and availability, etc.

4.2.9 Registration

The on-board terminal shall support remote registration on the enterprise platform.

4.2.10 Independent operation

After an abnormal power outage, the on-board terminal shall be able to maintain operation and be capable of independent operation for at least 10 minutes. During the independent operation, the on-board terminal shall be able to perform normal data collection, data storage, data transmission and data retransmission.

NOTE: the data refers to the relevant data specified in GB/T 32960.3-2025.

4.2.11 Remote control

The on-board terminal should have functions such as self-inspection, remote query, remote parameter setting and remote upgrade, etc.

4.3 Performance Requirements

4.3.1 Electrical adaptability

4.3.1.1 Startup time

For the on-board terminal, the time from powering on to achieving real-time data collection shall not exceed 120 seconds. After the test, the on-board terminal's data collection and data transmission functions shall be normal.

5.1 Functional Test

5.1.1 Activation

When the on-board terminal is powered on and initially started, an activation operation is performed. The on-board terminal activation information is added with a digital signature using the private key stored in the vehicle chip with hardware security protection mechanisms, and then, transmitted to the test platform. Determine whether the uploaded message data format satisfies Table B.3 in GB/T 32960.3-2025, and after successful activation, whether the function is normal.

5.1.2 Time and date

When the on-board terminal is initially powered on, it establishes a connection with the test platform and sends real-time data to the test platform. Read the collected data stored in the on-board terminal and the data on the test platform, record the data time format, and determine whether the data time is accurate to the second and whether the date is accurate to the day.

Determine whether the error between the data time and the standard time exceeds ±5 seconds.

After the on-board terminal has been in the sleep mode for at least 24 hours, upon re-awakening and initiation, it shall establish a connection with the test platform and send real-time data to the test platform. Read the collected data stored in the on-board terminal and the data on the test platform and determine whether the error between the data time and the standard time exceeds ±5 seconds.

5.1.3 Positioning requirements test

The positioning requirements test of the on-board terminal shall be conducted in accordance with test methods 6.3, 6.4, 6.5 and 6.6 in GB/T 45086.1-2024.

5.1.4 Data collection

Read the data collected and stored by the on-board terminal and check whether the data collection and storage frequency meet the requirements of 4.2.4.

5.1.5 Data storage

5.1.5.1 Storage of collected data

Read the data collected and stored by the on-board terminal and check whether the storage of collected data meets the requirements of 4.2.5.1.

5.1.5.2 Storage capacity

The on-board terminal is normally connected to the test platform and has been uninterruptedly operating for at least 7 days. Check whether the data storage meets the capacity requirements of 4.2.5.2. In accordance with the manufacturer's equipment instruction manual, read the data stored in the on-board terminal. Continue operating even when the on-board terminal's storage capacity is full to determine whether the cyclic coverage meets the requirements of 4.2.5.2.

5.1.5.3 Data readability

Determine whether the data collected and stored in the on-board terminal is parseable.

5.1.5.4 Power-off storage

While the on-board terminal is normally operating, power off the on-board terminal, and in accordance with the manufacturer's equipment instruction manual, read the data stored in the on-board terminal to check whether the data stored before the power outage is complete.

5.1.6 Data transmission

The on-board terminal sends the collected real-time data to the enterprise platform. Determine whether the real-time data transmission interval and data type meet the requirements of 4.2.6.

5.1.7 Data retransmission

The on-board terminal and the test platform are connected normally. After communication is restored after 5 minutes of disconnection, the on-board terminal reconnects to the test platform and reads the data uploaded by the on-board terminal on the test platform. Determine whether the data retransmission function meets the requirements of 4.2.7.

5.1.8 Data security

The chip ID is read using a test tool or provided by the test sample delivery personnel. Determine whether the chip ID meets the requirements of 4.2.8.

Through equipment such as side-channel acquisition and analysis systems, and fault signal injection systems, test, analyze or crack the private key of the vehicle chip with hardware security protection mechanisms. Determine whether it meets the requirements of 4.2.8. The manufacturer provides chip design documents and relevant certification certificates. Determine whether they meet the requirements of 4.2.8.

The on-board terminal normally operates and obtains the data signed by the on-board terminal.

The sample delivery personnel provide the public key, the signature ID and the signed data. Use the manufacturer's declared cryptographic algorithm to verify the signatures of 100 consecutive messages. Compare and verify whether the signature algorithm is consistent with the manufacturer's declared algorithm and determine whether the key length meets the requirements of 4.2.8.

Use a vulnerability scanning tool to scan the on-board terminal for vulnerabilities. Compare the test results with the list of high-risk and above security vulnerabilities published six months ago by an authoritative automotive industry vulnerability platform and the on-board terminal vulnerability handling scheme provided by the manufacturer to determine whether they meet the requirements of 4.2.8.

5.1.9 Registration

In accordance with the manufacturer's equipment instruction manual, register the on-board terminal on the enterprise platform to determine whether it meets the requirements of 4.2.9.

5.1.10 Independent operation

The on-board terminal is normally connected to the test platform. Disconnect the on-board terminal from power supply and record whether the on-board terminal normally operates for more than 10 minutes. Determine whether the on-board terminal's independent operation function meets the requirements of 4.2.10.

5.1.11 Remote control

In accordance with the manufacturer's equipment instruction manual, operate the on-board terminal. Check the self-inspection prompt status of the on-board terminal and whether remote query and parameter settings are possible. The manufacturer will also explain the terminal's remote upgrade mode. Determine whether it meets the requirements of 4.2.11.

5.2 Performance Test

5.2.1 Electrical adaptability test

5.2.1.1 Startup time

When the on-board terminal is completely shut down, power on the on-board terminal, and meanwhile, start the timing tool. Record the time passed until the test system receives the first frame of message uploaded by the on-board terminal and determine whether the on-board terminal startup time meets the requirements of 4.3.1.1. After the test, the on-board terminal collects 3 minutes of real-time data and uploads it to the test platform. Determine whether the transmission interval and data type of the real-time data uploaded by the on-board terminal meet the requirements of GB/T 32960.3-2025.

5.2.1.2 Operating voltage range

The on-board terminal is tested in accordance with the operating voltage range specified in 4.3.1.2. First, adjust the DC regulated power supply voltage to Un and stabilize for 10 minutes.

Then, gradually adjust the voltage to USmin and stabilize for 10 minutes. Finally, gradually adjust the voltage to USmax and stabilize for 10 minutes. […]