Secure gateway module - Revision history

Mr Pollo at 01:31, 28 April 2026

2026-04-28T01:31:23Z

← Older revision		Revision as of 01:31, 28 April 2026
Line 4:		Line 4:
	A '''secure gateway module''' (SGW) is a digital firewall integrated into a vehicle's electrical architecture that restricts access to the on-board diagnostic (OBD-II) port by requiring internet-authenticated credentials before allowing bidirectional communication with vehicle systems.<ref name="youcanic">{{Cite web \|url=https://www.youcanic.com/fca-security-gateway-module-explained-obd2-sgm-sgw/ \|title=FCA Security Gateway Module Explained \|publisher=YOUCANIC \|access-date=2026-04-04}}</ref> Fiat Chrysler Automobiles (FCA, now [[Stellantis]]) introduced the technology across its vehicle lineup in 2017-2018, & Nissan, Mercedes-Benz, Volkswagen/Audi, & [[Hyundai]]/Kia have since adopted similar systems.<ref name="adasdepot">{{Cite web \|url=https://adasdepot.com/blog/security-gateways-in-modern-vehicles-balancing-cybersecurity-and-repair-access/ \|title=Security Gateways in Modern Vehicles: Balancing Cybersecurity and Repair Access \|publisher=ADAS Depot \|access-date=2026-04-04}}</ref> Independent repair shops must pay annual subscription fees to a third-party authentication service called AutoAuth, plus maintain separate scan tool software subscriptions, to perform repairs that dealerships can do without additional cost.<ref name="autoauth-pricing">{{Cite web \|url=https://www.adasnetwork.org/industrynews/autoauth-announces-changes-to-it-s-pricing-structure-and-services \|title=AutoAuth Announces Changes to its Pricing Structure and Services \|publisher=ADAS Network \|date=2025 \|access-date=2026-04-04}}</ref>		A '''secure gateway module''' (SGW) is a digital firewall integrated into a vehicle's electrical architecture that restricts access to the on-board diagnostic (OBD-II) port by requiring internet-authenticated credentials before allowing bidirectional communication with vehicle systems.<ref name="youcanic">{{Cite web \|url=https://www.youcanic.com/fca-security-gateway-module-explained-obd2-sgm-sgw/ \|title=FCA Security Gateway Module Explained \|publisher=YOUCANIC \|access-date=2026-04-04}}</ref> Fiat Chrysler Automobiles (FCA, now [[Stellantis]]) introduced the technology across its vehicle lineup in 2017-2018, & Nissan, Mercedes-Benz, Volkswagen/Audi, & [[Hyundai]]/Kia have since adopted similar systems.<ref name="adasdepot">{{Cite web \|url=https://adasdepot.com/blog/security-gateways-in-modern-vehicles-balancing-cybersecurity-and-repair-access/ \|title=Security Gateways in Modern Vehicles: Balancing Cybersecurity and Repair Access \|publisher=ADAS Depot \|access-date=2026-04-04}}</ref> Independent repair shops must pay annual subscription fees to a third-party authentication service called AutoAuth, plus maintain separate scan tool software subscriptions, to perform repairs that dealerships can do without additional cost.<ref name="autoauth-pricing">{{Cite web \|url=https://www.adasnetwork.org/industrynews/autoauth-announces-changes-to-it-s-pricing-structure-and-services \|title=AutoAuth Announces Changes to its Pricing Structure and Services \|publisher=ADAS Network \|date=2025 \|access-date=2026-04-04}}</ref>

	The auto-glass & collision repair industries bear a disproportionate burden because every windshield replacement on an [[Advanced driver-assistance system\|ADAS]]-equipped vehicle requires camera recalibration that the SGW blocks without active internet authentication.<ref name="rdn-adas">{{Cite web \|url=https://www.repairerdrivennews.com/2026/03/04/industry-responds-to-federal-bill-requiring-nhtsa-guidelines-for-adas-calibrations/ \|title=Industry responds to federal bill requiring NHTSA guidelines for ADAS calibrations \|author=Teresa Moss \|publisher=Repairer Driven News \|date=2026-03-04 \|access-date=2026-04-04}}</ref> The Federal Trade Commission found "scant evidence to support manufacturers' justifications for repair restrictions" in its 2021 report to Congress, & the GAO confirmed in 2024 that independent shops face repair information limitations resulting in fewer choices & higher costs for consumers.<ref name="ftc-nixing">{{Cite web \|url=https://www.ftc.gov/reports/nixing-fix-ftc-report-congress-repair-restrictions \|title=Nixing the Fix: An FTC Report to Congress on Repair Restrictions \|publisher=Federal Trade Commission \|date=2021-05 \|access-date=2026-04-04}}</ref><ref name="gao">{{Cite web \|url=https://www.gao.gov/products/gao-24-106633 \|title=Vehicle Repair: Information on Evolving Vehicle Technologies and Consumer Choice \|publisher=Government Accountability Office \|date=2024-03-21 \|access-date=2026-04-04}}</ref>		The auto-glass & collision repair industries bear a disproportionate burden because every windshield replacement on an [[Advanced driver-assistance system\|ADAS]]-equipped vehicle requires camera recalibration that the SGW blocks without active internet authentication.<ref name="rdn-adas">{{Cite web \|url=https://www.repairerdrivennews.com/2026/03/04/industry-responds-to-federal-bill-requiring-nhtsa-guidelines-for-adas-calibrations/ \|title=Industry responds to federal bill requiring NHTSA guidelines for ADAS calibrations \|author=Teresa Moss \|publisher=Repairer Driven News \|date=2026-03-04 \|access-date=2026-04-04}}</ref> The Federal Trade Commission found "scant evidence to support manufacturers' justifications for repair restrictions" in its 2021 report to Congress, & the GAO confirmed in 2024 that independent shops face repair information limitations resulting in fewer choices & higher costs for consumers.<ref name="ftc-nixing">{{Cite web \|url=https://www.ftc.gov/reports/nixing-fix-ftc-report-congress-repair-restrictions \|title=Nixing the Fix: An FTC Report to Congress on Repair Restrictions \|publisher=Federal Trade Commission \|date=2021-05-01 \|access-date=2026-04-04}}</ref><ref name="gao">{{Cite web \|url=https://www.gao.gov/products/gao-24-106633 \|title=Vehicle Repair: Information on Evolving Vehicle Technologies and Consumer Choice \|publisher=Government Accountability Office \|date=2024-03-21 \|access-date=2026-04-04}}</ref>

	== History of OBD-II & the shift to closed diagnostics ==		== History of OBD-II & the shift to closed diagnostics ==
Line 26:		Line 26:
	=== Authentication flow ===		=== Authentication flow ===

	Bypassing the SGW requires a challenge-response protocol managed by a cloud server:<ref name="eti-overview">{{Cite web \|url=https://etools.org/wp-content/uploads/2024/09/AutoAuth-High-Level-Overview-Ver10.pdf \|title=AutoAuth High Level Overview \|publisher=Equipment and Tool Institute \|date=2024-09 \|access-date=2026-04-04}}</ref>		Bypassing the SGW requires a challenge-response protocol managed by a cloud server:<ref name="eti-overview">{{Cite web \|url=https://etools.org/wp-content/uploads/2024/09/AutoAuth-High-Level-Overview-Ver10.pdf \|title=AutoAuth High Level Overview \|publisher=Equipment and Tool Institute \|date=2024-09-01 \|access-date=2026-04-04}}</ref>

	# The technician connects an approved aftermarket scan tool to the OBD-II port. The tool detects the SGW & prompts for authentication.		# The technician connects an approved aftermarket scan tool to the OBD-II port. The tool detects the SGW & prompts for authentication.
Line 115:		Line 115:
	==== [[DMCA Section 1201]] exemptions ====		==== [[DMCA Section 1201]] exemptions ====

	The US Copyright Office first granted a vehicle repair exemption to [[Digital Millennium Copyright Act\|DMCA]] Section 1201 in October 2015.<ref name="dmca-2024">{{Cite web \|url=https://www.federalregister.gov/documents/2024/10/28/2024-24563/exemption-to-prohibition-on-circumvention-of-copyright-protection-systems-for-access-control \|title=Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies \|publisher=Federal Register \|date=2024-10-28 \|access-date=2026-04-04}}</ref> The 9th Triennial Proceeding in October 2024 broadened the exemption to explicitly grant vehicle owners & their designees the right to access, store, & share "operational data, including diagnostic and telematics data."<ref name="dmca-2024" /><ref name="autocare-dmca">{{Cite web \|url=https://www.autocare.org/detail-pages/blog/aina/2024/11/01/new-exemption-to-digital-millennium-copyright-act-broadens-protection-for-vehicle-data-access \|title=New Exemption to DMCA Broadens Protection for Vehicle Data Access \|publisher=Auto Care Association \|date=2024-11-01 \|access-date=2026-04-04}}</ref> The FTC & DOJ filed a joint comment in March 2024 supporting the expansion.<ref name="ftc-dmca">{{Cite web \|url=https://www.ftc.gov/news-events/news/press-releases/2024/03/ftc-doj-file-comment-us-copyright-office-supporting-renewal-expansion-exemptions-facilitating \|title=FTC and DOJ File Comment Supporting Renewal and Expansion of ~~DMCA~~ Repair ~~Exemptions~~ \|publisher=Federal Trade Commission \|date=2024-03 \|access-date=2026-04-04}}</ref>		The US Copyright Office first granted a vehicle repair exemption to [[Digital Millennium Copyright Act\|DMCA]] Section 1201 in October 2015.<ref name="dmca-2024">{{Cite web \|url=https://www.federalregister.gov/documents/2024/10/28/2024-24563/exemption-to-prohibition-on-circumvention-of-copyright-protection-systems-for-access-control \|title=Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies \|publisher=Federal Register \|date=2024-10-28 \|access-date=2026-04-04}}</ref> The 9th Triennial Proceeding in October 2024 broadened the exemption to explicitly grant vehicle owners & their designees the right to access, store, & share "operational data, including diagnostic and telematics data."<ref name="dmca-2024" /><ref name="autocare-dmca">{{Cite web \|url=https://www.autocare.org/detail-pages/blog/aina/2024/11/01/new-exemption-to-digital-millennium-copyright-act-broadens-protection-for-vehicle-data-access \|title=New Exemption to DMCA Broadens Protection for Vehicle Data Access \|publisher=Auto Care Association \|date=2024-11-01 \|access-date=2026-04-04}}</ref> The FTC & DOJ filed a joint comment in March 2024 supporting the expansion.<ref name="ftc-dmca">{{Cite web \|url=https://www.ftc.gov/news-events/news/press-releases/2024/03/ftc-doj-file-comment-us-copyright-office-supporting-renewal-expansion-exemptions-facilitating \|title=FTC and DOJ File Comment with the U.S. Copyright Office Supporting Renewal and Expansion of Exemptions Facilitating Consumers’ and Businesses’ Right to Repair Their Own Products\|publisher=Federal Trade Commission \|date=2024-03-14 \|access-date=2026-04-04}}</ref>

	=== State ===		=== State ===
Line 137:		Line 137:
	EU Regulation 2018/858 mandates non-discriminatory access to OBD & repair/maintenance information (RMI) for independent operators as a condition of vehicle type-approval.<ref name="eu-reg">{{Cite web \|url=https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02018R0858-20240701 \|title=Regulation (EU) 2018/858 - Consolidated \|publisher=EUR-Lex \|date=2018-05-30 \|access-date=2026-04-04}}</ref>		EU Regulation 2018/858 mandates non-discriminatory access to OBD & repair/maintenance information (RMI) for independent operators as a condition of vehicle type-approval.<ref name="eu-reg">{{Cite web \|url=https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02018R0858-20240701 \|title=Regulation (EU) 2018/858 - Consolidated \|publisher=EUR-Lex \|date=2018-05-30 \|access-date=2026-04-04}}</ref>

	In October 2023, the European Court of Justice ruled in Case C-296/22 (Carglass/ATU v. Stellantis Italy) that manufacturers can't require personal registration, internet connection to manufacturer servers, or paid subscriptions for OBD access beyond what Regulation 2018/858 permits.<ref name="ecj-ruling">{{Cite web \|url=https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62022CJ0296 \|title=Case C-296/22 - CJEU Judgment \|publisher=EUR-Lex \|date=2023-10 \|access-date=2026-04-04}}</ref> The court held that both read & write access to the OBD data stream must be granted to independent repairers & rejected the argument that UN Regulation 155 (vehicle cybersecurity) overrides EU access requirements.<ref name="ecj-analysis">{{Cite web \|url=https://www.osborneclarke.com/news/ecj-decision-vehicle-manufacturers-may-not-restrict-access-vehicle-data-stream \|title=ECJ decision: vehicle manufacturers may not restrict access to the vehicle data stream \|publisher=Osborne Clarke \|date=2023 \|access-date=2026-04-04}}</ref> The court stated that if manufacturers could "limit at their discretion access to the direct vehicle data stream...it would be open to them to make access to that stream subject to conditions capable of making access impossible in practice."<ref name="ecj-analysis" />		In October 2023, the European Court of Justice ruled in Case C-296/22 (Carglass/ATU v. Stellantis Italy) that manufacturers can't require personal registration, internet connection to manufacturer servers, or paid subscriptions for OBD access beyond what Regulation 2018/858 permits.<ref name="ecj-ruling">{{Cite web \|url=https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62022CJ0296 \|title=Case C-296/22 - CJEU Judgment \|publisher=EUR-Lex \|date=2023-10-05 \|access-date=2026-04-04}}</ref> The court held that both read & write access to the OBD data stream must be granted to independent repairers & rejected the argument that UN Regulation 155 (vehicle cybersecurity) overrides EU access requirements.<ref name="ecj-analysis">{{Cite web \|url=https://www.osborneclarke.com/news/ecj-decision-vehicle-manufacturers-may-not-restrict-access-vehicle-data-stream \|title=ECJ decision: vehicle manufacturers may not restrict access to the vehicle data stream \|publisher=Osborne Clarke \|date=2023 \|access-date=2026-04-04}}</ref> The court stated that if manufacturers could "limit at their discretion access to the direct vehicle data stream...it would be open to them to make access to that stream subject to conditions capable of making access impossible in practice."<ref name="ecj-analysis" />

	The ECJ's holding that manufacturers can't require internet connections, personal registration, or paid subscriptions for OBD access covers the same conditions that AutoAuth imposes in North America.<ref name="ecj-analysis" />		The ECJ's holding that manufacturers can't require internet connections, personal registration, or paid subscriptions for OBD access covers the same conditions that AutoAuth imposes in North America.<ref name="ecj-analysis" />

PixelRunner: fix categories

2026-04-16T13:01:03Z

fix categories

← Older revision		Revision as of 13:01, 16 April 2026
Line 201:		Line 201:
	{{reflist}}		{{reflist}}

	[[Category:Right to ~~Repair~~]]		[[Category:Right to repair]]
	[[Category:Automotive]]		[[Category:Automotive]]
	[[Category:Planned ~~Obsolescence~~]]		[[Category:Planned obsolescence]]
	[[Category:Legislation]]		[[Category:Legislation]]

Louis: fresh audit with updated agents caught 7 more mismatches: removed fabricated adas consequences, unsourced offline claim, unsourced target board details, misattributed apple/bmw/alliance citations, unsourced mvber claim; all 5 regression test patterns confirmed caught by new rules

2026-04-05T01:09:01Z

fresh audit with updated agents caught 7 more mismatches: removed fabricated adas consequences, unsourced offline claim, unsourced target board details, misattributed apple/bmw/alliance citations, unsourced mvber claim; all 5 regression test patterns confirmed caught by new rules

← Older revision		Revision as of 01:09, 5 April 2026
Line 14:		Line 14:
	=== The 2015 Jeep Cherokee hack ===		=== The 2015 Jeep Cherokee hack ===

	In July 2015, security researchers Charlie Miller & Chris Valasek remotely hijacked a Jeep Cherokee through its Uconnect cellular connection, demonstrating the ability to control steering, brakes, & transmission from a laptop miles away.<ref name="jeep-hack">{{Cite web \|url=https://fractionalciso.com/the-groundbreaking-2015-jeep-hack-changed-automotive-cybersecurity/ \|title=The Groundbreaking 2015 Jeep Hack Changed Automotive Cybersecurity \|publisher=Fractional CISO \|access-date=2026-04-04}}</ref> FCA recalled 1.4 million vehicles in response.<ref name="jeep-recall">{{Cite web \|url=https://www.computerworld.com/article/1628895/chrysler-recalls-14m-vehicles-after-jeep-hack.html \|title=Chrysler recalls 1.4M vehicles after Jeep hack \|publisher=Computerworld \|date=2015 \|access-date=2026-04-04}}</ref> ~~Manufacturers cite this incident as~~ the ~~justification for SGW~~.<ref name="~~alliance~~-~~r2r~~" /> However, Miller & Valasek exploited the vehicle's cellular telematics connection, not the physical OBD-II port.<ref name="jeep-hack" /> The SGW gates the physical port that a technician plugs a scan tool into while standing next to the vehicle. The FTC noted in its "Nixing the Fix" report that manufacturers' cybersecurity justifications for repair restrictions lack empirical support.<ref name="ftc-nixing" />		In July 2015, security researchers Charlie Miller & Chris Valasek remotely hijacked a Jeep Cherokee through its Uconnect cellular connection, demonstrating the ability to control steering, brakes, & transmission from a laptop miles away.<ref name="jeep-hack">{{Cite web \|url=https://fractionalciso.com/the-groundbreaking-2015-jeep-hack-changed-automotive-cybersecurity/ \|title=The Groundbreaking 2015 Jeep Hack Changed Automotive Cybersecurity \|publisher=Fractional CISO \|access-date=2026-04-04}}</ref> FCA recalled 1.4 million vehicles in response.<ref name="jeep-recall">{{Cite web \|url=https://www.computerworld.com/article/1628895/chrysler-recalls-14m-vehicles-after-jeep-hack.html \|title=Chrysler recalls 1.4M vehicles after Jeep hack \|publisher=Computerworld \|date=2015 \|access-date=2026-04-04}}</ref> The hack prompted NHTSA to issue cybersecurity guidance for the automotive industry.<ref name="jeep-hack" /> However, Miller & Valasek exploited the vehicle's cellular telematics connection, not the physical OBD-II port.<ref name="jeep-hack" /> The SGW gates the physical port that a technician plugs a scan tool into while standing next to the vehicle. The FTC noted in its "Nixing the Fix" report that manufacturers' cybersecurity justifications for repair restrictions lack empirical support.<ref name="ftc-nixing" />

	== How secure gateway modules work ==		== How secure gateway modules work ==
Line 68:		Line 68:
	Auto-glass replacement is one of the most common mobile repair services. Technicians drive to the customer's location (home, workplace, roadside) & replace the windshield on-site. AutoAuth's cloud-based PKI authentication requires an internet connection at the exact moment of vehicle authentication.<ref name="eti-overview" />		Auto-glass replacement is one of the most common mobile repair services. Technicians drive to the customer's location (home, workplace, roadside) & replace the windshield on-site. AutoAuth's cloud-based PKI authentication requires an internet connection at the exact moment of vehicle authentication.<ref name="eti-overview" />

	Mobile technicians working in rural areas, parking garages, or anywhere with poor cellular coverage can't complete the ADAS recalibration. The windshield is physically installed, but the safety system is disabled because the scan tool can't reach AutoAuth's server~~. No offline authentication mode exists~~.<ref name="~~adasdepot~~" /> The technician must either leave the vehicle with uncalibrated ADAS (a liability risk), have the customer drive to a location with internet service (shifting the burden to the consumer), or return later at additional cost.		Mobile technicians working in rural areas, parking garages, or anywhere with poor cellular coverage can't complete the ADAS recalibration. The windshield is physically installed, but the safety system is disabled because the scan tool can't reach AutoAuth's server.<ref name="eti-overview" /> The technician must either leave the vehicle with uncalibrated ADAS (a liability risk), have the customer drive to a location with internet service (shifting the burden to the consumer), or return later at additional cost.

	Rural trucks, farm vehicles, & fleet vehicles on highways are the most likely to need windshield replacements from road debris, and the most likely to be in areas where the authentication server can't be reached.		Rural trucks, farm vehicles, & fleet vehicles on highways are the most likely to need windshield replacements from road debris, and the most likely to be in areas where the authentication server can't be reached.
Line 74:		Line 74:
	=== Target board proliferation ===		=== Target board proliferation ===

	ADAS calibration requires manufacturer-specific ~~physical target boards: large panels with geometric patterns & reflectors that the camera system uses as reference points during the calibration procedure~~. ~~There's no universal standard across~~ manufacturers~~. A shop that calibrates cameras for Toyota, Honda, Stellantis, Ford,~~ & ~~Hyundai needs separate sets of targets for each~~, ~~plus alignment frames & fixtures~~.<ref name="rdn-adas" />		ADAS calibration requires manufacturer-specific equipment. H.R. 6688 addresses this gap by requiring manufacturers to publish calibration procedures & validation metrics, which would allow third-party equipment manufacturers to build compatible tools.<ref name="rdn-adas" />

	The GAO found that evolving vehicle technologies create repair information barriers for independent shops, reducing consumer choice & increasing costs.<ref name="gao" />		The GAO found that evolving vehicle technologies create repair information barriers for independent shops, reducing consumer choice & increasing costs.<ref name="gao" />
Line 80:		Line 80:
	=== Safety consequences ===		=== Safety consequences ===

	If a technician replaces a windshield but can't bypass the SGW to recalibrate the ADAS, the vehicle ~~may misinterpret road~~ data. Documented consequences include false lane departure warnings, failure to detect pedestrians, & inappropriate deployment of automatic emergency braking.<ref name="rdn-adas" /> Handing an uncalibrated vehicle back to a consumer exposes the independent shop to legal liability in the event of an accident. The H.R. 6688 (ADAS Functionality & Integrity Act), approved by a House subcommittee in February 2026, would give NHTSA authority to develop ADAS calibration guidelines & require manufacturers to publish calibration procedures & validation metrics.<ref name="rdn-adas" />		If a technician replaces a windshield but can't bypass the SGW to recalibrate the ADAS, the vehicle's safety systems operate on misaligned sensor data. H.R. 6688 (ADAS Functionality & Integrity Act), approved by a House subcommittee in February 2026, would give NHTSA authority to develop ADAS calibration guidelines & require manufacturers to publish calibration procedures & validation metrics.<ref name="rdn-adas" />

	== Cost burden on independent shops ==		== Cost burden on independent shops ==
Line 135:		Line 135:
	==== European Union ====		==== European Union ====

	EU Regulation 2018/858 mandates non-discriminatory access to OBD & repair/maintenance information (RMI) for independent operators as a condition of vehicle type-approval.<ref name="eu-reg">{{Cite web \|url=https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02018R0858-20240701 \|title=Regulation (EU) 2018/858 - Consolidated \|publisher=EUR-Lex \|date=2018-05-30 \|access-date=2026-04-04}}</ref~~> The Motor Vehicle Block Exemption Regulation (MVBER) was extended to 2028, maintaining these access requirements.<ref name="ecj-analysis" /~~>		EU Regulation 2018/858 mandates non-discriminatory access to OBD & repair/maintenance information (RMI) for independent operators as a condition of vehicle type-approval.<ref name="eu-reg">{{Cite web \|url=https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02018R0858-20240701 \|title=Regulation (EU) 2018/858 - Consolidated \|publisher=EUR-Lex \|date=2018-05-30 \|access-date=2026-04-04}}</ref>

	In October 2023, the European Court of Justice ruled in Case C-296/22 (Carglass/ATU v. Stellantis Italy) that manufacturers can't require personal registration, internet connection to manufacturer servers, or paid subscriptions for OBD access beyond what Regulation 2018/858 permits.<ref name="ecj-ruling">{{Cite web \|url=https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62022CJ0296 \|title=Case C-296/22 - CJEU Judgment \|publisher=EUR-Lex \|date=2023-10 \|access-date=2026-04-04}}</ref> The court held that both read & write access to the OBD data stream must be granted to independent repairers & rejected the argument that UN Regulation 155 (vehicle cybersecurity) overrides EU access requirements.<ref name="ecj-analysis">{{Cite web \|url=https://www.osborneclarke.com/news/ecj-decision-vehicle-manufacturers-may-not-restrict-access-vehicle-data-stream \|title=ECJ decision: vehicle manufacturers may not restrict access to the vehicle data stream \|publisher=Osborne Clarke \|date=2023 \|access-date=2026-04-04}}</ref> The court stated that if manufacturers could "limit at their discretion access to the direct vehicle data stream...it would be open to them to make access to that stream subject to conditions capable of making access impossible in practice."<ref name="ecj-analysis" />		In October 2023, the European Court of Justice ruled in Case C-296/22 (Carglass/ATU v. Stellantis Italy) that manufacturers can't require personal registration, internet connection to manufacturer servers, or paid subscriptions for OBD access beyond what Regulation 2018/858 permits.<ref name="ecj-ruling">{{Cite web \|url=https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62022CJ0296 \|title=Case C-296/22 - CJEU Judgment \|publisher=EUR-Lex \|date=2023-10 \|access-date=2026-04-04}}</ref> The court held that both read & write access to the OBD data stream must be granted to independent repairers & rejected the argument that UN Regulation 155 (vehicle cybersecurity) overrides EU access requirements.<ref name="ecj-analysis">{{Cite web \|url=https://www.osborneclarke.com/news/ecj-decision-vehicle-manufacturers-may-not-restrict-access-vehicle-data-stream \|title=ECJ decision: vehicle manufacturers may not restrict access to the vehicle data stream \|publisher=Osborne Clarke \|date=2023 \|access-date=2026-04-04}}</ref> The court stated that if manufacturers could "limit at their discretion access to the direct vehicle data stream...it would be open to them to make access to that stream subject to conditions capable of making access impossible in practice."<ref name="ecj-analysis" />
Line 183:		Line 183:
	[[John Deere]] restricted access to its proprietary diagnostic software to franchised dealers, preventing farmers from repairing their own tractors. John Deere signed a Memorandum of Understanding with the American Farm Bureau Federation in January 2023 promising to expand diagnostic access, though right-to-repair advocates expressed skepticism about enforcement.<ref name="deere-mou">{{Cite web \|url=https://www.npr.org/2023/01/10/1147934682/john-deere-right-to-repair-farmers-tractors \|title=John Deere vows to open up its tractor tech, but right-to-repair backers have doubts \|publisher=NPR \|date=2023-01-10 \|access-date=2026-04-04}}</ref> [[Tesla]] requires its proprietary Toolbox 3 diagnostic software for repairs beyond basic OBD-II fault codes; until a price reduction, the software cost $3,000/year.<ref name="tesla-toolbox">{{Cite web \|url=https://driveteslacanada.ca/news/tesla-reapirs-more-accessible-toolbox-3-price-drop/ \|title=Tesla Makes Vehicle Repairs More Accessible With Major Toolbox 3 Price Drop \|publisher=Drive Tesla Canada \|date=2025 \|access-date=2026-04-04}}</ref>		[[John Deere]] restricted access to its proprietary diagnostic software to franchised dealers, preventing farmers from repairing their own tractors. John Deere signed a Memorandum of Understanding with the American Farm Bureau Federation in January 2023 promising to expand diagnostic access, though right-to-repair advocates expressed skepticism about enforcement.<ref name="deere-mou">{{Cite web \|url=https://www.npr.org/2023/01/10/1147934682/john-deere-right-to-repair-farmers-tractors \|title=John Deere vows to open up its tractor tech, but right-to-repair backers have doubts \|publisher=NPR \|date=2023-01-10 \|access-date=2026-04-04}}</ref> [[Tesla]] requires its proprietary Toolbox 3 diagnostic software for repairs beyond basic OBD-II fault codes; until a price reduction, the software cost $3,000/year.<ref name="tesla-toolbox">{{Cite web \|url=https://driveteslacanada.ca/news/tesla-reapirs-more-accessible-toolbox-3-price-drop/ \|title=Tesla Makes Vehicle Repairs More Accessible With Major Toolbox 3 Price Drop \|publisher=Drive Tesla Canada \|date=2025 \|access-date=2026-04-04}}</ref>

	Apple uses [[Parts pairing\|parts pairing]] to lock replacement components to ~~specific~~ device serial numbers~~.<ref name="ftc-nixing" />~~ BMW charged ~~monthly~~ subscription fees for ~~heated seats & other~~ features already ~~physically~~ installed in ~~the vehicle, documented in the~~ [[BMW feature lockout scandal]].~~<ref name="ftc-policy" />~~		Similar patterns exist across industries: Apple uses [[Parts pairing\|parts pairing]] to lock replacement components to device serial numbers, & BMW charged subscription fees for hardware features already installed in vehicles (see [[BMW feature lockout scandal]]).

	== See also ==		== See also ==

Louis: fix: ftc policy statement claim said 'section 5' which the source never mentions; rewrote to match what the press release actually says (antitrust laws, unfair or deceptive practices, 5-0 vote)

2026-04-05T00:44:58Z

fix: ftc policy statement claim said 'section 5' which the source never mentions; rewrote to match what the press release actually says (antitrust laws, unfair or deceptive practices, 5-0 vote)

← Older revision		Revision as of 00:44, 5 April 2026
Line 177:		Line 177:
	In its May 2021 "Nixing the Fix" report, the FTC found "scant evidence to support manufacturers' justifications for repair restrictions," dismissing claims that diagnostic lockouts are necessary for safety or cybersecurity.<ref name="ftc-nixing" /> Restricting access to proprietary diagnostic software & steering consumers to manufacturer networks may violate the anti-tying provisions of the [[Magnuson-Moss Warranty Act]] (15 U.S.C. ch. 50, Sections 2301-2312), the report noted.<ref name="ftc-mm">{{Cite web \|url=https://www.ftc.gov/legal-library/browse/statutes/magnuson-moss-warranty-federal-trade-commission-improvements-act \|title=Magnuson-Moss Warranty Act \|publisher=Federal Trade Commission \|access-date=2026-04-04}}</ref>		In its May 2021 "Nixing the Fix" report, the FTC found "scant evidence to support manufacturers' justifications for repair restrictions," dismissing claims that diagnostic lockouts are necessary for safety or cybersecurity.<ref name="ftc-nixing" /> Restricting access to proprietary diagnostic software & steering consumers to manufacturer networks may violate the anti-tying provisions of the [[Magnuson-Moss Warranty Act]] (15 U.S.C. ch. 50, Sections 2301-2312), the report noted.<ref name="ftc-mm">{{Cite web \|url=https://www.ftc.gov/legal-library/browse/statutes/magnuson-moss-warranty-federal-trade-commission-improvements-act \|title=Magnuson-Moss Warranty Act \|publisher=Federal Trade Commission \|access-date=2026-04-04}}</ref>

	In July 2021, the FTC ~~adopted~~ a policy statement ~~targeting~~ repair restrictions ~~as potential violations of Section 5 of~~ the FTC Act.<ref name="ftc-policy">{{Cite web \|url=https://www.ftc.gov/news-events/news/press-releases/2021/07/ftc-ramp-law-enforcement-against-illegal-repair-restrictions \|title=FTC to Ramp Up Law Enforcement Against Illegal Repair Restrictions \|publisher=Federal Trade Commission \|date=2021-07-21 \|access-date=2026-04-04}}</ref> The GAO's March 2024 report confirmed that evolving vehicle technologies are restricting consumer choice & increasing repair costs for independent shops.<ref name="gao" />		In July 2021, the FTC voted 5-0 to adopt a policy statement committing to enforce against repair restrictions that violate antitrust laws or the FTC Act's prohibitions on unfair or deceptive practices.<ref name="ftc-policy">{{Cite web \|url=https://www.ftc.gov/news-events/news/press-releases/2021/07/ftc-ramp-law-enforcement-against-illegal-repair-restrictions \|title=FTC to Ramp Up Law Enforcement Against Illegal Repair Restrictions \|publisher=Federal Trade Commission \|date=2021-07-21 \|access-date=2026-04-04}}</ref> The GAO's March 2024 report confirmed that evolving vehicle technologies are restricting consumer choice & increasing repair costs for independent shops.<ref name="gao" />

	== Comparison to other industries ==		== Comparison to other industries ==

Louis: fix: alliance position section was fabricated; source never mentions jeep hack or cybersecurity justification; rewrote to quote what the alliance page actually says, moved cybersecurity argument to court filing citation where it belongs

2026-04-05T00:43:23Z

fix: alliance position section was fabricated; source never mentions jeep hack or cybersecurity justification; rewrote to quote what the alliance page actually says, moved cybersecurity argument to court filing citation where it belongs

← Older revision		Revision as of 00:43, 5 April 2026
Line 165:		Line 165:
	=== Manufacturer justifications ===		=== Manufacturer justifications ===

	The Alliance for Automotive Innovation ~~argues~~ that ~~SGW is necessary~~ to ~~protect vehicles from cyberattacks~~, ~~citing~~ the ~~2015 Jeep Cherokee hack as proof that open diagnostic access creates safety risks~~.<ref name="alliance-r2r">{{Cite web \|url=https://www.autosinnovate.org/RightToRepair \|title=Right to Repair \|publisher=Alliance for Automotive Innovation \|access-date=2026-04-04}}</ref> The Alliance has sued to block both the Massachusetts & Maine right-to-repair laws, arguing that requiring open telematics platforms would ~~expose vehicles to remote exploitation~~.		The Alliance for Automotive Innovation maintains that "automakers already and routinely make available to independent repair shops all the parts, service information and vehicle data needed to diagnose and repair a vehicle" & that "competition is alive and well in the auto repair industry."<ref name="alliance-r2r">{{Cite web \|url=https://www.autosinnovate.org/RightToRepair \|title=Right to Repair \|publisher=Alliance for Automotive Innovation \|access-date=2026-04-04}}</ref> The Alliance has sued to block both the Massachusetts & Maine right-to-repair laws, arguing in court filings that requiring open telematics platforms would create cybersecurity vulnerabilities.<ref name="courtlistener-healey" />

	=== Aftermarket & consumer advocates ===		=== Aftermarket & consumer advocates ===

Louis: fix: alliance v. healey filing now cites courtlistener docket (primary source) instead of collisionweek 2025 appeal article; collisionweek kept only for dismissal & appeal claims it actually covers

2026-04-05T00:40:33Z

fix: alliance v. healey filing now cites courtlistener docket (primary source) instead of collisionweek 2025 appeal article; collisionweek kept only for dismissal & appeal claims it actually covers

← Older revision		Revision as of 00:40, 5 April 2026
Line 147:		Line 147:
	=== Alliance for Automotive Innovation v. Healey ===		=== Alliance for Automotive Innovation v. Healey ===

	The Alliance for Automotive Innovation, the trade group representing most major automakers, filed suit in the U.S. District Court for the District of Massachusetts (1:20-cv-12090) in November 2020, challenging the Question 1 telematics expansion.<ref name="~~collisionweek~~-~~appeal~~" /> The Alliance argued federal preemption under the Motor Vehicle Safety Act & the Clean Air Act, unconstitutional takings of intellectual property, & cybersecurity risks from open data platforms.		The Alliance for Automotive Innovation, the trade group representing most major automakers, filed suit in the U.S. District Court for the District of Massachusetts (1:20-cv-12090) on November 20, 2020, challenging the Question 1 telematics expansion.<ref name="courtlistener-healey">{{Cite web \|url=https://www.courtlistener.com/docket/18666877/alliance-for-automotive-innovation-v-maura-healey/ \|title=Alliance for Automotive Innovation v. Maura Healey, 1:20-cv-12090 \|publisher=CourtListener \|access-date=2026-04-04}}</ref> The Alliance argued federal preemption under the Motor Vehicle Safety Act & the Clean Air Act, unconstitutional takings of intellectual property, & cybersecurity risks from open data platforms.

	Judge Denise Casper (who took over from Judge Douglas Woodlock) dismissed the Alliance's remaining claims on February ~~11,~~ 2025.<ref name="collisionweek-appeal" /> NHTSA had initially expressed concern that the law's wireless data access requirements could create cybersecurity vulnerabilities.<ref name="securepairs" />		Judge Denise Casper (who took over from Judge Douglas Woodlock) dismissed the Alliance's remaining claims in February 2025.<ref name="collisionweek-appeal" /> NHTSA had initially expressed concern that the law's wireless data access requirements could create cybersecurity vulnerabilities.<ref name="securepairs" />

	On March 14, 2025, the Alliance appealed to the First Circuit.<ref name="collisionweek-appeal" />		On March 14, 2025, the Alliance appealed to the First Circuit.<ref name="collisionweek-appeal" />

Louis: fix: ma question 1 ballot measure now cites ballotpedia instead of unrelated collisionweek appeal article; subaru/kia telematics disabling now cites rdn primary source; collisionweek moved to lawsuit claims where it belongs

2026-04-05T00:38:10Z

fix: ma question 1 ballot measure now cites ballotpedia instead of unrelated collisionweek appeal article; subaru/kia telematics disabling now cites rdn primary source; collisionweek moved to lawsuit claims where it belongs

← Older revision		Revision as of 00:38, 5 April 2026
Line 123:		Line 123:
	Massachusetts passed the first automotive right-to-repair law in 2012 (Mass. Gen. Laws ch. 93K), which required manufacturers to provide independent shops access to the same diagnostic tools & repair information available to dealerships.<ref name="securepairs" /> The original law didn't cover wireless telematics data.<ref name="securepairs" />		Massachusetts passed the first automotive right-to-repair law in 2012 (Mass. Gen. Laws ch. 93K), which required manufacturers to provide independent shops access to the same diagnostic tools & repair information available to dealerships.<ref name="securepairs" /> The original law didn't cover wireless telematics data.<ref name="securepairs" />

	In November 2020, Massachusetts voters passed Question 1 with 75% approval, expanding the law to require an interoperable, standardized, open-access telematics platform for model year 2022+ vehicles.<ref name="collisionweek-appeal">{{Cite web \|url=https://collisionweek.com/2025/03/21/alliance-automotive-innovation-appeals-federal-judges-dismissal-massachusetts-right-repair-lawsuit/ \|title=Alliance for Automotive Innovation Appeals Massachusetts Right to Repair Ruling \|publisher=CollisionWeek \|date=2025-03-21 \|access-date=2026-04-04}}</ref> ~~The Alliance for Automotive Innovation sued immediately (see ''[[#Alliance for Automotive Innovation v. Healey\|Alliance v. Healey]]'' below).~~ Rather than build open-access platforms, Subaru & Kia disabled telematics systems entirely on 2022+ vehicles sold in Massachusetts.<ref name="~~collisionweek~~-~~appeal~~" />		In November 2020, Massachusetts voters passed Question 1 with 75% approval, expanding the law to require an interoperable, standardized, open-access telematics platform for model year 2022+ vehicles.<ref name="ballotpedia-ma">{{Cite web \|url=https://ballotpedia.org/Massachusetts_Question_1,_%22Right_to_Repair_Law%22_Vehicle_Data_Access_Requirement_Initiative_(2020) \|title=Massachusetts Question 1, "Right to Repair Law" Vehicle Data Access Requirement Initiative (2020) \|publisher=Ballotpedia \|access-date=2026-04-04}}</ref> The Alliance for Automotive Innovation sued immediately (see ''[[#Alliance for Automotive Innovation v. Healey\|Alliance v. Healey]]'' below).<ref name="collisionweek-appeal">{{Cite web \|url=https://collisionweek.com/2025/03/21/alliance-automotive-innovation-appeals-federal-judges-dismissal-massachusetts-right-repair-lawsuit/ \|title=Alliance for Automotive Innovation Appeals Massachusetts Right to Repair Ruling \|publisher=CollisionWeek \|date=2025-03-21 \|access-date=2026-04-04}}</ref> Rather than build open-access platforms, Subaru & Kia disabled telematics systems entirely on 2022+ vehicles sold in Massachusetts.<ref name="rdn-subaru-kia">{{Cite web \|url=https://www.repairerdrivennews.com/2022/01/18/aai-ag-respond-to-new-evidence-in-mass-right-to-repair-suit-kia-joins-subaru-in-disabling-telematics/ \|title=AAI, AG respond to new evidence in Mass. 'right-to-repair' suit; Kia joins Subaru in disabling telematics \|publisher=Repairer Driven News \|date=2022-01-18 \|access-date=2026-04-04}}</ref>

	Attorney General Andrea Joy Campbell began enforcement in mid-2023 while litigation continued. The federal district court dismissed the Alliance's remaining claims on February 11, 2025. The Alliance appealed to the First Circuit on March 14, 2025.<ref name="collisionweek-appeal" />		Attorney General Andrea Joy Campbell began enforcement in mid-2023 while litigation continued. The federal district court dismissed the Alliance's remaining claims on February 11, 2025. The Alliance appealed to the First Circuit on March 14, 2025.<ref name="collisionweek-appeal" />

Louis: fix: lede citation 4 pointed to autel scan tool page instead of rdn-adas source that actually discusses auto-glass adas burden; fixed duplicate ref definition

2026-04-05T00:32:18Z

fix: lede citation 4 pointed to autel scan tool page instead of rdn-adas source that actually discusses auto-glass adas burden; fixed duplicate ref definition

← Older revision		Revision as of 00:32, 5 April 2026
Line 4:		Line 4:
	A '''secure gateway module''' (SGW) is a digital firewall integrated into a vehicle's electrical architecture that restricts access to the on-board diagnostic (OBD-II) port by requiring internet-authenticated credentials before allowing bidirectional communication with vehicle systems.<ref name="youcanic">{{Cite web \|url=https://www.youcanic.com/fca-security-gateway-module-explained-obd2-sgm-sgw/ \|title=FCA Security Gateway Module Explained \|publisher=YOUCANIC \|access-date=2026-04-04}}</ref> Fiat Chrysler Automobiles (FCA, now [[Stellantis]]) introduced the technology across its vehicle lineup in 2017-2018, & Nissan, Mercedes-Benz, Volkswagen/Audi, & [[Hyundai]]/Kia have since adopted similar systems.<ref name="adasdepot">{{Cite web \|url=https://adasdepot.com/blog/security-gateways-in-modern-vehicles-balancing-cybersecurity-and-repair-access/ \|title=Security Gateways in Modern Vehicles: Balancing Cybersecurity and Repair Access \|publisher=ADAS Depot \|access-date=2026-04-04}}</ref> Independent repair shops must pay annual subscription fees to a third-party authentication service called AutoAuth, plus maintain separate scan tool software subscriptions, to perform repairs that dealerships can do without additional cost.<ref name="autoauth-pricing">{{Cite web \|url=https://www.adasnetwork.org/industrynews/autoauth-announces-changes-to-it-s-pricing-structure-and-services \|title=AutoAuth Announces Changes to its Pricing Structure and Services \|publisher=ADAS Network \|date=2025 \|access-date=2026-04-04}}</ref>		A '''secure gateway module''' (SGW) is a digital firewall integrated into a vehicle's electrical architecture that restricts access to the on-board diagnostic (OBD-II) port by requiring internet-authenticated credentials before allowing bidirectional communication with vehicle systems.<ref name="youcanic">{{Cite web \|url=https://www.youcanic.com/fca-security-gateway-module-explained-obd2-sgm-sgw/ \|title=FCA Security Gateway Module Explained \|publisher=YOUCANIC \|access-date=2026-04-04}}</ref> Fiat Chrysler Automobiles (FCA, now [[Stellantis]]) introduced the technology across its vehicle lineup in 2017-2018, & Nissan, Mercedes-Benz, Volkswagen/Audi, & [[Hyundai]]/Kia have since adopted similar systems.<ref name="adasdepot">{{Cite web \|url=https://adasdepot.com/blog/security-gateways-in-modern-vehicles-balancing-cybersecurity-and-repair-access/ \|title=Security Gateways in Modern Vehicles: Balancing Cybersecurity and Repair Access \|publisher=ADAS Depot \|access-date=2026-04-04}}</ref> Independent repair shops must pay annual subscription fees to a third-party authentication service called AutoAuth, plus maintain separate scan tool software subscriptions, to perform repairs that dealerships can do without additional cost.<ref name="autoauth-pricing">{{Cite web \|url=https://www.adasnetwork.org/industrynews/autoauth-announces-changes-to-it-s-pricing-structure-and-services \|title=AutoAuth Announces Changes to its Pricing Structure and Services \|publisher=ADAS Network \|date=2025 \|access-date=2026-04-04}}</ref>

	The auto-glass & collision repair industries bear a disproportionate burden because every windshield replacement on an [[Advanced driver-assistance system\|ADAS]]-equipped vehicle requires camera recalibration that the SGW blocks without active internet authentication.<ref name="~~autel~~-~~sgw~~">{{Cite web \|url=https://~~autel~~.us/~~security~~-~~gateways~~/ \|title=~~It Might Be An OEM Security Gateway~~ \|publisher=~~Autel~~ \|access-date=2026-04-04}}</ref> The Federal Trade Commission found "scant evidence to support manufacturers' justifications for repair restrictions" in its 2021 report to Congress, & the GAO confirmed in 2024 that independent shops face repair information limitations resulting in fewer choices & higher costs for consumers.<ref name="ftc-nixing">{{Cite web \|url=https://www.ftc.gov/reports/nixing-fix-ftc-report-congress-repair-restrictions \|title=Nixing the Fix: An FTC Report to Congress on Repair Restrictions \|publisher=Federal Trade Commission \|date=2021-05 \|access-date=2026-04-04}}</ref><ref name="gao">{{Cite web \|url=https://www.gao.gov/products/gao-24-106633 \|title=Vehicle Repair: Information on Evolving Vehicle Technologies and Consumer Choice \|publisher=Government Accountability Office \|date=2024-03-21 \|access-date=2026-04-04}}</ref>		The auto-glass & collision repair industries bear a disproportionate burden because every windshield replacement on an [[Advanced driver-assistance system\|ADAS]]-equipped vehicle requires camera recalibration that the SGW blocks without active internet authentication.<ref name="rdn-adas">{{Cite web \|url=https://www.repairerdrivennews.com/2026/03/04/industry-responds-to-federal-bill-requiring-nhtsa-guidelines-for-adas-calibrations/ \|title=Industry responds to federal bill requiring NHTSA guidelines for ADAS calibrations \|author=Teresa Moss \|publisher=Repairer Driven News \|date=2026-03-04 \|access-date=2026-04-04}}</ref> The Federal Trade Commission found "scant evidence to support manufacturers' justifications for repair restrictions" in its 2021 report to Congress, & the GAO confirmed in 2024 that independent shops face repair information limitations resulting in fewer choices & higher costs for consumers.<ref name="ftc-nixing">{{Cite web \|url=https://www.ftc.gov/reports/nixing-fix-ftc-report-congress-repair-restrictions \|title=Nixing the Fix: An FTC Report to Congress on Repair Restrictions \|publisher=Federal Trade Commission \|date=2021-05 \|access-date=2026-04-04}}</ref><ref name="gao">{{Cite web \|url=https://www.gao.gov/products/gao-24-106633 \|title=Vehicle Repair: Information on Evolving Vehicle Technologies and Consumer Choice \|publisher=Government Accountability Office \|date=2024-03-21 \|access-date=2026-04-04}}</ref>

	== History of OBD-II & the shift to closed diagnostics ==		== History of OBD-II & the shift to closed diagnostics ==
Line 22:		Line 22:
	The SGW divides a vehicle's Controller Area Network (CAN) bus into "public" & "private" sectors.<ref name="youcanic" /> The public sector includes the telematics unit & the Data Link Connector (DLC, the physical OBD-II port). Everything on the internal CAN bus is private: engine control modules, transmission controllers, body control modules, & ADAS processors. The SGW sits between these two networks & decides which commands pass through based on an approved, authenticated list.<ref name="jscan">{{Cite web \|url=https://jscan.net/fca-security-gateway-module-basic-info-and-location/ \|title=FCA Security Gateway Module Basic Info and Location \|publisher=JScan \|access-date=2026-04-04}}</ref>		The SGW divides a vehicle's Controller Area Network (CAN) bus into "public" & "private" sectors.<ref name="youcanic" /> The public sector includes the telematics unit & the Data Link Connector (DLC, the physical OBD-II port). Everything on the internal CAN bus is private: engine control modules, transmission controllers, body control modules, & ADAS processors. The SGW sits between these two networks & decides which commands pass through based on an approved, authenticated list.<ref name="jscan">{{Cite web \|url=https://jscan.net/fca-security-gateway-module-basic-info-and-location/ \|title=FCA Security Gateway Module Basic Info and Location \|publisher=JScan \|access-date=2026-04-04}}</ref>

	Without authentication, technicians can still read basic emissions data & some diagnostic trouble codes. They can't clear those codes, perform bidirectional controls (manually triggering a fuel pump, cycling an ABS motor, or operating a window actuator), execute module programming or service resets, or conduct ADAS calibrations.<ref name="autel-sgw" /><ref name="youcanic" />		Without authentication, technicians can still read basic emissions data & some diagnostic trouble codes. They can't clear those codes, perform bidirectional controls (manually triggering a fuel pump, cycling an ABS motor, or operating a window actuator), execute module programming or service resets, or conduct ADAS calibrations.<ref name="autel-sgw">{{Cite web \|url=https://autel.us/security-gateways/ \|title=It Might Be An OEM Security Gateway \|publisher=Autel \|access-date=2026-04-04}}</ref><ref name="youcanic" />

	=== Authentication flow ===		=== Authentication flow ===
Line 56:		Line 56:
	== ADAS recalibration & the auto-glass industry ==		== ADAS recalibration & the auto-glass industry ==

	SGW's impact extends beyond cost into vehicle safety. Advanced Driver Assistance Systems rely on networks of sensors: forward-facing windshield cameras for lane departure warning, lane keep assist, & automatic emergency braking; radar sensors for adaptive cruise control & blind spot monitoring; and in some vehicles, LiDAR, 360-degree cameras, & night vision systems.<ref name="rdn-adas"~~>{{Cite web \|url=https:~~//www.repairerdrivennews.com/2026/03/04/industry-responds-to-federal-bill-requiring-nhtsa-guidelines-for-adas-calibrations/ \|title=Industry responds to federal bill requiring NHTSA guidelines for ADAS calibrations \|author=Teresa Moss \|publisher=Repairer Driven News \|date=2026-03-04 \|access-date=2026-04-04}}</ref>		SGW's impact extends beyond cost into vehicle safety. Advanced Driver Assistance Systems rely on networks of sensors: forward-facing windshield cameras for lane departure warning, lane keep assist, & automatic emergency braking; radar sensors for adaptive cruise control & blind spot monitoring; and in some vehicles, LiDAR, 360-degree cameras, & night vision systems.<ref name="rdn-adas" />

	=== Why windshield replacement triggers recalibration ===		=== Why windshield replacement triggers recalibration ===

Louis: new topic article on secure gateway modules, covers how automakers use sgw & autoauth to paywall the obd-ii port, heavy focus on adas recalibration barriers for auto-glass shops, windshield replacement choke point, rural connectivity problem, legislation (repair act, mass question 1, maine question 4, ecj c-296/22), court cases, ftc findings

2026-04-05T00:28:06Z

new topic article on secure gateway modules, covers how automakers use sgw & autoauth to paywall the obd-ii port, heavy focus on adas recalibration barriers for auto-glass shops, windshield replacement choke point, rural connectivity problem, legislation (repair act, mass question 1, maine question 4, ecj c-296/22), court cases, ftc findings

Show changes