The FMCSA is responsible for coordinating (or subcontracting this function) certification testing among all registered EOBR Host vendors. Once an EOBR vendor certification test has passed, the FMCSA will give a TLS authentication certificate to the EOBR vendor. Authentication Certificate Management FMCSA will provide certificate authority services and generate public and private key certificates for each EOBR Host System and each Enforcement Portal. The FMCSA should follow certificate management best practices [SEC1] when creating and managing the storage and delivery of these certificates. FMCSA will provide, support, and manage authentication credentials with EOBR Telematics service providers and carriers as operators of their own EOBR host system. In addition, the FMCSA should create independent server certificates to be delivered to each authorized EOBR Host vendor. In the case of multiple distributed FMCSA enforcement portals, the FMCSA should create a master certificate from which all child certificates are created and installed on the distributed enforcement portals. When distributing the certificates to the EOBR Host vendors, the FMCSA should follow security best practices in the delivery of the certificates [SEC1], for example via electronic transfer via PGP encrypted email, via physical medium (e.g. flash drive), or in person. FMCSA may revoke authentication credentials for any EOBR Host service provider that does not provide log download files per specified requirements or does not perform on a timely and reliable basis. Miscellaneous FMCSA will provide and manage the enforcement portal services. NOTE that expectation is ERODS will handle any DST days issues. All timestamps in the data file format are in UTC time. Appendix A – WSDL for SOAP log file transfer request and response TBD Appendix B – XML Schema for log data file format TBD
The FMCSA is responsible for coordinating (or subcontracting this function) certification testing among all registered EOBR Host vendors. Once an EOBR vendor certification test has passed, the FMCSA will give a TLS authentication certificate to the EOBR vendor. Authentication Certificate Management FMCSA will provide certificate authority services and generate public and private key certificates for each EOBR Host System and each Enforcement Portal. The FMCSA should follow certificate management best practices [SEC1] when creating and managing the storage and delivery of these certificates. FMCSA will provide, support, and manage authentication credentials with EOBR Telematics service providers and carriers as operators of their own EOBR host system. In addition, the FMCSA should create independent server certificates to be delivered to each authorized EOBR Host vendor. In the case of multiple distributed FMCSA enforcement portals, the FMCSA should create a master certificate from which all child certificates are created and installed on the distributed enforcement portals. When distributing the certificates to the EOBR Host vendors, the FMCSA should follow security best practices in the delivery of the certificates [SEC1], for example via electronic transfer via PGP encrypted email, via physical medium (e.g. flash drive), or in person. FMCSA may revoke authentication credentials for any EOBR Host service provider that does not provide log download files per specified requirements or does not perform on a timely and reliable basis. Miscellaneous FMCSA will provide and manage the enforcement portal services. NOTE that expectation is ERODS will handle any DST days issues. All timestamps in the data file format are in UTC time. Appendix A – WSDL for SOAP log file transfer request and response TBD Appendix B – XML Schema for log data file format TBD
Framework%20for%20Telematics%20Application%20Services%20Approach--DRAFT.DOCX