Abstract: A method at a computing device within an Intelligent Transportation System (ITS), the method including: receiving a first message, the first message including at least tailoring information for a first ITS endpoint and intended journey details for the first ITS endpoint; storing all or a subset of data from the first message; obtaining a full certificate revocation list; creating a tailored certificate revocation list based on data in the first message and the full certificate revocation list, the tailored certificate revocation list containing certificates or identifiers of certificates for ITS endpoints that may be encountered by the first ITS endpoint when navigating a route provided in the intended journey details; and providing the tailored certificate revocation list to the first ITS endpoint.

Abstract: A method at a computing device within an Intelligent Transportation System (ITS), the method including: receiving a first message, the first message including at least tailoring information for a first ITS endpoint and intended journey details for the first ITS endpoint; storing all or a subset of data from the first message; obtaining a full certificate revocation list; creating a tailored certificate revocation list based on data in the first message and the full certificate revocation list, the tailored certificate revocation list containing certificates or identifiers of certificates for ITS endpoints that may be encountered by the first ITS endpoint when navigating a route provided in the intended journey details; and providing the tailored certificate revocation list to the first ITS endpoint.

Abstract: Systems, methods, and software can be used to configure a firewall system in a vehicle network. In some aspects, a computer-implemented method includes receiving a software code of a network node connected to a trusted network of a vehicle network that includes the trusted network internal to a vehicle and an untrusted network external to the vehicle, wherein the trusted network includes one or more functional domains for controlling functionalities of the vehicle; performing an analysis of the software code to identify connectivity of the network nodes in the vehicle network; determining connectivity information of the network nodes in the vehicle network based on the analysis, wherein the connectivity information includes at least one of Network Layer connectivity information, Transport Layer connectivity information, or Application Layer connectivity information; and configuring one or more firewalls in the vehicle network based on the connectivity information.

Abstract: A method at a computing device within an Intelligent Transportation System (ITS), the method including: receiving a first message, the first message including at least tailoring information for a first ITS endpoint and intended journey details for the first ITS endpoint; storing all or a subset of data from the first message; obtaining a full certificate revocation list; creating a tailored certificate revocation list based on data in the first message and the full certificate revocation list, the tailored certificate revocation list containing certificates or identifiers of certificates for ITS endpoints that may be encountered by the first ITS endpoint when navigating a route provided in the intended journey details; and providing the tailored certificate revocation list to the first ITS endpoint.

Abstract: Systems, methods, and software can be used to configure a firewall system in a vehicle network. In some aspects, a computer-implemented method includes receiving a software code of a network node connected to a trusted network of a vehicle network that includes the trusted network internal to a vehicle and an untrusted network external to the vehicle, wherein the trusted network includes one or more functional domains for controlling functionalities of the vehicle; performing an analysis of the software code to identify connectivity of the network nodes in the vehicle network; determining connectivity information of the network nodes in the vehicle network based on the analysis, wherein the connectivity information includes at least one of Network Layer connectivity information, Transport Layer connectivity information, or Application Layer connectivity information; and configuring one or more firewalls in the vehicle network based on the connectivity information.

Abstract: A method in an access control server of controlling access to an enterprise network includes: receiving, at the access control server from a client computing device outside the enterprise network, a request to establish a connection between the client computing device and an enterprise server in the enterprise network; at the access control server, responsive to receiving the request, obtaining a security attribute of the enterprise server from a central repository outside the enterprise network; determining, based on the security attribute, whether the enterprise server meets a predefined security threshold; and when the enterprise server does not meet the predefined security threshold, denying the request to establish a connection between the client computing device and the enterprise server.