Abstract: In response to the network security and consumer privacy risks that arise in the development of digitalization, networking, and automation of automotive products, UN/WP.29 has officially issued the UN ECE R155 regulation, which is strict and difficult to apply for certificates. This article analyzes the requirements of R155 regulations and proposes the automotive network security requirements that enterprises need to meet in response to the certification process of R155 regulations, it is of great significance for promoting sufficient network security protection capabilities of enterprise products and meeting the overseas market access needs of enterprises.

Key words: Network security; Information security; Privacy risk; Certification scheme

摘要： 为应对汽车产品在数字化、网联化及自动化发展中所出现的网络安全及消费者隐私风 险，UN/WP.29 正式发布了 UN ECE R155 法规，该法规规定严苛、证书申请难度大。文章通 过分析 R155 法规要求，提出企业在应对 R155 法规认证过程中需要满足的汽车网络安全要 求，对促进企业自身产品具备足够的网络安全防护能力以及满足企业海外市场准入需求具有 重要意义。

关键词: 网络安全；信息安全；隐私风险；认证方案