Method and system for handling dynamic cybersecurity posture of a V2X entity

An intelligent transportation system entity comprising:

• a hardware processor;
• and
• a communications subsystem,
• wherein the intelligent transportation system entity is configured to:
• receive, from a second intelligent transportation system entity, a message having a certificate;
• determine that the certificate includes dynamic cybersecurity posture information signed by a trusted Certificate Authority, the dynamic cybersecurity posture information providing a level of cybersecurity of at least one of hardware and software at the second intelligent transportation system entity;
• and
• based on the signed dynamic cybersecurity posture information, determine a trustworthiness level for the second intelligent transportation system entity;
• based on the trustworthiness level, perform an action at the intelligent transportation system entity;
• wherein the dynamic cybersecurity posture information comprises a timestamp field providing information on when the intelligent transportation system entity was last audited as being cybersecure, and
• wherein the trustworthiness level is higher when the timestamp is more recent, and the trustworthiness level is lower when the timestamp is less recent.

A non-transitory computer readable medium for storing instruction code which, when executed by a processor of an intelligent transportation system entity cause the intelligent transportation system entity to:

• receive, from a second intelligent transportation system entity, a message having a certificate;
• determine that the certificate includes dynamic cybersecurity posture information signed by a trusted Certificate Authority, the dynamic cybersecurity posture information providing a level of cybersecurity of at least one of hardware and software at the second intelligent transportation system entity;
• and
• based on the signed dynamic cybersecurity posture information, determine a trustworthiness level for the second intelligent transportation system entity;
• based on the trustworthiness level, perform an action at the intelligent transportation system entity;
• wherein the dynamic cybersecurity posture information comprises a timestamp field providing information on when the intelligent transportation system entity was last audited as being cybersecure, and
• wherein the trustworthiness level is higher when the timestamp is more recent, and the trustworthiness level is lower when the timestamp is less recent.