How to better secure access to the Système d’immatriculation des véhicules

Indeed, for too many months, professionals responsible for vehicle registration have been victims of identity theft. Clearly, the Système d'immatriculation des véhicules (SIV) is not sufficiently secure, offering serious flaws that criminals exploit to generate, without the knowledge of registration rights holders, hundreds of registrations that they unscrupulously resell on the dark web. ILLICIT ACTIVITY This illicit activity has several consequences, as web thugs get rich, buyers of these fake license plates take advantage of them to commit traffic offenses knowing they will be neither identified nor worried, and professionals find themselves liable for fines, having to pay significant sums that jeopardize their economic activities.

Faced with this scourge, Stéphane Rambaud, MP for Var, asked the Minister of the Interior to act very quickly to strengthen the security of the SIV: "Indeed, a true pillar of registrations in France, the operation of the SIV relies on the intervention of authorized professionals, acting on behalf of the State for users. For several months, there has been an increase in targeted cyberattacks against the SIV access of professionals, based on sophisticated phishing techniques and the theft of administrative identities. These attacks allow malicious third parties to access the SIV and carry out fraudulent registrations."

OBVIOUS DEFICIENCIES The parliamentarian also deplores the deficiencies in securing the teleservice, which cannot be attributed to authorized professionals, but stem from the design, architecture, and governance of an obsolete system dating from 2009: "Once authorization is stolen, thousands of registration certificates can be generated in a few hours, often at night, without any alert or automatic blocking. These facts reveal the serious security flaws of the teleservice."

"Faced with this situation, I asked the Minister of the Interior to indicate the urgent measures he intended to take to better secure access to the SIV and whether he also intended to legally secure the registration certificates issued in order to protect professionals and motorists in good faith."