It was by sheer chance that the software "defeat device" that allowed Volkswagen to thwart emission tests on its diesel vehicles was discovered last year. The discovery came after a few university researchers tested a group of European cars made for the U.S. market.
The West Virginia University researchers drove the vehicles for thousands of miles, testing the emissions as they went along. They weren't expecting to discover what they did: Nitrogen oxide (NOx) emissions rates 20 times the baseline set by the Environment Protection Agency (EPA).
The university researchers reported their findings to the California Air Resources Board, which then further investigated. That ultimately led to the charges by the EPA.
So why is it that independent research agencies and EPA, with its stringent rules and sophisticated testing measures, were unable to detect Volkswagens and Audis bypassing emissions measures?
Automakers have been able to apply the 1998 the Digital Millennium Copyright Act (DMCA) to their vehicle software, making it unlawful for independent researchers to look at the code without permission.
"The fact that automakers can assert a DMCA claim against researchers is a deterrent to going in and actually looking at the code to understand what it's doing," said Kit Walsh, a staff attorney at the Electronic Frontier Foundation (EFF).
The EFF, a non-profit digital rights group, has opposed the protections for the auto industry under the DMCA, arguing that vehicle owners and others have the right to inspect the code that runs their vehicles and allow a mechanic of their choice do work on their cars and trucks.
A vehicle Electronic Control Unit.
The EFF asked the U.S. Copyright Office to grant an exemption to the DMCA for embedded vehicle code so that independent research can be performed on electronic control modules (ECMs), which run a myriad of systems, including emissions.
The auto industry has traditionally cited DMCA protections over concerns that people may circumvent vehicle safety measures if third parties are allowed access.
Walsh said if independent researchers, such as those from West Virginia University, had been able to access vehicle code, and reverse engineer it, it's likely the "defeat device" would have been discovered faster.
"The legal uncertainly created by the DMCA...makes it easier for manufacturers to conceal intentional wrongdoing," Walsh said. "The researchers at the Univeristy of West Virginia...went through a lot of tests to try to narrow down the possibilities. If they had been able to go in and look the code...then we would have known much sooner about this problem."
Sign up for CIO Asia eNewsletters.