ISO-TP is the ISO 15765 transport protocol used to carry larger messages over CAN by segmenting them into frames and reassembling them at the receiver. It enables diagnostic communication beyond CAN’s single-frame size limit and is common in vehicle networks.
How ISO-TP Works
ISO-TP extends CAN beyond its native single-frame payload limit by splitting a larger application message into multiple CAN frames and reassembling them at the destination. That makes it a transport layer rather than an application protocol, and it is what allows diagnostic and service traffic to move reliably over constrained in-vehicle buses.
In practice, ISO-TP adds sequencing, length signalling, and flow control so the receiver can accept and reconstruct a message in order. Without that layer, many diagnostics, firmware-related exchanges, and other multi-byte exchanges would have to be redesigned around CAN’s small frame size.
Why ISO-TP Matters in Vehicle Networks
ISO-TP is important because CAN is fast and robust, but intentionally limited in payload size. When systems need richer diagnostic requests or responses, ISO-TP provides the framing discipline needed to carry them without changing the underlying bus. That makes it a foundational enabler for service tools, ECUs, and gateway-mediated diagnostics.
Its value is not only message size, but consistency. The protocol defines how larger data is segmented, how the receiver acknowledges readiness, and how timing is managed. In tightly constrained automotive environments, that predictability is essential for interoperability across vendors and subsystems.
Common ISO-TP Behaviour and Constraints
ISO-TP traffic typically follows a request-response pattern, especially in diagnostics, where a tool sends a request and an ECU returns a segmented response if the payload exceeds one CAN frame. The sender must respect flow-control frames and timing expectations, or the transfer can stall or be dropped.
Because the protocol sits on a shared bus, it also inherits CAN’s operational constraints. Bandwidth is limited, latency matters, and message prioritisation can affect delivery. ISO-TP does not create confidentiality or authenticity on its own, it only transports larger messages over the bus.
Where ISO-TP Fits in Security and Diagnostics
ISO-TP is often part of legitimate diagnostic, maintenance, and engineering workflows, but those same workflows can become sensitive because they expose high-value control functions over a vehicle network. The protocol itself is not the trust decision, but it is the transport path through which diagnostic commands and responses move.
That means security concerns usually sit above or around ISO-TP, in the design of diagnostic access, gateway policy, and message validation. When organisations review vehicle-network exposure, they should understand that a working ISO-TP channel can be a prerequisite for legitimate servicing and, if misused, for unauthorized diagnostic interaction.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST SP 800-53 Rev 5 and CIS Controls v8 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST SP 800-53 Rev 5 | SC-7 — Boundary Protection | ISO-TP rides across in-vehicle bus boundaries and diagnostic paths. |
| IA-2 — Identification and Authentication (Organizational Users) | Diagnostic sessions over ISO-TP depend on authenticated operator access. | |
| AU-2 — Event Logging | ISO-TP-based diagnostic activity benefits from logging for traceability and review. | |
| Recommendation — Enforce boundary protection for diagnostic paths that carry segmented CAN traffic. Require strong user authentication before allowing diagnostic transport sessions. Log diagnostic transport activity and review it for unauthorized or abnormal use. | ||
| CIS Controls v8 | CIS-13 — Network Monitoring and Defense | ISO-TP traffic is part of the network paths that monitoring and defense controls should observe. |
| CIS-6 — Access Control Management | ISO-TP is used in diagnostic workflows that should be access-controlled. | |
| Recommendation — Monitor diagnostic bus traffic for anomalous segmented-message patterns and misuse. Restrict diagnostic access paths that can send or receive ISO-TP traffic. | ||