ISO 15118-2: Enhancing EV Charging Security

In light of the increasing adoption of electric vehicles (EVs) and the urgent need for a reliable charging infrastructure, the development of secure and accessible charging solutions has become a top priority for the eMobility industry. Ensuring the trustworthiness and safety of charging transactions is paramount to maintain a seamless functioning of the EV ecosystem.

Published

June 2023

Industry

EV Charging

A recent report by Hubject, ‘Plug&Charge – State of the Industry Report 2023’, highlights the vulnerabilities found in common authentication methods used at charging stations, such as RFID cards, apps, Mac Address-based identification, and credit cards. These methods have shown IT security weak spots that can potentially lead to safety hazards, privacy breaches, and financial losses for both consumers and market players in the eMobility sector.

To address these concerns, the report highlights the most secure way to charge an EV at a public charging station: Plug&Charge technology. This innovative approach enables automatic authentication and charging without requiring any human intervention. However, given the sensitive nature of this process, cybersecurity is of utmost importance.

To ensure secure communication between EVs and charging stations, the ISO 15118-2 standard has introduced guidelines for the Plug&Charge ecosystem. These guidelines define the use of digital certificates and public key infrastructures (PKIs) to establish secure information exchange between the vehicles and charging stations.

Digital certificates, issued by trusted certificate authorities (CAs) within the PKI framework, play a vital role in verifying the identity of entities involved in the charging process. These certificates, bound to a digital signature, ensure the authenticity and integrity of the shared information. The V2G-PKI, as defined in the ISO 15118-2 standard, allows different members of the Plug&Charge ecosystem to generate certificates specific to their role, promoting secure interoperability.

The adoption of ISO 15118-2 guidelines and the implementation of digital certificates and PKIs in the charging infrastructure offer a significant step towards enhancing the security and trustworthiness of EV charging transactions. As the eMobility market continues to grow, it is essential for stakeholders to prioritize cybersecurity measures to mitigate potential risks and ensure a seamless and secure charging experience for all EV users.

Source: Plug&Charge – State of the Industry Report 2023 | Hubject