This is the mobile-friendly web version of the original article.

DOE/DHS/DOT Volpe Technical Meeting on Electric Vehicle and Charging Station Cybersecurity Report

Prepared by:

United States Department of Transportation Volpe Center and United States Department of Energy Office of Policy

Final Report—March 2018

DOT-VNTSC-DOE-18-01

Prepared for: U.S. Department of Energy. 1000 Independence Ave., S.W. Washington, DC 20585-1615

U.S. Department of Transportation, Volpe Center

1. Disclaimer
2. Acknowledgments
3. Contents
4. List of Figures
5. List of Tables
6. List of Abbreviations
7. Executive Summary

Disclaimer

This report was prepared as an account of work sponsored by an agency of the United States Government. Neither the United States Government nor any agency thereof, nor any of their employees, makes any warranty, express or implied, or assumes any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed, or represents that its use would not infringe privately owned rights. Reference herein to any specific commercial product, process, or service by trade name, trademark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation, or favoring by the United States Government or any agency thereof. The views and opinions of authors expressed herein do not necessarily state or reflect those of the United States Government or any agency thereof.

Acknowledgments

The Department of Energy (DOE) and U.S. DOT Volpe Center would like to thank subject matter experts (SMEs) from the California Public Utilities Commission’s (CPUC) Vehicle-Grid Integration Communications Protocol Working Group, Idaho National Laboratory (INL), Lear Corporation, Fiat Chrysler Automotive (FCA), and Daimler AG for their insight on topics in this report. In addition, we would like to acknowledge and give thanks to all the organizations who participated in the DOE/DHS/DOT Volpe Center Technical Meeting on Electric Vehicle and Charging Station Cybersecurity on November 29-30, 2017, in Arlington, VA, and for providing their insights and expertise.

Contents

• List of Figures

• List of Tables

• List of Abbreviations

• Executive Summary

• Background/Introduction

  • 1.1 Structure of the Report

  • 1.2 General Vehicle Cybersecurity Concerns Background

    • 1.2.1 Telematics

    • 1.2.2 Controller Area Network (CAN) Bus

  • 1.3 Cybersecurity Considerations for the Electric Vehicle

    • 1.3.1 Stakeholders

• 2 Organizational Structure

• 3 Incorporating Cybersecurity into Design

  • 3.1 Segmentation

  • 3.2 Chipsets

  • 3.3 Penetration Testing

  • 3.4 Vulnerability Assessment

  • 3.5 EVSE Cybersecurity Procurement Guidelines

• 4 Trust

• 5 Ownership and Maintenance

• 6 Coordination

  • 6.1 Standards Coordination

  • 6.2 Public Sector Coordination

  • 6.3 Private Sector Coordination

  • 6.4 Public-Private Coordination

• 7 Gaps and Conclusions

  • 7.1 Identified Gaps

    • 7.1.1 EV Charging Infrastructure Lacks Cybersecurity Best Practices

    • 7.1.2 End-to-end EV and Charging Infrastructure Lacks a Trust Model

    • 7.1.3 EV/Charging Infrastructure Lacks Cybersecurity Testing

    • 7.1.4 Wireless Chargers Lack Common Cybersecurity Guidelines

    • 7.1.5 Security of EV Over-the-Air (OTA) Infrastructure Update Capability

    • 7.1.6 Commercial EVSE Lack of Common Physical Security Guidelines

  • 7.2 Conclusions and Critical Gaps

• Appendix A - Electric Vehicle Technical Standards Overview

List of Figures

• Figure 1. Typical Telematics System

List of Tables

• Table 1. Typical Data Elements Exchanged Between an EV and Charging Station

• Table 2. EV and Charging Infrastructure Stakeholders

List of Abbreviations

Executive Summary

On November 29-30, 2017, the U.S. Department of Energy’s (DOE) Office of Policy (OP), in collaboration with DOE’s Vehicle Technology Office (VTO), the U.S. Department of Homeland Security’s (DHS) Science and Technology Directorate (S&T) Cyber Security Division (CSD), and the U.S. Department of Transportation’s (U.S. DOT) John A. Volpe National Transportation Systems Center (Volpe) held a technical meeting on key aspects of electric vehicle (EV) and electric vehicle supply equipment (EVSE) cybersecurity. This report summarizes key takeaways and discussion points.

Electric vehicles are becoming a part of the transportation and mobility industry in the United States. It is during this initial development and deployment period for the EV environment that the opportunity exists to mitigate cybersecurity issues before they become widespread, ingrained, difficult, and expensive to remedy. The EV environment is a mix of multiple stakeholders, domains, hardware, and software. As the communication, electricity, and transportation systems become more integrated, cybersecurity vulnerabilities that would normally be localized, now have the ability to cause disruptions across these multiple sectors.

Modern day automobiles have cybersecurity vulnerabilities that the industry and government are working on addressing.¹ This report, and the preceding technical meeting, focuses on the cybersecurity vulnerabilities that are unique to electric vehicles and electric vehicle supply equipment:

• The two-way communication between the EVSE and the vehicle

• The connection between EVs, EVSE, and other systems (e.g., grid, telecommunications, buildings, etc.)

These differences could potentially lead to three main types of issues:

• 1) Public safety hazard to the vehicle operators and/or those in the immediate vicinity

• 2) Mobile, highly connected malware vectors

• 3) Initiating and/or exacerbating electric grid disruption

As a result of discussions during the Electric Vehicle and Charging Infrastructure Cybersecurity Technical Meeting, participants identified gaps and vulnerabilities in this threat space (see Chapter 7: Gaps and Conclusions for more detail on the gaps). The table below is a prioritized list of the gaps identified and provides a short description of each:

¹https://www.nhtsa.gov/technology-innovation/vehicle-cybersecurity

Throughout the technical meeting, participants particularly focused on two of these gaps as critical for government and industry to address:

• 1.The lack of security best practices for EVSE charging infrastructure

• 2.The lack of an end-to-end trust model for validating communications

Addressing these critical gaps should help focus and frame coordination between the relevant stakeholders in the energy, transportation, and communication sectors.