Talk Stephan Gerling

Charge Your Car for Free – let someone else pay for you


DESCRIPTION

Vulnerabilities in EV charging Infrastructure


Renewable Energy and electro mobility are the driver for a fast growing ecosystem of charging point for electrical vehicles. As per 1.dez.2022, in Germany are 76561 charging Points installed and the plan is to scale up to 1 million in 2030. The Open Charge Point Protocol (OCPP) is used to communicate in the backend of these Infrastructure.


This talk will cover vulnerabilities in the OCPP protocol, show how the security of charging card is working and finally, how a vulnerability in the operating system of the Charging stations allows you to clone charging cards. Last, but not least, there are many more vulnerabilities, for example one that reboot a charging station with a crafted network packet. All needed is a minute unobserved access to a charging point.


Practical demonstration of the vulnerabilities in short video footage is shown. What has to be done to secure? This is covered in the last topic of the talk.


WHY THE COMMITTEE CHOSE THIS TALK

Building up charging infrastructures for e-mobility is currently done all over Europe. Seeing how fast the development has to be done, the infrastructure is bound to have some security issues. Stephan will demonstrate his findings in the OCPP protocol.


Share by: