4月初，眾多電動(dòng)汽車行業(yè)專家聚集在美國國家可再生能源實(shí)驗(yàn)室（NREL），共同評估提升電動(dòng)汽車和充電基礎(chǔ)設(shè)施之間的連接安全的新方法。隨著越來越多的電動(dòng)汽車進(jìn)入市場并接入電網(wǎng)，潛在的網(wǎng)絡(luò)漏洞可能暴露出來，因此車輛安全問題越來越受到行業(yè)的重視。得到本次合作活動(dòng)支持的是由國際自動(dòng)機(jī)工程師學(xué)會（SAE International）牽頭的一個(gè)為期兩年的項(xiàng)目，該項(xiàng)目旨在動(dòng)員汽車行業(yè)廣泛參與電動(dòng)汽車充電領(lǐng)域的競爭前研究和技術(shù)原型設(shè)計(jì)，以加強(qiáng)電動(dòng)汽車的網(wǎng)絡(luò)安全性。
該活動(dòng)在NREL位于科羅拉多州戈?duì)柕堑哪茉聪到y(tǒng)整合中心（Energy Systems Integration Facility）舉辦，旨在評估保護(hù)車輛與充電站連接的PKI應(yīng)用。PKI是一種加密交換信息并認(rèn)證設(shè)備可信授權(quán)的方法。盡管PKI已為許多行業(yè)所采用，但不同公司的電動(dòng)汽車和充電站之間的認(rèn)證尚未普及，在電動(dòng)汽車充電生態(tài)系統(tǒng)中也并不成熟。
NREL曾研究過與電動(dòng)汽車互聯(lián)相關(guān)的漏洞，并評估了減少漏洞所需采取的策略。本次活動(dòng)進(jìn)一步展示了PKI如何提高實(shí)現(xiàn)充電所需的通信安全。成功保護(hù)這些通信有助于防止金融詐騙，并保護(hù)司機(jī)、車輛、制造商和充電網(wǎng)絡(luò)運(yùn)營商免受其他網(wǎng)絡(luò)攻擊。
福特汽車、Rivian、殼牌全球解決方案和ChargePoint等公司將電動(dòng)汽車和充電基礎(chǔ)設(shè)施帶到活動(dòng)現(xiàn)場，參加首次測試。項(xiàng)目團(tuán)隊(duì)使用了一個(gè)由Eonti設(shè)計(jì)并通過Digicert證書實(shí)現(xiàn)的PKI系統(tǒng)，為PKI加強(qiáng)的充電連接建立基本系統(tǒng)功能。一旦基本功能得到證實(shí)，NREL和相關(guān)方就可以開始規(guī)劃未來的工作，指導(dǎo)項(xiàng)目團(tuán)隊(duì)實(shí)施一個(gè)保護(hù)充電基礎(chǔ)設(shè)施的防御性系統(tǒng)。
項(xiàng)目負(fù)責(zé)人Tony Markel表示：“NREL利用獨(dú)特的電力系統(tǒng)、網(wǎng)絡(luò)設(shè)施和專業(yè)知識，幫助這些團(tuán)隊(duì)在真實(shí)工作條件下評估電動(dòng)交通系統(tǒng)的網(wǎng)絡(luò)安全性。此外，該項(xiàng)目也是一個(gè)將行業(yè)資源和政府的評估資源結(jié)合起來的好機(jī)會。”
產(chǎn)品團(tuán)隊(duì)使用有效與無效的PKI完成了數(shù)十次測試，以確保系統(tǒng)能夠正確捕獲和識別正確和錯(cuò)誤的行為。在后續(xù)測試中，研究人員計(jì)劃擴(kuò)大參與測試的公司數(shù)量以及測試案例的種類，以提升測試對電動(dòng)汽車充電行業(yè)的影響。測試案例中將包括針對電動(dòng)汽車連接的對抗性演習(xí)，按照“黑客大賽”的模式，全面確定PKI實(shí)施策略的網(wǎng)絡(luò)安全性能。
人們對PKI用于電動(dòng)汽車充電的關(guān)注始于一項(xiàng)行業(yè)評估，該評估讓人們看到了改進(jìn)當(dāng)前電動(dòng)汽車網(wǎng)絡(luò)安全標(biāo)準(zhǔn)的機(jī)會。SAE正在組織國際電動(dòng)汽車充電行業(yè)、公共機(jī)構(gòu)和研究機(jī)構(gòu)，協(xié)作提高交通和能源行業(yè)之間的關(guān)鍵連接的整體安全性。本次項(xiàng)目的目標(biāo)正是實(shí)現(xiàn)一種無關(guān)現(xiàn)有充電平臺、全球汽車行業(yè)通用的PKI實(shí)施方法。
SAE的PKI合作研究項(xiàng)目（CRP）旨在聯(lián)合行業(yè)合作伙伴，共同開展針對行業(yè)問題的競爭前解決方案研究。其中，NREL項(xiàng)目致力于設(shè)計(jì)一個(gè)安全、可信賴、可擴(kuò)展、可互操作的包容性全球電動(dòng)汽車充電行業(yè)PKI平臺，并對其進(jìn)行測試。
SAE International期待更多機(jī)構(gòu)參與這一關(guān)鍵項(xiàng)目。未來的活動(dòng)包括證實(shí)PKI電動(dòng)汽車充電應(yīng)用的可擴(kuò)展性、確保PKI在產(chǎn)品之間的兼容性、以及共享研究結(jié)果以改進(jìn)標(biāo)準(zhǔn)等。
進(jìn)一步了解NREL的電網(wǎng)車輛整合網(wǎng)絡(luò)安全研究和其他可持續(xù)交通和出行舉措，
請?jiān)L問：http://saeintl.cn/evgc
The project uses PKI to help protect the connection between EVs and charging stations.
Members of the electric vehicle industry gathered at the National Renewable Energy Laboratory (NREL) in early April to evaluate enhanced cybersecurity for the connections between EVs and charging infrastructure. As more EVs enter the market and connect to the electrical grid, potentially exposing cyber vulnerabilities, vehicle security is drawing increased interest. The collaborative event supports a two-year project led by SAE International to strengthen EV cybersecurity through wide industry engagement on pre-competitive research and technology prototyping in the EV charging space.
The event, held at NREL’s Golden, Colorado Energy Systems Integration Facility, was organized to evaluate the application of public key infrastructure (PKI) – a method for encrypting information exchange and certifying the trusted authenticity of devices – to help protect the connection between vehicles and charging stations. Although PKI had been adopted for many industries, this kind of authentication between different companies’ electric vehicles and charging stations is not commonplace nor has it matured in the EV charging ecosystem.
NREL has previously studied the vulnerabilities associated with EV interconnections and has evaluated strategies to mitigate those vulnerabilities. The event went a step further into showing how PKI could improve security of communications required to enable charge sessions to take place. Successfully securing these communications would help protect against financial fraud and defend drivers, vehicles, manufacturers, and charge network operators from other cyber intrusions.
Participants including Ford Motor Co., Rivian, Shell Global Solutions and ChargePoint brought EVs and charging infrastructure to this initial test event. The teams used a PKI system designed by Eonti and implemented with Digicert to focus on establishing primary system functionality for the PKI-strengthened charging connection. Once basic functions have been demonstrated, the participants and NREL can begin planning for future efforts that will guide the team to implement a defensible system for protecting charging infrastructure in the field.
“NREL has assembled unique power systems, cyber facilities and insights to assist these teams to assess the cybersecurity of electrified transportation systems under real operating conditions and this project is a great opportunity to marry industry expertise and government evaluation resources,” said Tony Markel, project lead at NREL.
The product teams completed dozens of tests, using valid and invalid PKI implementations to ensure systems are robust enough to correctly capture and identify accurate and faulty behaviors. In follow-on tests, researchers intend to expand the number of companies involved and the test cases performed to widen the impact of testing on the EV charging sector. The test cases will include adversarial drills against EV connections in the spirit of a hack-fest to confirm the full cyber strength of a PKI implementation strategy.
The interest in PKI for EV charging follows an industry assessment that found opportunities for improvement in current standards pertaining to EV cybersecurity. SAE is organizing the international EV charging sector, as well as public and research entities, to collaboratively increase overall security in this critical connection between the mobility and energy industries. The project is intended to deliver an operational PKI method agnostic to the charging platform that is available to industry worldwide.
SAE’s PKI Cooperative Research Projects (CRP) are joint ventures with industry partners that perform targeted, pre-competitive research to develop solutions – by industry for industry. The NREL project encompasses the designing and testing of an inclusive, worldwide EV charging industry PKI platform that is secure, trusted, scalable, interoperable, and extensible.
SAE International is seeking to expand the network of participating entities to join this critical project. Future activities include proving the scalability of PKI for EV charging, ensuring its compatibility across products, and sharing results to influence standards. Learn more about NREL’s cybersecurity for grid-vehicle integration research and other sustainable transportation and mobility initiatives: https://www.nrel.gov/transportation/electric-vehicle-grid-cybersecurity.html.
Tim Weisenberger is SAE Program Manager of Emerging Technologies; tim.weisenberger@sae.org
Rivian的工程師Sarah Hipel（左）和Gabriel Lopez在NREL測試中插入R1T。（NREL）