Combined cyber and physical security system for charging electric vehicles

February 5, 2015, ResearchSEA

As electricity grids become more sophisticated, grid administrators can collect instantaneous data on consumer and supplier behavior. The 'smart grid' then learns to improve the reliability, costs and sustainability of electricity distribution. However, smart grids present new security challenges, especially for mobile systems such as electric vehicles (EVs), which can be attacked both electronically and physically.

Now, Jianying Zhou and Aldar Chan at the A*STAR Institute of Infocomm Research have developed the first automatic security system that protects EVs from combined cyber–physical attacks.

"Most existing authentication systems merely apply cybersecurity schemes directly to the , leaving gaps in the protection," explains Zhou. "The problem is especially serious for EVs, because the charging infrastructure is publicly open. Anyone could plug in an EV, even if it is stolen."

A particular danger is the so-called substitution attack, whereby a criminal can 'digitally imitate' an EV, plugging in their own device while the EV owner pays for the electricity. Chan and Zhou demonstrated a successful substitution attack on an existing EV charging station. "We plugged in kettles and hair dryers; it could be anything that draws current," says Zhou.

After proving that this security loophole existed, the researchers worked to improve the classic 'challenge-response' protocol for online security. "Instead of using a single challenge—which is a random number used to test if a user really is who he claims to be—we used one challenge sent through the wireless cyber path and another challenge through a physical path or the charging cable," says Zhou. "This ensures that the EV is connected physically to the right spot in the , and that it is a real EV meeting existing EV standards."

Perhaps inevitably, Chan and Zhou found they could not achieve physical authentication using software alone. They had to design a new onboard hardware mechanism that binds an EV to its digital identity. However, they discovered a way to embed the challenge number in one of the signaling lines of the charging cable, so that existing charging stations will not need to be modified.

The researchers believe that their new could protect other components in the power grid, such as relays and transformers, as well as cardless ATMs. "With more research we could devise systems to ensure that the person withdrawing cash actually has digital authorization," says Zhou.

Explore further: Cybersecurity: Plugging smart grid weaknesses

More information: Chan, A. C.-F. & Zhou, J. "Cyber–physical device authentication for smart grid electric vehicle ecosystem." IEEE Journal on Selected Areas in Communications 32, 1509–1517 (2014).

Related Stories

Cybersecurity: Plugging smart grid weaknesses

June 5, 2013

Power companies are increasingly upgrading to smart grids—national or state-based intelligent computer systems that collect information from consumers and suppliers in order to automatically improve the grid's efficiency ...

A plug fit for every car

July 4, 2014

If you can't find a charging cable for your cell phone, it's an inconvenience. But what if you're away from home and can't find a charging station compatible with your electric vehicle?

IBM, partners enable smarter charging for electric vehicles

April 12, 2012

IBM announced that it has teamed with American Honda Motor Co., Inc. and Pacific Gas and Electric Company (PG&E) on a new pilot project that will allow communication between electric vehicles (EVs) and the power grid. This ...

Chicago EV Charging Station Powered by Wind

February 17, 2010

(PhysOrg.com) -- The "Windy City" is about to make use of that natural source of power, thanks to the addition of an electric vehicle (EV) charging station. Last year, Chicago offered the first solar powered charging station, ...

Recommended for you

Team breaks world record for fast, accurate AI training

November 7, 2018

Researchers at Hong Kong Baptist University (HKBU) have partnered with a team from Tencent Machine Learning to create a new technique for training artificial intelligence (AI) machines faster than ever before while maintaining ...

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.