Worldwide growth in electric vehicle use is prompting new installations of private and public electric vehicle supply equipment (EVSE). EVSE devices support the electrification of the transportation industry but also represent a linchpin for power systems and transportation infrastructures. Cybersecurity researchers have recently identified several vulnerabilities that exist in EVSE devices, communications to electric vehicles (EVs), and upstream services, such as EVSE vendor cloud services, third party systems, and grid operators. The potential impact of attacks on these systems stretches from localized, relatively minor effects to long-term national disruptions. Fortunately, there is a strong and expanding collection of information technology (IT) and operational technology (OT) cybersecurity best practices that may be applied to the EVSE environment to secure this equipment. In this paper, we survey publicly disclosed EVSE vulnerabilities, the impact of EV charger cyberattacks, and proposed security protections for EV charging technologies.

/pdf/review-of-electric-vehicle-charger-cybersecurity-gf71vvkb.pdf

Review of Electric Vehicle Charger Cybersecurity Vulnerabilities, Potential Impacts, and Defenses

http://manuscript.elsevier.com/S0167404821003357/pdf/S0167404821003357.pdf

Power jacking your station: In-depth security analysis of electric vehicle charging station management systems

Due to its flexibility in terms of charging and billing, the smart grid is an enabler of many innovative energy consumption scenarios. One such example is when a landlord rents their property for a specific period to tenants. Then the electricity bill could be redirected from the landlord's utility to the tenant's utility. This novel scenario of the smart grid ecosystem, defined in this paper as Grid-to-Go (G2Go), promotes a green economy and can drive rent reductions. However, it also creates critical privacy issues, since utilities may be able to track the tenant's activities. This paper presents P4G2Go, a novel privacy-preserving scheme that provides strong security and privacy assertions for roaming consumers against honest but curious entities of the smart grid. At the heart of P4G2Go lies the Idemix cryptographic protocol suite, which utilizes anonymous credentials and provides unlinkability of the consumer activities. Our scheme is complemented by the MASKER protocol, used to protect the consumption readings, and the FIDO2 protocol for strong and passwordless authentication. We have implemented the main components of P4G2Go, to quantitatively assess its performance. Finally, we reason about its security and privacy properties, proving that P4G2Go achieves to fulfill the relevant objectives.

https://www.mdpi.com/1424-8220/21/8/2686/pdf

P4G2Go: A Privacy-Preserving Scheme for Roaming Energy Consumers of the Smart Grid-to-Go.

Power Jacking Your Station: In-Depth Security Analysis of Electric Vehicle Charging Station Management Systems

Wireless charging vehicle to grid (V2G) system is not-so-futuristic. It can maintain the power supply balance and stabilize the grid through a wireless link between vehicles using batteries based on energy supply-demand statistics. Most of the existing privacy preservation methods are based on data tampering approaches (e.g., encryption, adding noise, aggregation), which are not practicable over V2G due to complexity in billing and inaccurate state estimation. In this paper, we develop a novel adaptive demand-side energy management framework by employing federated learning-based privacy preservation for the wireless charging V2G systems. Our framework learns the temporal evolution of energy consumption of dynamic charging electric vehicles in a distributed fashion and exploits the reinforcement learning model for cost-saving and reward maximization. The convergence and the privacy preservation properties of the framework are demonstrated with extensive evaluations.

Data Privacy of Wireless Charging Vehicle to Grid (V2G) Networks With Federated Learning

With the fast development of Internet of Things (IoT) especially for smart grid and electric vehicle (EV) networking, vehicle-to-grid (V2G) communications have been increasingly studied and recognized as one of the most convincing tools for general road transportation, to effectively reduce the oil demands and gas emissions. Unfortunately, a series of security and privacy issues have significantly impeded its wide adoption. The existing work mainly focused on the static environment, which cannot be directly applied to the mobile setting where EVs travel across regions. The dynamic pricing metric in V2G networks depends on the real-time electricity usage aggregation in one region. To address this issue, in this article, an efficient privacy-preserving data aggregation and dynamic pricing service PADP in V2G IoT is proposed, by designing an identity-based sequential aggregate signed data (SASD) based on factoring and a threshold homomorphic encryption. In the proposed threshold homomorphic encryption, a legal ciphertext can be generated if and only if no less than threshold $k$ individual illegal ciphertexts are aggregated. Therefore, the aggregated power consumption data can be successfully decrypted while the individual power consumption privacy of honest EV users can be well protected against even the collusion between a malicious power charging station and compromised EVs. Furthermore, the technique of SASD guarantees entity authentication with a minimized amount of transmitted data. Finally, formal security proof and extensive performance evaluation demonstrate the effectiveness and practicability of our proposed PADP.

Linghui Chen

Papers

PADP: Efficient Privacy-Preserving Data Aggregation and Dynamic Pricing for Vehicle-to-Grid Networks