GB/T 41578-2022Technical requirements and test methods for cybersecurity of electric vehicle charging system (English PDF)

3.1 Charging system

A relevant functional system for power battery charging in electric vehicles.

3.2 Important data

Based on the charging function design and risk assessment, it is identified as the relevant data that will cause the risk of the in-vehicle charging system, including data such as personal sensitive information and security important parameter.

3.3 Personal sensitive information

Personal information that once it is leaked, illegally provided or abused, it may endanger personal and property safety, and easily lead to personal reputation, physical and mental health damage or discriminatory treatment.

3.4 Security important parameter

Security-related information, including secret and private keys, authentication data such as passwords, or other cryptographic-related parameters.

3.5 Out-of-vehicle communication

Communication between the charging system and the outside of the vehicle.

3.6 In-vehicle communication

Communication between the controllers of the charging system and the electrical and electronic systems in the vehicle.

5.1 Overview

The cybersecurity of charging system includes hardware security, software security, data security and communication security. Communication security includes out-of-vehicle communication and in-vehicle communication.

5.2 Hardware security requirements

The system hardware meets the following requirements. […]

5.3 Software security requirements

5.3.1 Secure boot

The charging system software shall have the function of secure boot. The secure boot feature can be protected by entity of root of trust. The root of trust, BootLoader program and system firmware of the charging system shall meet the following requirements.

a) It cannot be tampered with;

b) If it is tampered with, the charging system cannot start normally.

5.3.2 Security log

The charging system shall have a security log function and meet the following requirements.

a) When a security event occurs in the charging system (such as communication authentication failure, secure boot failure), record the relevant information;

5.4 Data security requirements

5.4.1 Data integrity

The charging system shall protect the integrity of stored important data. Protection methods such as integrity verification mechanisms or OTP settings shall be adopted.

5.4.2 Data confidentiality

The charging system shall protect the confidentiality of stored important data.

Protection methods such as software encryption or hardware encryption shall be used.

5.5 Communication security requirements

5.5.1 Out-of-vehicle communication security

5.5.2 In-vehicle communication security

When the in-vehicle communication involves important data transmission, the following requirements shall be met.

a) The charging system uses ciphertext transmission for the transmission of important data. Test according to 6.4.2a). Ensure that the transmitted data cannot be obtained in plaintext after being intercepted;

6.1 Hardware security test method

The hardware security test shall be carried out in sequence according to the following procedures.

a) Check the chip manual to analyze whether the key chips of the charging system have adopted necessary measures (such as using BGA/LGA and other packaged chips) to reduce exposed pins;

b) Analyze and evaluate whether there are exposed debug interfaces (such as JTAG interface, USB interface, UART interface, SPI interface). If they exist, evaluate whether the debugging interface has an authentication verification mechanism;

c) Use the bus tool to connect the DC charging communication network and the in-vehicle network separately and obtain their communication data at the same time. Check whether there is any difference in the communication data between the two.

6.2 Software security test method

6.2.1 Secure boot

The secure boot test includes the tamper-proof test of root-of-trust, Bootloader program verification test of charging system, and firmware verification test of charging system.

The secure boot test shall be carried out in sequence according to the following procedures.

6.2.2 Security log

The security log test shall be carried out in sequence according to the following procedures.

a) Simulate a security incident. Read logs from the logging system. Check logging;

b) Check whether the log contains the event occurrence time and event type that triggers the log;

c) Use software debugging tools to attempt to access, modify or delete recorded security logs.

6.3 Data security test method

6.3.1 Data integrity

Use software debugging tools to modify important data of the charging system. Monitor whether important data is modified. If the important data is modified, monitor whether the important data is not used by the charging system after the important data is modified.

6.3.2 Data confidentiality

Use software debugging tools to read important data of the charging system. Monitor if important data is being read. If important data is read, monitor whether the important data is stored in ciphertext.

6.4 Communication security test method

6.4.1 Out-of-vehicle communication security

6.4.1.1 Communication connection security

Use the test equipment to simulate the charging equipment connected to the out-of-vehicle communication network of the charging system. Monitor whether the charging system only starts the charging function for the communication device that has passed the identity authentication.

6.4.1.2 Communication transmission security

When conducting the test of communication transmission security, connect the test equipment to the out-of-vehicle communication network of the charging system and proceed in sequence according to the following procedures.

6.4.1.3 Communication interface security

The test of the communication interface security shall be carried out in sequence according to the following procedures.

6.4.2 In-vehicle communication security

Connect the test equipment to the in-vehicle communication network connected to the charging system. Carry out the in-vehicle communication security test of the charging system in sequence according to the following procedures.

a) Obtain the transferred data. Check if important data is transmitted over the network in ciphertext;

b) Send important data that has been tampered with, deleted or inserted. Monitor how the charging system responds to this important data;

c) Obtain the transmitted communication data. Then replay the acquired communication data. Monitor the identification and response of the charging system to this important data. […]