Abstract:

This document provides a recommended security architecture for EV charging infrastructures. It gives a set of technical security measures that CPOs can use to mitigate the risks of cyber-attacks. Charge Point Operators (CPOs) are controlling more and more electrical load. To support the rapid growth in electric vehicles (EVs), hundreds of thousands of charging stations are being placed throughout Europe, most of them being remotely controlled by CPOs. In this way, larger CPOs are already controlling hundreds of megawatts of demand, comparable to a large gas power plant. And the controlled load will only grow in the future. The security architecture provides guidance on what technical measures CPOs can take to secure their EV charging infrastructure systems. The architecture can also be used by organizations procuring EV charging services, such as provinces and municipalities, to put security requirements to CPOs. The architecture can be used directly in procurement documents.