Charge It to My Neighbor: A Relay Attack on ISO 15118 Plug and Charge Payment
summary
A relay attack on ISO 15118 plug-and-charge is demonstrated end-to-end: a proof-of-concept forks an open-source ISO 15118 stack and runs on real hardware with two power-line modems, an EV simulator and a small relay box that forwards TLS-authenticated contract certificate challenge-responses to charge an attacker vehicle while billing a victim. The attack requires one stolen charging station certificate, exploits the absence of station identity in the plug-and-charge signature, succeeds in practice, and the authors open-source the code and propose fixes (embed a 5-byte station ID or use OCP backend).
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:10Plug and charge overview
- 1:40The relay attack concept
- 3:18Attack execution details
- 5:13Root cause and feasibility
- 6:28Proof of concept
- 7:41Proposed solutions
- 9:55Responsible disclosure
- 11:07Related work
- 12:23Conclusion
related talks
17mHotWire: Real-World Impersonation and Discharge Attacks on Electric Vehicle Charging...
11mShort: Breaking the Charge: Exploiting State Manipulation in EV Charging
31mProtecting the Attack Surface and Data Silos of an EV Charging Network
29mX-in-the-Middle: Attacking Fast Charging Piles and Electric Vehicles
16mOblivious Plug&Charge: A Privacy-Preserving EV Charging Scheme based on ORAM
10mShort: PIBuster: Exploiting a Common Misconfiguration in CCS EV Chargers
37mEVerest: Electric Vehicle Chargers With Open Hardware and Software
39mNo Free Charge Theorem 2.0: How to Steal Private Information from a Mobile Device Using a Powerbank