www.twitter.

com/MCCIA_Pune

: Am°JñQ 2019 1
www.twitter.com/MCCIA_Pune

: ऑगस्ट २०१९
 www.twitter.com/MCCIA_Pune

Editorial

As the rains firmly set in parts of Maharashtra, I am delighted to present to you the August 2019 edition of
Sampada.

This issue of Sampada is focused on Electric Mobility. Different parts of the world are moving towards Electric
Vehicles (EV) at varied pace. In India too, the Policy direction is set to move to EV with defined timelines.

While we continue to be attentive to the timelines set by policy makers, we will focus our energies on helping
our members to understand the domain of EVs and on preparing them for as smooth a transition as possible.

Thanks to the contribution of our Industry members, we have been able to work with Institutions like College of
Engineering Pune and Cummins College of Engineering for Women, Pune and Savitribai Phule Pune University to
support them to launch a Course on EV that will increase talent pool required in this transition.

We constantly organise interactions with MSMEs to take their feedback and organise the Interactions with
OEMs and experts for them to have benefit of broader perspectives. A major MCCIA Conference on EV being
organised on 27th August 2019 is one such milestone.

In addition to this, we continue to focus our activities at MCCIA on (a) Advocacy (b) Capacity Building and (c)
Networking. You will find a glimpse of these activities in the MCCIA News Section in this issue.

We hope you find articles in this issues (the ones focused on EVs or otherwise) useful.

We look forward to your feedback about this issue over email : sampada@mcciapune.com

Prashant Girbane
Director General, MCCIA and Editor, Sampada
sampada@mcciapune.com

: ऑगस्ट २०१९
 www.twitter.com/MCCIA_Pune

Vol. 75th • Issue 5

• August 2019

Founder
7
Cont
Launch of the PG Diploma course on Electric Mobility
Late A. R. Bhat
9 India experiencing a push for Electric Vehicles
Editor
Prashant Girbane
11 An overview Electric Vehicles : Market, Regulations,
Content Co-ordinator Challenges & Opportunities
Sudhanwa Kopardekar - Nitin Shrotri
Production and Co-ordination
Pramod Potbhare 15 Electrical Vehicles and 'Think Tank'
- A. C. Bhide
Page Layout
G'tech Computers
19 Electric Mobility and Cyber Security
Cover Page Design - Ravindra Benday
Vivek Sahasrabudhe

Printing 23 Leapfrogging in Automotive Industry :

Modern Printing Service The role of Sophisticated Electric Powertrains
1358A, Shukrawar Peth, - Vishal Sharma, Neha Jain Sharma
Bajirao Road, Pune 411002.
Ph. : 020-24471034
26 Israel's Smart Mobility Sector :
Printer/Publisher Driving Computers on Wheels
Printed and Published by - Anay Joglekar
Prashant Girbane
Director General
Mahratta Chamber of Commerce,
Industries and Agriculture
Senapati Bapat Road, Pune 411016.
Tel. : 020-25709000
9
Owner
The President and The Members of
the Executive Board of
Mahratta Chamber of Commerce,
Industries and Agriculture
A & B Wing, 5th Floor,
MCCIA Trade Tower,
International Convention Centre
Senapati Bapat Road, Pune 411016.
Tel. : 020-25709000
लेखातील मते लेखकाांचीच
CIN : U01409MH1974PLC017803

: ऑगस्ट २०१९
 www.twitter.com/MCCIA_Pune
Electric Mobility and Cyber Security
Recently Modi 2.0 government
made some major announcements for
pushing Electric Mobility in India as part
of the Union Budget 2019. While the
Indian auto sector did not see any
dramatic changes in tax norms, FM
Minister Nirmala Sitharaman
recommended reducing the GST rate
on Electric Vehicles (EVs) from the
current 12 percent to 5 percent in a bid to
push the sale of EVs in the country. In
addition, there will be an income tax
deduction of Rs. 1.5 lakh on the interest
paid on the loans taken to purchase
EVs. The push for EV purchase is
expected to boost sales for the alternate
fueledvehicles, which has been a major
agenda for the Modi 2.0 government
since the previous term.
: ऑगस्ट २०१९
The Union Budget 2019 also
included the proposal for custom duty
e x e m p ti o n o n i m p o r t o f s p e c i fi c
components. The new proposals will be
in addition to the Rs. 10,000 crores
allocated for EVs under the FAME II
scheme and includes solar storage
batteries and charging infrastructure as
well.
Current Manufacturing Capacity &
Challenges
Currently, only a handful of electric
four-wheelers are available in India. The
choices are limited to only - Tata Tigor
EV, Mahindra eVerito and Mahindra e20
Plus. However, the scenario is going to
completely change in the coming 12
months. That's Good News!! Several
www.twitter.com/MCCIA_Pune
Ravindra Benday
major carmakers are expected to launch
their EVs in the country. While domestic
players like Maruti Suzuki and Tata
Motors are lining up with their products,
overseas carmakers like Hyundai, MG
(Morris Garages) and Audi will soon be
driving their EVs into India.
While India is already one of the
most important car markets in the world,
it is expected to become an EV hub as
well. But the biggest worry is India's
dependence on imported components
for E V s could make the country
vulnerable to Cyber Security breaches.
We have noticed on many occasions in
various industries that when we take
equipment from overseas, there have
been instances where there's a
 www.twitter.com/MCCIA_Pune
backdoor entry left open and
information does go back to the
equipment supplier, which could in
future have implications for national
s e c u r i t y. H e n c e I n d i a s h o u l d
indigenously manufacture the majority
of the parts needed for its EVs. All of the
software and at least 55-60 percent of
the components need to be made
domestically to keep EVs and the grid
secure.
Cyber Risks of Electric Vehicles
Undoubtedly, EVs are an exciting
s t e p f o r w a r d i n S m a r t M o b i l i t y,
improving the quality of the air that we
breathe, tackling issues such as noise
pollution and greenhouse gas
emissions, and working towards better
energy security for the future. However,
as with any new technology, especially
one which controls the safety on our
roads, security factors need to be
considered left, right and center.
In developing countries, jump-
starting initiatives such as EVs could
have incredible benefits for the
economy at large. By cutting down on
fuel imports, and working to reduce
carbon emissions – politicians gain
public support, with quick wins that
: ऑगस्ट २०१९
seem to have no downside. But really is
this the case?
Let's look at India wherein the
government has vowed to have a
majority of EVs on the roads by 2030,
despite that number being almost non-
existent currently. In order for this to
happen, India will need to rely heavily on
foreign exports such as Chinese
manufacturers. In fact, EV makers are
forced to import as much as 80% of an
EV, from the battery itself, to the battery
management system. With this reality,
the opportunities are ripe for
manufacturers to leave backdoor entry
points for malicious intent or collecting
sensitive data. Sounds unlikely? This is
reportedly what 30 US organizations,
including giants Apple and Amazon are
dealing with.
The risks are far greater than one
vehicle or even one OEM. IoT (Internet
of Things) enables an infected EV to
communicate with its charging station,
and from there to a network of vehicles,
and even the electricity grid at large.
While a wide-spreading risk to Cyber
Security could be shattering to public
image as well as cost million dollars to
fix, a similar kind of attack on automotive
could have the same impact – on top of a
real and disastrous effect on human
lives. This is one reason why key
stakeholders in India have asked for
legislation to ensure that EVs and
charging points have network
segmentation technology enforced to
reduce the associated risk.
EV Hacking Incidents& Case
Analysis
As you may be aware, Chinese
hackers have attacked Tesla Electric
Cars from afar, using exploits that can
activate brakes, unlock doors, and fold
mirrors from up to 20 KMs away while
the cars are in motion. The Shenzhen,
China-based hacking firm has withheld
details of the world-first zero-day
attacks and privately disclosed the flaws
to Tesla. The firm worked on the attack
for several months, eventually gaining
access to the motor that moves the
driver's seat, turning on indicators,
opening the car's sunroof and activating
window wipers.
Keen Security Labs published a
report showing how they tricked Tesla's
Autopilot self-driving software into
swerving into an oncoming traffic lane.
The group of Cyber Security

researchers from Keen Security Labs in
China placed bright-colored stickers on
the road to create a “fake lane” that
tricked the self-driving software of a
Tesla Model S into veering from the
appropriate driving lane into the
opposing lane on a test course, where
oncoming traffic would be driving in a
real-life scenario. Tesla CEO Elon Musk
took to twitter to commend the
researchers for what Musk described as
“Solid Work.”
Eventually connected and
autonomous cars will certainly become
part of our future critical infrastructure.
So, it is necessary to provide the
automotive industry with adequate
security solutions. The need for
automotive Cyber Security has been
proven by :
● The Tesla S obstacle hiding scenario
● The Chrysler Jeep case
● The Nissan Leaf study
To e n s u r e i n t e r c o n n e c t i v i t y,
connected cars rely on wireless and
cellular communication interfaces. This
exposes them to underlying security
risks. In the Nissan Leaf scenario,
attackers gained direct remote access
to the in-vehicle network of an entire
vehicle fleet around the world.
These attacks revealed that neither
the automotive industry nor the security
community is ready for a large-scale
targeted attack to the upcoming
connected car ecosystem.Until these
attacks, the general perception was that
an attacker required physical access to
the vehicle. As such, car manufacturers
focused on increasing physical security.
As in-vehicle wireless and Bluetooth
connections become standardized, the
threat increases. This is a call-to-action
for security practitioners and car
manufacturers to provide connected
cars with security solutions that address
the increasing threat landscape.
Providing adequate cyber security
mechanisms is still challenging due to
the in-vehicle network complexity. In-
vehicle components and technologies
were also built with no security in mind.
Adopting security mechanisms already
used in other application domains (for
example encryption) will introduce
additional computational time and
processing performance. This may lead
to safety risks, as components linked to
www.twitter.com/MCCIA_Pune
braking or steering could become
unresponsive.
Cyber Risks of EV Charging Stations
The technology of charging station
makes it an easy target or attackers. In
particular, cascaded attacks and worm
infections can propagate faster than
other components. In the global
scenario, public has already seen
examples of attackers leveraging
electronic charging stations to cause
damage. This is often done through the
Near-Field Communication (NFC) card
that is used to handle billing when
drivers charge their EVs. Problems
include third-party providers of the ID
cards themselves, who often do not
secure their customer data.
Researchers have shown they are able
to copy these cards and use them to
charge their vehicles, with the bill going
to the associated account.
Additionally, many of the charging
stations that are being used today use
an out of date Open Charge Point
Protocol based on HTTP, which does
not encrypt data or communications.
This could lead to relay or man-in-the-
m id dle a ttacks whe re attac kers
: ऑगस्ट २०१९
 www.twitter.com/MCCIA_Pune
leverage a seemingly legitimate signal
such as Wi-Fi. This vulnerability could
also allow attackers to rewire charging
requests altogether, and gain root
access to the station.
USB ports on charging stations
could also be used for malicious intent
that could directly affect driver privacy.
Through a simple flash drive, logs and
data can be copied to the drive, giving
attackers not only the data on the OCPP
server itself, but also confidential
information on users of the charging
point, allowing attackers to copy their ID
numbers or even track their location.
The Central Electricity Authority
(CEA), India's planning body for the
power sector, has submitted a report to
the government on Cyber Security for
EVs. One of the suggestions is to
ensure EVs and charging stations don't
have the same communication system,
so there's a firewall preventing a car
from communicating with the power
grid.
Staying on Top of Cyber Risks
Most OEMs, Fleets and other key
EV stakeholders rely on security in silos
to manage this increasingly complex
environment, whether in-vehicle
security, or network security. Many
businesses also feel forced to trust third-
party manufacturers and public
provided resources, feeling like they
have no other choice in the absence of
information or control.
In an environment as emergent as
E Vs, and with Black Hat attacks
: ऑगस्ट २०१९
surpassing, many businesses simply
don't know what to look out for yet. This
single pane of glass approach is the only
solution that keeps you ahead of the
game.
Solutions for the Automotive Cyber
Security Threat
A methodical approach to ensure
risk mitigation in automotive systems
would require -
Increased Visibility
The interactions between the digital
systems inside the vehicle, as well as
with other entities in its environment,
should be monitored to detect
suspicious activities. This will help to
identify faults or errors by enabling real-
time analytics of the network
connections inside the vehicle, as well
as with its external environment.
Protection Schemes for In-Vehicle
Interfaces
The number of interfaces that allow
data exchange between the In-Vehicle
subsystems and its external
environment is growing. However,
exploiting vulnerabilities on certain
interfaces might still need physical
vehicle access, while for others it can be
done remotely. Therefore, different
security measures are required for
protecting each interface. These can be
combined to achieve the highest threat
protection level possible.
Develop an Incident Detection and
Response Plan
An automotive cyber-incident
requires immediate remediation, to
ensure passenger safety. To handle this
situation, cross-industry stakeholders
(e.g. security experts, system
integrators, manufacturers or fleet
managers) must join forces. All
stakeholders should collaborate on a
robust security program against the
ever-increasing automotive threats,
such as the Automotive Information
Sharing and Analysis Center (Auto-
ISAC) initiative.
A security framework that properly
addresses cyber risks for the future of
the automotive industry will make it
secure. It will enable to speed up the
adoption of new technologies such as
connected and autonomous cars.
Conclusion
In India, the use of EVs may grow
rapidly due to its environmental
benefits. However, the major problem of
these vehicles is their limited battery, the
lack of charging stations and the re-
charge time. Introducing Information
and Communication Technologies, in
the field of EVs, will improve energy
e f f i c i e n c y, e n e r g y c o n s u m p t i o n
predictions, availability of charging
stations, etc. The Internet of Vehicles
based only on EVs is a complex system
which composed of vehicles, humans,
sensors, road infrastructure and
charging stations. All these entities
communicate using several
communication technologies. But
EVsmight be therefore vulnerable to
significant attacks such as DDoS, False
Data Injection, and Modification etc. At
the same time, all of the software and at
least 55-60 percent of the components
need to be made domestically to keep
EVs and the grid secure. Hence, Cyber
Security is a crucial factor for the
development and the wide deployment
of Internet of Electric Vehicles&is an
increasingly urgent issue for the
automotive industry, as systems
become more technologically complex
and the threat environment also
becomes increasingly capable and
sophisticated.
----------------------------------------------------
Ravindra Benday
MD &CEO, Benelec Infotech
Ph no.+91 98230 35243
ravindrab@benelecinfotech.com