The Indian Computer Emergency Response Team (CERT-In) has received reports of safety concerns involving electric three-wheelers, specifically e-rickshaws. Unauthorized individuals can use a publicly available BMS mobile application to abruptly power off moving e-rickshaws.
The Indian Computer Emergency Response Team (CERT-In) has raised safety concerns about electric three-wheelers, commonly known as e-rickshaws. According to reports, it is possible for unauthorized individuals to use a publicly available BMS mobile application to abruptly power off moving e-rickshaws. The issue stems from the Bluetooth module of the Battery Management System (BMS) chip, which is embedded in the battery module of these vehicles. The BMS commonly found in low-cost e-rickshaws often lacks credentials, allowing unauthorized users to connect and modify settings or cut off the battery’s discharge, resulting in sudden vehicle shutdowns.
CERT-In has identified the mobile apps that can be used to abruptly power off batteries of e-rickshaws and reported them to the Ministry of Electronics and Information Technology (MeitY) to remove these apps from application play stores.
The Ministry of Road Transport and Highways (MoRTH) has stated that cybersecurity regulations have not been framed specifically for e-rickshaws. However, the Battery Safety Requirements for L-category Electric Vehicles shall meet the standards prescribed in AIS 156, and Electric Power Train Safety shall comply with AIS 038 Rev. (2). The Government has published draft rules for the approval of vehicles regarding cybersecurity in respect of vehicles of category L, M, and N as per AIS- 189 and AIS- 190.
Every manufacturer or importer of a motor vehicle, including electric vehicles, is required to submit prototypes to a testing agency notified under Rule 126. The testing agency issues a Type Approval Certificate certifying compliance with the provisions of the Motor Vehicles Act, 1988 and the CMVR, 1989.
Source:
Press Information Bureau
