OCPP 1.6 Security Whitepaper (3rd edition)

This white paper describes how the security enhancements, introduced in OCPP 2.0, can be used, on top of OCPP 1.6-J, in a standardized way.

The security part of OCPP 2.0 was developed to strengthen and mature the future development and standardization of OCPP. It is based amongst others on the end-to-end security design by LaQuSo [11].

Security requirements are included, on security measures for both Charge Point and Central System, to help developers build a secure OCPP implementation.

This document contains the following security improvements:
• Secure connection setup
• Security events/logging
• Secure firmware update