DataTransfer PDU-based Rollback Mechanism for Securing OCPP 1.6 Against Spoofing Attacks

The Open Charge Point Protocol is a widely adopted communication standard that facilitates interoperability between Charge Points and Central Systems in the electric vehicle charging ecosystem. This paper explores the security implications of OCPP 1.6, with a particular focus on the risks posed by spoofed or unauthorized messages. We propose a rollback mechanism utilizing the DataTransfer PDU to mitigate these risks, allowing the Central System to trigger reversion of unauthorized changes at the CP level. The proposed solution ensures secure, efficient management of configurations and mitigates potential threats such as replay attacks, spoofed requests, and unauthorized modifications. This paper contributes to the growing body of knowledge on securing EV charging infrastructure by highlighting underexplored vulnerabilities in OCPP 1.6 and providing practical solutions to enhance the security and resilience of the protocol.