Join our Newsletter — 33% off our NHI Course

EV charging trust: what PKI and device identity change for teams

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 19129
Topic starter  

TL;DR: EV charging infrastructure needs availability, interoperability, and digital trust, with PKI and ISO 15118-2 certificates enabling authenticated Plug & Charge connections between vehicles and chargers, according to DigiCert. For identity teams, the lesson is that device trust and lifecycle control matter as much in physical infrastructure as they do in NHI programmes.

Editorial analysis by NHI Mgmt Group, based on content published by DigiCert: “The keys to unlocking secure, sustainable EV charging”.

Key questions

Q: How should organisations govern device identity in shared charging infrastructure?

A: Treat every charger and vehicle certificate as part of a governed identity lifecycle.

Q: Why does interoperability create identity governance risk in EV ecosystems?

A: Because interoperability multiplies the number of organisations that must trust the same authentication model.

Q: What breaks when IoT certificates are not lifecycle-managed?

A: When IoT certificates are not lifecycle-managed, devices can keep trusted access long after business ownership, vendor relationships, or security intent has changed.

Practitioner guidance

  • Map charging assets to a trust inventory Document every charger, vehicle interface, issuer, and certificate chain involved in the charging flow so you can see where trust is anchored and where it is delegated.
  • Govern certificate lifecycle end to end Define issuance, renewal, revocation, and retirement processes for charger and vehicle certificates, including who can approve exceptions and what triggers recovery.
  • Standardise trust boundaries across partners Require common identity and certificate expectations for automakers, charger operators, and platform providers so interoperability does not rely on ad hoc trust exceptions.

Bottom line: EV charging trust depends on more than connectors and app workflows. It depends on certificate-based device identity that can be issued, validated, and revoked across multiple organisations.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 18837
 

EV charging is becoming a device identity problem before it is a user convenience problem. The article shows that charging only scales when chargers, vehicles, and payment systems can trust each other across organisational boundaries. That shifts the control question from physical access alone to certificate governance, device authentication, and lifecycle management. For practitioners, the lesson is to model EV charging as a federated identity ecosystem, not a standalone IoT deployment.

A question worth separating out:

Q: What is the difference between plug compatibility and trusted charging interoperability?

A: Plug compatibility is physical or electrical matching. Trusted charging interoperability adds identity proof, certificate validation, and mutual trust between organisations before a charging session is allowed to proceed. One solves connection mechanics, while the other solves whether the connection should be trusted at all.

👉 Read our full editorial: EV charging trust depends on PKI, interoperability, and identity



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.