Danish Officials Rush to Plug Security Gap in Chinese E-powered Buses

Authorities from Denmark are urgently studying ways to shut an seeming protection gap in numerous Chinese-made electric buses that permits them to be remotely deactivated.

Probe Prompted by Discoveries in Neighboring Country

This inquiry comes after transport authorities in Norway, where the Yutong buses are also running, determined that the Chinese supplier had online connectivity for system upgrades and system checks to the vehicles’ control systems – which might be misused to affect buses while in transit.

“These trials uncovered vulnerabilities that we are now taking measures against,” said the chief executive of the transit agency. “Federal and regional authorities have been alerted and must support extra steps at a national level.”

Proposed Solution and Its Limitations

The research determined that remote deactivation could be avoided by taking out the buses’ connectivity cards, but they have avoided this step because it would also cut off the bus from support services.

• Enhanced protection requirements for upcoming purchases
• Acting before the introduction of advanced versions of buses
• Anticipating vehicles that could be tighter connected and tougher to protect

Extent of the Issue in Denmark

Denmark's largest public transport company manages nearly 470 electric buses from China, with over 260 of these made by Yutong.

“Electric buses – just as electric cars – can be disabled from afar if their software systems have web access,” explained a top management official. “It isn't a Chinese bus problem. It is a problem for various sorts of vehicles and systems with China-produced components installed.”

Official Evaluation and Alerts

National authorities for public safety and emergency management stated that it was had no knowledge of any specific cases in which electric buses had been deactivated, but advised that the vehicles were equipped with “subsystems with online access and sensors (cameras, audio recorders, GPS) that can represent weaknesses which could be used to hinder bus operations”.

Manufacturer Statement and Information Security

The company said it “rigorously follows with relevant regulations and commercial guidelines” and that vehicle terminal data in the EU were maintained at a datacentre in Frankfurt.

“These records is used exclusively for vehicle-related maintenance, optimisation and advancement to meet post-purchase service demands,” noted a official speaker. “This information is secured through storage encryption and permission systems. No one is allowed to access this data without client approval.”

Government Reaction and Concerns

A political representative stated that Denmark has been “much too sluggish” when it came to reliance upon Chinese companies.

“This is a significant concern. We ought not be so leaning on a country that has ethics and standards so distinct from Denmark,” he remarked. At a time when Denmark was attempting to enhance its strength amid claims of mixed warfare by Russia, “it’s not very resilient to be fully leaning on China”.

Transportation authorities in Norway refused to speak on the matter.