E-Rickshaw Hacked: Chinese Apps Behind Roadside Shutdowns

E-Rickshaw Security Crisis: Chinese Battery Apps Under Scrutiny

A disturbing trend is emerging across India, causing distress among e-rickshaw drivers, passengers, and authorities. Incidents of e-rickshaws being remotely shut down mid-journey via certain Chinese battery management apps, such as BAT-BMS and Epoch Li-ion, are on the rise.

This escalating issue transcends mere technical glitches, highlighting significant concerns about employment security, public safety, and digital misuse.

The Sudden Shutdown Phenomenon

E-rickshaws serve as a crucial livelihood for millions in India. Recently, complaints surged about vehicles abruptly stopping while in motion.

Investigations revealed that the Battery Management Systems (BMS) in many low-cost lithium-ion batteries lacked adequate security. These systems often missed robust password protection or encryption, leaving them vulnerable to external connections via Bluetooth or mobile apps.

Hacking, Pranks, and Extortion

Human interference is a significant factor behind these disruptions, beyond simple technical flaws. Reports indicate malicious actors are exploiting this vulnerability.

Some individuals connect to e-rickshaws via Bluetooth to halt them, while others are reportedly using this as a 'prank.' Alarmingly, organized rackets are operating in some areas, disabling e-rickshaws and then demanding ₹200-₹300 for their repair, constituting illegal extortion.

Impact on Livelihoods and Road Safety

This crisis severely impacts e-rickshaw drivers. Sudden vehicle shutdowns lead to:

• Disruption of daily earnings.
• Erosion of passenger trust.
• Increased risk of accidents due to unexpected stops on roads.

Drivers often find themselves stranded without fault, leading to disputes and stressful situations with passengers.

Government and MeitY Intervention

Recognizing the gravity of the situation, the Ministry of Electronics and Information Technology (MeitY) has taken decisive action. Apps like BAT-BMS and Epoch Li-ion have reportedly been removed from the Google Play Store and Apple App Store due to security vulnerabilities.

The government is concerned that such insecure apps could be exploited to significantly disrupt public order.

Technical Safeguards Mandated

To address this, the government and tech experts have issued clear directives to battery manufacturers. These include:

• Mandatory password protection for all e-rickshaw batteries.
• Implementation of strong encryption for Bluetooth or app-based control systems.
• Prevention of any unauthorized third-party access.
• Ensuring BMS systems are more secure and certified.

These steps are deemed crucial to prevent future incidents.

Police and Administrative Action

Law enforcement agencies have also commenced investigations and actions across several states. Arrests have been made in cities like Delhi and Ujjain (Madhya Pradesh) for involvement in such cases.

Investigations suggest some individuals were systematically using this as a means for illegal income. Authorities are now focused on identifying and dismantling these networks.

Technology vs. Security: A New Dilemma

This case raises a fundamental question: can safety be compromised in the name of cheaper technology? In public transport like e-rickshaws, weak digital systems directly affect ordinary citizens.

This incident underscores that alongside technological innovation, cybersecurity is equally vital.

Future Directions

Moving forward, essential improvements for e-rickshaws and other electric vehicles include:

• Establishing government-mandated battery safety standards.
• Making certification of all BMS systems compulsory.
• Implementing cybersecurity audits.
• Educating users about digital security.

The issue linked to apps like BAT-BMS and Epoch Li-ion is not just a technical flaw but a broader security and social challenge. It demonstrates how minor technical weaknesses can lead to widespread economic, social, and security crises.

While government action is a significant step, a lasting solution requires strengthening technology, security, and regulations concurrently.