Denmark's Officials Scramble to Close Safety Loophole in China-made Electric Buses

Authorities from Denmark are actively investigating methods to seal an seeming protection gap in many China-produced electric buses that enables them to be remotely deactivated.

Probe Triggered by Findings in Neighboring Country

The probe was initiated after transport authorities in Norway, where these electric buses are also in service, found that the Chinese supplier had online connectivity for program patches and system checks to the vehicles’ control systems – which may be manipulated to impact vehicles while operating.

“Our examination exposed threats that we are now taking measures against,” commented the top official of the transit agency. “National and local authorities have been notified and must assist with additional measures at a national level.”

Proposed Solution and Its Limitations

Their analysis determined that online disabling could be blocked by extracting the buses’ mobile chips, but they have refrained from this because it would also isolate the bus from support services.

• Enhanced protection requirements for upcoming purchases
• Acting before the arrival of next generation of buses
• Getting ready for vehicles that could be deeper linked and tougher to protect

Extent of the Problem in Denmark

Denmark's largest public transport company manages 469 electric buses from China, with approximately 260 of these manufactured by Yutong.

“E-buses – similar to electric cars – can be remotely deactivated if their software systems have web access,” noted a senior operations executive. “It isn't a Chinese bus problem. It is a problem for all types of vehicles and systems with electronics from China incorporated.”

Government Evaluation and Warnings

The Danish agency for civil protection and crisis response indicated that it was uninformed of any actual occurrences in which electric buses had been disabled, but warned that the vehicles were equipped with “subsystems with online access and detection devices (imaging devices, audio recorders, location tracking) that can represent weaknesses which could be exploited to hinder bus operations”.

Manufacturer Response and Data Protection

Yutong said it “strictly complies with applicable laws and industry standards” and that vehicle terminal data in the EU were stored at a server facility in Frankfurt.

“The information is used exclusively for transport servicing, optimisation and betterment to meet customers’ after-sales service needs,” added a official speaker. “This information is protected by storage encryption and access control measures. Nobody is authorized to see this data without user permission.”

Government Reaction and Concerns

A political representative stated that Denmark has been “far too delayed” when it came to dependency regarding Chinese companies.

“This is a major issue. We should not be so reliant upon a country that has principles and beliefs so distinct from Denmark,” he added. During a period when Denmark was trying to increase its strength amid accusations of hybrid attacks by Russia, “it's not particularly strong to be completely reliant on China”.

Government transport officials in Norway refused to speak on the matter.