Zero Trust Security Model

Cheatsheet ini memberikan gambaran menyeluruh mengenai konsep Zero Trust Security, satu pendekatan keselamatan siber yang tidak menganggap sebarang entiti sebagai selamat sama ada di dalam atau di luar rangkaian organisasi. Pendekatan ini melibatkan pengesahan, pengesanan, dan pemantauan berterusan terhadap semua entiti yang mengakses sistem.

Komponen Utama Zero Trust Security

1. Jenis Pengesahan:

Terdapat dua jenis utama pengesahan iaitu Single-Factor Authentication dan Multi-Factor Authentication (MFA). Dalam model Zero Trust, penggunaan MFA adalah lebih disarankan untuk memastikan setiap akses dilindungi dengan lapisan keselamatan tambahan.

2. Bidang atau Vertikal Penggunaan:

Zero Trust boleh diterapkan dalam pelbagai sektor seperti Perbankan, Kewangan dan Insurans (BFSI), Kerajaan dan Pertahanan, IT & ITES, Kesihatan, Runcit dan E-dagang, Tenaga dan Utiliti, serta sektor lain. Ini menunjukkan fleksibiliti Zero Trust yang boleh disesuaikan untuk pelbagai industri dengan keperluan keselamatan yang berbeza.

3. Aplikasi:

Beberapa aplikasi utama termasuk Kawalan Akses/Data Access Control, Keselamatan API, Analitik Tingkah Laku Pengguna (UBA), Analitik Keselamatan, dan aplikasi lain yang relevan dengan aspek keselamatan akses dan pemantauan.

Aplikasi Teratas Zero Trust

Termasuk aplikasi seperti Remote Access, Cloud Access Security Broker (CASB), Data Loss Prevention (DLP), Identity and Access Management (IAM), Endpoint Security, dan Network Access Control (NAC). Aplikasi-aplikasi ini berfungsi untuk memberikan lapisan keselamatan tambahan kepada pengguna serta mengelakkan kehilangan data dan mencegah akses yang tidak dibenarkan.

Teknologi Teras

Teknologi lanjutan yang digunakan dalam Zero Trust termasuk:

Microsegmentation untuk memecahkan rangkaian kepada segmen-segmen kecil yang lebih mudah dikawal.

Multi-Factor Authentication (MFA) untuk pengesahan pengguna.

Analitik Tingkah Laku bagi mengenal pasti aktiviti mencurigakan.

Pembelajaran Mesin dan AI untuk mengenali pola ancaman.

Zero Trust Network Access (ZTNA) dan Secure Access Service Edge (SASE) yang bertujuan memperkukuh pengesahan akses rangkaian.

Domain Utama dalam Zero Trust

1. Application Security:

Merangkumi pelbagai mekanisme keselamatan seperti Web Application Firewall (WAF), Runtime Application Self-Protection (RASP), dan Application Security Testing yang menyeluruh untuk aplikasi web dan perisian.

2. Cloud Security:

Termasuk kawalan seperti CASB, Cloud Workload Protection Platform (CWPP), serta Data Loss Prevention (DLP) khusus untuk cloud. Langkah-langkah ini kritikal dalam memastikan keselamatan data dan beban kerja di awan.

3. IoT Security:

Fokus kepada keselamatan peranti IoT dengan ciri-ciri seperti IoT Firewall, Platform Keselamatan IoT, dan Pengurusan Peranti IoT bagi mengelakkan serangan melalui peranti IoT yang mudah disasarkan

4. Network Security:

Termasuk sistem Intrusion Detection System (IDS) dan Intrusion Prevention System (IPS) serta kawalan segmentasi rangkaian untuk mengawal pergerakan lateral dalam rangkaian dan mengesan sebarang pencerobohan yang mencurigakan.

5. Data Security:

Penjagaan data meliputi langkah-langkah Data Loss Prevention (DLP), Penyulitan Data, Penutupan Data (Data Masking), dan Sandaran dan Pemulihan Data untuk memastikan data sentiasa terlindung dan boleh dipulihkan jika berlaku sebarang insiden keselamatan.

Kesimpulan

Cheatsheet ini memudahkan pemahaman Zero Trust Security dengan membahagikan pendekatan ini kepada beberapa kategori utama, aplikasi, teknologi dan teknik kawalan. Zero Trust Security adalah langkah proaktif yang mengutamakan keselamatan dengan menganggap setiap akses sebagai potensi risiko dan menggunakan pelbagai lapisan pengesahan serta pemantauan untuk melindungi rangkaian, aplikasi, data, dan peranti.

Ulasan Buku : Leading Change tulisan John Kotter oleh Dr. Ahmad Suki Che M. Ariff.

*Mengurus Perubahan dengan Bijak: Panduan Praktikal untuk Organisasi dan Komuniti*

Dalam dunia yang sentiasa berubah ini, salah satu kunci kejayaan bagi mana-mana organisasi atau komuniti adalah kemampuan untuk mengurus perubahan dengan berkesan. Kita sering mendengar kata-kata bahawa "perubahan adalah satu-satunya perkara yang kekal," tetapi bagaimana kita benar-benar boleh bersedia dan merangkul perubahan secara berkesan? Perubahan bukan sekadar satu cabaran; ia adalah peluang untuk berkembang, memperbaiki, dan menjadi lebih cekap dalam menghadapi dunia yang semakin kompetitif ini. Di sinilah terletaknya kepentingan pengurusan perubahan yang baik dan bijaksana, yang mampu memastikan kita tidak ketinggalan dan terus relevan.

Buku "Leading Change" oleh John Kotter merupakan salah satu buku terlaris dan paling berpengaruh dalam bidang pengurusan perubahan. Dalam buku ini, Kotter berkongsi lapan langkah penting yang perlu diambil oleh organisasi atau komuniti dalam memastikan perubahan berlaku dengan jayanya. Buku ini tidak sekadar mengemukakan teori, tetapi ia disampaikan dengan cara yang praktikal dan mudah untuk difahami. Ia sangat berguna bukan sahaja bagi pemimpin syarikat besar, malah bagi mereka yang ingin membawa perubahan positif dalam komuniti atau persekitaran kerja mereka. Setiap langkah yang disarankan dalam buku ini telah terbukti berkesan dan boleh membantu kita memahami betapa pentingnya kepimpinan yang proaktif dalam menghadapi perubahan.

Untuk membantu anda memahami dan menerapkan konsep-konsep ini, mari kita huraikan setiap langkah penting dalam mengurus perubahan. Setiap langkah dilengkapi dengan contoh praktikal yang boleh diterapkan di tempat kerja atau dalam komuniti anda. Dengan mengambil pendekatan ini, kita boleh meminimumkan rintangan dan memaksimumkan impak positif yang boleh dicapai melalui proses perubahan.

---

*1. Mewujudkan Rasa Mendesak (Creating a Sense of Urgency)*

Perubahan tidak akan berlaku dengan sendiri. Ia memerlukan rasa mendesak, seolah-olah perubahan tersebut adalah sesuatu yang sangat penting dan tidak boleh ditangguhkan. Langkah pertama ini sangat penting kerana ia menetapkan momentum awal untuk perubahan. Rasa mendesak ini perlu diwujudkan di semua peringkat, dari pemimpin tertinggi sehingga pekerja paling bawah dalam organisasi. Apabila semua pihak merasakan bahawa perubahan adalah keperluan, maka proses perubahan akan lebih mudah dan lebih cepat diterima.

*Langkah Praktikal:*

- *Analisis Persekitaran:* Lakukan penilaian tentang situasi semasa dalam organisasi anda. Kenal pasti ancaman atau peluang yang mungkin menjadi faktor pendorong kepada perubahan. Contohnya, persaingan daripada syarikat lain atau perkembangan teknologi terkini yang boleh memberikan kelebihan.

- *Berkomunikasi Secara Terbuka:* Kongsikan maklumat ini dengan semua anggota organisasi. Contohnya, jika anda ingin memperkenalkan teknologi baru dalam organisasi, jelaskan kepada pekerja bagaimana teknologi ini boleh meningkatkan produktiviti dan mengelakkan organisasi daripada ketinggalan. Berikan contoh konkrit dan data sokongan untuk menunjukkan impak positif perubahan tersebut.

- *Mendapatkan Sokongan Pemimpin:* Melibatkan pemimpin dalam organisasi yang mempunyai pengaruh besar untuk memberi sokongan moral dan meningkatkan tahap kesedaran terhadap keperluan perubahan. Sokongan pemimpin ini boleh mempengaruhi pekerja untuk lebih yakin dan percaya bahawa perubahan adalah jalan terbaik untuk mencapai kejayaan.

*2. Membentuk Pasukan yang Kuat (Forming a Powerful Guiding Coalition)*

Tidak semua orang akan menyokong perubahan, jadi penting untuk membentuk sebuah pasukan yang kuat untuk memimpin perubahan. Pasukan ini seharusnya terdiri daripada individu-individu yang mempunyai kredibiliti dan semangat untuk membawa perubahan. Pasukan yang kuat ini akan menjadi tulang belakang kepada usaha untuk membawa perubahan dalam organisasi. Mereka berperanan untuk memandu, memberi inspirasi, dan mengatasi rintangan yang mungkin muncul sepanjang perjalanan perubahan.

*Langkah Praktikal:*

- *Pilih Individu Berpengaruh:* Pastikan pasukan ini mempunyai ahli yang berpengaruh dalam kalangan pekerja. Mereka boleh membantu membawa perubahan dengan meyakinkan rakan sekerja mereka tentang kebaikan perubahan tersebut. Kepercayaan antara pekerja dan pasukan ini sangat penting untuk memastikan perubahan diterima secara menyeluruh.

- *Tetapkan Peranan Jelas:* Setiap ahli pasukan mesti tahu peranan dan tanggungjawab masing-masing. Contohnya, seorang ahli mungkin bertanggungjawab dalam latihan, sementara seorang lagi dalam menyebarkan maklumat. Peranan yang jelas akan memastikan semua aspek perubahan ditangani dengan baik tanpa sebarang kekeliruan.

- *Perkongsian Idea dan Strategi:* Adakan sesi perbincangan berkala untuk membincangkan kemajuan dan halangan yang dihadapi. Ini akan memastikan bahawa semua ahli pasukan mempunyai pemahaman yang sama dan mampu bekerjasama dengan lebih baik.

*3. Mencipta Visi dan Strategi (Creating a Vision for Change)*

Visi yang jelas adalah penting untuk memberikan gambaran kepada semua orang tentang ke mana arah yang ingin dituju. Strategi yang baik pula perlu dirangka untuk merealisasikan visi tersebut. Visi ini berperanan sebagai pemandu yang menunjukkan haluan yang perlu diambil, sementara strategi menyediakan cara untuk mencapai destinasi tersebut. Tanpa visi yang jelas, organisasi boleh kehilangan fokus dan tenaga dalam menghadapi perubahan.

*Langkah Praktikal:*

- *Merangka Visi yang Ringkas dan Mudah Difahami:* Visi harus mudah untuk difahami oleh semua lapisan dalam organisasi. Contohnya, "Menjadi organisasi yang mesra digital dalam tempoh dua tahun akan datang." Visi ini harus memberi inspirasi dan memberikan rasa bangga kepada semua yang terlibat.

- *Merangka Strategi Berdasarkan Visi:* Tentukan langkah-langkah yang perlu diambil untuk mencapai visi tersebut, termasuk program latihan, kempen kesedaran, dan perubahan dalam proses kerja. Strategi perlu disusun secara terperinci, dengan mengambil kira semua sumber yang ada dan keperluan yang perlu dipenuhi.

- *Kaitkan dengan Matlamat Organisasi:* Pastikan visi tersebut selari dengan matlamat utama organisasi. Ini akan memastikan bahawa usaha untuk berubah adalah sebahagian daripada hala tuju jangka panjang organisasi.

*4. Menyampaikan Visi (Communicating the Vision)*

Visi dan strategi perlu dikomunikasikan dengan jelas dan kerap. Semua orang dalam organisasi perlu memahami dan menyokong arah perubahan tersebut. Komunikasi yang berkesan adalah kunci untuk mendapatkan komitmen dari semua pihak. Ia bukan sahaja perlu jelas, tetapi juga perlu diulang secara berkala agar mesejnya benar-benar difahami dan dihayati.

*Langkah Praktikal:*

- *Komunikasi Berterusan:* Gunakan pelbagai medium seperti email, mesyuarat, buletin organisasi, dan video untuk menyampaikan visi. Setiap individu perlu faham bagaimana perubahan ini akan memberi manfaat kepada mereka. Pastikan bahawa maklumat yang disampaikan mudah diakses dan difahami oleh semua pihak.

- *Contoh Tindakan Kepimpinan:* Pemimpin juga perlu menunjukkan sokongan mereka kepada visi ini dengan memberi contoh dalam tindakan seharian mereka. Misalnya, menggunakan sistem baru dalam tugas harian untuk menunjukkan bahawa pemimpin juga komited kepada perubahan. Tindakan ini akan menggalakkan pekerja lain untuk mengikuti contoh tersebut.

- *Dengar Balik Pandangan:* Penting juga untuk mendengar maklum balas daripada pekerja mengenai visi tersebut. Dengan memahami kebimbangan atau cadangan mereka, organisasi boleh melakukan penyesuaian yang diperlukan untuk memastikan sokongan lebih menyeluruh.

*5. Menghapuskan Halangan (Removing Obstacles)*

Terdapat halangan-halangan yang perlu diatasi untuk memastikan perubahan berjalan lancar. Halangan ini boleh jadi orang, proses, atau struktur organisasi yang menghalang pergerakan ke arah perubahan. Menghapuskan halangan ini adalah kritikal untuk memastikan bahawa semua orang dapat bergerak seiring dengan hala tuju perubahan.

*Langkah Praktikal:*

- *Kenal Pasti Halangan:* Lakukan kajian untuk mengenal pasti apakah halangan utama kepada perubahan. Sebagai contoh, mungkin terdapat pekerja yang tidak yakin dengan teknologi baru atau terdapat proses birokrasi yang memperlahankan perubahan.

- *Berikan Sokongan dan Latihan:* Adakan latihan untuk mengatasi ketakutan atau kekeliruan. Berikan sokongan secara individu kepada mereka yang memerlukan. Berikan juga mentor atau rakan sebaya yang boleh membantu mereka yang memerlukan bimbingan tambahan.

- *Penyesuaian Proses:* Jika terdapat proses-proses yang menjadi halangan, pertimbangkan untuk membuat penyesuaian atau memperbaiki proses tersebut. Contohnya, jika prosedur yang ada terlalu kompleks, ringkaskan supaya ia lebih mudah difahami dan diikuti oleh semua orang.

*6. Mewujudkan Kemenangan Kecil (Creating Short-Term Wins)*

Sangat penting untuk mencipta kemenangan kecil sepanjang proses perubahan. Ini akan memberi motivasi kepada semua anggota organisasi untuk terus terlibat dalam perubahan. Kemenangan kecil ini adalah bukti nyata bahawa usaha yang dijalankan berbaloi dan memberikan hasil yang positif.

*Langkah Praktikal:*

- *Sasaran Kecil dan Realistik:* Tetapkan sasaran yang boleh dicapai dalam jangka masa pendek. Sebagai contoh, sasaran dalam enam bulan pertama mungkin untuk meningkatkan penggunaan teknologi baru oleh 30% pekerja. Sasaran ini perlu realistik agar semua pihak dapat melihat hasilnya dengan jelas.

- *Rayakan Kejayaan:* Raikan setiap kejayaan kecil dengan memberi penghargaan atau pengiktirafan kepada individu atau pasukan yang terlibat. Ini dapat meningkatkan semangat dan komitmen mereka. Penghargaan boleh dalam bentuk sijil, hadiah kecil, atau pengiktirafan dalam mesyuarat organisasi.

- *Dokumentasi Kejayaan:* Rekod dan dokumentasikan setiap kejayaan kecil ini. Ini bukan sahaja boleh digunakan sebagai bahan motivasi, tetapi juga sebagai rujukan untuk membina strategi seterusnya.

*7. Membina atas Kejayaan (Building on Change)*

Setelah mencapai kemenangan kecil, jangan berhenti di situ. Perubahan perlu diteruskan agar dapat memberi impak yang berpanjangan. Setiap kejayaan kecil harus dijadikan asas untuk mencapai kejayaan yang lebih besar, dan seterusnya memastikan perubahan dapat berakar umbi dalam organisasi.

*Langkah Praktikal:*

- *Analisis Kejayaan dan Penambahbaikan:* Lihat kembali kejayaan yang dicapai dan kenal pasti apa yang boleh diperbaiki. Contohnya, jika teknologi baru telah berjaya digunakan, tanya apa lagi sokongan yang diperlukan untuk mempercepatkan penggunaan oleh lebih ramai staf. Ini memastikan bahawa proses perubahan sentiasa berada dalam keadaan dinamik dan responsif terhadap keperluan.

- *Buat Pembaharuan Lanjutan:* Jangan terlalu cepat berpuas hati. Teruskan menambah baik sistem atau proses untuk memastikan perubahan terus relevan dan efektif. Sentiasa lakukan penilaian semula untuk mengenal pasti peluang-peluang baru untuk berkembang dan memperbaiki.

- *Galakkan Inovasi:* Sokong pekerja yang mempunyai idea-idea untuk memperbaiki lagi proses kerja. Berikan mereka ruang untuk bereksperimen dan mencuba cara baru dalam meningkatkan keberkesanan organisasi.

*8. Menjadikan Perubahan sebagai Budaya (Anchoring Change in the Culture)*

Perubahan yang berjaya perlu diintegrasikan dalam budaya organisasi. Ia harus menjadi sebahagian daripada cara kerja yang biasa, bukan sekadar sesuatu yang berlaku sekali-sekala. Untuk memastikan perubahan tersebut berpanjangan, ia perlu diresapi ke dalam budaya organisasi dan menjadi sebahagian daripada identiti organisasi.

*Langkah Praktikal:*

- *Penilaian Prestasi:* Masukkan elemen perubahan ke dalam penilaian prestasi pekerja. Contohnya, nilai bagaimana setiap pekerja telah menyumbang kepada perubahan. Ini akan memastikan semua orang terus memberikan tumpuan kepada objektif perubahan.

- *Latihan dan Pengukuhan:* Pastikan latihan berterusan diberikan agar budaya baru ini kekal. Contohnya, adakan bengkel secara berkala untuk mengukuhkan kemahiran yang diperlukan dalam perubahan. Latihan ini juga membantu dalam memastikan pekerja baru memahami budaya organisasi yang mengutamakan perubahan.

- *Penghargaan kepada Nilai Baharu:* Berikan penghargaan kepada mereka yang memperlihatkan usaha untuk menjadikan budaya perubahan ini sebahagian daripada kerja seharian mereka. Ini akan menggalakkan lebih ramai pekerja lain untuk mengambil sikap yang sama.

*Penutup*

Pendek kata, buku "Leading Change" oleh John Kotter memberikan panduan yang sangat praktikal dan berguna untuk mengurus perubahan. Setiap langkah yang dikongsikan adalah realistik dan boleh diterapkan dalam pelbagai situasi, sama ada di organisasi besar atau komuniti kecil. Ia bukan sahaja memberi inspirasi, tetapi juga memberikan kerangka kerja yang jelas untuk memimpin perubahan dengan penuh keyakinan dan berjaya.

Mengurus perubahan bukanlah sesuatu yang mudah, tetapi dengan pendekatan yang betul, ia dapat dilakukan dengan lebih berkesan. Perubahan memerlukan usaha, dedikasi, dan semangat daripada semua peringkat dalam organisasi. Jika anda ingin membawa perubahan positif dalam organisasi atau komuniti anda, jangan ragu untuk menggunakan panduan Kotter ini sebagai rujukan. Mulakan dengan mewujudkan rasa mendesak, bentuk pasukan yang kuat, dan teruskan dengan langkah-langkah praktikal untuk menjadikan perubahan sebagai satu budaya yang lestari. Dengan usaha yang konsisten dan sokongan semua pihak, perubahan yang bermakna pasti dapat dicapai.

10Base-T1S Automotive Ethernet vs. 10Base-T1L Industrial Ethernet

 10Base-T1S, a variant of Automotive Ethernet, and 10Base-T1L, also known as Industrial Ethernet, are Single Pair Ethernet (SPE) protocols described in IEEE 802.cg standards. Both offer the same 10 Mb/s communication speed using a single, unshielded twisted pair (T1), but differ in specifics of reach, encoding schemes and topologies, as well as their principal applications.

10Base-T1S (S stands for short reach) has a reach of up to 25 m, more than enough for in-vehicle applications. 10Base-T1L (L stands for long reach) allows for the same 10 Mb/s speed over a reach of 1,000 m. 

10Base-T1S uses Differential Manchester Encoding (DME). With DME, the clock is embedded and the data is sampled between the clocked edges. Instead of a specific logic-high/low voltage level, the bits are based on the presence or absence of any transition within the clock period. Because it lacks a DC component, this encoding scheme allows electrical connections easy galvanic isolation, ensuring the signal never remains at logic low or logic high for an extended period of time, which allows for versatility in a number of automotive applications.

Figure 2: PAM3 Encoding.

10Base-T1L utilizes PAM3 Pulse Amplitude Modulation encoding. In PAM3 signal modulation, information is encoded in the amplitude of a series of signal pulses. This results in simplified receiver and transmitter design, easy transmission over a single pair of wires, more bits transmitted in a symbol, and higher data rate links. 

These two protocols are further differentiated by the topologies they employ. 10Base-T1S supports half-duplex and full-duplex communication, allowing either a point-to-point direct connection between two nodes, or use of a multidrop topology with up-to-eight nodes connected on a single 25 m bus segment. 10Base-T1L supports a full-duplex link that can include up to 10 connectors. 

To better understand the differences between these two protocols, we can explore the ways these standards are applied in the growing sectors of Automotive and Industrial Automation. 

As in-vehicle electronics grow in volume and complexity to support the goal for autonomous driving, we find 10Base-T1S Automotive Ethernet used to enhance In-Vehicle Network (IVN) architecture. It is most commonly used to connect sensors, microphones and speakers to powertrain, car body and infotainment Engine Control Units (ECUs). Because 10Base-T1S provides a higher bandwidth, it allows IVN applications to operate with higher quality data compared to some of the legacy IVN protocols such as MOST, CAN, LIN and FlexRay. Plus, a combination of 10Base-T1S and other Automotive Ethernet protocols allows a single software framework to be used from the lowest to highest speed ranges. As discussed in other posts on this blog, standard Ethernet is not suited for use in IVN, partly because the 100 m reach of standard Ethernet is unnecessary for a vehicle, and overall, the technology does not hold up to the stringent EMC and EMI requirements of the automotive industry.   

By enabling point-to-point communication over distances up to 1000 m, 10Base-T1L provides a framework for industrial control and safety systems. In the context of Operational Technology (OT) networks, such as Remote, Intelligent Building, Industrial and Process Industries applications, 10Base-T1L replaces legacy, built-for-purpose protocols that pose challenges because they require complex gateway devices to communicate between domains, and experts trained to manage and maintain such outdated networks. By bringing the benefits of the single twisted pair to the factory floor, 10Base-T1L allows easy integration and standardization in areas of building and industrial automation. 

Significance of Open Protocols in Empowering E-Mobility:OpenADR, OCPI and OCPP

Electric Mobility is revolutionary transforming the way we move & the energy sources we rely on for transportation. At the heart of this transformation lie open protocols, a crucial but often overlooked aspect of e-mobility. Open protocols in e-mobility play a crucial role in fostering a connected and accessible electric vehicle ecosystem. They enable different stakeholders, including EV manufacturers, charging station operators, and service providers, to work together harmoniously, promoting the growth and sustainability of e-mobility on a global scale.

In this article, we will introduce you to the world of open protocols in e-mobility, exploring their importance, common types, benefits, challenges, and their role in shaping the future of sustainable transportation.

What is e-mobility ?

E-mobility, short for electric mobility, refers to the use of electric power to propel vehicles, ranging from electric cars and bikes to buses and scooters. This shift towards electric vehicles is driven by the need to reduce greenhouse gas emissions, combat climate change, and improve air quality in urban areas. E-mobility not only helps in achieving these environmental goals but also promises lower operating costs and increased energy efficiency.

Common Open Protocols in electric mobility

“Open Protocols” refers to standardized sets of rules and communication methods that enable different components of the electric vehicle (EV) ecosystem to interact and exchange data effectively. They are the language that allows various components of the EV ecosystem to communicate seamlessly, ensuring efficient and reliable charging processes.

Open Charge Point Protocol (OCPP):

OCPP is one of the most widely used protocols for communication between charging stations and central management systems. It defines a set of rules that govern the interaction between charging points and cloud based charging management software platform, allowing for flexibility and compatibility between charging stations of different manufacturers.

Open Charge Point Interface (OCPI):

OCPI is another important open protocol that facilitates communication between charging station operators and e-mobility service providers. It streamlines processes like billing and real-time data sharing, ensuring a smooth user experience. The OCPI protocol is managed and maintained by the EVRoaming Foundation, ensuring its free availability.

Open InterCharge Protocol (OICP):

OICP is a protocol that focuses on interoperability between different e-mobility service providers. It standardizes communication between charging networks, promoting seamless roaming for EV users, regardless of their service provider. The Open Intercharge Protocol (OICP) has been developed by Hubject, a group of German automotive and energy companies, in 2012.

Open Clearing House Protocol (OCHP):

OCHP plays a pivotal role in creating a clearinghouse for charging data. It enables different charging station operators to share data securely and efficiently, improving transparency and reliability in the e-mobility ecosystem.

eMobility Inter-operation Protocol (eMIP)?

MIP is an EV roaming protocol that enables communication between MSPs and CPOs via a roaming hub. eMIP is a protocol designed to facilitate cross-border charging. It ensures that EV drivers can access charging infrastructure in different countries without facing compatibility issues or excessive fees.

Open Smart Charging Protocol (OSCP)?

Open Smart Charging Protocol (OSCP) is an open communication protocol between a charge point management system and an energy management system. OSCP empowers charging stations to dynamically adapt charging rates based on factors like grid demand, energy prices, and user preferences, optimizing the charging process for efficiency and cost-effectiveness.

Open ADR?

OpenADR is an open, secure, and two-way information exchange model facilitating automated demand response (DR) actions that help balance grid supply and demand or mitigate high electricity costs. It establishes a standardized method for communication between utility companies and charging systems. OpenADR enables utilities to send signals to EV charging stations, directing them to adjust charging rates based on grid conditions, demand fluctuations, and price signals. This protocol promotes grid stability, minimizes energy costs for EV owners, and supports the integration of renewable energy sources into the grid

ISO 15118?

ISO 15118 is an international standard that covers the communication between EVs and charging infrastructure. It enables secure, automated, and bi-directional communication, allowing EVs to negotiate charging parameters with the charging station, optimizing charging processes. 

Benefits of Using Open Protocols:

Open protocols define a common language or framework that allows different entities within the e-mobility ecosystem to communicate seamlessly. This communication can involve tasks like authorizing charging sessions, transmitting charging rates, providing real-time status updates, and facilitating payment transactions. The major benefits of using Open Protocols include:

Interoperability:

One of the primary benefits of open protocols is interoperability. They break down the barriers between different charging stations, service providers, and EVs, allowing users to charge their vehicles seamlessly, regardless of their location or service provider.

Reduced Operating Costs:

Open protocols promote healthy competition and prevent vendor lock-in, leading to cost-effective solutions for e-mobility stakeholders. This cost efficiency ultimately benefits EV drivers and accelerates the adoption of electric vehicles.

Scalability:

As the e-mobility ecosystem continues to expand, open protocols provide the scalability required to accommodate the growing number of EVs and charging stations. This adaptability ensures that the infrastructure can keep pace with the increasing demand.

Future-Proofing:

Open protocols are designed to evolve with the changing landscape of e-mobility. They can incorporate new features and technologies, ensuring that the infrastructure remains relevant and future-proof.

In conclusion, open protocols in e-mobility play a crucial role in fostering a connected and accessible electric vehicle ecosystem. It enables different stakeholders like EV companies, CPO’s to work together harmoniously and promote e-mobility on a global scale.

Electric vehicles: Threat or an opportunity to the grid?

 Electric Vehicles (EV) reached an important milestone in 2022, with sales hitting 10% of the global vehicle market, driven by strong sales in Europe and China.

Governments are jumping on board to support the EV revolution, investing in charging infrastructure, and pushing it as part of the climate change agenda. As one of the biggest EV charging markets, the US is well-funded for development. The Biden Administration announced more than $7 billion in funding for the country’s charging infrastructure as part of its bipartisan infrastructure law passed in 2021.

While the UK Government published its Electric Vehicle infrastructure Strategy last year to set out its vision and action plan for the rollout of an EV charging infrastructure, with a confirmed £1.6bn of public funding for charging points.

This is positive news in terms of driving a cleaner, greener world, but what are the challenges, particularly when it comes to the impact on the electricity grid?

First, let’s look at the need for a charging infrastructure that’s fit for purpose. With a proposed ban in the UK on the sale of new petrol and diesel cars by 2023 (currently under review) we can expect to see EV sales accelerate in the next few years. But despite Government charging infrastructure plans, research by the Competition and Markets Authority (CMA) concluded that the UK would need 10 times more EV charging points by 2030 if it is to meet its net zero emissions target.

The Government recently announced an additional £56m in public and industry funding for increasing EV charge points across the country, expanding the existing Local Electric Vehicle Infrastructure (LEVI) plans and effectively levelling up the charging infrastructure.

Legislation might be pushing for EV adoption, but the CMA’s conclusions suggested that concerns over charge points was still putting people off going electric. Charge points need to be easy to find, with up-to-date information on availability, clear pricing structures and accessibility. Once people are confident there’s a viable network of fast charging points in places they need them, they will make the switch.

The second challenge is the growing demand for electricity. If every driver goes electric, grid capacity will be put under huge pressure, particularly when people come home in the evening and want to recharge their car at home. With peak use from 4pm to 6pm, the grid will have to balance this demand for power.

Electricity suppliers could look to incentivise customers to charge their vehicles outside of peak periods, offering lower rates. Showing how people can save money, especially during a cost of living crisis, will be key.

At the beginning of this year, the DESNZ and Ofgem published plans for domestic EV charging. The Electric Vehicle Smart Charging Action Plan outlines steps to unlock the power of EV charging, offering people the chance to charge their vehicles and power their homes using excess electricity stored in their car, or selling it back to the grid.

Car batteries have a surprising amount of power stored in them, offering hours of energy capacity. In the future, new generations of EVs will be designed for this purpose – to serve as an additional source of backup power, a concept already being explored in the US.

Ford is working with utility operators and service providers to pilot both vehicle to grid (V2G) and vehicle-to-home (V2H) programs. In two schemes, Duke Energy will use EVs to help manage the grid, one to reduce demand for electricity at peak times, and one to increase resilience for residential consumers.

The EV acts as a mobile energy storage unit that uses electricity, but also supplies it when demand is high. The future vision is that thousands, even hundreds of thousands of EVs could form a virtual power station at people’s’ homes, places of work and even on the move.

All of this complicates things of course. With more distributed energy resources - electric vehicles, as well as solar panels, wind turbines, storage devices and so on - the grid will become even more complex. Communication between suppliers and customers therefore becomes increasingly important.

Improved and standardised information exchange on pricing, energy consumption and capacity is the basis for effective load control, enabling energy suppliers to respond flexibly to fluctuating demand. Distribution System Operators need to communicate this information to customers, quickly and securely using open standards like OpenADR.

As Jaguar Land Rover announces plans to build a flagship EV battery factor in the UK, investing £4bn in the new site, it sets the intention for the industry as a whole. Change is on the way and electrification is the way forward.

We have some problems to solve – from the increasing load on the grid to the automation of load control - but funding, development, and innovation in charging infrastructure and EVs will set us on the right track to help meet these challenges.

Comforts Vs Growth Zone

 

What is OCPI and Why Is It Important for EV Operators?

 The Open Charge Point Interface (OCPI) protocol is an open standard roaming protocol linking Mobility Services providers (MSP), Energy Service Providers (ESP), Navigation Service Providers (NSP), and other stakeholders with Charge Point Operators (CPO). It simplifies roaming between charging networks, letting EV operators use multiple stations without needing several accounts. This helps them find the best charging options.

OCPI standardizes communication between charging networks and shares information, ensuring everyone has the same data. This streamlines fleet management and billing processes. It also supports token exchange, location and status updates, and billing and payment processing.

OCPI is important because it simplifies EV operators' access to various charging networks and ensures equal access to data. This makes managing fleets more efficient and cost-effective, saving time and money in the long run. 

On a global level, OCPI is being endorsed or adopted by governments, local and national initiatives, and companies including:

• United States: The Corporate Electric Vehicle Alliance is pressing the US government to adopt OCPI and OCPP as standard changing protocols. 
• United Kingdom: In 2022, the UK government Secretary for State for Transport proposed that OCPI should be adopted as a standard protocol to enable reliable and accessible EV charging.
• European Union: evRoaming4EU is an international project that involves organizations from Austria, Denmark, Germany, and the Netherlands. The primary goal of this collaboration is to enhance roaming services for electric vehicle (EV) drivers and improve transparency by utilizing the Open Charge Point Interface (OCPI) protocol.

In this article, we will explain what OCPI and how it works in more detail, and outline its importance for EV fleets and charging point operators.

‍

What Is OCPI?

OCPI, or Open Charge Point Interface, is an open communication protocol specifically designed for electric vehicle (EV) charging. Its purpose is to make it easier for EV drivers to find and use charging stations by facilitating communication between charging stations and multiple service providers.

OCPI is a useful standard in the EV charging industry because it promotes open communication and interoperability between charging stations and service providers. This means that EV drivers can find and use charging stations more easily and quickly.

‍

How Does OCPI Work?

OCPI works by providing a standardized set of rules and guidelines that allow different EV charging software systems to communicate with each other using APIs. APIs are protocols, routines, and tools that standardize the way different software applications interact with each other.

OCPI allows for the free exchange of data, including locations, tokens, tariffs, and sessions, between the parties. OCPI provides fault-tolerant mechanisms for communication, allowing EV drivers to have real-time knowledge of available and unavailable charging points. The protocol also allows for direct connections between parties and can connect a large number of parties through one or more OCPI hubs.

EV charging software systems can use OCPI to communicate seamlessly, regardless of the type or brand of charging station or service provider. This ensures that EV drivers can use different charging stations from various providers and still have a consistent and convenient experience. 

In other words, OCPI makes it possible for different charging stations and service providers to "speak the same language," enabling a more user-friendly and convenient EV charging experience for drivers.

‍

An Example Flow of OCPI in Practice:

To understand how OCPI works in practice, let's consider a simplified example flow:

1. The driver initiates a charging session on a charge point hardware.
2. The charging point sends status information (e.g., "charging") to the charging management system (CMS).
3. The CMS confirms the status and informs the payment system through OCPI.
4. The payment system authorizes the payment, and the charging session continues until completion.

It's important to note that the flow of OCPI can vary depending on the use cases, but the general process remains the same.

‍

What Data is Exchanged with OCPI?

OCPI facilitates communication between different software systems by exchanging data and tokens related to EV charging. Some of the data that is exchanged through OCPI includes:

• Address and location information of charge points (including geo-location)
• Electric information of charge point hardware (current type, voltage, etc.)
• Charge point's status information (e.g., if the charger is in use or available)
• Credential information to authenticate the two backend software systems (similar to passwords or tokens)
• Remote command to start and stop a charging session
• Historical charging session data (e.g., Charging Detail Records (CDR))
• Tariff information (costs per kWh, costs depending on the time of the day)

‍

Real-Life Examples – Two Core Use Cases

Use Case A

Use Case A involves connecting a charging management system with a third-party payment system, such as a fueling card system or a mobile app for public EV charging. This use case is particularly important because it enables EV drivers to pay for charging services seamlessly and conveniently, regardless of the charging station or service provider they are using.

For instance, a driver arrives at a public charging station and wants to charge their EV. They use a mobile app or fueling card to start the charging session and pay for the service. The charging management system verifies their payment with the third-party payment system and initiates the charging session. The driver can then charge their vehicle, and the payment is automatically processed through the third-party payment system.

Use Case A facilitates the adoption of EVs by making charging more accessible and convenient for drivers through seamless payment processing and interoperability between different charging and payment systems. This also promotes competition and innovation in the EV charging industry, allowing new players to enter the market and offer value-added services such as payment processing and mobile app integration.

‍

Use Case B

Use Case B involves connecting a charging system to a large roaming service, which acts as a middle-man between different charging networks. This use case is important because it enables EV drivers to access charging services from different networks and service providers using a single account, making the charging process more convenient and streamlined. It is similar to a mobile phone roaming service.

For instance, an EV driver wants to travel from one city to another and needs to charge their vehicle along the way. They have an account with a large roaming service that partners with multiple charging networks and providers. Using the roaming service's mobile app or website, the driver searches for available charging stations along their route. The roaming service provides information on available charging stations, pricing, and other details, allowing the driver to choose the best option. The driver initiates the charging session and pays for the service using their roaming service account. The roaming service verifies the payment with the charging network and initiates the charging session. Once the vehicle is fully charged, the driver can continue their journey.

Use Case B can help to develop more extensive and efficient charging networks, which are essential for the widespread adoption of EVs.

‍

Advantages of OCPI in EV Charging

There are several key reasons why the Open Charge Point Interface (OCPI) is important in the world of electric vehicle (EV) charging.

• Payment Processing: Many charging management systems (CMS) aim to improve charger uptime and energy management. However, payment systems can differ between states and countries, making it difficult to ensure consistent payment processing and interoperability between different networks. OCPI solves this issue by providing a common language that allows CMS to connect seamlessly with different payment systems and service providers. This ensures that everyone uses the same data format, promoting open communication and interoperability between charging systems

• Easy-to-implement: Another significant advantage of OCPI is that it is based on APIs, which are widely used and well-known in the software industry. This means that engineers can work with OCPI easily without requiring any special education or training. This helps to reduce the barriers to entry for new players in the EV charging industry, promoting competition and innovation and helping to drive down costs for EV drivers.

• Interoperability: By providing a common language for different charging networks and payment systems, OCPI promotes open communication and interoperability. This helps to simplify the charging process for drivers and promote the development of more extensive and efficient charging networks.

• International Standards: OCPI is an international standard that is recognized by governments and industry organizations around the world. This means that it provides a common framework for EV charging systems across different regions and promotes consistency and interoperability.

• Scalability: OCPI is designed to be scalable and flexible, allowing it to accommodate the growth and evolution of the EV charging industry. This means that it can adapt to new technologies, business models, and market demands, ensuring that it remains relevant and effective in the years to come.

• Cross-Network Roaming: OCPI facilitates cross-network roaming, allowing EV drivers to access charging services from different networks and service providers using a single account. This makes the charging process more convenient and streamlined for drivers, promoting the widespread adoption of EVs.

‍

What Is The Difference Between OCPI and OCPP?

OCPP and OCPI are two important standards in the world of electric vehicle (EV) charging, but they serve different purposes.

• OCPP (Open Charge Point Protocol) is a standard for communication between the charging point and the charging management system (CMS). It allows the CMS to control and monitor the charging process, access data on energy usage and charging session details, and receive error codes and other relevant information from the charging point. OCPP uses a WebSocket for bidirectional communication.

• OCPI (Open Charge Point Interface) is a standard for communication between the CMS and other software systems, such as payment systems or roaming platforms. OCPI does not communicate with the charging point directly but enables the CMS to exchange data with other software systems using APIs.

Despite their differences, OCPP and OCPI share some similarities. They both deal with similar types of data, including charge point status, energy usage, charging session details, and error codes. However, OCPI goes beyond EV charging point information and includes data on energy tariffs, parking lot information, and other relevant details.

‍

To learn how smart charging and OCPP work together to optimize your charging operations, read our report, "What Is OCPP and How To Use It For Smart Charging."

Summary

The Open Charge Point Interface (OCPI) protocol offers several benefits, including simplifying the charging process for drivers, promoting interoperability between different charging networks and payment systems, and reducing barriers to entry for new players in the EV charging industry.

OCPI provides a common language for different charging networks and payment systems, streamlining fleet management and billing processes and saving time and money in the long run. It is an international standard recognized worldwide, promoting consistency and interoperability. 

Charging point operators can use both OCPI and OCPP to develop more extensive and efficient charging networks, ultimately driving the widespread adoption of electric vehicles.

(Credit to https://www.ampcontrol.io/post/what-is-ocpi-and-why-is-it-important-for-ev-operators )

Open Source And Patents: Everything You Need to Know

Open Source licenses and patents give software developers two very different ways to share their work. 

With an Open Source license, the original owner still retains distribution and sharing rights, but anybody can look at and modify a program's code and software. It's important that you understand the difference between patents, copyrights, and Open Source licenses to ensure your work is adequately protected.

What Is the Difference Between a Software Patent and Copyright?

Unlike the holder of an Open Source license, the owner of a patent has exclusive rights over the patented software. No one else can make, use, modify, or sell patented software, and the source code is not available to the public.

Patent rights give the holder control over who uses software and for what purpose. Though software developers can protect their work using both copyrights and patents, copyrights only protect the code itself. Patents, however, protect the program's functionality.

Patents are better than copyrights for software developers because they protect the program regardless of the code and language used. In comparison, copyrights aren't very practical for developers. If you want to release Open Source software while retaining some rights, a copyright only gives you power over someone who steals your work verbatim.

This is because a copyright doesn't protect the specific function of a software program. If a person finds a way to execute the same function using different code or a different language, the original creator of the software won't have any recourse with a copyright alone.

By securing copyrights and patents, software developers have some flexibility for their protections. For example, the software owner can grant users unlimited rights, some rights, or deny rights to use the software. Moreover, if a developer wants to release their work with an Open Source license, they can do so with a patent or copyright to retain some rights. This ensures that other users only access and modify the work under certain conditions.

Patents for software, however, do have their limits. Be mindful of the following before moving forward with a patent:

Patents protect the program's function but not the code.

The filer must define the process that the patent protects in the patent application.

Patents protect software only in terms of strict liability.

Also note that a copyright protects your code from being lifted by another user, but you don't have to officially register to enjoy these protections. However, people still file copyrights to enjoy other benefits, such as retaining official proof of ownership.

What Is an Open Source License?

Distributing software under an Open Source license allows anyone to view, use, and modify the code behind the computer software. Users may modify the source code without permission, but the developer can exclude them from publishing their changes or only permit additions under certain conditions.

An Open Source license may affect some patent protections, but a person can still apply for patent rights to safeguard their software. If you want to retain some patent protections while still sharing your work with others through an Open Source license, consider working with a patent attorney to confirm that you have the protections you need.

Most Open Source licenses also include a reciprocal patent agreement. This agreement outlines things like rights granted in perpetuity, whether recipients can redistribute the work, and the conditions that they must meet when they do distribute the work. It also ensures that the protections a license provides extend to the contributions that people make to a project.

What Is the Gnu Public License?

The Gnu Public License (GPL) is an Open Source license stipulating that any distributions of the licensed software are also protected.

The GPL provides a list of copyright protections to the original software developer. However, the license permits other users to copy and distribute the software and make and publish works based on the software. In turn, users must release their changes under the GPL and make the adjustments in their source code available to other users.

Many companies and popular software programs, such as the Linux operating system, use the GPL. This gives users access to a vast body of knowledge from other developers and incentivizes them to continue improving the software.

If you need help with Open Source licensing and patents, you can post your legal need on UpCounsel's marketplace. UpCounsel only accepts the top 5 percent of lawyers to its site. Lawyers on UpCounsel come from law schools such as Harvard Law and Yale Law and average 14 years of legal experience, including work with or on behalf of companies like Google, Menlo Ventures, and Airbnb.