TC_A_22_CS — Upgrade Charging Station Security Profile - Downgrade security profile - Rejected

TC_A_22_CS — Upgrade Charging Station Security Profile - Downgrade security profile - Rejected

Source: OCPP 2.0.1 Part 6 — Test Cases (Core & Advanced Security, FINAL, 2023-06-30) — Functional block A. Security, page 26.

Identification

Field	Value
Test case name	Upgrade Charging Station Security Profile - Downgrade security profile - Rejected
Test case Id	TC_A_22_CS
Use case Id(s)	A05, B09
Requirement(s)	B09.FR.04
System under test	Charging Station
Functional block	A. Security

Description

The CSMS is able to change the connectionData at the Charging Station. By doing this it is able to upgrade the connection to a higher security profile.

Purpose

To verify if the Charging Station is able to reject upgrading to a higher security profile when it does not have a valid ChargingStationCertificate installed.

Prerequisite(s)

• The OCTT connectionData configuration for SUT Charging Station only allows for ip addresses the OCTT is able to bind.
• The Charging Station supports security profile 2 and/or 3.
• The second OCTT connectionData configuration slot must be configured for a security profile lower than the first OCTT connectionData configuration slot.
• When starting this testcase the OCTT will start another webSocket server for the second connectionData slot.

Before (Preparations)

Configuration State:

• N/a

Memory State:

• N/a

Reusable State(s):

• N/a

Main (Test scenario)

Charging Station

CSMS

2. The Charging Station responds with a SetNetworkProfileResponse

1. The OCTT sends a SetNetworkProfileRequest with: -configurationSlot is <Configured configurationSlot> or <Configured configurationSlot> depending on which one is already in use; - connectionData.messageTimeout <Configured messageTimeout2>; - connectionData.ocppCsmsUrl <ocppCsmsUrl that is not currently active>; - connectionData.ocppInterface <Configured ocppInterface2>; - connectionData.ocppVersion OCPP20; - connectionData.securityProfile <Configured securityProfile2>

Tool validations

Step 2:

Message SetNetworkProfileResponse

• status Rejected

Post scenario validations

• N/a