Ruter | We have conducted a comprehensive safety test of electric buses

The Dutch buses from VDL do not have the capability for autonomous software updates Over The Air (OTA). Therefore, they are not that interesting.

On the other hand, the Chinese bus from Yutong has the capability for autonomous software updates (Over The Air). This means that the manufacturer has direct digital access to each individual bus for software updates and diagnostics.

There is access to the control system for battery and power supply via mobile network through a Romanian SIM card. In theory, therefore, this bus can be stopped or rendered inoperable by the manufacturer. There is a low degree of integration between the systems in the bus and there is only one way out and to the bus's critical functionality. This makes it easy to isolate it from contact with the outside world. We can also delay the signals to the bus, so that we can gain insight into the updates being sent before they reach the bus. Such mechanisms are now being implemented.

Experts have uncovered vulnerabilities in a Chinese software update platform that counts Yutong among its clients. The vulnerabilities were reported to the platform provider and have now been addressed.

Experts are optimistic about the future, as Norway is now at a crossroads where it is possible to introduce requirements for buses and regulations that significantly reduce safety. Currently, buses have the same functionality as a car from 2016. However, the longer we move towards driver support systems and autonomy, the greater the risk if measures are not implemented before we reach this level.

Ruter has had a meeting with the Ministry of Transport about this, who wants to solve this together with us.