BAT-BMS application Ban : GS TIMES IAS-PCS

The Government of India has directed Apple and Google to remove at least three mobile applications—BAT-BMS, Lossigy, and Epoch Li-ion—following reports that they were being misused to remotely disable the Battery Management Systems (BMS) of some e-rickshaws, raising cybersecurity and passenger safety concerns.

Reason for Government Action

The decision came after videos circulated on social media showing individuals connecting to nearby e-rickshaws via Bluetooth and remotely switching off the battery system while the vehicles were in motion. Some of the identified applications are reported to be of Chinese origin.

What is a Battery Management System (BMS)?

A Battery Management System (BMS) is an electronic control system that monitors, manages, and protects rechargeable battery packs, particularly lithium-ion batteries used in electric vehicles (EVs). It ensures safe, efficient, and reliable battery operation.

Functions of a BMS

Monitors battery parameters such as voltage, current, temperature, and state of charge (SoC).
Balances individual battery cells to ensure uniform performance.
Protects the battery from overcharging, over-discharging, overheating, and short circuits.
Extends battery life and improves operational efficiency.
Ensures the safe functioning of electric vehicles.

How Were the Apps Misused?

The BAT-BMS application was originally developed by Shenzhen Grenergy Technology (China) as a legitimate tool for monitoring Bluetooth-enabled lithium-ion batteries. However, security weaknesses in certain low-cost EV Battery Management Systems allowed these apps to connect via Bluetooth without adequate authentication. This enabled unauthorized users within Bluetooth range to remotely cut battery power, causing the e-rickshaw to stop abruptly.

Cybersecurity Concerns

The incident highlights vulnerabilities in the cybersecurity architecture of connected electric vehicles, particularly: