At its December 2017 meeting , the European hackers organization Chaos Computer Club pointed out considerable security problems with RFID MiFare Classic cards for charging stations. The cards could be manipulated with simple means and thus vulnerable to massive abuse. No personal data such as a digital signature is stored on them, making it impossible to clearly assign the card to an end customer. Only a unique but changeable serial number is stored on the MiFare Classic card. A more secure technology for RFID cards, MiFare DESFire, is available; their use is not as widespread as the MiFare Classic cards, however.
The possibility of forgery of the RFID card’s tag ID by the end customer or a third party does
not have any influence on the conformity assessment of the charging station within the guidelines
of the MessEG. The task of the calibration law is to ensure that a recorded ID token, which the
end customer presents for charging authorization, can