SICS Software Week, October 2014

Transcription

1 to Fog Securing the Edge SICS Software Week, October 2014 Iain Davidson Digital Networking 1

2 IoT Landscape Multi-market opportunity Wellbeing/Health Transport Energy Industrial Home Buildings Safety/Security City Infrastructure 2

3 EXPLOSIVE ROWTH In Connected Devices 6x 50 billion by 2020 # Connected Devices/ Person If only 1 gateway / 1 1, connected devices: That s 50 million gateways 3x 2x 7.6B World Population 6.3B 6 3B 6.5B 6 5B B B *Sources: Ericsson, February 2011; Cisco Internet Business Solutions roup (IBS), April 2011

4 4

5 ASTRON and IBM Research, Microserver for DOME Project Data Centre in a pizza-box 98% of energy consumed in data centre is used for moving data from point A to point B Cost of moving data, storage of data is > cost of compute 5

6 IoT : Managing Volume Variety Velocity Connectivity SDN/NFV Big data analytics BAN/PAN/ LAN/HAN Zigbee Security HPP BTLE Wi-Fi BAN/PAN/ LAN WAN Edge/Sensing Nodes Microservers ateway Sensor gateways Access/Aggregation/Edge ateways 6

7 Trust & Security 7

8 Data > Information > Knowledge Signals and Data Tera Bytes /day/person Information iga Bytes /day/person Knowledge Mega Bytes /day/person BAN/PAN/ LAN/HAN Zigbee Edge/Sensing Nodes ateway BTLE Wi-Fi HPP BAN/PAN/ LAN WAN 8

9 Data > Information > Knowledge but can you Trust the Data? Value BAN/PAN/ LAN/HAN Zigbee BTLE Wi-Fi HPP BAN/PAN/ LAN Need to authenticate IoT devices. Are they really what they claim to be? WAN Can you trust the IoT devices/data feeds you subscribe to? 9

10 The Challenge of Securing Knowledge Secure Hardware Encryption MCUs Sensors Flash Energy IoT Devices Local / Wide Area Connectivity IoT ateway Secure Hardware + Firewall / VPN Multi-factor Authentication Encryption 10

11 Use Case IoT ateway 11

12 LS1 IOT ateway freescale.com/ls1021agateway Enterprise, Carrier, Partner Network LS1 IOT Enablement and Key Features Trust/Security only OEM authenticated SW runs anti-tamper : physical and software ipsec offload robust partitioning Networking, RESTful, JSON, CoAP SDN/Openflow ige, Wifi, 3/4 Fog Compute IOT Sensor ateway LS1 Compute Efficiency 2x ARM CortexA Coremark 512KB L2 Cache ECC on L1/L2 and DRAM <3W Sensor Partner Network Home Building - Automotive - Factory - Street 12 Ease of Use Linux, Java VM, OSI OpenWRT Node-RED Sensor Networking UART, SPI, I2C, Ethernet zigbee, 6lowpan, BTLE Kinetis-W w/ integrated radio and software stacks

13 LS1 Trust Architecture ARM Trust-zone - Trusted execution environment for security-critical SW LS1 Trust Architecture extends the Trusted Zone beyond the CPU/Cache/Memory sub-system to the System level Secure Boot authenticates the software load at boot time Software tamper protection System-MMUs prevent unauthorised access via I/O Controllers run-time integrity checking can be performed on areas of memory sub-system system (for early warning of any unauthorised changes) the debug port can be protected Hardware tamper protection Can detect and react safely to external physical tamper events ARM Trust-Zone Cortex-A7 Cortex-A7 ARMv7 ARMv7 32b 32b Core Core L1 L1 Cache Cache w/ecc w/ecc L2 Cache w/ecc USB3.0 w/phy Serial I/O DDR 3L/4 w/ ECC SATA 3 Secure Networking Ethernet Security Engine LCD Controller PCIe QUICC Engine Trust Architecture Secure Networking Security engine can fully-offload IPsec (authentication, crypto and packet construction) Trust Architecture ensures that only OEM software can execute Trust Architecture protects the OEM software against theft 13

14 The Demo 2 Flows Sensor Data flow Node 1 to via ateway Node 1 (Sensor Cluster) Avnet Wi-o Module (incl. Kinetis-KL25) Light Movement Touch SS COZIR CO2 LS1 IoT ateway Wifi Publisher Node 2 (Fan) Broker Control flow 1. Node 1 Sensor Data to ateway 2. Process Data 3. Action : ateway to Node 2 Wifi Avnet Wi-o Module (incl. Kinetis-KL25) KL25) Subscriber PWM Variable speed fan 14

15 The Demo Communication To JSON TCP/IP Node-RED Javascript TCP/IP TCP/IP L ight Mov vement To ouch I2C/SPI/UART CO2 Fan PWM Linux mbed RTOS The ateway Node 1 Node 2 Node 1 (Sensor Cluster) Avnet Wi-o Module (incl. Kinetis-KL25) Light Movement Touch SS COZIR CO2 internetofthings ibmcloud com/ LS1 IoT ateway Wifi Publisher Node 2 (Fan) Broker Avnet Wi-o Module (incl. Kinetis-KL25) Variable speed fan Wifi PWM 15 Subscriber

16 Watt Company - IoT for Power rid/asset Monitoring IBM - Rapid build and deployment of IoT apps and devices Neul - Low Power WAN for the IoT Redbend - Firmware-over-the-air updates for IoT PureLifi - high-speed wireless comms using light spectrum Network Rail - Trackside asset monitoring challenges Arkessa - Turning data into information ARM/Sensinode - IoT : Connecting the billions of devices Barrachd - Predictive Data Analytics National rid - Power Infrastructure asset monitoring lasgow Uni - Printable Antennas for IoT McLaren - From Motorsport to Medical Ericsson - The Networked Society TechUK - techuk works with its members to identify and advance innovation in the key growth markets 16

17 Freescale is enabling the Internet of Tomorrow Thank you! 17