THE LEADING IOT INDUSTRY EVENT

Transcription

1 THE LEADING IOT INDUSTRY EVENT HOSTED BY IN PARTNERSHIP WITH SUPPORTED BY Barcelona icapital 2015

2 How to keep Smart Meters and their Data safe and secure Chris Loreskar, Trustonic Jens-Uwe Soehner, nlycs

3 Case study: Smart metering deployment in the European Union By 2020, 80% should have a smart meter for electricity in the EU By 2020 roughly 200 million smart meters for electricity and 45 millions for gas will be rolled out Total investment esgmated at $45bn Smart meters will on average save 3%

4 Smart Metering Architecture Ø Security limited to Scope of regulated Smart Meter Architecture WAN external Market ParGcipants (EMT) SMGW Admin Consumer Service HAN Controllable Local System (CLS) SMGW Smart Meters LMN Secure Element source: BSI

5 DigiGzaGon & IOT meet Energy World IOT PlaXorms Analog Metering Regulated Market IOT Smart Meter Rollout New Roles in Electricity Market Design IOT Device Extensions Edge CompuGng Fleet Management Device Trust IOT-E Smart Metering (pargally) Deregulated Market

6 Case study: Smart meter security in the UK In the UK, new smart energy meters to be installed were found vulnerable by GCHQ Having one universal smart meters makes the a_ackers job easy one hack to rule them all PotenGal a_acks include: Inflate meter readings Intercept payments Use the smart meter as a gateway to enter and hack customers networks Exploit flaws to create a power surge and damage the NaGonal Grid

7 Importance of Cyber Security in Energy Sector Security Risks alongside DigiHsaHon of energy sector DigiGzaGon of energy sectors brings many economic benefits However, risk of cyber a_acks increase Recent a_acks on energy infrastructure show that threat is real and growing A_acks on energy infrastructure could cross from the cyber realm to the physical world Efforts to increase Security Process Quality Data Privacy (GDPR) StandardisaGon System, Hardware & Sodware Guidelines Smart Meter & Smart Grid Security Architectures World Energy Council (2018): New cyber resilience report: energy sector prime target for cybera_acks Forbes (March 2018): Energy Firms Are Worried About Cyber A_acks, But Don't Really Know What To Do

8 Trust Why do we need security in smart meters? What are we protecgng? Who are we protecgng? How can we trust the data in the cloud Why is this important? How do we protect it? What does this mean for the device (i.e. device security)?

9 Adding Trust to IOT Devices Global PlaTorm Chain of Trust Architecture Chain of Trust IOT Device App / Firmware Device OS Boot Root of Trust Secure Component Secure Apps TEE Secure Services RoT Services MicrosoW - 7 ProperHes of Highly Secure IOT Devices Hardware-Based Root of Trust Small Trusted CompuGng Base Defense in Depth CompartmentalizaGon CerGficate-Based AuthenGcaGon Renewable Security Failure ReporGng sources: h_ps://globalplaxorm.org/wp-content/uploads/2018/07/introducgon-to-device-trust-architecture-20july2018.pdf h_ps://

10 High level architecture ApplicaGon Class Processors Microcontroller Class Processors Process Process Process Trusted App Trusted App Trusted App Trusted Driver Secure Storage ApplicaHon Logic Configurable Code Modules A^estaHon Crypto Secure Peripherals & Data Secure Peripherals Normal World Kernel (Linux) Linux Drivers Secure World Switch Secure World Kernel (Kinibi) Kinibi (OpHonal) RTOS IsolaHon Kernel (MPU Based) Secure Peripherals Trusted Storage (Flash) Kinibi-M Example: Cortex-A{5, 7, 8, 9, 15, 53, 57, 72, ) Example: Cortex-M{23, 33, 35P}

11 Digital Holograms & A_estaGon Assign a unique idenhty and record events during the manufacturing of your device: This is a device, of model ABC This device has passed final QA tesgng In the field verify the data you receive are coming from legihmate devices ü TRUSTONIC Model ABC QA 23 C TRUSTONIC A_estaGon Service 23 C

12 Kinibi-M Trustonic s product for securing MCUs Makes developing for security & trust easy less studying data sheets & flipping bits, just use the Kinibi-M SDK (integrated with IDEs) Provides the device s security foundagon, and addigonal services to OEMs. RTOS App Code Kinibi-M Micro-TEE Trusted Module Trusted Module UGlizes Trustonic s RoT provisioning (KPH) capabiliges - Already used in >1.5 billion smart devices Micro-TEE for M-Class Processors Global PlaXorm inspired APIs Flexible cryptography Secure code separagon Available on Microchip s SAM L11

13 IOT-E Example: EMS for Heat Pump Highly Secure Smart Metering Domain GW-A EMT 3 rd Party Services HTTPS OAUTH2 IOT Cloud ApplicaGon IOT PlaTorm Service Provider ProposiHon High E2E Security VAS for end user Data Privacy ensured Real-Gme services Device Keys/CerGfs Smart Meter LMN WAN SMGW HAN-CLS MQTT/S Heat Pump GCU Smart House EEBUS IOT Device Secure Component Device Keys/CerGfs Trust Provisioning Service

14 nlycs SoluGon CLS Dongle Proposition Highly secure HW security (secure element) Regulation conformance Media break E2E Encryption Low cost Plug&play Installation Excellent local connectivity based on Wirepas Mesh Context specific IFs and Protocols (HAN- CLS, Wirepas, EEBUS, Modbus) Meter Compatibility Extensible in range and connectivity Use Cases Local control of appliances (PV, Bat, HVAC, Wallbox, Home Automation) Utility billing Green share / EPC Power cloud Dynamic Tariffs Sub-Metering Wirepas Network Wirepas RS485 CLS Dongle Smart Meter Ethernet SMGW HAN-CLS WAN Router

15 About nlycs About Trustonic We help you innovate in the New Energy World with a unique combinagon of Industry understanding Product strategy & design Solid path toward commercial excellence Services & SoluHons Customer Engagement & User Experience Smart Metering Energy & Asset Management IOT PlaXorm Architecture & Security ConnecGvity Data AnalyGcs h^ps://nlycs.com