Sensor technology - Applications and Challenges

Transcription

1 Teknologitimen, Senter for Rettsinformatikk (SERI), 3Apr2018, Oslo Sensor technology - Applications and Challenges Josef Noll, Christian Johansen Department of Technology Systems, University of Oslo m: , e: josef.noll@its.uio.no IoTSec.no - SCOTT.IoTSec.no

2 The last time I was connected by wire was at birth - our when Internet of Things (IoT) meets people! Internet has changed, IoT will accelerate the ecosystem of making business automated processes! The Nordic Model - Opportunities! Security in IoT teach our sensors to talk Norwegian The changing role of security in HMS -> HMSS new paradigm: measurable security security classes design! related to projects: Security in IoT for Smart Grids: IoTSec.no Secure Trusted IoT: SCOTT.IoTSec.no, Business Opportunities by IoT Feb2018, Josef Noll!2

3 Source: L. Atzori et al., The Internet of Things: A survey, Comput. Netw. (2010), doi: / The Internet of Things (IoT) Things! IoT = Things + Internet + Semantics! Things that communicate with Things: computer, understand the meaning, takes own decisions Internet Semantics * security * privacy * dependability * context-aware * personalised Smart Energy - Trust Jun2017, Josef Noll!3

4 5G = Mobile Broadband+ IoT + Industrial Networks! Societal aspects?! Internet light for all [Source: Smart Energy ETRI - graphic, Trust from ITU-R IMT 2020 requirements] Jun2017, Josef Noll!4

5 The change of Business Models Car industry: Liability in IoT driven business models Energy: Cost of providing of Energy -> Cost of Reliable Network Telecom: uo (MicroOperator), Partnership Business Opportunities by IoT Feb2018, Josef Noll!5

6 Economics in IoT Jun2017, Noll et al.!6

7 The sharing economy for energy companies? [Source: aftenposten.no] Sharing Economy: Telenor will create a digital ecosystem in Pakistan [Source: esmartsystems.com] Business Opportunities by IoT Feb2018, Josef Noll!7

8 Automated processes Work force demand Blockchain, IOTA The state business model Business Opportunities by IoT Feb2018, Josef Noll!8

9 The challenge from automation USA work force time spent [%] 80 % 78 % Technical automation potential 2016 [%] Predictable physical work Data collection Stakeholder interactions Managing others Data processing Unpredictable physical work60 % Applying Expertise 69 % 64 % 14 % 7 % 18 % 40 % 20 % 25 % 20 % 18 % 16 % 16 % 0 % 9 % Data processing Predictable physical work Unpredictable physical work Data collection Applying expertise Stakeholder interaction Managing others 12 % 17 % Business Opportunities by IoT Feb2018, Josef Noll!9

10 Digitalisation of the Society Source: EU commission(2015) Economics in IoT Jun2017, Noll et al.!10

11 Application Areas Utilities: Smart Home, Smart City, Security, Health-care Automotive, Transport Business Opportunities by IoT Feb2018, Josef Noll!11

12 IoT - 10 x impact of Internet Commercial & Consumer M2M Device Connections Worldwide 2020 Gov., retail, financial services Healthcare Automotive Transport Utilities Security Smart Energy - Trust [Source: Analysys Mason 2011] Jun2017, Josef Noll!12

13 Pilot setups: office room example T/H/P measurements from several spots Gas measurements (CO, CO2, SO2, NO2, C2HO, tvoc) Sound detection (noise) Luminosity Particles (several sizes) Depth camera (movements in the 3D spaces) + Self-reporting tool for symptoms and perceived IAQ Motion sensor (PIR) Latch sensor for windows/doors [Source:Jani Koivusaari, VTT, SCOTT-project.eu]!13

14 Pilot setups: auxiliary data sources Weather data monitoring from an unobsturcted location (e.g. building roof) Air quality data monitoring in proximity to the building and the nearest probable pollution source (e.g. nearest road) Luminosity and presence data from installed smart lighting [Source:Jani Koivusaari, VTT, SCOTT-project.eu]!14

15 Semantic attribute based access control (S-ABAC) Lifting the security class through S- ABAC GSM/LTE Access to information who (sensor, person, service) Admin Cloud what kind of information from where Attribute-based access role (in organisation, home) Smart Home Access device, network security tokens Meter reading Home-logic home owner Rules inferring access rights Smart grid operator Power control statistical data Heat pump Warm water Attributes: roles, access, device, reputation, behaviour,... IoTSec.no #IoTSecNO High level view on Security for IoT Nov 2017, Chr. Johansen, J. Noll!15

16 Security, Privacy Security Classes Privacy Label Business Opportunities by IoT Feb2018, Josef Noll!16

17 Addressing the Threat Dimension for IoT! Hollande (FR), Merkel (DE) had their mobile being monitored! «and we believe it is not happening in Norway? [source: Süddeutsche Zeitung, 18Dec2014] [source: Business Opportunities by IoT Feb2018, Josef Noll!17

18 I Significance 16Oct2016 IoT security challenges! Mirai attack security by obscurity different security viewpoint! it is just the beginning [Source: ] Need for standardisation in IoT Nov2017, Josef Noll!18

19 Blockchain, IOTA, and automated money Increased security in micro-data handling Trust enabler for IoT data No trustworthy organisation backing crypto currencies US$ covered by U.S. Department of Justice, U.S. Treasury, the Federal Reserve centralized digital currencies Business Opportunities by IoT Feb2018, Josef Noll!19

20 teach our sensors to talk Norwegian Business Opportunities by IoT Feb2018, Josef Noll!20

21 SCOTT key message elevator pitch largest security project in EU 57 largest partners security from project 12 countries in EU 80 M budget 35 M EU&national largest 8 partners security from project Norway in EU IoT is the game changer and driver for digitalisation, and SCOTT contributes through: Answer the IoT need for a new and more advanced security paradigm through security classes Create a Convincing privacy assessment through privacy labelling Automotive Home Rail 5G Establish a clear link between security and safety Avionics!21

22 Learn from Industrial Automation and Mobile Networks! What to secure?! Network segregation Network slicing Service cloud #1 Service cloud #2 Softwareenabled routing Home services Appliance services! From Confidentiality, Integrity, Availability (CIA) VPN #1 Car services! to Availability, Integrity, Confidentiality (AIC) Basic Internet low capacity Health services Business Opportunities by IoT Feb2018, Josef Noll!22

23 The economic perspective The big 5 IT companies have a GDP as big as that of France Amazon largest sector in terms of revenue is selling of data 20% of revenue Privacy Label (A-F) easy visibility customer focus transparent How can SMEs compete? Each service and device gets a privacy label Four areas for Privacy Label which data are collected sharing to my phone, my cloud, public cloud,... data communication integrity and storage privacylabel.iotsec.no further distribution of data, ownership of data, further processing IoTSec.no #IoTSecNO High level view on Security for IoT Nov 2017, Chr. Johansen, J. Noll!23

24 80 % 60 % 78 % 69 % 64 % Conclusions Things (IoT) are driving the digital societies IoT: Business merger Internet + Semantics + Things = IoT Digitisation of the Society 40 % 20 % 0 % 25 % 20 % 18 % 9 % IoT ecosystem Promote the Nordic system Security classes, accountable security Addressing the challenges Privacy label (A++, A+ D) business advantage for SMEs Business Opportunities by IoT Feb2018, Josef Noll!24

25 Further information Business Opportunities by IoT Feb2018, Josef Noll!25

26 Accountable security system (s,p,d) Assessment Comparison desired Class vs sub-system 1 (s,p,d) Multi-Metrics (weighted subsystems) sub-system 2 (s,p,d) Calculated class PROSA modelling M MM Multi-Metrics Modelling Comp. 1 Comp. 2 Comp. 3 SPD Metrics, from criticality to SPD value Framework Examples of applicability criticality Measurable criticality to measurable: security, privacy and dependability Measurable Security Security is not 0/1 ideal good accep. critical failure IoTSec.no #IoTSecNO High level view on Security for IoT Nov 2017, Chr. Johansen, J. Noll!26

27 Security and Privacy Functionality IoTSec.no #IoTSecNO High level view on Security for IoT Nov 2017, Chr. Johansen, J. Noll!27

28 The trust matrix! trust as a positive user attitude engaging voluntarily! security based trust issues building trusted systems! technological factors data storage, distribution insight! human/societal factors government family, friends Business Opportunities by IoT Feb2018, Josef Noll!28