Privacy and Security in the Internet of Things

Transcription

1 Privacy and Security in the Internet of Things Innovation Forum Digitalisierung, BICC-Net München, 21. April 2015 Authors: Stefan Schmid, Joao de Sousa, Jamshid Shokrollahi, Jan Zibuschka Corporate Research Robert Bosch GmbH 1

2 Incidents in the Internet of Things In 2011 Researchers of Washington university show how vulnerabilities in automotive ECUs can be used to manipulate the vehicle through wireless communication channels 1 In 2011 researchers of Ruhr University Bochum show how vulnerabilities in smart meters can be used to remotely find out which TV channel the users are watching 2 In 2013 Doctors disabled wireless in Dick Cheney's pacemaker to thwart hacking 3 Internet of Things challenges the privacy and safety of users. Secure services in Internet of Things protect the privacy of users using sound and reliable security mechanisms!

3 Important Building Blocks Privacy Confidentiality Authentication User s trust Secure Internet of Things Integrity Secure storage Availability Reliability 3

4 Concepts for a Privacy Preserving Middleware Decentralized middleware supporting secure and asynchronous event and data streaming Services Control and transparency for disseminated information Simple user interaction External Middleware enabled Services Middleware Functional Unit Message Processing Threads Semantic Addressing and Discovery Layer Sphere Manager Middleware Message Book-keeping Records Data Access and Exchange Comms 4

5 Spheres Spheres are logical concepts which are used to define trust domains for a given purpose and most of its functionality is also available in a geographically distributed setting Home security sphere All of the devices which belong to the same sphere share a unique secret key which is used to protect the confidentiality and integrity of the data which is communicated in the sphere Users are flexible in creation and deletion of spheres of their own Home entertainment sphere 5

6 Party Use Case Alice wants to organize a party She puts all of the home entertainment devices in a sphere She gives Bob access to the sphere After the party she deletes the sphere 6

7 Pipes Pipes allow the users to control which personal information leave the spheres Users can control which sphere is connected to a pipe and which data is transferred there Choosing the sphere Choosing the data 7

8 Conclusion To provide secure services in the Internet of Things we must provide the users with easy to use tools to configure their privacy needs Successful enforcement of these configurations need sound security mechanisms which are interoperable among different device manufacturers and service providers The middleware concept which is developed at the Corporate Research of Robert Bosch GmbH provides the necessary mechanism to configure and implement users privacy needs 8