How I Learned to Stop Worrying and Love the Internet of Things

Size: px

Start display at page:

Download "How I Learned to Stop Worrying and Love the Internet of Things"

Nathan McCoy
6 years ago
Views:

1 SESSION ID: SSC-W07 How I Learned to Stop Worrying and Love the Internet of Things Steven Sprague CEO Rivetz

2 The Big Shift Known Networks Ports Firewalls Packets SSL Known Devices Identity Capability Messages End to end encryption 2

3 The Problem Known networks but un-known devices User centric architecture Password, Tokens, Smartcards User identity shared to multiple unknown devices Phones, tablets, PC cameras, doors, industrial controllers Content delivered to unknown devices Content creation on unknown devices Content theft by malicious devices 3

4 Going mobile and moving to the cloud Devices have left the building Applications have left the building Everywhere anytime compute Driving a shift to application security and content security A network of known devices 4

5 The anatomy of a known device Hardware assured identity Trusted execution Trusted user Interface/ secure input Supply chain integrity / device health 5

6 Hardware Assured Identity Software tamper proof identity for all devices Multiple identities with proper privacy protection Multiple technical solutions TPM Trusted Platform Module (2.5 Billion PCs) TEE Trusted Execution Environment (500 million phones) SIM (carrier mechanism for Identity on all mobile) Secure Element (EMV payment model ApplePay) 6

7 Trusted Execution Provides isolated execution to create authorizations Provides a measured execution environment Arm Trustzone Trustonic TEE OS Qualcomm TEE OS Multiple smaller solutions device specific Intel SGX and Intel ME part of VPRO 7

8 Trusted User Interface Provides the collection of user intent and assured results Secure display isolated from the OS Secure pin entry without OS Isolated biometric match Already on millions of deployed devices 8

9 Supply Chain Integrity A device birth certificate Device endorsement keys Hashes of device embedded software Reference device health/attestation measurement Blockchain or similar storage of device certificate Registered reference health Verification of real-time attestation vs reference health A transaction multi-signature 9

10 IoT is a shift to authorizations Trusted Execution Environment Open the Door Open the door Close the door Door public key Open the Door User Intent Trusted User Interface Secure PIN Entry Assured Instruction Device Identity + Device Health 10

11 Registration not Passwords Service Registration Health test Controller Assured Instruction Receiver 11

12 A network of authorizations Secure instructions not secure links End to end encryption and assurance A fully mobile network on all transport A reduced role for network security A transition from secure links to secure messages 12

13 The IoT model applied today Smart Cities Building access control from hotels to modern buildings Industrial control from oil and gas to digital signage Industrial Control Every sensor and every controller needs embedded security Users need secure messaging for simple work Modern Finance E-sign contracts from NDA s to building leases to business contracts Crypto-currency and blockchain technology in global finance 13

14 Actions for today tomorrow Procure the right device Support for Trustonic TEE, or Global Platform TEE Support for TPM 2.0 on all PCs and Tablets Require hardware device identity on new applications Enable Wi-Fi and VPN to use TPM 2.0 on all PCs Require cloud services to support enterprise defined tokens in mobile and PC not just SMS for multi-factor Include TEE protected keys as an option in any Android app development 14

15 Create Policy Only known devices connected to sensitive networks and data 15

16 Thank You Steven Sprague CEO Rivetz Corp. 16

Securing Multiple Mobile Platforms

Securing Multiple Mobile Platforms CPU-based Multi Factor Security 2010 Security Workshop ETSI 2010 Security Workshop Navin Govind Aventyn, Inc. Founder and CEO 1 Mobile Platform Security Gaps Software