Security and Privacy in the Smart City Adel S. Elmaghraby Computer Engineering and Computer Science University of Louisville, Kentucky USA

Transcription

1 Security and Privacy in the Smart City Adel S. Elmaghraby Computer Engineering and Computer Science University of Louisville, Kentucky USA ABSTRACT Smart Cities of the 21st century are beneficiaries of innovations in information technology with many opportunities and certainly as many challenges. Individuals are already interconnected via smart phones and gadgets and homes are starting to catch up leading to what is known as the Internet of Things. Smart energy meters, security devices and smart appliances are surfacing and being adopted in many cities. Standards are evolving for all of these potentially connected systems and they will certainly lead to unprecedented conveniences and improved lifestyle options. To benefit from these technologies, city infrastructures and services are also changing with new interconnected systems for monitoring, control and automation. Intelligent transportation, public and private, has access to a web of interconnected data including financial, GPS, weather and traffic updates. An integrated system will assist with emergency responders and disaster recovery. Two main challenges are surfacing and require attention. Namely, security and privacy are the two entangled challenges. Security includes concerns for illegal access to information which is an issue we are already facing and can get complicated with attacks causing physical disruptions which is possible when we adopt the Internet of Things. From another perspective, digital citizens are more and more instrumented and data available about their location and activities outside the home and with smart homes and smart infrastructure privacy seems to disappear. Therefore privacy protecting systems that gather data and trigger emergency response when needed are technological challenges that go hand-in-hand with the continuous security challenges. SMART CITIES With the prevalence of technologies in all aspects of our lives, urban settings are changing. Cities are redefined and architects of built physical space, finding it wanting against the backdrop of the digital, strive to meet the digital s specifications (Nissenbaum & Varnelis, 2012). Many researchers and government agencies have attempted to define what is now referenced as a smart city. There have been major initiatives to create smart cities and to rank smart cities while consensus of what defines a smart city is evolving. In the Middle East, Masdar (United Arab Emirates) and King Abdullah Economic City (Saudi Arabia) are listed among the 10 smartest cities in the world (Lindsay, 2012). The Saudi initiative is targeting six economic cities to be smart (or intelligent) cities. The Kingdom of Saudi Arabia is aiming at placing a Saudi city in the top 10 smart cities in the world. Billions of dollars are invested through public-private funding with expectations of creation of more than a million jobs by While Masdar is built as model for sustainability and green energy, it also serves as an economic hub with free zone, incubators and research institutes.

2 According to some researchers, a smart city should encompass six areas (ABI Research). These areas are displayed in Figure 1. Elements of a Smart City and will be further discussed. These areas bring opportunities for business creation through innovation. economy community environment Information Technology transportation governance lifestyle Figure 1. Elements of a Smart City The ideas of a Smart Economy and Smart Governance are clearly understood as utilization of the latest technological advances to facilitate economic growth and minimize overhead of governance. However, it could be argued that such technological advances alone provide no guarantees for improvement as they only provide an infra-structure that needs a functioning economy and a functioning government at the end of the day. However, smart economies are emerging everywhere through the use of the Internet. Dynamic pricing for services such as broadband was suggested and studied (Elmaghraby, Kumar, Kantardzic, & Mostafa, 2005). The use of dynamic pricing has since become a standard in airline reservations and online purchases. Continued work exists and real applications being tested for dynamic pricing of energy. Achieving a Smart Environment is driven by advance in home automation including energy management, intelligent appliance, lighting controls and entertainment. All these add up to minimize energy usage without sacrificing comfort and contributing to a Smart Lifestyle. The information infrastructure and availability of devices has also affected our health services through use of Mobile Devices and Games for health using Bluetooth, Bluetooth Smart, and ANT+ technologies. Sensors and embedded systems are now regularly used and interconnected through smart phones and wearable devices such as jogging shoes, wrist bands and watches. Some of the studies target the use of games for special population (El Khayat, Mabrouk, & Elmaghraby, 2012) while other ideas include integrating them as part of the overall health system (Elmaghraby, Méndez, García Zapirain, Sheta, & el Shehaby, 2012). Smart Transportation means differed things to different people. Expectations and interpretations include smart access to transit, smart and green technologies for mass transit and smart/energy-efficient automobiles. A Smart Community is yet another perspective based on social interactions in relation to a community activities, actions and events.

3 National governments, states and cities around the world are already encouraging in infrastructure for smart cities technologies; from wireless in shared spaces, integrated information systems across services, unified and smart credentials, intelligent energy management, and enhanced security. Broadband infrastructure and smart grids are two of the main initiatives. The author was involved with a study for the state of Kentucky focusing on a roadmap for its smart grid initiatives (Elmaghraby, Graham, & Turner, 2011). Large and small businesses are investing in smart city technologies and have their own initiatives. IBM, SIEMENS, CISCO and NEC are among those companies. IBM s initiative coined Smart Planet has addressed several layers and in one of their earlier essays, it was described as follows: First, the world is becoming instrumented. Imagine, if you can, a billion transistors for every human being. Sensors are being embedded everywhere: in cars, appliances, security cameras, roads, pipelines even in medicine and livestock. While select systems are becoming smarter, the vast majority of the world's IT infrastructure mobile devices, PCs, servers, data centers, software and the processes that make it all work remain slow, inefficient and incapable of the work ahead. But there are new computing capabilities that can literally "reinvent" existing IT properties, making them leaner, flexible, resilient and smarter. Second, our world is becoming more interconnected. What does this mean? For the first time in history, almost anything can become digitally aware and interconnected. People, systems and objects can communicate in new ways. And in the near future, we can expect two billion people on the Internet. Third, all of those instrumented and interconnected things and humans are becoming more intelligent. They are being linked to powerful new backend systems that can process all that data, and to advanced analytics capable of turning it into real insight, in real time. (IBM) These three inter-related issues are demonstrated in Figure 2 IBM: Towards a Smarter Planet. Instrumentation was introduced with availability of sensors and reduction of hardware size leading to embedded systems. This, in turns, required interconnectivity which became available with the revolution in digital communications. Which, when implemented demanded the use of intelligent computational and analytical techniques and methods. Needless to say, this demonstrates in a clear sense the overwhelming interest in Big Data and Analytics as these are direct outcomes of a smarter planet. Figure 2 IBM: Towards a Smarter Planet

4 In terms of required technologies, according to Siemens (Siemens - b), Sustainable cities are served by the following technologies and more: Intelligent traffic solutions, green buildings, water management, and smart grid infrastructure A case study of New York city initiatives demonstrates that adaptability is one of the most important aspects of neighborhoods which are the building blocks of communities (Siemens - a). An illustration of this concept is provided in Siemens website (Siemens - b) and shown in Figure 3 - Siemens Sustainable City which leads an increase in the quality of life. Figure 3 - Siemens Sustainable City (Siemens - b) In a variation from IBM and Siemens, we note that CISCO s approach is referred to as Smart+Connected Communities with a focus on transformation of physical assets in communities into inter-connected ones as the basic enabler for a smart city. In Figure 4 - Elements of CISCO's Smart+Interconncted Communities. A brief description of CISCO s rationale can be summarized as follows: As world populations shift to urban areas, community leaders are pressed for answers to related problems. These include overcrowding, pollution, budget and resource constraints, inadequate infrastructures, and the need for continuing growth. Cisco Smart+Connected Communities solutions use intelligent networking capabilities to bring together people, services, community assets, and information to help community leaders address these world challenges. By connecting the unconnected, we can do amazing things to address these real world challenges and create a more sustainable environment. (CISCO).

5 Improved Citizen Interactions Connected Residential Communities Creation of Smart, Efficient Workspaces Figure 4 - Elements of CISCO's Smart+Interconncted Communities An important component of smart cities is the home appliances and the power connectivity which has been reference earlier as part of the smart grid initiatives. It was reported that in an interesting business collaboration, GE & Samsung have joined forces to revitalize Korea s Smart Grid Industry (Chung, 2010). The strength of this collaboration lies in the fact that they include the 2-way connectivity needed in a smart grid and the smart appliances that both companies can produce. So, this connects the home to the energy suppliers and enables what is now referred to as the Internet of Things (IoT) a broader perspective of the IoT can be found in a McKinsey Quarterly report (Chui, Löffler, & Roberts, 2010). The February issue of the IEEE Computer Magazine is dedicated to the topic of IoT and provides an up-to-date perspective on research and application directions (IEEE Computer Society, 2013). A technology roadmap for the Internet of Things is depicted in Figure 5- Technology Roadmap for the Internet of Things Figure 5- Technology Roadmap for the Internet of Things

6 CHALLENGES As of any large undertaking, there are many challenges and they can be categorized as a) technology, b) security, and c) privacy. However these three areas are inter-related as the lack of security can be caused by a technological limitation and could lead to compromise of privacy. So, it is valuable to discuss all three together. The top technological challenges are the issue of standards, interoperability and integration. Additional challenges are those resulting from the explosion of data and the streaming nature that currently characterizes it. A good summary of this is as follows: One of the biggest challenges smart cities are facing is the integration and seamless management of a wide range of hugely different industries and technologies such as smart grids, telematics, public transport, and smart ticketing. Other key enablers include Big Data capabilities, integration of the social dimension, and the adoption of common standards to enable the emergence of a thriving ecosystem of smart city technology companies. (ABI Research) Security is always cited as a challenge and smart grid security is the latest in the cyber security arena. Smart grid worries are currently focused on industrial control technology. However, with smart appliances, which imply smart energy meters and 2-way communication, the threat will include our homes. And in case we do ignore that smart cities include smart transportation, it is important to cite experiments that demonstrated hacking of a moving car instrument panel using a specially built radio device (Rouf, et al., 2010) Lack of security may lead to invasion of privacy and There's been a lot of talk about Firesheep, a free Firefox extension that collects data broadcast over an unprotected Wi-Fi network without using SSL. You turn it on, and by default it collects cookies for Facebook, Twitter and 24 other sites. Then you can sidejack the account and gain access under the acquired identity (LosHuertos, 2010). So, it may be an interesting question to ask if it is legal to use Firesheep at Starbucks? This and other simple questions such as privacy rights of people who have unprotected WiFi networks are coming up regularly and require understanding and interpretation of the law. Another dimension of privacy that we have all encountered is the use of electronic data for marketing and targeting purposes. Marketing issues are not simple as we all accept Google s advertisements that are based on our and search history because they serve us better. However, recent news stories revealed that stores have sent coupons to a pregnant daughter at her parents address before they were told of her pregnancy. That and other stories are best understood by a detailed study on the use of analytics through specialized staff by retailers was published in the New York Times (Duhigg, 2012). In studying these issues, some researchers have suggested A key observations is that privacy can be achieved by imposing high security requirements onto the used technology to avoid third party abuses; and ii) by decoupling technical smart city data streams from the personal one to avoid abuse of data by insiders. (Bartol, Hernandez-Serranoy, M, Soriano, Dohler, & Barthel, 2011).However, as we know that imposing higher security requirements, it is certain that usability and satisfaction may be affected.

7 CONCLUSIONS Smart environments are evolving through technological advances and smart cities are growing everywhere. We cannot and should not resist the enabling technologies and thir effect on changing lifestyles. However, to have an improved quality of life, it is important to understand the challenges posed through fast adoption of these technologies and to address these challenges. Security and privacy are a main concern and in this article, we have only identified some of the issues. Law enforcement and government agencies do collect an immense amount of data that includes video and still images of cars, persons coupled geographical data. This data when used with what is collected by businesses such as credit card and phone usage can provide a full trace of a person s life style and actual movements. Therefore privacy protecting laws are of an essence as we move forward. REFERENCES ABI Research. (n.d.). Smart Cities. Retrieved February 13, 2013, from Bartol, A., Hernandez-Serranoy, J., M, Soriano, M., Dohler, M. A., & Barthel, D. (2011). Security and Privacy in your Smart City. Proceedings of Barcelona Smart Cities Congress. Barcelone, Spain. Chui, M., Löffler, M., & Roberts, R. (2010, March). The Internet of Things. Retrieved February 14, 2013, from McKinsey Quarterly: Chung, Y. (2010, May 26). GE & Samsung s Collaboration brings the Spotlight back to Korea s Smart Grid Industry. Retrieved February 14, 2013, from Korean Insight: CISCO. (n.d.). Smart+Connected Communities. Retrieved February 14, 2013, from Duhigg, C. (2012, February 16). How Companies Learn Your Secrets. The New York Times Magazine. El Khayat, G. A., Mabrouk, T. F., & Elmaghraby, A. S. (2012). Intelligent serious games system for children with learning disabilities. CGAMES (pp ). Louisville, KY: IEEE. Elmaghraby, A. S., Kumar, A., Kantardzic, M. M., & Mostafa, M. G. (2005). A Scalable Pricing Model for Bandwidth Allocation. Electronic Commerce Research, 5(2), Elmaghraby, A. S., Méndez, A., García Zapirain, B., Sheta, W., & el Shehaby, S. (2012). CGAMES (pp ). Louisville, LY: IEEE. Elmaghraby, A., Graham, J., & Turner, M. (2011, December). Kentucky s Smart Grid Roadmap. IEEE SmartGrid. Piscataway, NJ, USA. IBM. (n.d.). Conversations for a Smarter Planet: 1 in a Series. Retrieved FEBRUARY 2013, from IBM - A Smarter Planet Overview: Conversations for a Smarter Planet: 1 in a Series IEEE Computer Society. (2013, February). The Intrnet of Things. IEEE.

8 Lindsay, G. (2012, December 22). The 10 Smartest Cities on the Planet [Slideshow]. Retrieved February 14, 2013, from Fast Company: LosHuertos, G. (2010, December 16). End of Privacy - Herding Firesheep in Starbucks. CNN Money. Retrieved February 14, 2013 Nissenbaum, H., & Varnelis, K. (2012). The Architectural League NY - Publications. Retrieved February 14, 2013, from The Architectural League NY: Rouf, I., Miller, R., Mustafa, H., Taylor, T., Oh, S., Xu, W., et al. (2010, 2010). Security and privacy vulnerabilities of in-car wireless networks: a tire pressure monitoring system case study. the 19th USENIX conference on Security (p. 21 (16 pages)). Berkeley,CA, USA: USENIX Association. Siemens - a. (n.d.). Smarter Neighborhoods Smarter Cities - Solutions for a More Sustainable New York Today. Retrieved February 14, 2013, from Siemens - b. (n.d.). Retrieved February 14, 2013, from Sustainable Cities - Siemens USA: