HiTech. White Paper. Realizing the Promise of the Internet of Things

Transcription

1 HiTech White Paper Realizig the Promise of the Iteret of Thigs

2 About the Author Ged Roberts Ged Roberts is the global head for operatios ad delivery excellece for the High Tech busiess uit at Tata Cosultacy Services (TCS). Based out of TCS Amsterdam office, he is resposible for esurig oe global service stadard across the Hi Tech busiess uit, ad assurig TCS cliets a umatched experiece of certaity. With a hoours degree i computer sciece ad more tha 30 years of experiece i the IT idustry, Ged has worked for a umber of iteratioal compaies prior to joiig TCS. I his previous roles, Ged maaged ad delivered software services for leadig orgaizatios across the Americas, Europe, ad Asia Pacific.

3 Abstract May techology treds remai hype ad rarely make it to the realm of our everyday reality. Iteret of Thigs (IoT) started off as beig futuristic, somethig to be aspired to, but difficult to apply i the way we live or ru busiesses. However, today orgaizatios are slowly ucoverig the potetial of coected devices ad sesors that commuicate ad iteract with each other. Orgaizatios are discoverig ways to geerate busiess value from IoT, thaks to the proliferatio of cloud based services ad aalytics. The quality of real-time iformatio from IoT related techologies will take the guesswork out of decisio-makig. Ad yet, despite the myriad opportuities it offers, IoT adoptio has bee relatively slow till date. This could be due to the lack of preparedess by busiesses with respect to the ifrastructure ad processes required to deploy ad realize the full potetial of this disruptive techology. I this paper, we address some fudametal issues as eterprises prepare for a IoT-aided itercoected ad self-learig eviromet. Some key factors that will help realize the full potetial of this techology are also discussed. The paper excludes moetizatio ad challeges related to data protocols, device iteroperability, ad eterprise itegratio, which are cosidered as extesios of existig commuicatio techologies, ad will be discussed i a forthcomig paper.

4 Cotets Itroductio 5 A Four Step Approach for Deployig a Successful IoT Eviromet 5 Autheticatio ad authorizatio: Securig the IoT ecosystem 6 Behavior: Cotextualizig data ad the behavior of devices 6 Correctio ad chage: Stayig resiliet ad relevat 7 Disablig ad disarmig devices: Adaptig to a evolvig ecosystem 8 Makig IoT a Busiess Reality 8

5 Itroductio I the hyper-coected world we live i, Iteret of Thigs (IoT) is emergig as the ext big thig a techology that will chage the way we operate, at a orgaizatioal as well as idividual level. It is well documeted that the IoT has the potetial to create sigificat ecoomic impact as well as create ew services, busiess models, ad ways of livig ad workig. However, despite the promise of the IoT, i a recet hype cycle chart¹, Garter poits out that IoT is at the peak of iflated expectatios. Furthermore, a report from the Pew Research Cetre² casts doubts o may aspects of this techology. For example, will it really work ad offer the beefits that everyoe is talkig about? How easy will it be to adopt, ad will it be iclusive? Are orgaizatios prepared for the potetial loss of privacy? Relatively poor receptio of techologies like Google Glass ad other wearable devices, also raises cocers regardig the real beefit of IoT. I the followig sectio, we propose a comprehesive approach for deployig a IoT set up while examiig the key areas that merit careful cosideratio to esure successful ad secure operatios, for istace, how eterprises ca securely coect, maage, ad cotrol the desigated etwork. A Four Step Approach for Deployig a Successful IoT Eviromet I order to uderstad the critical success factors for IoT platforms ad devices, it will be beeficial to first take a look at successful commuicatios betwee coected devices that are preset today. For example, i ay idustrial operatio that requires the trasportatio of dagerous products through pipelies, there is a closed loop system of coected poit-to-poit devices ad telemetric measures. A typical cofiguratio icludes a Supervisory Cotrol ad Data Acquisitio (SCADA) system coected to Programmable Logic Cotrollers (PLCs), which commuicate over slow serial commuicatio lies with the telemetry. This helps moitor the flow of the product through the pipelie ad esures safe delivery of the etire product. If the readigs from periodic measuremet cycles go out of aligmet, the PLC or the SCADA system executes a corrective actio or raises a alarm to automatically close dow the pipelie. Other types of devices, the automatic self-reactig oes, respod proactively to aomalies without ay maual itervetio. So, cosiderig the above example i light of such a device, a pipelie leak will trasmit a pressure wave i both directios that automatically triggers the valves ad pumps to shut dow. However, a IoT govered sceario appears to be fudametally differet. While the pipelie i the example above is closed i commuicatio, the IoT set up will be ope. Devices i the pipelie are coected poit-to-poit, but IoT devices may commuicate with may other devices, some as yet ukow. By leveragig the priciples established i a closed system, we ca safely ad reliably automate highly complex ad dagerous idustrial processes ad geerate more value from the IoT. [1] Garter, Garter's 2014 Hype Cycle for Emergig Techologies Maps the Jourey to Digital Busiess (August 2014), accessed November 30, 2014, [2] Pew Research, The Iteret of Thigs Will Thrive by 2025 (May 2014), accessed November 20, 2014, 5

6 We propose a four step approach to deployig IoT devices, platforms, ad eviromets. A = Autheticatio ad Authorizatio B = Behavior C = Correctio ad Chage D = Disable ad Disarm I the followig sectios, we take a look at each of these steps i detail through examples of a IoT eabled home etwork. While simplistic i ature, we believe that if we ca successfully ad effectively itegrate a series of household compoets, it becomes relatively easier to apply IoT to the more complex idustrial processes ad operatios. Autheticatio ad authorizatio: Securig the IoT ecosystem I the closed loop pipelie cotrol system, the purpose of the SCADA system is to act as the cetral poit that commuicates i accordace with a predefied protocol for a pre-determied activity. Similarly, i a IoT eviromet, we must first defie the purpose ad fuctioality of the IoT device. The we must determie how to operate, steer, ad read each fuctio as per defied protocols. Cosider a smart fridge i the home eviromet that may moitor temperature iside ad outside the room, temperature of driks, food quatity, ad so o. There may also be cases where a smart fridge places orders automatically with a supermarket based o moitored data pertaiig to food quatity. I this example, some questios with respect to autheticatio ad authorizatio, which eed to be addressed, are: Who is talkig to the smart fridge is it a sesor or the owers of a smart phoe? How ca we establish a secure ad valid coectio while keepig malicious attacks at bay? What levels of ecryptio will be used to exchage messages ad how will we coordiate these ecryptio keys betwee devices? Apple s HomeKit, a framework that commuicates with ad cotrols coected accessories i a user s home, attempts to address may such issues related to the iphoe ad coected smart devices. However, sice this platform is yet to be lauched, the questio remais as to whether it will achieve its goals or ot. Similarly, with respect to eterprises, groups like the Ope Itercoect Cosortium, a group cosistig of idustry leaders such as Samsug, Itel, ad Broadcom, ad platforms like IBM s Adept attempt to address the autheticatio ad authorizatio aspect. Goig forward, we will eed to esure that machie-to-machie (M2M) commuicatio betwee devices has the same levels of autheticatio ad authority checks to truly secure the etire ecosystem. Behavior: Cotextualizig data ad the behavior of devices The behavior of a device ca be aalyzed both o the device itself, ad at some cetral poit for istace, a smart phoe, or data uploaded i real-time o a cloud-based service. I a pipelie system, this process is relatively straight forward. If a valve does ot ope or close withi the stipulated time frame or if the temperature exceeds a certai threshold value, a alarm goes off. This will either trigger huma itervetio or a cotrolled reactio to respod to the situatio i a safe maer. 6

7 Whe cosiderig IoT devices that are cotiuously commuicatig with either a cetralized system or other coected devices, the challege lies i determiig if the iformatio received is valid ad accurate. I additio to volume, velocity, ad veracity of data, the IoT device ad system must be able to uderstad the cotext. I a home eviromet, visualize the iteractios betwee a car, a smart phoe, ad the devices at home. Oce the car approaches, the smart phoe may sed a trigger that automatically opes the garage door, adjusts the heatig iside the house, ad reduces the fridge temperature to esure that eatables are at the preferred temperature. However, what happes if someoe else is already i the room or the garage door is maually opeed? It is also critical to uderstad how a o-fuctioig device ca impact the chai of evets for example, recogizig the missig data if the fridge is switched off or is malfuctioig. Uderstadig these patters help establish reliable ad predictable performace levels for ay device. However, it also requires a certai degree of sophisticatio that is curretly uavailable. Correctio ad chage: Stayig resiliet ad relevat Malware, hackig, ad iappropriate usage of data are threats to the adoptio of IoT. As devices become icreasigly sophisticated, the eed for routie maiteace is o the rise, such as updatig software versios, ruig virus scas, ad istallig system protectio patches ad updates. Ca, or rather should, the IoT ecosystem have the equivalet of weekly patches where all updates ad fixes are applied i oe go? While we ca assume that the devices will be upgraded over-the-air (OTA), this poses challeges related to sychroizatio, device-todevice versio compatibility, ad maagemet cotrol ad plaig. Upgrades may work well i a cetralized cloud based cotrol system, but as we devolve to autoomous machie-to-machie iteractios from disparate suppliers, sychroizatio of these compoets ad updates will further complicate the challeges. Roud the clock availability is aother critical success factor to cosider, especially whe we live i a costatly coected world. Ulike a closed loop pipelie system where we ca halt activities for routie maiteace schedules, IoT systems will eed to icorporate higher levels of resiliece ad default performace capabilities. However, a distict lack of stadards meas that device maufacturers eed support for Software Defied Devices (SDD), ad must be prepared to develop ad upgrade their fuctios ad protocols cotiuously. Uitetioally switchig off a device or triggerig of a erroeous alarm whe a update is applied, complicates the challeges. It is therefore importat to uderstad the cotext of these itercoected ad iterrelated systems. As more devices get coected, the ability to cotiuously moitor these coectios, ad self-aalyze ad report actual ad derived data withi realistic time frames, will icrease device stress ad impact software performace. The questio is, do we costatly upgrade devices or ivest i ew equipmet? Garter predicts that the IoT will iclude 26 billio istalled uits by 2020³. Ulike smartphoes, it will ot be possible or affordable to replace all of these devices every two years. Deployig ew devices implies rebuildig, recofigurig, ad i may cases, rewritig the uderlyig software. Hece, alterative ways to address issues pertaiig to legacy devices ad fuctioalities will eed to be explored. A agreed stadard of self-describig compoets may ecessitate rebuildig ad realigmet of the existig ecosystem to take advatage of the ew features ad to fully itegrate with them. Eve i the case of a self- [3] Garter, Garter Says the Iteret of Thigs Istalled Base Will Grow to 26 Billio Uits By 2020 (December 2013), accessed November 30, 2014, 7

8 learig processes, will users be willig to wait for the moitorig applicatio to lear the beefits from a ew feature? A alterative optio would be for a ew device to icorporate a preset list of iputs ad expected outputs, i the form of pre-packaged, structured learig algorithms. This will jump start the device ad help the eviromet obtai a immediate assessmet of its capabilities. Disablig ad disarmig devices: Adaptig to a evolvig ecosystem Disablig ad disarmig devices i case of maiteace, abormal behavior, or replacemets, also poses multidimesioal challeges. Whe all data is aggregated at a cetralized level, each device has a poit ad shoot type of approach for commad resposes, disable beig oe of them. I such a sceario, the cetralized system must be able to evaluate the etire ecosystem of devices to make the right decisios ad supply cotiuous cotrol without the particular device. For example, i the home eviromet, if a temperature device is disabled, what will be the default behavior of the fridge? If the widow sesors are disabled ad the outside temperature icreases, will the software trigger a icrease or decrease i refrigeratio temperature? Whe devices are disabled for a particular reaso, the surroudig devices will assume a default behavior ragig from o value' to performace based o historical data ad statistical aalysis. This, however, demads more sophisticated devices ad software. Disarmig ad disablig also comes ito play whe a device detects a threat. Patters i past performace ca be used to ot oly predict outcomes ad adapt to a chagig eviromet, but also to moitor abormal behavior of a device. Cosider a Deial of Service (DoS) attack that may prevet the device from workig, or result i draiig the battery i order to ru the service dow. I such cases, ay commad issued from a cetralized system may have trouble reachig the affected device. Just like the pipelie system, devices will have to address the cocept of idepedet fail-safe mechaisms. This meas they should be able to detect these ufavorable coditios automatically, thereby disarmig themselves. Makig IoT a Busiess Reality There are distict similarities betwee the IoT ad the SCADA model. Both represet a level of autoomy ad devolved cotrol that is cetralized by a overarchig supervisory system, whether it is local or cloud-based. It is importat to remember that IoT is ot just about data acquisitio, but also the supervisory cotrol of the ecosystem. The IoT presets umerous opportuities to optimize ad improve outcomes for eterprises across idustries. From empowerig heavy idustries to drivig digitizatio, the IoT has eormous capacity to create ew isights, busiess models, ad ways of workig. However, eterprises eed to first gai the cofidece to had over cotrol of their busiess-critical processes to a aoymous cloud-based service ruig i a remote locatio. Maximizig the IoT s potetial i a itercoected world will therefore mea addressig the basic teets of itegrity, resiliece, ad security. Parterig with a experieced vedor who ca brig deep experiece ad a idepth uderstadig of busiess eviromets across multiple idustries, ca help accelerate the adoptio of IoT, thereby deliverig the promise it offers. 8

9 About TCS' High Tech Busiess Uit Accelerated idustry growth, rapid techological obsolescece, ad the eed for faster time to market compel High Tech orgaizatios to improve busiess agility. High Tech solutios from TCS address fudametal idustry problems, improve process efficiecy, ad ehace productivity ad collaboratio across busiesses, while optimizig overheads. From software product egieerig ad supply chai, to leveragig Iteret of Thigs, digital reimagiatio, cloud, Big Data, mobility ad others, our solutios empower idustry players - computer platform ad services compaies, software firms, electroics ad semicoductor compaies, ad professioal services firms to compete effectively. Complemetig our comprehesive service portfolio of IT solutios, busiess cosultig, product egieerig services, ifrastructure services, ad busiess process services, are our parterships ad alliaces with leadig idustry vedors. Dedicated iovatio labs, ifrastructure support, ad the Tata Research Developmet ad Desig Ceter (TRDDC) offer our cliets access to cuttig edge techologies, advaced systems egieerig methodologies, storage optimizatio, ad covergece solutios. Cotact For more iformatio about TCS High Tech Busiess Uit, visit: HiTech.marketig@tcs.com Subscribe to TCS White Papers TCS.com RSS: Feedburer: About Tata Cosultacy Services (TCS) Tata Cosultacy Services is a IT services, cosultig ad busiess solutios orgaizatio that delivers real results to global busiess, esurig a level of certaity o other firm ca match. TCS offers a cosultig-led, itegrated portfolio of IT ad IT-eabled ifrastructure, egieerig ad TM assurace services. This is delivered through its uique Global Network Delivery Model, recogized as the bechmark of excellece i software developmet. A part of the Tata Group, Idia s largest idustrial coglomerate, TCS has a global footprit ad is listed o the Natioal Stock Exchage ad Bombay Stock Exchage i Idia. For more iformatio, visit us at IT Services Busiess Solutios Cosultig All cotet / iformatio preset here is the exclusive property of Tata Cosultacy Services Limited (TCS). The cotet / iformatio cotaied here is correct at the time of publishig. No material from here may be copied, modified, reproduced, republished, uploaded, trasmitted, posted or distributed i ay form without prior writte permissio from TCS. Uauthorized use of the cotet / iformatio appearig here may violate copyright, trademark ad other applicable laws, ad could result i crimial or civil pealties. Copyright 2015 Tata Cosultacy Services Limited TCS Desig Services I M I 01 I 15