GlobalPlatform: Standardizing the Internet Protocol Landscape

Transcription

1 GlobalPlatform: Standardizing the Internet Protocol Landscape Kevin Gillick Executive Director CARTES Asia: Asia-World Expo 28 March 2013 Hong Kong GP

2 GlobalPlatform Positioning GlobalPlatform is the standard for managing applications on secure chip technology Trusted Execution Environment AND Secure Element Across several market sectors and in converging sectors

3 Our Collaborative Industry Partners TM

4 GlobalPlatform Members TM

5 GlobalPlatform Enabling Technology We have now released documents that: Enable application providers to confidentially and independently manage applications while using a third party communication network Provide increased security for devices which run multiple applications including mobile and / or remote devices Manage the secure delivery over-the-air of new services Outline the behavior of each and every actor involved in a mobile implementation, how they should be represented, and a summary of their role / responsibility in a variety of business models Define the communication between applications running in a rich operating environment and the applications residing in the trusted execution environment of a mobile device Define a single administration protocol to perform remote management of applications residing on any type of secure element in a mobile device And soon. A framework for setting up and managing a privacy environment 5

6 Internet of Things (IoT) Task Force Recently established task force with activity now underway Task force members: discuss new business requirements for network-capable objects identify how GlobalPlatform technology can progress to meet these advancements aim to ensure that whatever the environment or usage, there is a standard way for a service provider to deploy the solution 6

7 Determining GlobalPlatform s Scope There are many use cases to consider Smart Meters? 7

8 GlobalPlatform s Area of Focus Connected sensor and actuator devices, using various networking technologies to communicate, are the means to represent and control the things in the IoT The reason for investing in the devices and services built around them, is to provide knowledge and control of physical assets that have value to the consumer of the services The quality and dependability of the service depends critically (albeit not exclusively) on the security and assurance provided by the associated devices Securing these devices are GlobalPlatform s main area of focus 8

9 Remote Management One category of IoT devices are those required to have long lifetimes because they are built-in or part of an infrastructure that is amortized over decades For a service to remain competitive throughout such a time span it must be possible to manage efficiently: patching, updating, reconfiguring, or changing data or software of the devices It is not practical in many IoT deployments to manage devices on-site: the actual device may be hard to access due to its placement the device may not even have a user interface the cost of a person visiting sites may not be supported by the business model Such lifetime constraints are particularly sensitive for security, as threats are continuously evolving GlobalPlatform sees a strong need for efficient and standardized remote management 9

10 Provisioning and Security A variety of actors will typically be involved in the provisioning of IoT devices Device provider Transport network operator(s) Machine-to-machine service provider(s) IoT application provider(s) With all the related security implications, such as: the application may need to deploy its own security credentials to secure its communication and preserve confidentiality from the service layer the service layer may rely on access control credentials that are necessarily related to credentials used by supported transport networks any hardware support and provisioning means on the device could be used by different layers, provided that ownership and trust issues do not prevent such resource sharing GlobalPlatform sees the need for provisioning on multiple layers / protocols in one device 10

11 Next Steps Internet of Things Task Force On-going work of the IoT Task Force: match existing GlobalPlatform specifications (and possible enhancements) with identified needs develop a position paper for GlobalPlatform member review upon completion of a position paper, and with consensus of members, a public document will be published for external audiences including other standardization bodies GlobalPlatform believes that most technical components are already in place and the organization expects to play a key role in the IoT going forward 11

12 Visit White Papers Specifications Become a Member Organization

13 Thank You! 13