Internet of Things, Privacy, and Novel Services

Transcription

1 Norstella årsmøte, 30Mar2016 Internet of Things, Privacy, and Novel Services How can we teach Sensors to talk Norwegian Josef Noll, Olaf Owe, Christian Johansen 1 University of Oslo/UNIK & IFI ConSeRNS, IoTSec.no

2 when I came to Norway IoT Security and Privacy 2

3 From power lines to Smart Meter Infrastructure & Services Transmission Grid! capacity, reliability! security Distribution Grid! capacity, QoS Smart Grid Infrastructure! smart meter! security Smart Home Future infrastructure/ services! digitisation/home4.0! alarm, green! maintainability! security! privacy, security! societal challenges IoTSec.no Mar 2016, Josef Noll 3

4 Addressing the Threat Dimension for Internet of Things (IoT)! Hollande (FR), Merkel (DE) had their mobile being monitored! «and we believe it is not happening in Norway? [source: Süddeutsche Zeitung, 18Dec2014] [source: IoT Security and Privacy 4

5 Opportunities for Smart Grids! Smart House/Building GSM/LTE Power distribution! proactive maintenance! reliability Admin Cloud Meter infrastructure! Automatic Meter! Collector! Admin Cloud House infrastructure! Hot-water, Heating! White goods! Novel services energy saving alarm virtual fall sensor Future infrastructure/services! digitisation/home4.0! Digital Society! Services: alarm, green Power distribution IoTSec.no Mar 2016, Josef Noll 5

6 Communication & IoT for society IoTSec.no Research on IoT security Building the national Security Centre for Smart Grid Smart Meter Internet IoTSec.no Feb 2016, Josef Noll 6

7 Knowledge and collaboration space IoTSec.no #IoTSecNO Academia Industry Interest Org. Industry «Open World Approach» everything that is not declared closed is open Gjøvik Kjeller Oslo Halden International IoT Security and Privacy 7

8 From Smart Grid towards Smart. based on: security & privacy for systems of systems! Prerequisites we are building the Security Centre for Smart Grid Smart Grid infrastructure towards Smart Homes, Smart Cities towards Autonomous systems! Security & Robustness of Industrie4.0! Model System of Systems Public Authorities demand Consumers adaptation infrastructure: broadband, mobile Digitalisation of Industry Business climate: market Creative programmers software! Networked Autonomous Systems! Smart Grid enabled Novel Services Entrepreneurs ideas Infrastructure providers Academia research, education IoT Security and Privacy 8

9 Applications - smart grid - health,. Security, privacy awareness protect Future Services in SmartGrid Ecosystem for Innovasjon Fremtidens forretningsmuligheter Pilot Data Data procedures, policies choice detect Data react Normdannelse procedures incentives Arena Policies (security, admission,..) who owns the data? IoT Security and Privacy 9

10 Modelling and Programming Systems of Systems! System of sub-systems of components (s,p,d) - security, privacy, dependability measurable system analysis sub-system 1 (s,p,d) system (s,p,d) Multi-Metrics (weighted subsystems) sub-system 2 (s,p,d)! Fokus security model for system of systems creating modelling constructs for systems of systems programming security goals! Innovation opportunities tools for testing and analysis applications in energy and smart homes M MM Multi-Metrics seamless integration of technologies Comp. 1 Comp. 2 Comp. 3 IoT Security and Privacy 10

11 elaborates the proposed cloud based Internet of Things framework. Figure 2 illustrates the hapter elaborates the proposed cloud based Internet of Things framework. Figure 2 illustrates the ework that contains the following four layers: Node layer, Network layer, Middleware sed framework that contains the following four layers: Node layer, Network layer, Middleware lication layer. A brief overview of each layer is as follows. and Application layer. A brief overview of each layer 4. is PR as OPOSE follows. D F R A M E W O R K 4. PR OPOSE D F R A M E W O R K This chapter elaborates the proposed cloud based Internet of Things framework. Figure 2 illustrates the Security and Robustness of Industrie4.0 systems This chapter elaborates the proposed cloud based Internet of Things framework. Figure 2 illustrates the proposed framework that contains the following four layers: Node layer, Network layer, Middleware proposed framework that contains the following four layers: Node layer, Network layer, Middleware layer and Application layer. A brief overview of each layer is as follows. layer and Application layer. A brief overview of each layer is as follows.! Novel Security Paradigm for IoT sensor security need system control My trust network Figure 2. The layered representation of the proposed framework. Figure 2. The layered representation of the proposed framework. r Node layer contains hundreds of nodes such as devices, sensors and actuators distributed de layer Node layer contains hundreds of nodes such as devices, sensors and actuators distributed e railway infrastructure. Some of them are very small in size having limited battery capacity he whole railway infrastructure. Some of them Preferences are very small in size having limited battery capacity for collect and forward data only, e.g. the temperature sensors. Some of the devices can re used for collect and forward data only, e.g. the Context temperature sensors. Some Figure of 2. the The devices layered representation can of the proposed framework. filter data. The nodes deliver Figure collected 2. The layered data to representation the middleware of the layer proposed and framework. some of them gate and filter data. The nodes deliver collected Roles data Node to the layer middleware Node layer layer contains and some hundreds of them of nodes such as devices, sensors and actuators distributed ack or Node suggestions layer Node from the layer middleware contains hundreds layer and of thereby nodes such as devices, sensors and actuators distributed over Topic can perform actions, e.g. actuate a e feedback or suggestions from the middleware layer and the thereby whole railway can perform infrastructure. actions, e.g. Some actuate of them a are very small in size having limited battery capacity vice. over the whole railway infrastructure. Some of Identities them are very small in size having limited battery capacity nical device. and are used for collect and forward data only, e.g. the temperature sensors. Some of the devices can layer and In are order used to for communicate, collect and each forward node data only, e.g. the temperature sensors. Some of the devices can Thanks is equipped to aggregate Vladimir with one or multiple communication twork layer In order to communicate, each node is equipped and with filter one data. or multiple The nodes communication deliver collected data to the middleware layer and some of them aggregate and filter data. The Oleshchuk nodes deliver for collected ideas and data discussions me of the nodes work alone, while some other work to the middleware layer receive in a feedback group. Nodes or suggestions working in from a IoT group and the Security some middleware and of them layer Privacy and thereby can perform actions, e.g. actuate a! Innovation opportunities tools for measurable security observer sensors in novel IoT services open innovation landscape Germany: Smart Meters earliest in 2035 USA: privacy is just an illusion InDigO: we create privacy-aware systems 11

12 Communication & IoT for health GravidPluss personalised support for pregnant women with diabetes GravidPluss.no Feb 2016, Josef Noll 12

13 GravidPluss GravidPluss.no Feb 2016, Josef Noll 13

14 ! Min device viser meg feilmelding Lessons learned "9-3" og fungerer ikke lenger?! "9-3" blir "E-b" når du snu blodsukkermåleren. Det betyr at er måleren er tom for strøm, GravidPluss.no Feb 2016, Josef Noll 14

15 Way ahead: Global Perspective! Our advantage members of the ecosystem in place industrial proven applicability export of Norsk tillit to other countries! European Dimension Datatilsynet, Forbrukerrådet! United Nations Global Goals for Sustainable Development Digital Inclusion is key for development Norway has secretariat on G4: education IoT Security and Privacy 15

16 Conclusions system (s,p,d)! Internet of Things (IoT) is a game changer sub-system 1 (s,p,d) Multi-Metrics (weighted subsystems) sub-system 2 (s,p,d) Unfair advantage in the Nordics M MM Multi-Metrics Converting Trust into IoT Comp. 1 Comp. 2 Comp. 3! Collaborative approach for a (more) secure society partnership for secure and privacy-aware applications based on academia, industry and! Innovation ecosystem with security and privacy let the sensors speak Norwegian Pilots for Procedures, Norms & Policies criticality IoT Security and Privacy ideal good accep. critical failure 16