Home Network Security and PKI Role
Definition of Home Network at is considered Home Network here? ome Network is the network where all digitalized appliances are connected -By networking home devices provide home automations and user convenience -Examples of Home Networking Items -Turning on the Heating/Air Conditioning System using cell phone prior to arrival -Centralizing the lighting system and able to program using home PC -Locking and Unlocking windows, rooms, garage and main entrance -Monitoring motion sensors or video surveillance -Online banking or credit card payment on TV set top box during home shopping -Recording a favorite TV programs away from home using phone or internet -Activate and control robotic vacuum cleaners over internet or wireless device -Managing utility (Electric, Gas etc) usage and control for maximize energy savings -More..
Home Network Structure Cable/Wireless Area Community Area al Broadcasting P.P Residential Management System (RMS) INTERNET CDMA 2000 1X, 1x EV-DO, W- CDMA Portable Internet Telematics LAN Wireles s Cable Service Home Network Server Fiber Application Server xdsl Home Gateway Resident Area PLC HomeRF IrDA (Infrared) Ethernet IEEE1394 (Direct Cable Etc. House Appliance AV & Entertainment Wireless Cyber Home PC & Office Device Core Network Home Gateway Home Network Net Terminal
Home Network Technology
Home Network Standard ome Network Standards in the area of Home Server, Middleware standard, and communication protocol. Home Server/ Home Gateway Middleware Communication Protocol
Central Hub Home GW Existing Service Home Gateway Service Voice Telecom Phone Internet ISP Modem/PC Cable TV CATV Set top/tv Security Service Security Co CCTV Telecom ISP CATV Appliance Security Co Home Gateway Phone PC TV CCTV
Home Network Security Issue Issue Question Figure onfidentiality Can someone else view my video surveillance? Can someone else listening my communication? Figure Solution Encryption/ Decryption ntegrity Can someone alter my TV internet election vote decision? Can someone send me the incorrect billing? Digital Signature uthentication Can someone else login to my home network? Is the person I m communicating with is the right person? Certificate onepudiation All actions must have evidence and should be non-repudiated Digital Signature igital Rights anagement Digital rights to contents. How to protect piracy? DRM
Home Network Security Example Security Threat Security hole in Home Automation can threaten financial status and privacy of networked homes. -DOS attack on Home Gateway must be prevented to protect valuable assets or information Secure Solution To prevent attacker, following items can be applied Channel Encryption between User& Home Gatewa Certificate based Home Gateway Home Gateway Detection or avesdropping DOS Attack to obtain authorization Firewall Certificate based Attacker Obtain access to Security alarm, Home control Unable to intercept
Home Network Secured Area rvice Provider/External Network Service User/Internal Network Digital Phone Co. Signature User ISP thentication CATV Appliance Co. Security Co. User Firewall Residential Gateway Phone PC DTV Alarm User Authentic Digital Signature Digital Signature Banks Mall A/V DRM Broadcasting INTERNET
Home Network Application Overview RMS is important gateway for flowing of information from external source to internal home appliances. All information passing through RMS must be secured from unwanted forces. RMS Security Advantage Authenticate all users connecting to RMS Authorization to G/W and privileged services Apply encryption to sensitive information RMS can be provided by service provider such as ISP, Cable TV operator or it can be located on residential community RMS Users Telephone Browser Internet User Information Control Information Control Information Residential Gateway PC DTV (IP Set top) WallPad Appliance
Sectional Security Requirements Section Application Applied Security Description WEB RMS (Residential Management System) Authenticate Home Network Users Client/Server Security Secured data communication between RMS and Web browser/pda End-to-End security Certificate based user/server authentication Based on user profile, authorization to connect to Home gateway RMS G/W Home Automation server Service or Content Server/GW Secure G/W Data Encryption between RMS and G/W RMS verifies secure G/W and G/W verifies correct RMS. Contents or Service authorization and authentication Example of content payments Appliance /GW Based on security protocol, apply secure encryption Appliance & G/W mutual authentication G/W Appliances Wireless Access EAP-TLS/Biometric ID/Password based Certificate based mutual authentication Biometric authentication For example, low usage such as Bluetooth can use ID/Pwd mutual authentication Appliance External For services without RMS User/Server Auth Provide Encryption Library to various Middleware protocols User
PKI Role in Home Networking Either from Home to Outside or Outside to Home, all authentication is forced to present certificates. Certificate Usage Limitation to certificate management : Difficult to manage certificate to digitalized home appliances. It would be recommended to store certificate to home PC or IT-STB to roaming it around the appliances whenever necessary. Home Security Manager tool is required to manage certificate usage Public CA Gateway IP-STB Internet Public Private CA Private
PKI Role in Home Networking HSM (Home Security Manager) is security tool to manage home network area such as public certificate management, roaming of certificate, private certificate issuing & management, and electronic wallet management etc. HSM Features Appliance Search: Able to search appliances with Home Security Agent such as Home Gateway, D-TV, IP-STB etc Electronic Wallet Management : Wallet View/Edit, Wallet Roaming. Certificate Management : Public Certificate Roaming, Certificate PWD Management, Generating Private certificate Authorization Management : Access Control Data Security : Elec. Wallet on the appliances or content encryption and protection Supported Appliance : RGW, IP-STB, DTV-STB, REF, LNDRY, LIGHT, CAM, DOOR, SVR etc. Appliance Manufacturer : ICROSS, SNET, IBRIGE, COMMAX, SAMSUNG HEAVY INDUSTRY etc (more to come) Home Security Manager Main Screen PC Certificate or electronic wallet management via PC etc. Automatic control of home network appliances Send HSA : Home Security Agent HSM : Home Security Manager www.softforum.co