cea-tech developments for safe and secure iot ecosystems · the wsn & for connectivity sensors...

&

www.cea.fr

February 20th, 2015

CEA-Tech developments for safe and secure IoT ecosystems

[email protected]

Marc Duranton

&

Introduction to CEA Tech

Cliquez pour modifier le style du titre

February 2015© CEA. All rights reserved | 3&

CEA global organization

Military Applications

Division (DAM)

Nuclear Energy Division (DEN)

Technological Research Division

(CEA Tech)

Materials Sciences DivisionLife Sciences Division

Mission DAM : France’s national security independence

Mission DEN : France’s energy independence

Mission DRT : French business’ economic competitiveness



CEA Tech: Key figures

• Annual operating budget > 600 M€

• More than 50 HIGH-TECH START-UP VENTURES over the past 10 years

• 4,500 EMPLOYEES

• 600 PRIORITY PATENTS applications / year

• 500+ CUSTOMERS :

CAC 40 and SBF 120 (40%)

SMBS and START-UP (45%)

INTERNATIONAL (15%)

A strong growth based on corporate funding

External funding

CEA funding

Annual Budget

Am

ou

nts

in

M€ External funding

+ 13% / year

External funding

+ 15% / year



CEA Tech: Mission Statement

Create innovation and transfer it to industry

- Main goal: working with and for industry

- CEA: state-owned research organization

- >80% of our budget comes from R&D contracts

- Looking for long-term partnerships

- Results-oriented : best effort to address partners issues

- Project-oriented : reactive and flexible

- Making our technology reach the market is our priority

- Our concern: seeking fair solutions for both parties



Solar

Laboratory of Electronics and

Information Technologies

Staff: 1800, Budget: €280 M

Laboratory of Integrated

Systems and Technologies


Laboratoty of Innovation for new

Technologies for Energy and

Nanomaterial


CEA Tech Research Institutes

&

CEA Tech and IoT



IoT : Many application domains

© iStockphoto & J.Gallon.

Smart Transport

Smart UtilitiesSmart healthcare

Smart Cities

Smart ShoppingSmart Spaces

Many opportunities



IoT: some figures

Cisco predicts 50B of connected object by 2020

X-as-a-serviceNew business models

Estimated market value $2 trillion by 2020

Up-to 1 trillion sensors deployed

Traffic grows by 25% per year

Connected objectsHumans

2003

2010

2015

2020

50 billions

Sou

rce:

CIS

CO

, AT&

T

&

The 4 challenges of IoT:• Data deluge• Energy consumption• Dependability• Interoperability



IoT Challenge #1: Data Deluge

Source: Paolo Faraboschi, HP



Solutions for Data Deluge

New communication protocolsSporadic traffic, asynchronous, decentralized, low power

Spectrum harvestingSpectrum scavenging, new bands (millimeter wave,

white spaces), coexistence and sharing

Local based servicesIndoor ranging, positioning, anchor based/distributed

New SensorsSmart sensors, smart imagers, ultra low power sensor node

IoT Challenge #1: Data Deluge



IP backbone

(e.g. Internet)

Enterprise

Cloud & Services

IPv6 protocols for low power, robust & efficient

networking in multi-hop and constrained WSN

Low-power radio

802.15.4, …

Low footprint

networking and

services stacks

Multi-access support

& Mobility of WSN

Security within

the WSN & for

connectivity

sensors &

actuators

Remote Management

Security, Protocols,

Software update…

WiSePRoM components

WiSePRoM Software Platform by CEA Tech

Wireless IP Sensor Network Protocols and Remote Management

Make wireless sensor networks

easy to deploy, secure and manage

Smart Buidling

Smart Home

Smart Grid

Industrial Networks

In-vehicle WSN

Others…

New Communication Protocol



IPv6

Internet/WSN

Gateway

Software Upgrade Server

(Linux / Android)

WiFi

WSN

(6LowPAN)

WSN

(6LowPAN) Reliable multicast

Unicast

Internet/WSN

Gateway (Linux)

Remote & Simultaneous Software Updatefor groups of sensors / actuators

Reliable Multicast

Software update management

Reliable Multicast

Internet/WSN Gateway

WSN node

Control server

(software update

+ application server)

Software update management

Unicast UDP

IPv6IPv6 / 6LowPANIPv6 / 6LowPAN

L1+L2802.15.4 MAC + PHY802.15.4 MAC + PHY

ApplicationApplication

Unicast UDP

IPv6

L1+L2

Complement &

Integrated with

ETSI M2M

platform

(OMA-DM)

ReliabilityPower & Bandwidth

EfficiencyRuntime, seamless and modular software

upgrade framework

WiSePRoM



Local based services : IR-UWB for localization

Track items or individuals within a few centimeters… over long ranges

RF IC solution for consumer market• Frequency Band 3.2 à 8.8 GHz : 8 channels• BW : 500MHz to 1GHz, Data rate up to 5 Mbps• Range : up to 2000m, Ranging accuracy <4cm• Low Power

SpoonPhone



Sigfox : Utra Narrow band radio

Provides a unique global cellular connectivity solution, from the customers’ devices to their software applications

RF IC solution for consumer market• ISM band 433/868/915 MHz • 100 bps to 1kbps • Sensitivity -140dBm• Global cellular connectivity at low

power• Can support millions of connected

devices



Spectrum harvesting : High data rate NFC

RF IC solution for consumer market• Coupling RFID and IR UWB• Data rate from 54 to 125 Mbps @ 30cm• Power consumption : 5mW• Low cost

Solution to share and experience content locally with a mobile device

10s required to download 1 Gigabit of content from battery-less memory tags

Nokia World ’ 11



Characterization of RFID chips (impedance, sensitivity) at 800-1000 MHz

Characterization of specific materials

Design and test of custom tag antennas

Simulation and characterization of read/write range performances at 800-1000 MHz

New sensors

&




IoT Challenge #2: Energy consumption

Solutions for energy

Energy Efficient server

ARM 64 bit, FDSOI, Interposers, …

Low Power Cyber Physical Systems

Low power mixed IC design, adaptive matchingtechnologies, low to zero power devices

Energy efficient technology: FDSOI

ULP IC design, ULP memories, resistive memories, power management, 3D integration,

sense & react, optical interposer



Fully Depleted – Silicon on Insulator

Improved performance Improved performance-per-wattAdaption to variability of loads

UTBB-FDSOI performance gain versus conventional Bulk CMOS technology.Blue: no body biasing, Green: FBB = +1V. Demonstrated by CEA Tech and

STMicroelectronics ISSCC 2014

Ultra-Wide Voltage Range (UWVR) operations: VDD=[0.39V – 1.3V]

High-frequency: Fclk > 2.6GHz @ 1.3VFclk > 450MHz @ 0.39V

Pro

toty

pe

ch

ip fro

m B

eig

né, IS

SC

C ‘1

4


Energy efficient technology: FDSOI



CHAIN VALUE

Pre-series line


The Silicon enablement platform model

A single partner along product maturation

IPs

Services

Academics

DKs

Silicon

ManufacturingFOUNDRIES

Design Center

ECO

SYSTEM

IC DESIGN PLATFORM ACCESS TO ADVANCED IPs EMULATOR & TEST PLATFORMS INDUSTRIAL MPW SHUTTLE EXPERTISE & SERVICES

Innovative productsIndustrial needs ON

E S

TO

P

SH

OP

Testchips ProductionIdeas




Energy efficient compute nodes for servers

Technology• FD-SOI• 3D silicon integration• 64-bit ARM Cores

Interposer• Passive or active• Mature technology

node• Application specific• Medium volume• Cost effective

assembly

Scalable approach: form micro-servers to HPC




Power Cyber Physical Systems

Leakage

management

Responsiveness

Power-Management Unit (PMU) Battery / Energy Harvester

Configuration Management Unit (CMU)

Event/Energy-

driven

Advanced Programmable

Wake-Up features

Ultra Low Power

Lightweight crypto

Wake-up

Radio

Wake-up

SensorsWake-up

Controller

Energy control

Authent

/Securit

yWake-up

Timers

Wake-up

Imager

Responsive

Always-Responsive Sub-system




L-iot : a flexible architecture for IoT nodes


Wake-up

Radio

Wake-up

SensorsWake-up

Controller


Always-Responsive Sub-system

Energy control

Authent

/Securit

y

Adaptive Always-Responsive/On-Demand according to energy levels

Wake-up

Timers

Radios

Sensors

CPU

(Register)

Memory

(SRAM &

eNVM)

MCU

Co

-pro

ce

ssin

g

(RF,

cry

pto

, d

ata

fusi

on

, im

ag

er)

On-Demand Sub-system

Imager

Wake-up

Imager



Leakage

management

Responsiveness



Processing/Communication

power

Application-driven


Flexible Wake-up /On Demand platform

Radios

Sensors

CPU

(Register)

Memory

(SRAM &

eNVM)

MCU

Co

-pro

ce

ssin

g

(RF,

cry

pto

, d

ata

fusi

on

, im

ag

er)

On-Demand Sub-system

ImagerIntegrity/Confidentiality

Applicative




Flexible Wake-up /On Demand platform

Leakage

management

Responsiveness



Advanced Power

Management Unit

Configuration for

adaptivity

Energy Harvesting

Adaptive

Gain: POWER/100

&




IoT Challenge #3: Dependability

IoT: the Internet of Threats

Today security / privacy issues make the newspaper headlines

Massive adoption of IoT by citizens relies on confidence in terms of security and privacy




Most of the IoT nodes are accessible to attackers

Implementations must be secured-by-designMemory dump , reverse engineering, side channel analysis, bus probing…

“Trustworthy computing (with software) cannot exist until we have trustworthy hardware to build it on”

Dr. Dean Collins, Deputy Director, DARPA




Solutions for Dependability

Security

Privacy and trust, authentication, scalable secure networks, lightweight crypto, homomorphic

cryptocomputing

Reliability

Reliable communication systems for M2M, Privacy and trust.

Criticity

Real-time OS, dynamic compilation, critical cloud data processing, distributed computing,

resource agnostic sensor networks




CEA Tech solutions for security

1. Security assessment and certification

2. Hardware security for IoT nodes

3. Secure middleware solutions from sensors to gateways

4. Reliable and secure wired/wireless network technologies

5. Design of large scale deployment secured schemes




Security evaluation and certification

Certification ITSEF: licensed laboratoryCommon Criteria security evaluations up to

the highest Evaluation Assurance Level (EAL7)

on electronic components and embedded SW

French certification scheme

International banking schemes

Security evaluation of embedded systemsSoftware attacks

Physical attacks

DomainsSmartCard Banking, Pay TV, e-Identity

Automotive ECUs, body control, motor control

http://www.emvco.com/?referred_from_www.paymentsnews.com

http://www.emvco.com/?referred_from_www.paymentsnews.com



Analyze threats on industrial protocols

Detailed analysis of protocol specifications

Implement attacks on wired / wireless multi-protocols industrial sensor networks

Develop dedicated tools (SW + HW) to perform security tests

Build security test-beds

Analyze the criticality of attacks

Propose security solutions

Adapt existing solutions to match the

industrial network context

Develop new solutions

Aggregator /

Concentrator /

Gateway

Information

system

Sensors


Network security analysis and testing



IoT dedicated cryptography


Hardware integration of security

Secure design of components and systems

TradeoffHardware implementation constraints

Resistance to attacks

Power consumption

Size / volume

Cost

Tamper resistant chip design Ultra low cost

pairing

Cost effective solution



Strong network security in resources-constrained

wireless sensor networks (WSN) interconnected to

larger infrastructures

• Protect the data transmitted

• Protect the network infrastructure

• Lightweight IP security protocols adapted to the limited resources of WSN (power, CPU, memory…)

• Remote & adaptive management of WSN security • Authentication & network access control• Dynamic key establishment• Threat /Intrusion detection mechanisms in WSN• Dynamic security adaptation to react to threats• Trust management system for WSN

• Secure software update for WSN• Secure, reliable and resource-efficient sensor software update

from a remote server

Network access control Key Management

Adaptive Security

Management


Reliable communication systems for M2M




Security hardened Cloud system

Secure cloud server end-to-end infrastructure prototype.

USIM-based authentication and key establishment.

HW-assisted on-the-fly memory encryption.

By construction: hypervisor out of the TCB.

Code & data confidentiality & integrity.

A unique encryption key per VM.

HW-assisted task switching.

HSM: Hardware Security Module

TCB: Trusted Computing Base




Criticity enforcementAnaxagoros Hypervisor for mixed criticality apps.

Spatial and temporal security.

Resource lending as a design principle.

« Day one » use of formal verification (Frama-C).

Ability to virtualize Linux, OSEK and PharOS.




Secure Execution with Innovative Security Tradeoff

How to be sure that the remote computing platform will not misuse your data?

Current idea: a (micro-)processor processes only clear data

What if a processor could work directly on encrypted data without having to disclose any secret?

This is where the potential of homomorphic encryption emerges




Homomorphic encryption

An homomorphic encryption system is a cryptosystem which, on top of allowing to encrypt and decrypt data, allows to perform (any) calculations in the encrypted domain.

In essence, the « cryptocomputer »:Keeps its algorithm private.

Can insert any (cleartext domain) data into the calculation.

Has access to neither intermediate nor final calculations results.

Such (secure) cryptosystems have been shown to exists in 2009.

Although theoretically efficient, the first systems were totally impractical.

But now, we are tackling the first real apps!

&




IoT Challenge #4: Interoperability

Solutions for Interoperability

Move towards open systems and platforms that support multiple

applications.

Overcome the fragmentation of vertically-oriented closed systems




Today: Domain-centric, vertical solutions

!

SmartHome SmartShoppingSmartTransportSmartHealth

- Monitoring medicine

intake

- Personalized

diabetes assistance

- Providing training

tips

- …

- Promoting

carpooling

- Minimizing taxi

delays

- Avoiding traffic

jams

- …

- Managing

sparkdeals

- Getting advice on

buying goods

- Retrieving

discount

- …

SmartCity

- Managing parking

space

- Lighting up a city

efficiently

- Monitoring Air

Quality

- …

- Monitoring and

controlling

- Saving energy

comfortably

- Interacting with

appliances

-…

Illustrations from the EU FP7 BUTLER project




Tomorrow: Horizontal smart solutions

Illustrations from the EU FP7 BUTLER project

HW/SW platforms




Holistic virtualization platforms of the physical world

IoT is about managing resources:

Network Heterogeneity and variability management

Distributed resources (Linc)

Device as a Service (SensiNact)

Rapid prototyping and deployment:

Management of the unexpected

Virtual sensors or resources

Continuous integrationLINC SensiNact

• Everything-as-a-service approach

• Fully OSGi compliant

• Lightweight & distributed

• CEA Tech developed solution




sensiNact Studio

DSL editor Graphical EditorProperties View

Navigator View

Deployment View

sensiNact Studio: tool for IoT application development and deployment

&

CEA-Tech contribution to EU-Japan projects



EU-Japan ICT Cooperation

Japan and the European Union are two key players in the ICT fieldIoT will require interoperabilityScale of today’s global challenges requires that we work together more closely and effectivelyIn conformity with the mutual interests and the research orientation of the EU and Japan

Specific actions dedicated to EU-Japan partnership Specific calls for cooperative projects in H2020



AT A GLANCE

Project coordinator :Clout-EU: Levent Gürgen, CEA, FranceClouT-JP: Yoshio Saito, NTT East, Japan

Partners:ClouT-EUEngineering, ItalyUniversidad de Cantabria, SpainST Microelectronics SRL, ItalyAyuntamiento de Santander, Spain Comune di Genova, Italy

ClouT-JPNTT EastNTT R&D

Keio UniversityPanasonic System SolutionNational Institute of Informatics

Duration: 36 months

Total cost: €2,32M for ClouT-EU

€1 ,5M for ClouT-JP, funded by NICT

Programme: FP7-ICT-2013- EU-

Japan

Further information:http://clout-project.euDr Levent Gü[email protected]+33 4 38 78 97 57

ClouT: Cloud of Things for empowering the citizen clout in smart cities

http://clout-project.eu/

//localhost/Users/md227339/Desktop/ClouT.mp4

//localhost/Users/md227339/Desktop/ClouT.mp4



Introduction to ClouT (Video)



10 use cases from 10 application domainsFirst reference architecture and itsimplementation

Development of field trials in 4 pilot cities

Main achievements at mid-termof the project



Input Data from Sensor or Database

Analysis Anonymity

City Database• Map• Tourism• Citizen Participation

City RelatedCompany Database• NPO HP• Event Info.

Public API・Restrant Info.

SNS• Local SNS• Twitter

Public Private

Store Info.• Coupon• Time Sales

Sensor Info..・Interactive Street・Santander

・Illumination Sensor・Train Info.

Sensor Info.• Camera• Camera

Database

Info. From SensorAnd Citizens

Restaurant

Day will sink in an hour.

Project the description

of real time info. on the

wall

Project the production

on the table

Provide appropriate

lighting for food and

drink

Day will sink in an hour.Project the description

of real time info. on the

wall

Street

Station

Tourist Info. Center

Enoshima

Station

Next DepartureOfuna 15:15Fujisawa 15:20

・Shop/Tourism Info.

・Info. From Citizens

・Train/Station Info.

【RegularMode】

▼▼ ▼

▼

▼▼

▼ ▼ ▼ ▼

Interactive city Fujisawa Regular Mode

Data FormatConversion

StorageDelivery

DB RegularMode

CautionMode

Nighttime

Daytime× Like！×

http://www.keio.ac.jp/index-jp.html




Input Data from Sensor or Database

Analysis Anonimity

Data FormatConversion

StorageDelivery

DB RegularMode

CautionMode

Nighttime

Daytime× Like！×

City Database• Map• Tourism• Citizen Participation

City RelatedCompany Database• NPO HP• Event Info.

Public API・Restrant Info.

SNS• Local SNS• Twitter

Public Private

Store Info.• Coupon• Time Sales

Sensor Info..・Interactive Street・Santander

・Illumination Sensor・Train Info.

Sensor Info.• Camera• Camera

Database

Info. From SensorAnd Citizens

Restaurant


of Emergency info. on

the wall

Project the production

on the table

Provide appropriate

lighting for food and

drink


of Emergency info.

on the wall

Street

Station

Tourist Info.Center

Enoshima

Station

Out of ServiceHill

【EmergencyMode】

▼▼ ▼

▼

▼▼

▼ ▼ ▼ ▼

Disaster preventionWeather information

Disaster preventionEvacuation SiteHill

Interactive city Fujisawa Emergency Mode





Fujisawa Dashboard

ClouT Architecture

Virtualized City Resources

Recommended ViewFuji Mt. and Sunset

In 30 min,



ClouT: use case



Mitaka Field Trial Scenario

Paw Users

Reaction（Reaction Paw）

［STEP1］Write comments Paw)

［STEP3］Registered reaction of Paw(user action)as a “Reaction Paw”

RegistrationInformation

（Paw）

［STEP2］Notice a paw to userwho meets conditions.

Paw readers

［STEP4］Watch the “Reaction Paw”

Beautiful cherry！New PawArrived

I visited

I took photos too.

One reaction

Revitalization Of City Environment

Community Creation

Going out support（Health promotion)

Elderly people get information on the application (called “Paw Collection”) , will go out if they get motivated by the information and write comments for the other users to motivate to go to the place.

The other users read comments of the facilities on Paw Collection ,that motivates them to go out.



牟礼コミュニティセンタ

Paw Collection in Mitaka

We inspect how elderly people get motivated to go out by using Paw Collection.(IC-tags installed in 31 facilities in Mitaka City for this trial)

We expect the effect such as health promotion , revitalization of the citiesby going out.



FEderated interoperable SmarT ICT services deVelopment And testing pLatforms

October 2014-September 2017

Brand new H2020 project!

Santander



Large scale experimentation in real-life environments: Osaka train station

Smart city, smart building

Smaller scale, experimental platform at Osaka and Kansai areaSmart POS, smart energy, smart health, smart transport, Osaka Osampo service(ISID)

Real-life testbeds, field trials - Japan

&

Conclusion



Teaming EU-JP pour IoT projets

CEA Tech is developing innovative solutions covering most aspects of IoT

Special focus on low energy and security

CEA Tech allows its partners to access new technologiesDesign center supporting FDSOI technolgyUltra low power IPs in sensing, computing and communicatingScalable middleware for networks of IoT nodesSecure and trusted solutions including homomorphic encryptionReal-Time hypervisor and virtualization for mixed real-time criticality loads

CEA Tech is a key player in EU-JAP cooperative projects on 5G, IoT and cloud technologiesWe wish to reinforce the current cooperation between CEA Tech and Japan with dedicated programs

Centre de Grenoble17 rue des Martyrs

38054 Grenoble Cedex

Centre de SaclayNano-Innov PC 172

91191 Gif sur Yvette [email protected]

Thank you for your attention

cea-tech developments for safe and secure iot ecosystems · the wsn & for connectivity sensors...

Documents