Data Privacy using IoTs in Smart Cities Project

17
Data Privacy using IoTs in Smart Cities Prerana Patil Mission Manager (IT) Umed- Maharashtra State Rural Livelihoods Mission

Transcript of Data Privacy using IoTs in Smart Cities Project

Page 1: Data Privacy using IoTs in Smart Cities Project

Data Privacy using IoTs in Smart Cities

Prerana PatilMission Manager (IT)

Umed- Maharashtra State Rural Livelihoods Mission

Page 2: Data Privacy using IoTs in Smart Cities Project

Smart Cities around the world

Map of the 107 cities worldwide receiving ICF awards from 1999~2012 Source: Smart City Development Experience Research of Each Country –ICF Case Study Analysis, Lin Zi Xian (2012)

Page 3: Data Privacy using IoTs in Smart Cities Project

What is a Smart city?

“Smart” = efficient (time, resources)

Homes/buildings, Transportation, healthcare, schools, IT…

Energy, Environment

Economy, Governance

“Improved living”

Sensors’ [System]

People – use, share, crowdsource

Page 4: Data Privacy using IoTs in Smart Cities Project

Why IoT?

Page 5: Data Privacy using IoTs in Smart Cities Project

IoT Projections

Page 6: Data Privacy using IoTs in Smart Cities Project

Some questions-

o Who owns the data in Internet of Things?

o Who has control of it?

o When it comes to privacy, how do I opt out if all these different devices collecting different data elements and how

do I control where it goes?

o What is more important - Efficiency or Privacy ; Usability or heterogeneity?

Page 7: Data Privacy using IoTs in Smart Cities Project

Expanded Attack Surface of an IoT System

Legal Framework

Page 8: Data Privacy using IoTs in Smart Cities Project

Security Challenges in IoT

• Shared data which has value – Big Data

• Attacks on end point devices, quickly propagate

• Open ecosystem

• Wider and more prone communication channel; domino

• No User Interface

• Compatibility of devices in the system, No specific protocol

• No specific OS for IoT devices

• Security failures can be “life-threatening”

• Product Reliability, Zero error

• Not enough computing power

Page 9: Data Privacy using IoTs in Smart Cities Project

Securing an IoT System

IoT Product Security needs - Data Handling Framework

“Establish and manage trusted relationships between devices, and over the full lifecycle of these devices, ..(to) achieve greater control over the data and the sources and the consumers of that data.”

• Access Control & Account Management (for devices w/o UI?)

• Segregation of networks and accounts

• Use of Secure protocols for data transmission

• Firewall management & Antivirus updates

• Providing remote updates for IoT devices

Page 10: Data Privacy using IoTs in Smart Cities Project

Security first approach

“Treat security as fundamental element of Product Value

Proposition”

• Prioritizing Security over Speed-to-market

• Security consideration as part of product design

• IoT security teams and experts

• Collaborating with other vendors

• Partnering with security firms

• Privacy enhancing technologies – RnD

• New models and the architectures

Page 12: Data Privacy using IoTs in Smart Cities Project

Framework changes

Needs:

• Finer Privacy policy

• Security standards

• Privacy Regulations and Compliance

• Legal Framework

Global Status:

• US

• Europe

• ROW

Page 13: Data Privacy using IoTs in Smart Cities Project

ICT & Indian Governance

UID, ePanchayats

data.gov.in Open Government Data (OGD) Platform

Telecom Sector, Surveillance

Current State/Learnings:

• Information Management

• Access control & Network Protection

• Data Security, Cyber Security

• Policy & Regulation

• “Privacy”? Sensitive data – Section 72 of Information

Technology Act. 2000, IT Amendment Act 2008

Page 14: Data Privacy using IoTs in Smart Cities Project

Happenings

“Govt turns to private firms for ideas on smart city plan”

“Cisco to build Visakhapatnam as first ‘smart city’”

“Govt plans Wi-Fi hotspots in 25 cities by June”

“Noida expressway to get smart traffic management system”

“Solutions for Slum Areas in Smart Cities”

Draft Concept Note on Smart Cities – as on 10-09-2014 (link)

Page 15: Data Privacy using IoTs in Smart Cities Project

Draft Concept Note on Smart Cities

Includes:

Physical & Social Infrastructure, Economy,

Social Services, ICT, Smart Governance,

Financing, PPP Model, Trusts etc.,

Operational Procedures, Benchmarks,

Urbanisation Policy, Disaster Management

Case Study – Amanora Pune

Page 16: Data Privacy using IoTs in Smart Cities Project

Data Privacy for Smart Cities in India

Needs:

• Improved Data Centers , Networks, Data handling, Security standards

• Capacity building – Awareness of people

• Finer Privacy policy

• Practitioner code of ethics

• Datensparsamkeit

• Data value chain

• Intelligent (context -aware) privacy mechanisms

• Privacy Regulations and Compliance, City charters

• Legal Framework

• Prioritization – time vs ….

Page 17: Data Privacy using IoTs in Smart Cities Project

Closing note

Q& A

Thanks!

[email protected]

@PatilPrerana