Christian Eder
congatec AG
How to come around the IoT data
security challenges
We simplify the use of embedded technology
fast, dedicated and reliable
Technology Driven Products Customer Driven Products and Services
COM
SBC
Single Board Computer
Thin Mini-ITX Computer-On-Modules COM Express Qseven ETX/XTX
EDMS
Embedded Design and Manufacturing Services
Custom Modules, Carrier Boards SBCs and Full Custom Designs, Cooling Solutions, Housing, System Integration
Software
Embedded Features
Customized BIOS, Drivers, BSPs, APIs, IoT Stacks, Board Controller Features, Embedded OS Support
− Intel: “... 35ZB of data from things will generate $2 trillion in value by 2020. ...”
− Cisco: “"Looking to the future, Cisco IBSG predicts there will be 25 billion devices connected to
the Internet by 2015 and 50 billion by 2020”
− Ericsson: “The vision of more than 50 billion
connected devices will see profound changes in the way people, businesses and society interact.”
− IDC: “... technology and services revenue to
expand from $4.8 trillion in 2012 to $7.3 trillion by 2017 at an 8.8% CAGR, ...”
− Gartner: “... 26 billion units installed by 2020.
IoT product and service suppliers will generate incremental revenue exceeding $300 billion, ...“
huge expected market
Mega Trend IoT
IoT to IoE
Source: Cisco IBSG, 2013
− Devices that are connecting to the internet − Integrating greater compute capabilities
− Using data analytics to extract meaningful information
connect existing devices
Internet-of-Things
Mission
− Connecting different communication protocols − Aggregate sensor data
− Analyze data locally: filtering, real-time response − Provide security to deliver trust, reliability
Why Gateways
− 85%* of existing industrial embedded devices are unconnected − Systems need to be always connected and continuously monitored − Economics of data require local filtering and analysis
©2014 congatec AG – ECS Syd
6
March 10, 2015
Gateways
Reliability
− Embedded computer modules and boards
from congatec are the core technology to enable intelligent IOT devices
− From COM to SBC up to full custom design
computers (EDM Solution)
Connectivity
− Pre-integrated connected capabilities enable
rich network options to save development time and costs
− Extensive network of connectivity (wired,
wireless, cellular, short-range)
Security
− Protect devices for trust and control − Protect the device & application − Protect the data at rest and in flight
Manageability
− Enable common provisioning frameworks − Enable remote, secure upgrades
− Provide web-based configuration utilities
basic challenges
©2014 congatec AG – ECS Syd 7
IoT
IoT
topology
INTERNET
CLOUD
BIG DATA DeviceSensor Hub Sensor Hub
GATEWAY LAN Fr ee sc al e i .MX
6 AMD
G -S er ie s In te l
® A
tom ™ / C ele ron ® Int el
® Co
re ™ i3 , i5 Q se ve n Mi ni -IT X Pi co -ITX C O M Ex p re ss ED MS - C us to m D es ig n Int el
® Co
re
™
i7
Software Hardware
Reliability Connectivity Manageability Security Device
Customer IoT Device/Gateway Application Certified congatec Intel Gateway Solution IoT
Gateway Solution
Windriver Linux Kernel (image signature validated)
Hardware Userspace
congatec Boards and Modules (Secure Boot, TPM) Intel® Atom™ Processor E3800 Series Bootloader (image signature validated)
TPM Driver Encrypted Storage GRsecurtity
Application Integrity Monitor
Root Certificate Interface
Manageability Reliability Security Connectivity Host Tools SS T Se cur ity Si g ni ng T oo l ZigBee Cellular 2G/3G/4G Bluetooth Serial USB VPN
Wi-Fi Access Point MQTT
Open SSL Library SRM Signing Tool Certificate Mgmt Secure Boot Application Integrity Monitor Application Resource Control Secure Package Management Encrypted Storage McAfee Embedded Control OMA DM TR-069 Web-Based Configuration Interfaces Runtime Environment Lua Java OSGi
− Based on Intel® Atom™ E3800 − Qseven Module + Carrier Board
− Software included (time limited trial license)
− A hardware root of trust, data encryption, attestation, and software
lockdown for security
− Connectivity up to the cloud and enterprises
− Connectivity down to sensors and existing controllers embedded in
the system
− Preprocess filtering of selected data for delivery
− Local decision making, enabling easy connectivity to legacy systems − Local computing for in-device analytics
Intel qualified hard-/software combination
©2014 congatec AG – ECS Syd
11
March 10, 2015congatec IoT Gateway Development Kit
hardware view
©2014 congatec AG – ECS Syd 12
The congatec IOT kit provides the ability
to immediately start evaluating
devices or gateways for Industry 4.0
− conga-QA3 Intel® Atom™ Qseven module − Full featured Qseven IoT mini carrier board − 7” touch display with cable set
− Intel® dual band wireless AC 7260 card & antenna
− Bootable USB stick Intel IOT Gateway Solution OS (Windriver IDP trial) − Accessories (cables, adapters, power supply …)
− Documentation
for fastest design-in
©2014 congatec AG – ECS Syd 13
IOT Gateway Development Kit
− Predictive Maintenance
− IoT device feeds performance and sensor data
into central control systems to allow for predictive maintenance. This eliminates time and labor costs.
− Resilient Distributed Systems
− Operators are alerted as soon as a problem
occurs. Then remote diagnostics and corrective action are possible. Rebooting or restarting elements to upload new software and hot-patching.
− Transportation
− Predictable service, vehicle to vehicle
communication, … for more prediction and efficiency
− Building Automation
− Reduce power consumption based on the
schedules and usage patterns. Connect heating, lighting and security systems
remotely. Smart power meters and intelligent power sources help to balance supply and demand.
− Industrial Automation
− Industry 4.0. Connect production, services and
business.
− Smart Energy
− M2M monitoring and control with enhanced
reliability, security, and performance.
Integrates power sources for more economical energy.
where does IoT make sense?
©2014 congatec AG – ECS Syd 14
March 10, 2015