The Internet of Things is not as complex as one would think. Objects(e.g. Power meters, Fridge computers, etc.) or "Things" don;t have their own Internet, instead they "speak" to each other over the same Internet we all use. There lies their vulnerability. Assuming that since the machines will only talk to each other, that no one will eavesdrop or intrude on their conversation. Security researchers have a saying, "Security through Obscurity is no Security". The presentation shows how the Internet of Things' veil of obscurity can be pierced by an attacker(or more likely a Security Researcher) would assess a particular Smart Parking Meter ecosystem. Only open source intelligence(OSINT)[e.g. patents, newspaper articles] was used to compile the information on: * parking meters * mesh networking * machine2machine(m2m) SIMs * management consoles * RF usage

1. LA2600
Solar Powered Parking Meters
LA2600.org
An IoT thought experiment
Jimmy Shah
Credit:PR NEWSWIRE

2. LA2600
Solar Powered Parking Meters
LA2600.org
● Cost, Profit
● $495/meter
● 10K meters/$230,000 in additional net revenue
● Power
● “a battery pack that lasts approximately 2 to 3 years”
● “panels are the primary source of energy for the
batteries. There are back-up sources in the event
something happens to the panels”

3. LA2600
LA2600.org
Meter Locations
● Location
● Multi-view
● Like Google maps
● Street view
● Satellite View
● Status of meters
● “amount of money collected in the cash box”
● Broken, CC reader jam, etc.

4. LA2600
Meter Locations – “Street View”
LA2600.org

5. LA2600
Meter Locations – “Satellite View”
LA2600.org

6. LA2600
LA2600.org
Monthly Statistics
● cash amounts
● credit amounts
● total revenue,
● number of transactions
● cash per meter (listed as pole)
● credit per meter

7. LA2600
LA2600.org
Monthly Statistics

8. LA2600
LA2600.org
Monthly by geographic area
● local area(street/block level)
● city level
● street level
● zip code

9. LA2600
LA2600.org
Monthly by geographic area

10. LA2600
LA2600.org
CC Transactions
• transaction date
• transaction reference number
• machine reference
• last four digits of credit card
• card scheme and transaction amount

11. LA2600
LA2600.org
CC Transactions

12. LA2600
LA2600.org
Coin Collection
• “the person collecting the currency inserts an
identification card into the meter […] to signal to the
meter [...] that the cash box is being emptied”

13. LA2600
LA2600.org
Coin Collection

14. LA2600
LA2600.org
Coin Collection

15. LA2600
LA2600.org
Battery Voltage
• “The voltage level is used to indicate the health of the
battery. “
• Voltage drop = Replace battery
• "The solar panels on the back of the meters are the
main source of power, with support from a backup
battery."
• “a battery pack that lasts approximately 2 to 3 years.”

16. LA2600
LA2600.org
Battery Voltage

17. LA2600
LA2600.org
Terminal Events
● Mainly
● “coin path blockages”
● “jammed credit card readers”
● Potentially
● “alert law enforcement officers to better monitor the
problem areas to reduce vandalism”

18. LA2600
LA2600.org
Terminal Events

19. LA2600
LA2600.org
Configuration
● Display
● Rates
● Enforcement times
● Date/Time
● Rates
● Graph
● Timeline
● Table
● Drop-down for each hour

20. LA2600
LA2600.org
Configuration: Display

21. LA2600
LA2600.org
Configuration : Rates - Graph

22. LA2600
LA2600.org
Configuration : Rates - Table

23. LA2600
LA2600.org
Patents
● PARKING METER AND A DEVICE THEREFOR USA (Pub. number - US
2009/0159674 A1)
● http://www.google.com/patents/about?id=SwbIAAAAEBAJ
● A PARKING METER AND A DEVICE THEREFOR International (Pub. number-
WO/2007/063530)
● http://www.wipo.int/pctdb/en/wo.jsp?wo=2007063530
● METHOD AND APPARATUS FOR OPERATING A REMOVABLE METER UNIT
USA (Pub. number - US 2009/0192950 A1)
● http://www.google.com/patents/about?id=JHzIAAAAEBAJ
● METHOD AND APPARATUS FOR AUTOMATIC LOCATION-SPECIFIC
CONFIGURATION MANAGEMENT OF A REMOVABLE METER UNIT USA
(Pub. number - US 2009/0183966 A1)
● http://www.google.com/patents/about?id=tlDIAAAAEBAJ

24. LA2600
LA2600.org
References
● “Parking meters take credit cards, use solar power “
● http://articles.latimes.com/2007/jun/29/local/me-meters29
● “High-tech parking meters a hit with city and users”
● http://www.sdnn.com/sandiego/2010-02-16/business-real-estate/high-tech-parking-meters-a-hit-with-city-and-users
● “Solar Powered Parking Meters-Money in the Bank for Los Angeles”
● http://www.solarpowerbuzzmedia.com/2010/10/solar-powered-parking-meters-money-in.html
● “Sun-powered parking meters the ticket for saving money”
● http://www.cleanenergyauthority.com/solar-energy-news/solar-powered-parking-meters-102210/