The main challenges in managing secure software update in cellular IoT, which aspects a service provider / OEM need to take into account to successfully update their devices.

1. IoT Device Lifecycle Management:
Update, Control, Secure
Guillaume Djourabtchi,
Director IoT Services
28/02/2019

2. Enterprises leveraging cellular IoT face common challenges
IoT Device Lifecycle Management: Update, Control, Secure2
 The increased use of
shared infrastructure
(Public IoT Hubs)
 Management of device
identities and PKIs
Trust
 Unprecedented scale
and operation life time
 Shorter software
lifecycles
 Digital transformation
Scale
 Disruption of
connectivity or
operations
 New network
technologies (LPWAN)
Connectivity
Gemalto Public - Embedded World 2019

3. Without these three elements, service providers may suffer from…
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure3
Cyberattacks that
create risks of safety
and massive fines
Excessive operational
expenses that may
compromise viability
A poor customer
experience and
frequent complaints

4. Ongoing costs per device / month: All the reactive and proactive tasks needed to keep the
connected product doing the job
Keeping a device fleet “Happy” – thus a customer “Happy” – is the
most significant source of recurring costs for IoT service providers
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure4
Source: Device Pilot / Cisco Jasper
 Support : 1st to 3rd line customer support lines
 Operations: all the non-customer-facing activities
• Proactively monitoring the overall customer experience and
root-causing issues
• Keeping the connectivity and cloud services running
• Maintaining device estate : events such as provisioning,
upgrading, recovery from faults ; planning and monitoring
upgrades
Driving-up the quality of delivery
(customer satisfaction)
Support teams being far more
productive
(shorter time to resolution)
Improving these 2 areas will lead to:

5. Cost drivers of IoT operations throughout the device lifecycle
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure
Devicelifecycle
Certification
Achieving compliance
with cellular network
operator requirements
Manufacturing
Implementing a PKI,
and key diversification
& provisioning process
Operations
Proactively detecting
issues to reduce
number of field repairs
Detecting issues early,
and adapting data
plans to reduce OpEx
Deployment
Maintenance
Reducing number of
on-site visits to e.g.
patch device software
Service
Responding faster to
support calls
Service
launch
Service EOL
5

6. 6 Gemalto Trusted Key Manager - Industry Analyst
Specific challenges of
managing software
updates in cellular IoT
deployments
Deep dive

7. Over-the-air updates are needed
to guarantee the scalability and
profitability of IoT solutions
High risk of device recalls can lead to millions lost in repair costs
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure7

8. But implementing software updates over cellular IoT networks comes
with some specific challenges
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure8
LTE Cat.1 LTE Cat.M1 LTE Cat.NB1
SYSTEM
BANDWIDTH
20MHz 1,4MHz 200KHz
PEAK DATA RATE
(UL/DL)
10Mbps / 5Mbps 300kbps/375kbps 17kbps / 30kbps
COVERAGE /
PENETRATION
+ 0dB vs. GSM
(similar as GSM)
+ 15dB vs. GSM
(approx. 2-3 x as GSM)
+ 23dB vs. GSM
(approx. 4 x as GSM)
LATENCY milliseconds, real time 80 ms to 4 s 1.4s to 10s
MOBILITY
seamless,
full handover
Connected mobility with some
limitations (inter freq. handover)
limited, changing cells without
handover
VOICE full Voice
Restricted voice, for simple use
cases, like alarm panels
no voice, data only
BATTERY LIFE <5 years >10 years >10 years
ANTENNA
2 Antenna, single Antenna
by exception only
single Antenna single Antenna
APPLICATION
Continuous data stream.
Full Lifecycle Management
Existing, well understood
Focus are existing markets
Limited data stream.
FOTA capable
TCP/UDP communication
Focus is enabling new markets
Messaging centric
Incr. FOTA only
Suited for UDP Communication
Focus is enabling new markets
* Peak: 1Mbps/1Mbps using full duplex ** Assumed half duplex performance
>100
kB
<100
kB
<1
kB

9. Firmware size of cellular module will dramatically impact cost to update
5-30MB
Sizeofdevicefirmwareimage
C-IoT Module
Size of incremental
firmware image
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure9
Microcontroller
< 1MB Size of incremental
firmware image
Sensors & Actuators
< 100kB
Without incremental firmware images
in a crowded cell scenario, updates
might last for several hours, eating up
the IoT device battery.

10. Extended coverage negatively impacts the update energy budget
What is the benefit?
Enhanced coverage through walls or
buildings
What is the drawback?
• Once repetition is set, continues until
finished. Example: If network decides to
repeat 200 times, will go to 200 even if
received after 5.
• Dramatically reduces throughput.
• Drains power.
What is it? Increases coverage by up to 15dB by repetition.
Number of repetitions depends on size and needed CE gain
and is determined by sampling between device and network
Packet sent: 1
Mode A - Packet sent: <=32
Mode B Packet sent: 64...2048
IoT Device Lifecycle Management: Update, Control, Secure10

11. Unprotected updates
can lead to malicious
software being installed
in field devices,
compromising your
business and reputation
Poorly programmed
update campaigns can
result in excessive data
or energy consumption,
defeating their initial
purpose
+
Airtime & energy cost Security threats
Industrial IoT
software
management
tools need to
address these
aspects
specifically
Other challenges common to any large IoT deployment
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure11
Managing thousands of
device updates requires
careful field campaign
planning by customer
care and service
operation teams
+
Campaign planning

12. Secure the communications channel. Enforce version control and
code signing
Use incremental software images to reduce binary size
Consider field-proven efficient update protocols
Prepare for the worst-case, update time can easily increase by a
factor of 10 versus ideal conditions in some scenarios
Check with your network operator what are the requirements
regarding IoT device software updates
Monitor data consumption closely
Use key device health indicators helps to determine which of the
target devices have enough BW and energy for update
Closely monitor the update process with a campaign management
tool
Best practices: software updates over C-IoT
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure12

13. Achieving highest customer
satisfaction levels by
proactively monitoring
the connectivity, and
being able to react on the
spot.
Ensuring secure end-to-
end communications and
protecting data in motion
and at rest.
Mastering firmware and
software updates in order
to maintain devices secure
over their entire lifecycle.
IoT Device Lifecycle Management
It’s all about UPDATE, CONTROL and SECURE.
Gemalto Public - Embedded World 2019IoT Device Lifecycle Management: Update, Control, Secure13
Update Control Secure
Any organization who plans to leverage IoT at scale
needs to look closely at these 3 elements

14. Cinterion® Module Services – UPDATE / CONTROL / SECURE
14 Gemalto IoT Device Lifecycle Management
Cinterion® Module Services is an IoT device management solution that simplifies the secure
provisioning and maintenance of device fleets throughout their lifetime, which helps you
optimize operational costs and provide a best-in-class customer experience.
Software
Update
Management
Remote
Diagnostics
andControl
Secure
Device
Identities
Out oftheBox
Cloud
Integration
Built using open standards

15. THANK YOU !