Art Lancaster, CTO of Affinegy, an AllSeen Alliance member company, presented this talk on security and privacy in IoT at the Linux Foundation's 2015 Collaboration Summit.

1. 26 February 2015 AllSeen Alliance 1
My Scale Just Told
the Cloud I’m Fat
Access Management, Security,
Privacy and IOT
Art Lancaster
CTO, Affinegy
Chair, Gateway Agent Working Group

2. 26 February 2015 AllSeen Alliance 2
Is this IOT Today?
"Telescreen". Via Wikipedia - https://en.wikipedia.org/wiki/File:Telescreen.png#mediaviewer/File:Telescreen.png
Big Brother or Big Data
for literally everything we do?

3. 26 February 2015 AllSeen Alliance 3
IOT Challenges to Privacy
• Ubiquitous data collection
• Unexpected uses of consumer data that could have
adverse consequences
• Heightened security risks
Speech of FTC Chairwoman Edith Ramirez; Privacy and the IoT: Navigating Policy Issues
International Consumer Electronics Show, January 6, 2015
Key Solutions
• Security by Design
• Data Minimization
• Notice and Choice for unexpected uses

4. 26 February 2015 AllSeen Alliance 4
AllSeen Gateway Agent – Enables Secure
and Private IOT by Design
DVR: OK
playing
My Hawaii
vacation
movie
Car: OK Lights are
now OFF
TV: Fixing WiFi video
quality
TV: My WiFi video
picture is poor
Fix it?
Dryer:
Laundry is ready
72°
120
80
Turn off the
kitchen lights,
Set away mode.
OK changing
to away modeDVR: play
my Hawaii
vacation
movie
Laundry is ready
BeFit:
Congratulations
goal met!
72
AllSeen
Gateway Agent
Cloud / Managed
Services
AllJoyn local applications
AllJoyn remote applications

5. 26 February 2015 AllSeen Alliance 5
AllSeen Gateway Agent
• Embedded application for connecting local AllJoyn
devices and applications to external services
– Cloud / remote services
– Also provides a gateway to other IOT protocols
– Plug-in connector architecture – supports multiple interfaces
– Supports persistent remote connections without special firewall
or port settings
• Ideal for automation hubs, routers or any “always on”
device in the local network

6. 26 February 2015 AllSeen Alliance 6
Data Minimization and Security
• Filters LAN AllJoyn traffic from remote traffic – only traffic
needed for the user’s cloud or remote services are
passed
• Connector Plug-ins with Remote Service Profiles – configure
what data/traffic is routed externally
– Enhances the user’s privacy and security
– Enables managed service privacy policies
– Improves scaling performance – minimizing external loading
• Extends AllJoyn’s end to end security model to external
services
• The Gateway Agent also can support Connector plug-ins to
other PAN protocols with AllJoyn (6LowPAN, ZigBee, etc.)

7. 26 February 2015 AllSeen Alliance 7
Consumer Mode Operation
• User self-manages
their AllJoyn
connections to external
services
• Services provisioned
via a mobile app with
the Gateway Control
App component
– Connector Plug-in
installed
– Service Profile
managed
• Consumer must be at
home when configuring
their cloud service
using Control App
BA
SP AppConnector
Plug-in
Gateway
Management
App
Config file policy enforcement
Client Lib.
AllJoyn
Devices
Control App
Remote App
AllJoyn Router
Cloud
Service
App Mgmt Interface
Platform based interaction
Client Lib.
Gateway Agent
Package
Manager
App install/upgrade/uninstall
Cloud<->Connector
protocol
App Install Interaction
Pkg Download
Server
Connector package download
Service profile

8. 26 February 2015 AllSeen Alliance 8
Service Provider Mode Operation
• Ideal for Managed
Services Providers
• Remote software
installation and update
management for
– Connector Plug-in(s)
– Firmware of the hub
or gateway
• Full remote
management of
– AllJoyn Services
Profile
– The overall
gateway/hub
configuration
• Implemented with TR-
069a5 enhanced with
XMPP
BA
SP AppConnector
Plug-in
Gateway
Management
App
Config file policy enforcement
Client Lib.
AllJoyn
Devices
Control App
AllJoyn Router
Clou
Servic
App Mgmt IF
Platform based interaction
Client Lib.
Gateway Agent
Package
Manager
App install/upgrade/uninstallCloud<->Connector App
protocol
App Install Interaction
Download
Server
Connector app package download
d
e
Remote
AllJoyn App
Consumer Mode Architecture
TR-069
CWMP
client
TR-069
ACS Server
TR-069 Protocol Remote Management RPCs
Service Provider Mode interaction
Cloud
Service
Control App is optional
in Service Provider Mode
Service Provider Mode Architecture
Service profile

9. 26 February 2015 AllSeen Alliance 9
Cloud Services for Gateway Agent
available from Affinegy
• Affinegy CHARIOT Server Platform
– Provides IOT cloud services fully compatible with AllSeen Gateway
Agent
– Embedded AllJoyn to XMPP connector plug-in
– XMPP server for high scale, persistent IOT services and management
– For Service Provider Mode – Advanced TR-069 ACS remote
management server to manage the IOT service profiles and the hub
– Provides full turn-key installation and support management
• No cost developer hosted access available from Affinegy
• Commercial CHARIOT server licensing available from Affinegy,
both hosted and installed options

10. 26 February 2015 AllSeen Alliance 10
Affinegy CHARIOT Cloud Services for AllJoyn
with AllSeen Gateway Agent
CHARIOT Cloud
CHARIOT
Mobile Cloud
Connector for AllJoyn
AllJoyn Home
AllJoyn Apps
AllJoyn Apps
AllJoyn Remote
Turn-key enables existing AllJoyn Apps for cloud services
Gateway Agent
with
CHARIOT
Connector Plug-in

11. 26 February 2015 AllSeen Alliance 11
Affinegy CHARIOT Cloud Services for AllJoyn
with AllSeen Gateway Agent
CHARIOT Cloud
AllJoyn Home
AllJoyn Apps
AllJoyn Apps
AllJoyn Remote
CHARIOT - One Converged Managed Services Platform
CHARIOT Care, Home & ACS
CHARIOT
Home / Mobile
(Self care)
CHARIOT
Mobile Cloud
Connector for AllJoyn
Gateway Agent
with
CHARIOT
Connector Plug-in +
CHARIOT Client

12. 26 February 2015 AllSeen Alliance 12
AllJoyn Notifications Enabled Self-Care
CHARIOT Mobile
Local and remote diagnostics
with AllJoyn notfications
LG Smart TV with AllSeen Notification Service
Local and remote diagnostics from CHARIOT Server
and Gateway with CHARIOT Client

13. 26 February 2015 AllSeen Alliance 13
Gateway Agent Developer Information
• Gateway Working Group Wiki
https://wiki.allseenalliance.org/gateway/gatewayagent
– Documentation and presentations
– Open source GIT repository
– Weekly working group meetings
– Multiple companies participating developing Connector Plug-ins
• Released code available now in AllSeen GIT:
– Gateway Agent management app (embedded for Linux and OpenWRT)
– Sample Connector Plug-in
– Sample Android Control App for managing connectors and the service
profile

14. 26 February 2015 AllSeen Alliance 14
AllSeen Gateway Working Group
Contributors
• Affinegy
– Art Lancaster, CTO – contributor and W.G. chair
– Committers: Josh Spain, Jim Howard
• Qualcomm
– Shane Dewing, Senior Director Product Management – contributor
– Committers: Mike Quon, Aaron Pulliam, Binita Gupta
Contact: Art Lancaster
alancaster@affinegy.com @affinegyart http://affinegy.com

15. 26 February 2015 AllSeen Alliance 15
Thank you
Follow us on
For more information on AllSeen Alliance, visit us at:
allseenalliance.org & allseenalliance.org/news/blogs