The Internet of Things is not as complex as one would think. Objects(e.g. Power meters, Fridge computers, etc.) or "Things" don;t have their own Internet, instead they "speak" to each other over the same Internet we all use. There lies their vulnerability. Assuming that since the machines will only talk to each other, that no one will eavesdrop or intrude on their conversation. Security researchers have a saying, "Security through Obscurity is no Security".
The presentation shows how the Internet of Things' veil of obscurity can be pierced by an attacker(or more likely a Security Researcher) would assess a particular Smart Parking Meter ecosystem. Only open source intelligence(OSINT)[e.g. patents, newspaper articles] was used to compile the information on:
* parking meters
* mesh networking
* machine2machine(m2m) SIMs
* management consoles
* RF usage
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Solar Powered Parking Meters - An IoT thought experiment
1. LA2600
Solar Powered Parking Meters
LA2600.org
An IoT thought experiment
Jimmy Shah
Credit:PR NEWSWIRE
2. LA2600
Solar Powered Parking Meters
LA2600.org
● Cost, Profit
● $495/meter
● 10K meters/$230,000 in additional net revenue
● Power
● “a battery pack that lasts approximately 2 to 3 years”
● “panels are the primary source of energy for the
batteries. There are back-up sources in the event
something happens to the panels”
3. LA2600
LA2600.org
Meter Locations
● Location
● Multi-view
● Like Google maps
● Street view
● Satellite View
● Status of meters
● “amount of money collected in the cash box”
● Broken, CC reader jam, etc.
6. LA2600
LA2600.org
Monthly Statistics
● cash amounts
● credit amounts
● total revenue,
● number of transactions
● cash per meter (listed as pole)
● credit per meter
10. LA2600
LA2600.org
CC Transactions
• transaction date
• transaction reference number
• machine reference
• last four digits of credit card
• card scheme and transaction amount
12. LA2600
LA2600.org
Coin Collection
• “the person collecting the currency inserts an
identification card into the meter […] to signal to the
meter [...] that the cash box is being emptied”
15. LA2600
LA2600.org
Battery Voltage
• “The voltage level is used to indicate the health of the
battery. “
• Voltage drop = Replace battery
• "The solar panels on the back of the meters are the
main source of power, with support from a backup
battery."
• “a battery pack that lasts approximately 2 to 3 years.”
23. LA2600
LA2600.org
Patents
● PARKING METER AND A DEVICE THEREFOR USA (Pub. number - US
2009/0159674 A1)
● http://www.google.com/patents/about?id=SwbIAAAAEBAJ
● A PARKING METER AND A DEVICE THEREFOR International (Pub. number-
WO/2007/063530)
● http://www.wipo.int/pctdb/en/wo.jsp?wo=2007063530
● METHOD AND APPARATUS FOR OPERATING A REMOVABLE METER UNIT
USA (Pub. number - US 2009/0192950 A1)
● http://www.google.com/patents/about?id=JHzIAAAAEBAJ
● METHOD AND APPARATUS FOR AUTOMATIC LOCATION-SPECIFIC
CONFIGURATION MANAGEMENT OF A REMOVABLE METER UNIT USA
(Pub. number - US 2009/0183966 A1)
● http://www.google.com/patents/about?id=tlDIAAAAEBAJ
24. LA2600
LA2600.org
References
● “Parking meters take credit cards, use solar power “
● http://articles.latimes.com/2007/jun/29/local/me-meters29
● “High-tech parking meters a hit with city and users”
● http://www.sdnn.com/sandiego/2010-02-16/business-real-estate/high-tech-parking-meters-a-hit-with-city-and-users
● “Solar Powered Parking Meters-Money in the Bank for Los Angeles”
● http://www.solarpowerbuzzmedia.com/2010/10/solar-powered-parking-meters-money-in.html
● “Sun-powered parking meters the ticket for saving money”
● http://www.cleanenergyauthority.com/solar-energy-news/solar-powered-parking-meters-102210/