Presentation on Wearables and Smart Homes that I gave in March 2018. Internet of Things. Includes IoT security best practice resources

1. Internet of Things (IoT)
Wearables & Smart Homes
March 2018
Duncan Purves
2 Insight
duncan@2insight.co.uk
@purvesd
https://uk.linkedin.com/in/duncanpurves

2. Wearables

3. Wearables – Technology & Personal Data
Apple Watch Series 3
§ GPS and GLONASS
§ Bluetooth 4.2
§ WiFi (802.11 b/g/n 2.4 GHz)
§ LTE (Option)
§ Barometric altimeter, Heart rate sensor
§ Accelerometer and Gyroscope, Light
Credit: Apple
Wearables open an entirely new avenue for data collection
Ø People need be mindful of how they share this data

4. Fitness tracker data 'reveal locations of military
bases and personnel'
A portion of the Strava Labs heat map from Kandahar Airfield in Afghanistan
Credit: Strava labs
§ In November 2017, Strava released a a data visualisation map that shows all the
activity tracked by users of its app, which allows people to record their exercise and
share it with others
§ “Twitter users have identified locations including a suspected CIA base in Somalia, a
Patriot missile defense system site in Yemen and US special operations bases in the
Sahel region of Africa.”
§ February 2018, Strava make it easier to Opt-­Out (Toggle) of it’s Heat Maps feature

5. Smart Glasses
Google Glass Enterprise Edition
Microsoft HoloLens
Vuzix Blade
Amazon Alexa Enabled
Magic Leap One: Creator Edition

6. Smart Glasses that look normal -­ Intel Vaunt
§ Less than 50 grams
§ Small heads-­up style display in your peripheral vision
§ Very low-­powered laser (VCSEL) shines a red, monochrome image approx. 400 x
150 pixels onto a holographic reflector on the glasses’ right lens
§ Image is then reflected into the back of your eyeball, directly onto the retina
§ Red text and icons down in the lower right of your visual field
§ works equally well on prescription glasses as it does on non-­prescription lenses
§ Bluetooth with either an Android phone or an iPhone
Intel will launch an “early access program” for developers later this year
https://www.youtube.com/watch?v=bnfwClgheF0

7. Smart Clothes
Levi's Commuter Trucker Jacket -­ Google’s Project Jacquard
Left-­hand cuff, which works as a touchpad to communicate with the phone

8. Smart Clothes Example -­ Hexoskin Smart Shirts
Have been trialed with Dubai Police and a Department of Homeland Security to
transmit vital signs data back to a Control Centre

9. Smart Clothes Example -­ Skinn
Skiin – “ships Summer 2018”

10. Body Armour utilising Conductive Yarns
VOLT smart yarns enable impact sensors to be fitted to police body
armor to wirelessly transmit vital information back to headquarters
Credit: Supreme Corporation

11. Wearables -­ Healthcare
Diabetes – Blood Sugar Level Monitoring
§ A small sensor automatically measures glucose in the interstitial fluid
§ Sensor continuously stores (up to 8 hours of data) glucose readings day and
night
§ Reader can capture (NFC) the data from sensor when it is placed between
1cm to 4cm from sensor
Source: Abbott Diabetes Care, FreeStyle Libre

12. Wearables Technology – New Developments
§ Print circuits on flexible, stretchable substrates using silver
nanowires
§ Developed by North Carolina State University

13. Wearables Technology – New Developments
§ Customisable, fabric-­like power source – supercapacitor
§ Works like a fast-­charging battery
§ Structure and shape can be changed after it is manufactured
§ Can be cut, folded or stretched without losing its function
§ Developed by Nanyang Technological University
§ YouTube: https://www.youtube.com/watch?v=xpRrPpOXyr0

14. Wearables Technology – New Developments
§ Flexible lithium battery for wearable electronics
§ Shaped like a spine
§ Design enables remarkable flexibility, high energy density
§ Stable voltage no matter how it is flexed or twisted
§ Developed by Columbia Engineering
§ YouTube: https://www.youtube.com/watch?v=JGpzSF0p1Xg

15. Wearables – Healthcare Developments
Source: Edema ApS
§ A wearable, washable stocking
§ Monitors and measures changes in leg volume for patients suffering from edema (fluid
accumulation or swelling) of the lower limbs
§ Allows for more intensive monitoring for stages of the disease and provides better
opportunities for early and timely medical intervention

16. Wearables -­ Healthcare Developments
§ Optic fibers can be manufactured directly into textiles as thread to make the emitters
and detectors for a heart-­rate sensor
§ By sending light through the tissue and measuring the light intensity that changes
with the pulse as it returns to the detector, you can determine the heart rate
§ Or to monitor skin circulation to prevent bed sores
§ Able to withstand a disinfection wash cycle
Source: Empa

17. Wearables – Healthcare Developments
A rubber power plant:
§ Flexible material that generates electricity when stressed
§ Could be used as a sensor, integrated into clothing o
§ Or even implanted in the human body, for instance, to power a pacemaker
§ Developed by Researchers from Empa

18. Wearables – Healthcare Developments
Ohio State University is working on integrating antennas and circuits
into clothing for the future of healthcare monitoring and treatment

19. Wearables – Healthcare Developments
§ Stretchable, polymer circuitry with integrated touch-­sensors to detect the
delicate footprint of an artificial ladybug
§ Two inch square of material containing more than 6,000 individual signal-­
processing devices that act like synthetic nerve endings
§ Encapsulated in a waterproof protective layer
§ Method to mass produce this new class of flexible, stretchable electronics
§ Developed by Stanford University
Image credit: L.A. Cicero

20. Wearables – Healthcare Developments
§ Nanomesh skin sensor can be worn on the skin continuously for a week without causing inflammation
§ Sensor can measure temperature, pressure, myoelectricity (the electrical properties of muscle)and
Electrocardiogram recording
§ Flexible skin display is about 1 millimeter thick
§ Can show the moving waveform of an electrocardiogram recorded by a breathable, on-­skin electrode
sensor
§ Combined with a wireless communication module, this integrated biomedical sensor system can
transmit biometric data to the Cloud
§ Developed by a collaboration between researchers at the University of Tokyo's Graduate School of
Engineering and Dai Nippon Printing

21. Smart Homes

22. My Smart Home -­ 3 Years ago my boiler broke
I decided to replace it with a boiler controlled by the
Honeywell ‘Smart’ Evohome system
With wireless (868MHz) connected thermostats
§ After 2 weeks I got bored playing with the Smartphone app and
disconnected the Honeywell Hub
§ It was a standalone system – did not interoperate with any other
appliance/device in my home
§ I did not like that all my usage data was was being sent to Honeywell

23. My Smart Home – 3 Years on
I still have the same Honeywell Evohome System
Do I upgrade?
Tempting
But which System do I choose?

24. Voice “the next great interface” + Battle of the
Home Hubs
Orwellian nightmare: "they" are always listening
Google
Home
Apple
Homepod
Amazon Echo Plus + Echo Show

25. Google Home – ’Works with Nest’ & Chromecast
Google Home voice commands interact with services through Google Assistant
‘Works with Nest’ utilises Nest’s Weave network application layer communications protocol
Ø Enable asynchronous, symmetric, device-­to-­device, device-­to-­mobile and device-­to-­cloud
communications for control path and data path messaging
Ø Works over Thread, WiFi & Cellular

26. Amazon Smart Home – Amazon Echo
§ Echo devices use voice service Alexa to control and check the status of 3rd
party cloud-­connected devices using the Smart Home Skill API
§ Echo Plus has built in ZigBee Smart Home Hub
https://developer.amazon.com/docs/smarthome/understand-­the-­smart-­home-­skill-­api.html

27. Apple Smart Home – HomePod Hub
§ Uses voice service Siri to control and check the status of 3rd party
cloud-­connected devices using Apple’s HomeKit platform

28. IoT Security
Should you be worried?

29. It's official: Hearts can be hacked
§ The FDA confirmed that St. Jude Medical's implantable cardiac devices have
vulnerabilities that could allow a hacker to access a device
§ Once in, they could deplete the battery or administer incorrect pacing or
shocks
Images Source: St. Jude
Medical part of Abbott

30. Denial of Service

31. Ransomware

32. Privacy -­ The House that Spied on Me
Dec 2017, Kashmir Hill converted her apartment in Sans Francisco into Smart
Home
§ She connected her lights, coffee maker, baby monitor, kid’s toys, vacuum,
TV, toothbrush, photo frame, security camera, air quality sensors, and bed
§ A Raspberry Pi based router was used to to monitor the devices monitoring
her
https://gizmodo.com/the-­house-­that-­spied-­on-­me-­1822429852
https://www.youtube.com/watch?v=_JmMu-­FPW54
Credit: Gizmodo

33. The House that Spied on Me
https://gizmodo.com/the-­house-­that-­spied-­on-­me-­1822429852
https://www.youtube.com/watch?v=_JmMu-­FPW54
“The fantasy of the smart home is that it will save us time and effort”
“All of the anxiety you currently feel about being tracked online is
going to move into your living room”
“When you buy a smart device, it doesn’t just belong to you;; you
share custody with the company that made it”
“It also means that those companies can change the product you
bought after you buy it”
Credit: Gizmodo

34. So who are developing IoT Security
Best Practice Principles & Guidelines?
§ National Institute of Standards and Technology (NIST)
§ IoT Security Foundation (IoT SF)
§ GSM Association (GSMA)
§ Industrial Internet Consortium (IIC)
§ Open Web Application Security Project (OWASP)
§ U.S. Department of Homeland Security
§ Broadband Internet Technical Advisory Group (BITAG)
§ Online Trust Alliance (OTA) -­ IoT Trustworthy Working Group
§ U.S. Department of Health and Human Services, Food and Drug
Administration
§ Cloud Security Alliance
§ UK National Cyber Security Centre

35. IoT Security Foundation
Principles & Best Practice Guides
https://www.iotsecurityfoundation.org

36. 7th March, 2018 -­ UK’s Department of Digital, Culture, Media and Sport (DCMS) announced the publication of its Security
by Design report containing a proposed Code of Practice for Consumer IoT products
https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/686089/Secure_by_Design_Report_.pdf
Code of Practice
Stakeholders:
§ Device Manufacturer
§ IoT Service Providers
§ Mobile Application Developers
§ Retailers:
1. No default passwords
2. Implement a vulnerability disclosure policy
3. Keep software updated
4. Securely store credentials and security-­sensitive data
5. Communicate securely
6. Minimise exposed attack surfaces
7. Ensure software integrity
8. Ensure that personal data is protected
9. Make systems resilient to outages
10. Monitor system telemetry data
11. Make it easy for consumers to delete personal data
12. Make installation and maintenance of devices easy
13. Validate input data

37. Internet of Things
Thames Valley Community & Meetup
If you would like to learn more about the Internet of Things
and network with people from the IoT Eco System
Join the Community & Meetup
https://tviot.uk/
https://www.meetup.com/Internet-­of-­Things-­Thames-­Valley/