March 2015 - DG-IDoT - mailman.kantarainitiative.org

IDoT DG TeleCOn
by Ingo.Friese＠telekom.de 17 Apr '15

17 Apr '15

Dear All, I hope you are all doing well. I’d like to remind you that our next IDoT-call is coming up today. I’m looking forward to talking to you! PS: It looks that there is a temporary time difference btw. European and American Summer time. We start 8pm PT. Best regards, Ingo Date and Time * Friday, March 20th, at 8am PT (time chart)<http://www.timeanddate.com/worldclock/fixedtime.html?msg=IDoT+Conf+Call&iso…> * Voice: Skype: +99051000000481 or US +1-805-309-2350<tel:%2B1-805-309-2350> / Alternate Toll +1 (714) 551-9842<tel:%2B1%20%28714%29%20551-9842> (international dial-in lines<http://kantarainitiative.org/confluence/x/KYC_/>), room code 613-2898# * (Turbobridge call options<https://www.turbobridge.com/join.html>) Agenda Smart discovery document, SXSW report AOB Kind regards Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Dipl.-Ing. Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148<tel:%2B4930835358148> (Phone) +49391580216849<tel:%2B49391580216849> (Fax) E-Mail: ingo.friese(a)telekom.de<mailto:ingo.friese@telekom.de> www.telekom.com<http://www.telekom.com/> Life is for sharing. DEUTSCHE TELEKOM AG Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman) Board of Management: René Obermann (Chairman), Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Dr. Thomas Kremer, Claudia Nemat, Prof. Dr. Marion Schick Commercial register: Amtsgericht Bonn HRB 6794 Registered office: Bonn Big changes start small – conserve resources by not printing every e-mail. _______________________________________________ DG-IDoT mailing list DG-IDoT(a)kantarainitiative.org<mailto:DG-IDoT@kantarainitiative.org> http://kantarainitiative.org/mailman/listinfo/dg-idot

2 3

interesting example off how law impacts iot
by Salvatore D'Agostino 27 Mar '15

27 Mar '15

So think of the implications of this. You have a drone flying down the road, gopro on your head while biking or a camera pointed at your front yard, cop pulls over speeder issues ticket in your camera's field of fiew, you just broke the law. (and maybe a year in jail), yikes. http://www.govtech.com/public-safety/Rules-for-Viewing-Police-Videos-in-Texa s-Depend-on-Who-is-Holding-the-Camera.html Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA http://www.idmachines.com <http://www.idmachines.com/> http://idmachines.blogspot.com <http://idmachines.blogspot.com/> @idmachines +1 617.201.4809 ph +1 617.812.6495 fax

1 0

blog on iot
by Salvatore D'Agostino 26 Mar '15

26 Mar '15

http://www.computer.org/web/sensing-iot/content?g=53926943 <http://www.computer.org/web/sensing-iot/content?g=53926943&type=article&url Title=defining-the-internet-of-things&lf1=1241255974b275116052083b39045350> &type=article&urlTitle=defining-the-internet-of-things&lf1=1241255974b275116 052083b39045350 nice pic about wearables. Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA http://www.idmachines.com <http://www.idmachines.com/> http://idmachines.blogspot.com <http://idmachines.blogspot.com/> @idmachines +1 617.201.4809 ph +1 617.812.6495 fax

1 0

Cloud Security Alliance Guidance IoT
by Salvatore D'Agostino 26 Mar '15

26 Mar '15

https://interact.cloudsecurityalliance.org/index.php/iot/Iot_Early_Guidance Maybe we could comment as a DG? Open to individuals in any case.T Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA http://www.idmachines.com <http://www.idmachines.com/> http://idmachines.blogspot.com <http://idmachines.blogspot.com/> @idmachines +1 617.201.4809 ph +1 617.812.6495 fax

2 1

Fwd: story of interest
by j stollman 25 Mar '15

25 Mar '15

All, Perhaps there is an identity solution applicable to IoT already in development. This approach uses blockchain and is funded by some major VCs. http://www.coindesk.com/onename-raises-seed-funding-fuel-decentralized-iden… -- Jeff Stollman stollman.j(a)gmail.com 1 202.683.8699 Truth never triumphs — its opponents just die out. Science advances one funeral at a time. Max Planck

4 4

ISSA Journal - IDoT: Security & Privacy Challenges
by Simon Moffatt 25 Mar '15

25 Mar '15

Hi group This is a basic paper I had published in this months Information Systems Security Association Journal that focused on the privacy and security issues of the internet of things, with obviously a heavy lean on the identity of things. Comments welcome :-) Regards Simon -- ForgeRock <http://www.forgerock.com> *Simon Moffatt* Mob: +44 7903 347 240 Skype: simon.moffatt @simonmoffatt

4 4

news and interesting material
by Ingo.Friese＠telekom.de 24 Mar '15

24 Mar '15

Dear All, I put news and interesting material discussed during our last call to our web site. https://kantarainitiative.org/confluence/display/IDoT/Repository+for+backgr… Best Ingo

1 0

Use case submission
by Scott Shorter 24 Mar '15

24 Mar '15

Hello IRM WG, As promised on the last call, here are some use cases that I had sent to the Kantara Idenity of Things discussion group last year, dusted off and repackaged as IRM use cases. Sorry I can't attend the call today, but hopefully the contribution is helpful. Catch you next time. - Scott -- ============================================================== *Scott Shorter, Principal Security Engineer* Electrosoft *–* Fueling Customer Success Through Outstanding Value and Trust! *Woman-Owned, Minority-Owned Small Business | ISO 9001 | CMMI Level 2 * 1893 Metro Center Drive; Ste 228; Reston, VA 20190 (703) 437-9451 x21 (office); (240) 994-7793 (cell) sshorter(a)electrosoft-inc.com (Email); http://www.electrosoft-inc.com (Web) ==============================================================

1 0

NIST publication of timing issues that might have impact on IOT
by Ross Foard 20 Mar '15

20 Mar '15

Intro from the document. Our fast-approaching future of driverless cars and “smart” electrical grids will depend on billions of linked devices making decisions and communicating with split-second precision to prevent highway collisions and power outages. But a new report <http://www.nist.gov/manuscript-publication-search.cfm?pub_id=917942>* released by the National Institute of Standards and Technology (NIST) warns that this future could be stalled by our lack of effective methods to marry computers and networks with timing systems. http://www.nist.gov/pml/div688/timing-031915.cfm We have addressed some of these issues in the past in industrial controls systems (with real time OS) and (telecom infrastructure) with PTP (precision time protocol). -- Ross Foard (703) 728-1543 (cell) rfoard(a)gmail.com <https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=rfoard@gmail.com>

2 1

NISTIR 7823
by Scott Shorter 20 Mar '15

20 Mar '15

Hi all, As discussed on the call, here's the news I mentioned about NIST IR 7823: This month, the National Institute of Standards and Technology (NIST) published the final form of a document that Scott Shorter from Electrosoft coauthored with NIST scientist Michaela Iorga <http://www.nist.gov/itl/csd/iorga-michaela.cfm>. NIST Interagency Report (NISTIR) 7823, entitled “Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework.” NISTIR 7823 provides test methods for determining compliance with the voluntary industry standards on firmware upgradeability published by the National Electrical Manufacturers Association (NEMA). The NEMA standard provides functional and security requirements for smart meters, upgrade management systems to upgrade firmware in a secure manner. NEMA SG-AMI 1-2009 <http://www.nema.org/Standards/Pages/Requirements-for-Smart-Meter-Upgradeabi…> was published 2009-09-25 to “[define] requirements for smart meter firmware upgradeability in the context of an advanced metering infrastructure system for industry stakeholders such as regulators, utilities and vendors.” It is currently distributed as part of NEMA's Smart Meter Standards Package <http://www.nema.org/Standards/Pages/Smart-Meter-Package.aspx> which is billed as requirements and guidance on electricity meteric within the United States. The test framework we developed is a very comprehensive test method for a fairly weakly specified standard, and in light of updated NIST guidance on protection of BIOS it is overdue for an update. Scott Shorter will be blogging this month on the topic of firmware upgradeability as a security feature, the ways that security feature can be abused, and recommended security considerations for when the firmware upgradeability standard is revisited, whether as an update by NEMA or if adopted as an ANSI C.12 standard. - Scott -- ============================================================== *Scott Shorter, Principal Security Engineer* Electrosoft *–* Fueling Customer Success Through Outstanding Value and Trust! *Woman-Owned, Minority-Owned Small Business | ISO 9001 | CMMI Level 2 * 1893 Metro Center Drive; Ste 228; Reston, VA 20190 (703) 437-9451 x21 (office); (240) 994-7793 (cell) sshorter(a)electrosoft-inc.com (Email); http://www.electrosoft-inc.com (Web) ==============================================================

1 0