Wireless Security for the Internet of Things

If you believe the futurologists, then the Internet of Things (IoT) is going to be the next big thing.  Depending on who you listen to, by 2020 there will be up to 50 billion connected devices, an order of magnitude greater than the number of mobile phones.  You can already see the start of that, whether it’s smart meters, connected information signs, or the increasing number of fitness devices, like Fitbit and Nike’s Fuel wristband.  To get a better idea of what else may be emerging to make up that number, a good place to start is Kickstarter – the website for crowd-sourced funding.  It shows that a significant number of potential start-ups are looking for money to produce a bewildering array of gateways and sensors.

It’s great that there is so much innovation going on in this area.  I’ve been trying to help it take off for almost two decades and at last I can convincingly say it’s happening.  But underneath the enthusiasm, I’m concerned that not enough attention is being given to security.

A few weeks ago, a speaker at a security conference in Australia talked about wireless attacks on pacemakers.  Possibly because of the combined press frenzy around Superstorm Sandy, Obama’s re-election and Jimmy Savile, that piece of information wasn’t picked up by the mass media.  At the same time, I’ve been playing with some of the latest consumer products that have come to market and found very little evidence of security.  In fact, recent coverage in the technical press suggests there is a worrying feeling of complacency.  I suspect that may be because wireless and end-to-end security is a new concept for many of the engineers designing IoT devices.  But it is important that it makes its way onto the agenda, otherwise it may seriously impact the potential for growth.

Read More

Smart Meters could have saved US from Sandy

Following the disruption caused by hurricane Sandy, Smart Metering proponents have been quick to point out how a more widespread deployment could have prevented many of the problems seen in New York and New Jersey.  Utilities in Texas and California reported that within their regions where there was close to 100% smart meter deployment, they’d not experienced a single example of power outage or flooding.  And smart meter manufacturers added that the outage reporting capability of their meters would have saved vast amounts of time and money for the East Coast utilities.  “Instead of having hundreds of staff watching CNN and following twitter feeds to find out where power had gone down, utility executives could have just checked on their iPhones” said one industry spokesman.

These benefits were echoed by smart thermostat manufacturers, claiming that the wireless networks in their devices could have been reconfigured to provide a local wireless mesh, enabling peer-to-peer communications within affected communities, as well as being used for in-home geo-location, aiding local emergency services.  “Our thermostats don’t just look over your climate control”, one executive commented, “they can even look after Granny and your pets in situations like this”.

Read More