Semiconductor challenges for a “Securely Connected Smart ......Semiconductor challenges for a “Securely Connected Smart World” Hans Rijns CTO - NXP Semiconductors . ISS Europe

Semiconductor challenges for a “Securely Connected Smart World”

Hans Rijns CTO - NXP Semiconductors ISS Europe Stresa, 25 February 2013

Presenter

Presentation Notes

“This flock of thousands of sparrows is a great example from nature of a perfectly functioning secure wireless sensor network: No collisions, they all know where to go, whether there is danger , food, etc.”

2 Hans Rijns – ISS Europe 2013 Hans Rijns – ISS Europe 2013

NXP – A European Global Innovator

Strong Innovation Pipeline:

Over $550M / year in R&D

3,300 engineers

11,000 patents

Focused Mixed-signal portfolio

Established in 2006 (formerly a division of Royal Philips)

Net sales: $4.36 billion in 2012

In > 25 countries in Europe, Asia and US

Manufacturing in Europe and Asia


The Internet of Things will drive the next semiconductor growth wave

Bringing the industry over $400Bn…

0

50

100

150

200

250

300

350

400

450

1985 1990 1995 2000 2005 2010 2015 2020

Personal computer

Mainframes

Smartphone and tablet

Cellphone

…and doubling IP device volumes

Semiconductor industry revenue, bn USD Connected devices in use, bn Units

Source: WSTS (extrapolated after 2011), Cisco, BBC, Gartner, GSMA, OECD (1) Excluding phones, computers,

Com-puter

Smart-phone

M2M Driver 2003 2011 2020

1

9-12

50 Machine-2-machine (M2M)

PC, laptop, Smartphones


Urbanization and mega cities drive M2M…

In 2007 about 50% of our world population lived in Urban environments

By 2050 this is expected to be around 70-80%

This drives the need for innovation in Smart Mobility and Smart Energy

http://upload.wikimedia.org/wikipedia/commons/5/59/High_Five.jpg

5 Hans Rijns – ISS Europe 2013

Top Connected Devices We May See in 2020 & Their Estimated Values Connected Car $600 billion Clinical Remote Monitoring $350 billion Assisted Living $270 billion Home & Building Security $250 billion Pay-As-You-Drive Car Insurance $245 billion New Biz. Models for Car Usage $225 billion Smart Meters $105 billion Traffic Management $100 billion Electric Vehicle Charging $ 75 billion Building Automation $ 40 billion

Source: PC Today, April 2012

55% Automotive related 29 % Home / Building related

…..with numerous related application areas


Supportive systems

Dependable systems

Evolution of connectivity

Connected devices Cooperative systems

“Lethal”

“Critical”

“Comfort” “On-demand”

Info exchange between single nodes

Database & infra-structure supported

Dynamic self- controlled systems. Configuration is function of capabilities of the nodes

Rel

iabi

lity

leve

l

“Always-on”

Stand alone device

Single node, no data exchange

“Autonomous”

Networking level

Collaborative systems


Connected World theme raises challenges to the semiconductor industry

Wireless; How to… – Enable all wireless data traffic within finite spectrum: cognitive radio – Handle all different standards and protocols: Software Defined Radio – Ensure only on-demand power usage: duty-cycled radio – Receive multiple signals simultaniously: multi-antenna / array systems – Ensure ‘lethal-level’ QoS: redundancy, majority voting, prognostics

Data integrity – Trusted data, protected privacy and guaranteed secure data transfer:

authentication and encryption – Counter-act security threats and physical attacks: war fare !

System complexity – Concurrent development application functionality and connectivity

solutions: value chain partnering


LF, UHF

802.11p 802.11p

Case 1: Smart Mobility Wireless systems view

Presenter

Presentation Notes

We do this together with many partners (integrators, telecom operators, government…), here in Belgium e.g. in IBBT context


Car Entertainment

Intelligent Traffic Management

Air

Inside Car

Smart Mobility Functional view

In Vehicle Networks

Car Access & Remote Car Management

Ethernet


Smart Mobility Applications & end-user view


So by 2022, 20-25% of cars will be connected


Intelligent Transport Systems (ITS) Car-car and car-Infrastructure communication network

Traffic/energy management (support systems):

– Emergency vehicles – Speed congestion controls – Green light zone

Safety (dependable systems): – Beyond driver line-of-sight; hazardous

location & Curve Speed Warning – Lane change warning – Collision Warning – Car as a Sensor

Supported by dedicated wireless standards – ETSI/IEEE, Car2Car Communications

Consortium


C2X – Emergency vehicle warning

Courtesy of Cohda Wireless


C2X – Seeing around corners



C2X – Hazard warning



(H) EV Connected Car Manipulation

ITS Challenge 1: Connected car is an open system…..how to ensure security and privacy?

Avoid car hacking

Data Security is precondition to safe Car2X comms

Personal privacy

Connection to the Grid at charging facilities

Secure billing & battery swapping

Easy access to car network via OBD….

• Engine tuning

• Unpaid (optional) feature activation


How serious is this security risk in Automotive ?

Trojan Horse in vehicle via MP3 files

Car access & manipulation via Tire-Pressure Monitoring

Network access & replay attacks via OBD Interface

Control over vehicle through e-call Module

Bluetooth interface access via mobile phone

Electrical Vehicle Charge - Grid Manipulations

“War Texting” – car access via SMS hack

Car tuning via µC Debug Interfaces

“Counterfeit auto parts flood China’s aftermarket’’

http://www.google.nl/url?sa=i&rct=j&q=&esrc=s&frm=1&source=images&cd=&cad=rja&docid=ROOu6JJIZC0dbM&tbnid=1DyugBInmgrzkM:&ved=0CAUQjRw&url=http://infocarnivore.com/why-would-anyone-want-to-hack-my-car/&ei=DN0PUbnqEYrWiwK2_4H4CQ&bvm=bv.41867550,d.cGE&psig=AFQjCNHKe0x8IT4zBT5PdI49lscLi-L9-g&ust=1360080505365625


Performance & security requirements Performance level:

– broadcast (TX) up to 20 safety messages per second...

– receive (RX) N times more messages • real-life traffic measurements: ≤ 750/s

Security level: – Secret key material (pseudo-identities)

involved in signature generation (TX) – Only public key material involved in

signature verification (RX)

TX RX Operation Signature generation Signature verification Rate Low: ≤ 20 / s High: 400-1000 / s Security level High: protection of

private keys (=car identity)

Modest: only non-secret data

TX = 1:N RX = N:1

Public key exchange (can be part of message)

Hello! sign

Hello! Hello! Hello! verify

Presenter

Presentation Notes

RJ: Checked with Timo van Roermund: Security level on the message sending site is HIGH , using a private key which is not sent, and temporary identities (while data rate low), and on the reception side the security level is low, (while data rate is high) . Also: the mentioned pseudo identity has a lifetime of > 5 min up to days.


ITS Challenge 2: Quality of Service wireless links

Automotive IEEE 802.11p WiFi – 5.9 GHz band reserved – Longer ranges (up to 1000m) – High (relative) speed of vehicles

(Doppler effects) – Low latency by

• No frequency scanning – Robust under automotive harsh conditions

• Rapid changes in multi-paths reflections • Long excess delays to indoor

Multi-radio: co-existence and concurrency – Multiple-standards, multiple frequency bands

world-wide – Closely spaced structures like shark-fins – Simultaneous transmit and receive

802.11p Receive path

GSM900 Transmit path

LNA

PA

802.11p

GSM900An

tenn

a iso

latio

n

PInterferer


Field trial NL consortium SPITS „Transparent Truck“

time

Higher is better

90%

Conventional WiFi 802.11p WiFi

Presenter

Presentation Notes

The color codes in the top 2 images indicate in red all spots where conventional WiFi is not able to communicate between two cars. The red in the bottom chart indicates what % of messages fail with conventional WiFi. The blue indicates the % of failed messages using our 802.11p implementation -> always over 90% is ok which is enough


ITS Challenge 3: .. Collaborative innovation

In-Car CAN data

Dynamic Maximum

Speed

Real Time Traffic Info

Smart phone navigation apps for

road users

Driving style &‘black box’ info for fleet managers

Traffic & road condition info

for road authorities

Innovation combining in-car data, traffic info and dynamic max. speed to improve traffic flow and road safety and to reduce emissions


Smart Elec.

Smart Water

Appliances

Light

Wind Turbine

Solar Panel

Smart Gas

Home displays TV, Computer

In-Home Energy Display

Breakes Valves

Home Energy Box

UtilityData centers

Smart metering & sensing devices

Temp control

Distributed electricity generation and storage User Interfaces

Hybrid car

Com

mun

icat

ion

hub

Hybrid car Smart Elec.

IP network Independent service providers

Smart Heat

Concentrator

Sensors

Home network

Neighborhood network

Wide area

network

Case 2: Smart Energy – Home & Building Automation (HABA)


M2M nodes in Smart Energy - Homes Functional view

Potential for smart household nodes Units (based on ‘conventional’ 2010)

Source: industry studies, team estimates, web search

20-30

Security

Other ~10

Consumer Electronics

Climate control

Total per household

~10

150-200

10-15

30-40

70-90 Lighting

Electricity control


M2M nodes in Smart Energy - Buildings Functional view

Window sensor Room sensor (Smoke, CO, alarm, …)

Personalized workspaces

Desk sensor (light, T, RH, presence, CO2, …)

Micro-climate

Activity based lighting

http://www.lovelights.co.uk/kitchen-lighting-16/sensio-se9905hdcw-luna-ceiling-light-15253.htm




M2M nodes in Smart Energy - Homes Architecture view

Electricity/ metering

Smartphone

SmartTV

Remote

Gateway

High Bandwidth, High Power, High Cost comms

Narrow Band, Low Power, sensing, secure

PC

Security Camera

WiFi (+ Ethernet, BT, USB, PLC)

Tablet

Bridge / dongle

Lighting/ switches

Home monitoring (security, fire)

Climate control/ sensor networks

Connected Appliances/ Smart Plugs

802.15.4 / (+PLC)

Home health

http://en.wikipedia.org/wiki/File:Hydro_quebec_meter.JPG


HABA Challenge 1: Security Security risks

– Cyber attacks – Stealing / Fraud – Privacy

All network communication should be in Secure Authenticated Channels (SAC) – All messages are integrity and confidentiality protected by use of secure elements – All components need to be authenticated and be certified tamper resistant

Smart Elec. Meter Security Module Secure Micro Controller

Application Application

Wired & Wireless

Connectivity

Crypto Modules

Secure Boot/

Firmware

True RNG

Secure RTC

Secure memory

Secure debug

Secure Micro-Controller

Smart Gas Meter Mut

ual A

uthe

ntic

atio

n +

SAC

Mut

ual A

uthe

ntic

atio

n +

SAC

Mut

ual A

uthe

ntic

atio

n +

SAC

Concentrator

Backend

Energy Security Server


HABA Challenge 2: Wireless sensor nodes HABA system characteristics:

– Comfort: support level – Energy control: critical level – Security: lethal level

Power autonomy – Low power (<< 100 μW) – Duty-cycled operation

Reliability – 15-20 yrs lifetime with open packages – ESD protection for exposed die – 12-14b accuracy measurement levels

for energy metering

Radio link – ~zero power standby, fast wake-up – Interferers avoidance:

• Time Domain - Listening Before Transmit • Frequency Domain - Free Channel

Selection

Harvesting element

Power Conversion

Energy storage

Power Conversion

CPU Sensor RF Link

Generic node architecture

Full CMOS multi-modal sensor


HABA Challenge 3: .. Collaborative innovation

Environmental sensors

Wired and wireless

connectivity solutions

Secure Elements

Secure energy

metering

Building performance monitoring

Smart Climate control Systems

Smart Lighting Control

Component & standards Systems Smart Buildings

http://www.tno.nl/index.cfm


Key messages

Connected devices are the prime volume drivers for next growth phase of the semiconductor industry

– Leading application area’s are Smart Mobility and Smart Energy

The need for data security protection and connectivity reliability scales with the system intelligence level – the robustness of our solutions will determine the speed of market adoption

The vision of Smart Connected Systems can only be realized by collaborative innovations driven by its value chain partners:

– M2M Semi + infra & data management + end-user application


Thank you!

Documents

Semiconductor challenges for a “Securely Connected Smart ......Semiconductor challenges for a “Securely Connected Smart World” Hans Rijns CTO - NXP Semiconductors . ISS Europe