Presented at NetNite - ISOC Lebanon October 13th, 2016

1. The Data-Driven World of IoT
October 13th, 2016
Marc Nader
@mourcous

2. Agenda
The Business Background
The IOT Ecosystem
The IOT Data Flow
IOT Security Model
Will not cover:
Commercial IOT
The programming framework

3. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 3
The Next Area of Growth

4. © Copyright 2015 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 4
Branches of IoT
IoT
Consumer IoT
(Wearables, Cars, Smart
homes, etc.)
Industrial IoT
(IIoT)
Smart
Gateways
Wireless
Sensor
Networks
Mesh
(Zigbee,D
ust, Wifi)
LPWAN
(LoRa,
NB-IOT,
Sigfox)

5. © Copyright 2015 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 5
Value Creation

6. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 6
The IOT Paradigm
How do we get there?
HOW?

7. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 6
The IOT Paradigm
How do we get there?
HOW?

8. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 6
The IOT Paradigm
How do we get there?
HOW?

9. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
IOT Data Flow
Mapping the business case: waste management
7

10. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow

11. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Site

12. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture
Site

13. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture
Site

14. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Site

15. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Site

16. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Site Network

17. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Site Network

18. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Site Network

19. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Site Network

20. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Site Network

21. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Site Network Data Center/Cloud

22. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Store
Site Network Data Center/Cloud

23. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Store Analyze
Site Network Data Center/Cloud

24. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Store Analyze Action
Site Network Data Center/Cloud

25. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Store Analyze Action
Site Network Data Center/Cloud
Big Data /
Analytics /
Application builders

26. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Store Analyze Action
Site Network Data Center/Cloud
Big Data /
Analytics /
Application builders

27. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 8
IOT Data Flow
Capture Code
Transmit
RAN
Transport
IP, MPLS,
etc.
Store Analyze Action
Site Network Data Center/Cloud
Big Data /
Analytics /
Application builders
IoT Enabler

28. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
IOT Data Flow
Within the Site
9
Part of Operation Technology (OT);
Sensors with analog (0-10V) or digital electrical outputs;
Powered by the IOT node or through an external source;
The IOT node transforms the electrical signal into data packets;
Message Queuing Telemetry Transport (MQTT),
Constrained Application Protocol (CoAP)
Rugged design;
Or Sensors can take form of any IP based protocol.
Capture Code
IoT nodes connect one or multiple
sensors and translate an analog
signal into packets.
Sensors IoT nodes
Transmit
RAN
Transport
IP, MPLS,
etc.
Store Analyze Action

29. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 10
Low Power Wide Area (LPWAN)
Powerusage
Range >10km<10m
WiFi
Bluetooth
BTLE
ZigBee
Z-Wave Dust
NFC
Satellite
Cellular

30. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 10
Low Power Wide Area (LPWAN)
Powerusage
Range >10km<10m
WiFi
Bluetooth
BTLE
ZigBee
Z-Wave Dust
NFC
Satellite
Cellular
LPWAN

31. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
IOT Data Flow
Radio Access Network: Transmitting the M2M chatter
11
Collecting data from on a massive scale while preserving the sensor battery life is a challenge;
Ferocious competition for the Low Power Wide Area (LPWA) technology dominance;
The "LPWAR": lets look at the market alternatives in this area:
Sigfox: Global IoT Operator.
LoRa: Enable operators and enterprises to create IoT networks
3GPP: NB-IOT, LTE-M, NB-LTE & 5G: Natural evolution of mobile operators.
Fixed & Short range
Wifi + 3/4G/Fixed
Zigbee + 3/4G/Fixed
Capture Code Transmit Transport
Sensors IoT nodes IoT Gateways IP Network
Store Analyze Action

32. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 12
Sigfox
Privately owned, French.
Ultra narrow band 868Mhz - 100Hz (BPSK)
140 messages per unit per day. 1 every 10 minutes.
12 bytes per message
15 km, bi-directional.
High battery life (Up to 20 years)
Limited bandwidth applications
City wide deployments, short message
communications
Shipping and very active
Network as a service model.
Cloud based.
Technology Applications

33. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 13
LoRa
LoRa Alliance, backed by Cisco, IBM,...
Star of Stars topology, Encrypted protocol
Wideband CDMA: 868Mhz - <500kHz
0.3kbps - 50kbps
15 km
High battery life
3 Classes:
A: similar to Sigfox. Receiver Initiated
Transmission Strategy (RIT)
B: scheduled downlink slot, intermittent device
sleep.
C: always on. Mains Powered.
Just getting started.
Open ecosystem.
But one radio manufacturer: Semtech.
City wide deployments with 2 way
communications.
Open for operators and private companies.
Technology Applications
100+ Members

34. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 14
LoRaWAN Architecture
Message Signing
Payload encryption
AES128

35. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 15
Narrow Band IOT - NB - IOT
3GPP, Huawei (Neul acquisition)
LTE-M - 1.4Mhz (1Mbps/1Mbps)
NB LTE-M - 200khz (200kbps/170kbps)
One LTE cell can handle 150k LTE-M devices
10 years battery life (200 bytes daily update)
Low cost terminal
Leverage the LTE network with a software upgrade.
LTE-M +15dB link budget (x7 coverage)
NB LTE-M +20dB link budget (x10 coverage)
Licensed spectrum
3GPP Rel. 13
NB-IOT Coming with LTE-A Pro (4.5G)
Mobile operators become IoT operators with
a software upgrade..
Technology Applications

36. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 16
Fixed & Short Range IoT Connections

37. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 17
Fixed or Short Range Wireless

38. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 18
WiFi / Zigbee / Dust + 3G/4G
Local Aggregation of IOT nodes is done through:
Wifi
Zigbee / 802.15.4 / Dust / Z-Wave
Site aggregation is done through 3G/4G or fixed
Need external power source for the aggregation
Higher throughput
High throughput, sending voice/video
Real Time or near-RT
In home, in plant, on campus.
Technology Applications

39. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
IOT Data Flow
Transmitting the M2M chatter
19
Capture Code Transmit Transport
Technology
decision factor
Sensors IoT nodes IoT Gateways IP Network
Store Analyze Action

40. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 20
Evolutions of Apps
Making Sense of Data

41. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 21
IoT Applications
The three layered approach

42. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
IOT Data Flow
Gathering, structuring and processing the data
22
Input from IOT Gateways (MQTT)
Input from IOT Network Server (kafka)
Any other input
Data modeling and data set definitions
Machine Learning, Analytics
Data Science for IOT: making sense of
massive data and give the machines the
ability to take intelligent decisions.
Capture Code Transmit Transport Store Analyze Action
Sensors IoT nodes IoT Gateways IP Network

43. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 23
The Challenge of Data in Motion
Data at Rest Data in MotionVS
Capture Analyse Action
t1 t2
Capture
Analyse
Action
rt, nrt

44. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 23
The Challenge of Data in Motion
Data at Rest Data in MotionVS
Capture Analyse Action
t1 t2
Capture
Analyse
Action
rt, nrt

45. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 23
The Challenge of Data in Motion
Data at Rest Data in MotionVS
Capture Analyse Action
t1 t2
Capture
Analyse
Action
rt, nrt

46. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 23
The Challenge of Data in Motion
Data at Rest Data in MotionVS
Capture Analyse Action
t1 t2
Capture
Analyse
Action
rt, nrt

47. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 24
Hardware/Software Platform Summary
Long Range
Short Range
IoT Gateway
Node & Sensor
Node +
Sensors
Cellular
Fixed IoT Network
Platform
Application #1
Application #2
Application #3

48. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 25
The IoT Services Framework

49. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 25
The IoT Services Framework
Connectivity Management

50. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 25
The IoT Services Framework
Connectivity Management
Device Management

51. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 25
The IoT Services Framework
Connectivity Management
Device Management
Data Management

52. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 25
The IoT Services Framework
Connectivity Management
Device Management
Data Management
S
E
C
U
R
I
T
Y

53. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 25
The IoT Services Framework
Connectivity Management
Device Management
Data Management
S
E
C
U
R
I
T
Y
Application
Enterprise
Integration
Cloud 2 Cloud

54. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
Fog Computing
Eliminating the unnecessary chatter on the radio
26
Capture Code Transmit Transport Store Analyze Action

55. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
Fog Computing
Eliminating the unnecessary chatter on the radio
26
Capture Code Transmit Transport Store Analyze Action
Cloud Computing

56. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
Fog Computing
Eliminating the unnecessary chatter on the radio
26
Capture Code Transmit Transport Store Analyze Action
Cloud Computing
Bringing some intelligence
closer to the edge.

57. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
Fog Computing
Eliminating the unnecessary chatter on the radio
26
Capture Code Transmit Transport Store Analyze Action
Fog
Computing
Cloud Computing
Preprocessing of data
from sensors saves on
transmissions costs.
Bringing some intelligence
closer to the edge.
Computing on the
IOT gateway
(managing
different nodes)
" Decreased network chatter and cloud storage.
" Linux IoT nodes, complex computing done local.

58. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
Mist Computing
Eliminating the unnecessary chatter on the radio
27
Capture Code Transmit Transport Store Analyze Action
Fog
Cloud Computing
Bringing some intelligence
closer to the edge.

59. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
Mist Computing
Eliminating the unnecessary chatter on the radio
27
Capture Code Transmit Transport Store Analyze Action
Fog
Cloud Computing
Bringing some intelligence
closer to the edge.
Mist
Computing
Computing on the
IOT node
(sensor or
actuator)
" Decreased latency
" More autonomy

60. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 28
A Step In the Right Direction
Interoperability efforts

61. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 29
Remember Stuxnet

62. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 30
The Security Paradigm

63. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 30
The Security Paradigm
IOT Gateways
(Linux, cheap chips)

64. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 30
The Security Paradigm
IOT Gateways
(Linux, cheap chips)
How about
security?

65. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 30
The Security Paradigm
IOT Gateways
(Linux, cheap chips)
How about
security?

66. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 31
The End of The Fortress Approach
Once the hacker is in, Game Over!
Intelligence is distributed and networks are
intertwined.
The Goal is not to keep out only.
Detect, Isolate, Heal

67. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 32
Proposed IOT Security Framework
Per device:
Authentication: endpoints should be fingerprinted.
Authorization: establishing the cross platform trust
relationships.
Network Enforced Policy: all elements that route
and transport endpoint traffic securely over the
infrastructure.
Analytics: Data, generated by the IoT devices, is only
valuable if the right analytics algorithms or other
security intelligence processes are defined to
identify the threat.
Cisco Securing the Internet of Things: A proposed
Frameworks.
Google BeyondCorp

68. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission
Back to our IoT application
It's all about the business case
33
-40%
Savings

69. © Copyright 2016 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission 34
IOT
Finally
IOT
Information
Technology
Operation
Technology
Business
Outcome
" Operation technology & Low Current
" Radio Access
" Networking
" Data Integration, software
" Data science
System Integration

70. Thank you!
Marc Nader
mnader@dcgroup.com
@mourcous