1. Context-Aware & Yet Another service Hiromitsu Kato hkato@sdl.hitachi.co.jp Systems Development Lab. Hitachi, Ltd. UBICOMP2002 W7: Security in Ubiquitous Computing

2. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 2 Contents Our Future Vision – Super Distribution and Coordination System concept, AYA – Autonomous networking idea over Super Distributed Objects – Town Management Application Security Issues – Agility and Fragility – Direct access Our attempts – Secure Tele-operation Protocol – Ongoing works – Demo video

3. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 3 Contents Our Future Vision – Super Distribution and Coordination System concept, AYA – Autonomous networking idea over Super Distributed Objects – Town Management Application Security Issues – Agility and Fragility – Direct access Our attempts – Secure Tele-operation Protocol – Ongoing works – Demo video

4. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 4 Future Vision Super Distributed Intelligence Ubiquitous Networking Industry -Virtual line: Line organization according to individual product -Channel Assembly: Product customization in logistics -Recycling: Classification based on specification and used history Transportation -Smart ways: Roads memorizing accidents and advising safety drive -Smart cars: Cars cooperatively driving with each other to reduce accidents and improve traffic speed and density e-Life(Human Body) -Wearable Tools: Digital fabrics, computer ring, and other information tools receive various services such as safety, entertainment, business, etc. -Silicon Surgeons: Robots travel through body and monitor the health problem. Home/Office -Borderless operation: Appliances accessible from everywhere -Cooperative energy saving: Appliances autonomously work together for peak power shift

5. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 5 Paradigm Shift From “Resource-Centric” to “User-Centric” Past Super Distribution Are the clients satisfied? Please give me… Servants for human and society. Java I like… -Logic-aware -Resource centered -Context-aware -Resource distributed Resource

6. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 6 Contents Our Future Vision – Super Distribution and Collaboration Basic concept, AYA – Autonomous networking idea over Super Distributed Objects – Town Management Application Security Issues – Agility and Fragility – Direct Access Our attempts – Secure Tele-operation Protocol – Ongoing works – Demo video

7. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 7 Basic Concept AYA: context-Aware & Yet Another service 綾 (AYA): A twill weave, a fabric with a twill weave Towards the woven and twilled intelligence system – The warp = Connection between Information and physical presence – The woof = Link between physical presences [Nishijin brocade]

8. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 8 Target Application Town Management Support System – Goal: Area value augmentation Creating a real-world portal site attracting many people to come, by using IT – Requirements Service is highly situation-dependent – Various users, events, timing, devices, … Service consistency support …and more…

9. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 9 Contents Our Future Vision – Super Distribution and Collaboration Basic concept, AYA – Autonomous networking idea over Super Distributed Objects – Town Management Application Security Issues – Agility and Fragility – Direct access Our attempts – Secure Tele-operation Protocol – Ongoing works – Demo video

10. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 10 Security Issue (1) Easy come, easy go – Flexibility is likely to lead to fragility – The malicious user would easily realize the DoS (Denial of Service) attack. – Even the normal users could interrupt the service for another person.

11. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 11 Security Issue (2) Ubiquitous direct access – The firewall cannot always be a premise in the ubicomp environment. – Self-protection is needed. But, how?

12. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 12 Contents Our Future Vision – Super Distribution and Collaboration Basic concept, AYA – Autonomous networking idea over Super Distributed Objects – Town Management Application Security Issues – Agility and Fragility – Direct Access Our attempts – Secure Tele-operation Protocol – Ongoing works – Demo video

13. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 13 Our first idea Operation-Privilege (O.P.) Management – Remote Controller (RC) Metaphor – Device access is allowed after acquiring the RC. – Malicious access can be stopped by taking away the RC.

14. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 14 Secure Tele-operation Protocol Three-tier model approach – The secure procedure is arranged as the STP spec. Ｐ STP server Remote Operator’s Terminal Operation target UHA OHA External systemInternal system O.P. Remote Operator’s Terminal Operation target Requester Provider Mediator (User-Hosting Agent)(Object-Hosting Agent)

15. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 15 Ongoing works Three-tier model is a firewall approach. Not suitable for ubiquitous direct access environment. Some ongoing works – Embedded STP Each active device would have the STP server functions for self-protection. – Adapter dispatch approach O.P. mgt. with secure manager and adapter dispatch – Privacy policy handling O.P. transfer vs. Privacy transfer

16. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 16 Sample Application Scenario Smart Town Navigation Demo [Video] Station Theater Shopping Mall Home/Office

17. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 17 Standardization Activity SDO SIG is organized in OMG – SDO = Super Distributed Objects – Members: U. of Tokyo, Hitachi SDL, FhG/FOCUS, UC Irvine/NTT, … RFP had issued in Feb 2002 – “PIM and PSM for SDO” – For the unified management model for devices and related software agents – First submission in Oct 2002 From tomorrow(!), it will be discussed in Helsinki…

18. Copyright (C) 2002 Systems Development Laboratory, Hitachi, Ltd., All Rights Reserved. 18 Summary Vision: Super Distributed World AYA: Enabling the surrounding embedded systems to support for human life flexibly Security issues – Fragility problem about ad-hoc systems – Ubiquitous direct access – … Our trials – OP Mgt., STP, Adapter dispatch, Privacy,...

19. Thank you Q&A: I appreciate if you would speak slowly.