+ All Categories
Home > Documents > Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific...

Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific...

Date post: 23-Jul-2018
Category:
Upload: vuonganh
View: 216 times
Download: 0 times
Share this document with a friend
50
Internet of Things @ Hitachi Vantara Ashok Nirsoe Solutions Architect / SPG 18/02/2018
Transcript
Page 1: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Internet of Things @ Hitachi Vantara

Ashok NirsoeSolutions Architect / SPG

18/02/2018

Page 2: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ Introduction

▪ Who Are We?

▪ What Is IoT?

‒ Definition

‒ Connectivity, Standards & Intended Use

‒ Security

▪ Real-World IoT Project

‒ Connected Cars

▪ Real-World IoT Solutions

▪ Lumada IoT Platform

▪ Q & A

Agenda

Page 3: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ Name

‒ Ashok Nirsoe

‒ Born in Paramaribo, Suriname

‒ Raised and educated in Rotterdam, The Netherlands

▪ Current Role:

‒ Solutions Architect at Hitachi Vantara since 2006

▪ Past Role(s):

‒ Includes a variety of IT engineering, architecture and consulting roles in the industry as well as positions at KPN/Getronics, Liberty Media, Rabobank International and T-Systems

▪ Miscellaneous Facts:

‒ Spent the past 6 years as a member of the Social Innovation / Hitachi Insight Group in Santa Clara/US and have been involved in multiple IoT projects world-wide

‒ I still have to complete my NL “inburgeringscursus” ☺

Introduction

Page 4: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

57+YEARS

106+YEARS

IT

IT SYSTEMS

ARTIFICIAL

INTELLIGENCE

COMMUNICATIONS

BIG DATA

ANALYTICS

CLOUD

IoTINSIGHT

CONSUMER

BUSINESS

CITY

OTINDUSTRIAL

© Hitachi, Ltd. 2018. All rights reserved.

Page 5: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

SMART CITY

HEALTHCARE

CONNECTED

HEALTH

DATA-DRIVEN BUSINESS

MACHINE

ANALYTICS

ENTERPRISE

INTEGRATION

HUMAN

ANALYTICS

ARTIFICIAL

INTELLIGENCE

BUSINESS

ANALYTICS

ENERGY

WIND

TURBINES

BATTERY

SYSTEMS

TRANSPORTATION

RAIL

SYSTEMS

TRAFFIC

MANAGEMENT

AIRPORT

SOLUTIONS

FLEET & LOGISTICS

MANAGEMENT

SMART ACCESS

CLOUD SYSTEMS

SMART SPACES &

VIDEO INTELLIGENCE

AUTOMOTIVE

SYSTEMS

TESTING AND

DIAGNOSTICPARTICLE BEAM

THERAPY

TECHNOLOGY

INFRASTRUCTURE

INDUSTRIAL

MANUFACTURING

OPTIMIZATION

CONSTRUCTION

MANAGEMENT

CONSTRUCTION

MACHINERY

PRODUCTION

CONTROLS

COMPUTER

INTEGRATED

MANUFACTURING

SUPPORT

CHAIN

DEVICE

CONNECTIVITY

SMART CITY

ANALYTICS

MICROGRIDS &

GRID STABILITYENERGY DEMAND

MANAGEMENT

WATER & SEWAGE

SYSTEMSBUILDING

SYSTEMS

ENERGY SUPPLY

MANAGEMENT

RENEWABLE

ENERGY

MEDICAL IMAGING

AND DISTRIBUTION

BIOINFORMATICS PHARMACEUTICAL

SOLUTIONS

PREDICTIVE

ANALYTICS

A Solution Oriented Partner for Innovation

Page 6: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

The Internet of Things represents a network

of physical objects embedded with compute,

software, storage, sensors, actuators and

network connectivity enabling them to collect

and exchange data with each other as well

as the external environment.

What is IoT?

Page 7: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Definition

Data

Collection

Integration

Systems /

Apps

Analytics

Network

High-Level IoT Framework IoT Components & Definitions

A network point that receives information from many other

points on the network and transmits information to another

network (i.e. device that processes data on behalf of a group of

devices).

Gateway

A connected device that converts physical world conditions into

user interactions or presentations.

Information

A uniquely identifiable physical object or entity with

communication capabilities linking it to other systems.

Device (Thing)

Platform

The technology stack that supports IoT operations.

Platform

Sensors

Devices

(Things) Information

Control

Information

Gateway

Gateway

Actuators

End-to-end Security

Page 8: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Connectivity, Standards & Intended use

Page 9: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

IoT Connectivity Stack

Link / Physical

Network

Transport

Protocol

Application

• IEEE 802.3, 802.11, 802.15.x

• 3GPP (2G/3G/LTE)

• CoAP, XMPP, HTTP

• MQTT, AMQP, DDS

Standards Intended Use

IEEE 802.3: Ethernet connected

devices

IEEE 802.11: high-power,

WLAN/Wi-Fi enabled devices, and

content distribution

IEEE 802.15.x: low-power, low-cost

wireless devices

3GPP: wireless tracking (i.e.

materials and fleet management)

• OMA LWM2M

• OPC-UA

• TCP, UDP

• Security: TLS, DTLS, SASL

• IPv6

• 6LoWPAN

Connectivity Stack

Page 10: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

IoT Connectivity Stack

Link / Physical

Network

Transport

Protocol

Application

• IPv6

• 6LoWPAN

• CoAP, XMPP, HTTP

• MQTT, AMQP, DDS

Standards

IPv6: high-performance devices

and networks

6LoWPAN: constrained devices

and networks (i.e. battery operated

on IEEE 802.15.4)

Intended Use

• OMA LWM2M

• OPC-UA

• TCP, UDP

• Security: TLS, DTLS, SASL

• IEEE 802.3, 802.11, 802.15.x

• 3GPP (2G/3G/LTE)

Connectivity Stack

Page 11: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

IoT Connectivity Stack

Link / Physical

Network

Transport

Protocol

Application

• TCP, UDP

• Security: TLS, DTLS, SASL

• CoAP, XMPP, HTTP

• MQTT, AMQP, DDS

Standards

TCP/TLS:

MQTT

AMQP

XMPP

HTTP

OPC-UA

DDS

UDP/DTLS:

DDS

CoAP

LWM2M

SASL (for authentication):

AMQP

XMPP

Intended Use

• OMA LWM2M

• OPC-UA

• IPv6

• 6LoWPAN

• IEEE 802.3, 802.11, 802.15.x

• 3GPP (2G/3G/LTE)

Connectivity Stack

Page 12: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

IoT Connectivity Stack

Link / Physical

Network

Transport

Protocol

Application

• CoAP, XMPP, HTTP

• MQTT, AMQP, DDS

Standards

CoAP: state transfer on

constrained nodes and networks

XMPP: large scale instant

messaging and presence based

apps

HTTP: applications designed for

human user interaction interfaces

MQTT: data collection from low

power sources with limited

bandwidth (i.e. oil pipeline

monitoring)

AMQP: enterprise application level

messaging and processing

DDS: high-performance integrated

device systems with real-time

capabilities (i.e. military systems)

Intended Use

• OMA LWM2M

• OPC-UA

• TCP, UDP

• Security: TLS, DTLS, SASL

• IPv6

• 6LoWPAN

• IEEE 802.3, 802.11, 802.15.x

• 3GPP (2G/3G/LTE)

Connectivity Stack

Page 13: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

IoT Connectivity Stack

Link / Physical

Network

Transport

Protocol

Application

• CoAP, XMPP, HTTP

• MQTT, AMQP, DDS

• OMA LWM2M

• OPC-UA

Connectivity Stack Standards

LWM2M: device management (i.e.

device/gateway configuration, or

locking of a specific device)

OPC-UA: industrial automation and

process control; typically used in

the manufacturing industry

Intended Use

• TCP, UDP

• Security: TLS, DTLS, SASL

• IPv6

• 6LoWPAN

• IEEE 802.3, 802.11, 802.15.x

• 3GPP (2G/3G/LTE)

Page 14: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Security

Page 15: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Common IoT Security Vulnerabilities Areas

▪ Data security‒ Illegal users, access to the protected

data, modification of data (Identity

management)

‒ Data in the gateway, platform

components (M2M, AEP and Analytics

platforms)

4 6 82 10

Enterprise TierPlatform TierEdge TierService Platform

Data

Center

Network

Control Flow

Gateways &

Controllers

Control Flow

Sensors &

Actuators Applications

Planning Applications,

Rules, and Controls,

Operations

Applications, Rules,

and Controls

Store &Manage

Analyze &Predict

Data FlowCreate and Ingest Data

Data Flow

▪ Communication security‒ Between sensors and gateway

‒ Between gateway and the platform tier

‒ Among different components of the platform

‒ Between platform and the application

‒ Between application and user

1

3

5 7

9

11

▪ Physical security‒ Device, gateways, servers

13

5

7 9

11

4 6

8

2

10

32

1

7 10

AutomateOutcomes

9

Page 16: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Protocols and Security

Model

Transport

Standards

Body

Header

Size

Security

Intended

Use

DDS

Publish /

subscribe

Request /

response

UDP (default)

TCP (in

progress)

OMG DDSI-

RTPS v2.2

DTLS

TLS

High-

performance

integrated

device systems

with real-time

capabilities (i.e.

military

systems)

MQTT

Publish /

subscribe

TCP

OASIS MQTT

v3.1.1

username /

password for

authentication

TLS for

encryption

Data collection

from low

power sources

with limited

bandwidth (i.e.

oil pipeline

monitoring)

2 bytes

AMQP

Publish /

subscribe

Point-to-point

TCP

OASIS AMPQ

v1.0

SASL for

authentication

TLS for

encryption

Enterprise

application

level

messaging

(broker split

into exchange

and queues)

8 bytes

CoAP

Request /

response

UDP

IETF RFC

7252

DTLS

State transfer

on constrained

nodes and

networks

(RESTful)

4 bytes

XMPP

Publish /

subscribe

Request /

response

TCP

IETF RFC 6120

XSF XEP-xxxx

SASL for

authentication

TLS for

encryption

Large scale

instant

messaging and

presence based

apps

HTTP

Request /

response

TCP

IETF HTTP

TLS

Applications

designed for

human user

interaction

interfaces

(RESTful)

LWM2M

Request /

response

SMS

UDP

OMA LWM2M

v1.0

Device

management

(i.e.

device/gateway

configuration, or

locking of a

specific device)

DTLS

OPC-UA

Request /

response

TCP

OPC-UA v1.03

TLS

Industrial

automation

and process

control

applications

Page 17: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Real-World IoT Project

Page 18: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Connected Cars

▪ Evaluate possible OBD-II dongle manufactures

▪ Explore new business models

‒ Re-sell OBD-II data to third party – data refinery / broker

‒ E.g. Insurance , Fleet management

▪ Evaluate / analyze outcomes / results of collected data and its relevance

to Clarion, manufacturer and/or third-party

‒ OBD-II dongle vs. Hitachi’s Telematics Communication Unit (TCU)

▪ Partnership with other Hitachi divisions to leverage technologies to

deliver a cost effective solution – Social Innovation!

Page 19: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

History

▪ In the 70’s and early 80’s OEMs started using electronic engine controls

to meet EPA standards

▪ In 1988 SAE set standards for the plug and diagnostic test signals

‒ SAE = Society of Automotive Engineers

▪ All cars built since January 1996 have an OBD-II port

‒ Mandatory for all cars manufactured or sold in the United States

‒ In 2001 mandatory for all gasoline vehicles in the European Union (EU)

▪ The OBD-II port was designed to provide a means to inspect that a car

is performing to OEM standards emissions purposes

Page 20: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ Types of vehicle networks:

‒ Controller Area Network (CAN)

‒ Local Interconnect Network (LIN)

‒ Media Oriented Systems Transport (MOST)

▪ The primary network is the CAN network

▪ All CAN traffic to and from ECUs is carried

simultaneously over a single-line

▪ ECUs “listen” to all message traffic

for messages addressed to that ECU

Vehicle Networks

Page 21: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

OBD-II Dongle

▪ OBD-II port dongles provides a interface with the vehicle’s CAN network

via the OBD-II port

▪ Typically dongles send queries into the CAN network and relay the

responses to the third party devices or systems

▪ Dongles typically connect to external devices / networks via a wired

(serial), Bluetooth or cellular networks

▪ Size and complexity of dongles vary with feature sets

‒ E.g. many luxury brands will have their own proprietary PIDs (not documented!)

Page 22: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

How Do I Install It?

Page 23: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Potential Use Cases

Phase 1

Usage-Based Insurance

Page 24: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Requirements

Page 25: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Parameter Identification Data (PID)

Mode PID

(hex) (hex)

1 3 2 Fuel system statusBit encoded. See

below

1 4 1Calculated engine

load value0 100  % A*100/255

1 5 1Engine coolant

temperature-40 215 °C A-40

1 0A 1 Fuel pressure 0 765kPa

(gauge)A*3

1 0B 1Intake manifold

absolute pressure0 255

kPa

(absolute)A

1 0C 2 Engine RPM 0 16,383.75 rpm ((A*256)+B)/4

1 0D 1 Vehicle speed 0 255 km/h A

1 0E 1 Timing advance -64 63.5

° relative

to #1

cylinder

A/2 - 64

1 0F 1Intake air

temperature-40 215 °C A-40

1 10 2 MAF air flow rate 0 655.35grams/se

c((A*256)+B) / 100

1 11 1 Throttle position 0 100  % A*100/255

1 13 1Oxygen sensors

present

[A0..A3] == Bank 1,

Sensors 1-4. [A4..A7]

== Bank 2...

1 1D 1Oxygen sensors

present

Similar to PID 13, but

[A0..A7] == [B1S1,

B1S2, B2S1, B2S2,

B3S1, B3S2, B4S1,

B4S2]

1 1F 2Run time since

engine start0 65,535 seconds (A*256)+B

1 22 2

Fuel Rail Pressure

(relative to manifold

vacuum)

0 5177.265 kPa ((A*256)+B) * 0.079

Formula †

Data

bytes

returned

DescriptionMin

value

Max

valueUnits 1 23 2

Fuel Rail Pressure

(diesel, or gasoline

direct inject)

0 655,350kPa

(gauge)((A*256)+B) * 10

1 2C 1 Commanded EGR 0 100  % A*100/255

1 2D 1 EGR Error -100 99.22  % (A-128) * 100/128

1 2E 1Commanded

evaporative purge0 100  % A*100/255

1 2F 1 Fuel Level Input 0 100  % A*100/255

1 32 2Evap. System Vapor

Pressure-8,192 8,192 Pa

((A*256)+B)/4 (A and

B are two's

complement signed)

1 33 1 Barometric pressure 0 255kPa

(Absolute)A

1 42 2Control module

voltage0 65.535 V ((A*256)+B)/1000

1 43 2 Absolute load value 0 25,700  % ((A*256)+B)*100/255

1 44 2Command

equivalence ratio0 2 N/A ((A*256)+B)/32768

1 45 1Relative throttle

position0 100  % A*100/255

1 46 1Ambient air

temperature-40 215 °C A-40

1 4C 1Commanded throttle

actuator0 100  % A*100/255

1 51 1 Fuel TypeFrom fuel type

table see below

1 52 1 Ethanol fuel % 0 100  % A*100/255

1 53 2

Absolute Evap

system Vapor

Pressure

0 327.675 kPa ((A*256)+B)/200

1 54 2Evap system vapor

pressure-32,767 32,768 Pa ((A*256)+B)-32767

1 59 2Fuel rail pressure

(absolute)0 655,350 kPa ((A*256)+B) * 10

1 5A 1Relative accelerator

pedal position0 100  % A*100/255

1 5B 1Hybrid battery pack

remaining life0 100  % A*100/255

Items listed under each company are a sampling of automotive-related activities

Page 26: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Volunteers (US Only!)

▪ 20 vehicles, vendors including the major car manufacturers

‒ Toyota, Honda, GM, Chevrolet, Subaru, Ford, VW & MiniClarion/HDS Dongles

# SN SIM SW Network IMEI Delivered Location Managed Status

1 GX2223J6 8901260011202425776 7138 YES MISSING 12-May CA HDS Defective

2 GX2224FP 8901260011202427293 7151 YES 357543057748046 20-May-14 CA HDS Connected

3 GX222932 8901260011202427251 7151 YES 357543057757823 20-May-14 NC HDS Connected

4 GX2228K2 890160011202427269 7151 YES 357543057820225 20-May-14 CA HDS Connected

5 GX222972 8901260011202427285 7151 YES 357543057800177 20-May-14 TX HDS Connected

6 GX2228K2 8901260011202427269 7151 YES 357543057820225 20-May-14 CA HDS Connected

7 GX22239W 8901260011202427301 7151 YES 352964054283495 5-Jun-14 CA Clarion Connected

8 GX2223Y8 8901260011202427335 7151 YES 357543057849851 5-Jun-14 KY Clarion Connected

9 GX2222VH 8901260011202427319 7151 YES 352964054276085 5-Jun-14 CA Clarion Connected

10 GX2223BC 8901260011202427327 7151 YES 352964054335907 5-Jun-14 KY Clarion Connected

11 GX222878 8901260011202426659 7151 YES 357543057679910 Delivered in Detroit Detroit Clarion Connected

12 GX22264B 8901260011202426642 7151 YES 357543057578385 5-Jun-14 CA Clarion Connected

13 GX22242R 8901260011202426634 7151 YES 357543057829408 5-Jun-14 KY Clarion Connected

14 GX2227F6 8901260011202427343 7151 YES 357543057871400 5-Jun-14 CA Clarion Connected

15 GX22274Q 8901260011202426626 7151 YES 357543057813972 5-Jun-14 CA Clarion Connected

16 GX2222B3 8901260011202426667 7151 YES 352964054331294 5-Jun-14 CA Clarion Connected

17 GX22239V 8901260011202426691 7151 YES 352964054336012 5-Jun-14 CA Clarion Connected

18 GX22239K 8901260011202426683 7151 YES 352964054335162 5-Jun-14 CA Clarion Connected

19 GX22236D 8901260011202426675 7151 YES 352964054280004 5-Jun-14 CA Clarion Connected

20 GX222386 8901260011202426709 7151 YES 352964054337424 5-Jun-14 CA Clarion Connected

Page 27: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Logical Data Flow

On-board

Data-center

wireless

ACL

IMEI

Insights

Page 28: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ Power_up

▪ Engine_on

OBD-II Events #1

74.126.88.23,20140723,power_up,352964054337424,hw=0001372706&sw=7151&mf=10.00.005&af=na&of=STN1111

v3.4.2&fp=$10:01,03,04,05,06,07,0C,0D,0F,10,13,14,1C,1F,20,21,2F,33,40,42,46$18:01,05,0C

,0D,1C$28:01,0D,1C&ip=10.84.180.64&im=352964054337424 &si=8901260011202426709&ba=128&cf=CLARION-

0001&pn=170&bn=4&st=0101416B1041010007EF80AF416B1841010000000024416B28410100000000F2&dc=$&vi=1G1JC5444R7252367&sn=02470120&pr=SAE

J1850 PWM&mi=5503054&dcp=$&dcg=$&ptk=1476&gf=47&ptm=140627120009-

28&acc=05fc2005fc2005fc2005fb2005fc2005fc2005fc2005fc2006fc2005fc2006fc2005fb2005fc2

006fc2005fc2005fc2005fc2005fc2005fc2005fc2005fc2005fc2005fc2005fc1f05fc2005fc2006fc2006fc2006fc2005fc2005fc20&lgtm=140627111722-28

74.126.88.23,20140606,engine_on,352964054337424,hw=0003136749&sw=7151&mf=10.00.005&af=na&of=STN1111

v3.4.2&fp=$7E8:01,03,04,05,06,07,0C,0D,0E,0F,10,11,13,15,1C,1F,20,21,2E,2F,30,31,33,34,

3C,40,41,42,43,44,45,46,47,49,4A,4C&ip=10.84.180.64&im=352964054337424&si=8901260011202426709&ba=142&cf=CLARION0001&pn=12&bn=2&st=01017E

806410100076500AA&dc=$&vi=WMWMF33578TU69134&sn=GX222386&pr=ISO 15765-4 (CAN

11/500)&mi=2938&dcp=$&dcg=$&ptk=163&gf=37&tm=140610120418-28&ni=CurPostTarget:4000&cnt=1&fl=-1&gt=190402.095&la=0&lo=0&al=-1&qu=-1

IMEI

fingerprint

key=value

Page 29: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

OBD-II Events #2

▪ Engine_off

▪ Heartbeat

▪ Trip_log74.126.88.23,20140606,trip_log,352964054337424,&pts_json=[{"tm":"140605111513-28","he":-

1,"rs":11,"be":0,"spl":"32,32","ac":"ff011e00011e00011f00001f00011e00011f00001f00011fff001fff001f00

011f00001e00011e00001f00001e00001e00011f00011f00011f00011f00001f00011f00001f00001fff001f00001f00001f00011fff001f00001f00011f","tc":0,"sp":32,"mx":0,"rm

":-1,"mi":1634,"ba":128,"fl":-1,"cu":"10:011041103B03"},{"tm":"140605111525-28","he":-

1,"rs":10,"be":0,"spl":"$1,32,32,32,32,32,32,32,32,32,32,32,32","ac":"00011f","tc":6,"sp":32,"mx":0,"rm":2372,"mi":2084,"ba":128,"fl":50,"cu":"01:0007EF80,03:0201,

04:32,05:00,06:3C,07:46,0F:41,13:0113411301"},{"tm":"140605111536-28","he":-1,"rs":10,"be":0,"spl":"32,32,32,32,32,-,32,32,32,32,32,32","ac":"ff011f","tc":6,"sp"

:32,"mx":0,"rm":2372,"mi":2177,"ba":128,"fl":50,"cu":"01:0007EF80,03:0201,04:32,05:00,06:3C,07:46,0F:41,14:011441140080"},{"tm":"140605111546-28","he":-

1,"rs":10,"be":0,"spl":"32,32,32,32,32,32,32,32,32,32","ac":"00011f","tc":6,"sp":32,"mx":0,"rm":2372,"mi":2271,"ba":128,"fl":50,"cu":"01:0007EF80,03:0201,04:32,05:

00,06:3C,07:46,0F:41,1C:011C411C01411C01411C01"}]&cnt=1

74.126.88.23,20140606,engine_off,352964054337424,hw=0003136749&sw=7151&mf=10.00.005&af=na&of=STN1111

v3.4.2&fp=$7E8:01,03,04,05,06,07,0C,0D,0E,0F,10,11,13,15,1C,1F,20,21,2E,2F,30,31,33,34,3C,40,41,42,43,44,45,46,47,49,4A,4C&ip=10.84.180.64&im=352964054337424

&si=8901260011202426709&ba=125&cf=CLARION-0001&pn=12&bn=2&dc=$&vi=WMWMF33578TU69134&sn=GX222386&pr=ISO 15765-4 (CAN

11/500)&mi=30497&dcp=$&dcg=$&ptk=17600&gf=50&er=1&tm=140610165816-

28&ni=CurPostTarget:4000&it=1037&cnt=4&fl=25&gt=235917.000&la=3349.9828N&lo=11755.0956W&al=45.8&qu=0.9

74.126.88.23,20140606,heartbeat,352964054337424,hw=0003136749&sw=7151&mf=10.00.005&af=na&of=STN1111

v3.4.2&fp=na&ip=10.84.180.64&im=352964054337424&si=8901260011202426709&ba=128&cf=CLARION-

001&pn=11&bn=1&sn=GX222386&mi=1734&ptk=243&gf=33&tm=140605111442-28&gt=181427.202&la=0&lo=0&al=-1&qu=-1

contains all the use case related PIDs, used for analytics upstream

Page 30: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Security

Page 31: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Security (Then)

▪ No security measures in place, this due to vendor implementation (or

lack off)

‒ Completely lacking of secure coding principles

‒ Device designed with hardly any security features

‒ Data in-flight is not encrypted

‒ No secure Over The Air (OTA) updates (prone to MITM attack)

sensor data firmware update (OTA)

read-only

Page 32: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ 2015 – Remote FCA Jeep Hack

‒ “Hacker” located in Pittsburgh was able to perform “remote” attacks on the Jeep which was located in St. Louis

‒ Attack utilized an open port on the Sprint Network combined with a hardwire connection between the vehicle modem and a chip in the Infotainment unit which was connected to the CAN bus

‒ Exploit was briefed at the 2015 Blackhat and DEFCON conferences

▪ 2015 – BMW Telematics Attack

‒ “ConnectedDrive” was using same authentication for all vehicles

‒ ADAC recorded the unlock sequence to open doors on one car, and replayed that communication against replayed that communication against other BMWs to successfully unlock their doors and manipulate other ECUs

‒ Impact, re-call of 2.2M vehicles across the entire range of models

Connected Car Related Security Incidents

Page 33: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Security (Now)

▪ Prior to 2016, there was hardly any security measure in place!

▪ In the Fall of 2016, the U.S. House Committee on Energy and

Commerce reached out to the National Highway Traffic Safety

Administration (NHTSA) in regards to addressing OBD-II security

▪ The letter requested NHSTA to “convene an industry-wide effort to

develop a plan of action for addressing the risk posed by the existence

of the OBD-II port in the modern vehicle ecosystem.”

Page 34: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Layered Risk Mitigation

VS

Page 35: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Some Insights

Page 36: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Dashboards / Analytics / Visualizations / Insights

IT OT

Page 37: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Driver Comparison

Page 38: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ Period May 2014 – May 2015

Driver Profile (UBI)

Page 39: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ Data is the new currency!

‒ Querying VIN numbers DMV, third-party, and/or manufacturer

‒ Querying car historical data Carfax (=BOVAG)

‒ Querying manufacturer data OEM

‒ GIS/GEO mapping data Google Maps

▪ Security

‒ Designed with hardly any security features

▪ American drivers don’t like left turns!

‒ Too many accidents

Project Findings

Page 40: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Where Can I Find More Information

▪ What Are Onboard Diagnostics?

https://en.wikipedia.org/wiki/On-board_diagnostics

▪ What Are OBD PIDs

https://en.wikipedia.org/wiki/OBD-II_PIDs

▪ The Car Hacker’s Handbook

http://opengarages.org/handbook/ebook

▪ SAE International https://www.sae.org

▪ Clarion Product Page http://www.clarion.com/xe/en/corp/about-

clarion/profile/technology/detail/

Page 41: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ Hitachi Proton Beam Scanner‒ http://social-innovation.hitachi/us/solutions/life_economy/fight-against-cancer/index.html

Other IoT Projects #1

Page 42: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

▪ Hitachi Smart Data Center‒ https://www.hitachivantara.com/en-us/solutions/data-center/smart-data-center.html

▪ Hitachi Systems / Cybersecurity‒ https://www.hitachi-systems-security.com

Other IoT Projects #2

Page 43: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Hitachi Urban Development

▪ Hitachi Public Safety / Smart Cities‒ https://www.hitachivantara.com/en-us/solutions/iot-insights/smart-cities.html

Page 44: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Real World IoT Solutions

Hitachi’s Omika

Works ‘smart factory’

cut inventory through

the application of

sensors, cameras and

analytics.

SMART FACTORY

Nissan relies on

Hitachi for data

analytics and

automotive parts to

make its cars smarter.

Predictive maintenance solution provides marine fleet monitoring & failure

prediction.

Solutions for smarter

farming that support

the farm-to-fork value

chain, leverages

sensors, cameras and

external data.

INTELLIGENT

VEHICLE

PRECISION

AGRICULTURE

PREDICTIVE

MAINTENANCE

Hitachi’s Agility Trains

consortium in the

United Kingdom is

delivering Transport-

as-a Service solution.

INTELLIGENT

TRANSPORTATION

Hitachi is helping law

enforcement agencies,

transport systems &

cities to improve safety,

improve resource

utilization, streamline

transportation and

more across the U.S.

SMART, SAFE CITY

Working with a top

U.S. Telecom

company to provide

millions of dollars in

savings annually with

Hitachi’s Energy-as-a-

Service solution.

ENERGY-AS-A-

SERVICE

Copenhagen City

Data Exchange is an

open marketplace for

public & private data.

Designed to support

the city in achieving its

goal of 100% carbon

neutrality by 2025.

DATA EXCHANGE

Hitachi Microgrid is

working with 11 New

York communities in

NYSERDA’s NY Prize

program to provide

grid solutions to

increase resiliency

and lower energy

costs.

MICROGRID

© Hitachi, Ltd. 2018. All rights reserved.

Page 45: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Sensors Everywhere!!

© Hitachi, Ltd. 2017. All rights reserved.

Page 46: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

A Machine In The Wild

Page 47: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

This One Has A Social Life Outside Of Work…

Page 48: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Lumada IoT Platform

Core

Data Collection

Asset

Management

Asset Avatar

Foundry

Intelligent Composable Secure Flexible

OT = Operational Technology, IT = Information Technology

IT Systems

Business Data

OT Systems

Machine Data

Human Data

Analytics

Batch / Stream

Analytics

Artificial

Intelligence

Data Blending

StudioAlerts /

NotificationsDashboard

Application

Enablement

Edge

Edge

Analytics

Data

Transformation

Asset

Integration

Data Filtering

Lumada IoT Platform

Page 49: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Thank You ☺

Page 50: Internet of Things @ Hitachi Vantara · Protocol Application • IPv6 ... locking of a specific device) ... OASIS MQTT v3.1.1 ...

Recommended