RIIT 2016 - Impact of Physical Web and BLE...
Transcript of RIIT 2016 - Impact of Physical Web and BLE...
![Page 1: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/1.jpg)
IOT: IMPACT OFTHE PHYSICAL WEB AND
BEACONSDr.DebasisBhattacharya,MarioCanul,SaxonKnight
ICSFaculty•UniversityofHawaiʻI [email protected] •(808)984-3619
maui.hawaii.edu/cybersecurity
Partial support for this work was provided by the National Science Foundation’s Scholarship for Service (SFS) program under Award No. 1437514. Any opinions, findings, and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the National Science Foundation. University of Hawaii Maui College is an equal opportunity/affirmative action institution.
![Page 2: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/2.jpg)
The “Internet of Things” is exploding. It’s made up of billions of “smart” devices – from miniscule chips to mammoth machines –that use wireless technology to talk to each other (and to us). Our IoT world is growing at a breathtaking pace –from 2 billion objects in 2006 to a projected 200 billion by 2020.
![Page 3: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/3.jpg)
![Page 4: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/4.jpg)
The Physical Web
• EverydayobjectswithabilitytointeractwiththeInternet,mobiledevices– SmartTVs,Refrigerators,Microwavesetc.– Providesinformation,statusetc.
• BluetoothLowEnergy(BLE)– Newprotocoltotransmitinformation– Lowpower,shortdistance
• Beacons!– ManyVendors:Estimote,RadiusNetworks,BKON
![Page 5: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/5.jpg)
![Page 6: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/6.jpg)
What is a Beacon?!
• Smalltransmitterdevice– Soldbymanysmall/largecompanies– UsesBluetoothLowEnergy(BLE)– Usesbatteries(cell,AAAetc.)– Longbatterylife(years)– Pricerangesfrom$10-$30– Advertisesitselfonaregularbasis– Recognizedbymobilephoneapps– Transmitswhenareceiverisclose(proximity)– Smallsizedatatransfers– UniqueBeaconID,canbemanagedremotely
![Page 7: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/7.jpg)
![Page 8: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/8.jpg)
![Page 9: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/9.jpg)
![Page 10: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/10.jpg)
How does it work?
• Apple– iBeaconProtocol– OriginaliBeaconprotocol– TransmitsBeaconUIDandShortText
• Google– Eddystone Protocol– UID– UniqueID+Text– URL– UniqueID+URL+Text– TLM– TelemetryData,formanagement– EID– EphemeralID,secureaccess(new!)
• Smartphone– iOSandAndroid
![Page 11: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/11.jpg)
![Page 12: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/12.jpg)
![Page 13: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/13.jpg)
So, how does it work?
• BeaconAdvertisement– RegulartransmissionsofUIDetc.
• ReceiverinProximity(Range)– Typicallyasmartphonewithapp– Manyvendorshavebeaconapps– GooglePlay:ThePhysicalWeb– iTunes:ThePhysicalWeb
• BeaconTransmitsData– Ex.Eddystone URLresolvesURLonmobileapp
![Page 14: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/14.jpg)
![Page 15: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/15.jpg)
OK, so what?
• Beaconsprovideproximityinfo– BeaconsarenotconnectedtotheInternet– Theyprovide”nearby”information– Receiverdoes[will]notneedanyapp
• GoogleinintegratingbeaconinfoinAndroid• SomewhatsimilartosearchingforWi-Fi
– Beaconscanbeassociatedwithobjects– Or,locations,people,animalsetc.etc.– Beacons=Physicalthings+Web
![Page 16: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/16.jpg)
Issues and Concerns
• RemoteManagement– Locationsneedtobemapped
• SomewhatsimilartodeploymentofWAPs
– Needtobemanaged• Weather,batterylife,status
– TransmittalURLinformation• Needstobecurrentandupdated
• Costs– $10-$30perbeaconcangetexpensive– TimeandcostforITtomanagebeaconsandcontent
![Page 17: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/17.jpg)
More Issues and Concerns
• CurrentStateofBeaconSecurity– Nothing!
• UnauthorizedTracking– AnyreceivercantrackabeaconUIDandLocation
• Forgery– AdversarycanforgetheadvertisementUID
• Showrooming– Adversarycaninsertcompetinginfoinbeacondata
![Page 18: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/18.jpg)
Security Mitigation
• Google’snewEddystone EphemeralID– Everybeaconhasaprivatesymmetrickey
• Knownonlytotheownerofthebeacon
– UniqueBeaconEphemeralID(EID)• Symmetrickey+pseudo-randomfunctionofBeaconclock
– UniqueBeaconEIDneedsregistration• GlobalonlinetrustedresolverofBeaconIDs• Sharingpermissionpolicyallowsothertoconnect
– ReceiversecurelyconnectstoaBeaconwhen…• SmartphonereceivesBeaconEID• SendsEIDtothecloud/globalresolverservice• Cloud/globalservicematchesEIDwithregisteredkeys
![Page 19: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/19.jpg)
Case Study: Tracking Luggage
http://accent-systems.com/blog/accent-systems-eddystone-eid-case-study-trackgo-samsonite/
![Page 20: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/20.jpg)
Beacons on College Campus
• Guidedtourofcampus– Eachmajorobjectoncampushasabeacon!
• Classroom– Classroombeaconprovidescurrentstatus,schedule
• Cafeteria– Dailyhours,specials,prices,otherinfo.
• Stadium– Currentscores,ticketinformation,eventsetc.
• FacultyOffice– Officehours,appointmentscheduleetc.
![Page 21: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/21.jpg)
Case Studies
![Page 22: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/22.jpg)
Case Studies
• Retail– Beaconsidentifyvariousstorelocations
• Ascustomersapproach,providesinfo,salesetc.
• Hospitals/Hotels– Beaconscanidentifyapatient/guest,locationinfo.
• AnyPhysicalLocationofInterest– Museum,Conventions,Stadiums,TouristLocation
• Education– Beaconscanidentifyclassroominfo,cafeteriaetc.
![Page 23: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/23.jpg)
Conclusion
• CurrentWeb– Cloudbased– URLdescribescontentincloud
• Relatedtopeople,places,thingsetc.
• PhysicalWeb– Proximitycontent,nearmicrolocation– Contextisaphysicalobjectand/orlocation– Doesnotrequireanyapp ordownloads– IoT:BeaconsallowThingstohaveInfoviaInternet
![Page 24: RIIT 2016 - Impact of Physical Web and BLE Beaconsmaui.hawaii.edu/.../RIIT-2016-Impact-of-Physical-Web-and-BLE-Beacons-.pdf · Beacons on College Campus • Guided tour of campus](https://reader034.fdocuments.in/reader034/viewer/2022042100/5e7c71c885898764981d29bd/html5/thumbnails/24.jpg)
Debasis Bhattacharya • UH Maui [email protected] • (808) 984-3619