IoT – Identity of Things!

by Stefan Bumerl

Dazzled from the nice things all the connected gadgets can do for us we seem to forget what we have learned in the past 20 years when computers became interconnected in a large scale. Embedding a microcontroller into a coffee machine and attaching network capabilities is not the main engineering challenge today. Getting functional interoperability is a time consuming process but tend to happen by usual demand. But who is managing the flea circus to make sure that owners interests also in regard of security and privacy are properly addressed?

Purely the management of a PC in a 50 device environment costs around 500€/year. A fact that kills most business cases in IoT and lacks on practical possibilities also when considering the expected period of use e.g. of a dish washer. The Cloud is both part of the solution and a problem of its own.

The dimensions of ownership, accessibility and management of the devices are quite complex. Too complex for an average customer.

This presentation will illustrate the need of introducing identity management as a core requirement to your personal cyber-physical environment. Without clear relations between human identities and devices identities the systems won’t scale up. Privacy enhanced federated identity management ecosystems will allow to reduce the attack surface significantly and will also help to reduce the efforts of management.