Jump to content
Symbolfoto: Das AIT ist Österreichs größte außeruniversitäre Forschungseinrichtung

IoT4CPS

Trustworthy IoT for CPS

Digitalization over the entire product lifecycle accelerates the development, validation, instrumentation and deployment of complex industrial products while increasing product quality. The digitalization and increasing connectivity of (critical) cyber-physical objects enables development of new applications but also leads to new safety & security related requirements in the design, testing, production and operation of these systems. Realising in a cost-effective way, the full potential of trustworthy and secure cyber-physical systems and applications in Automated Driving and Industry 4.0, will require a holistic approach that combines operational aspects as well as the technology. The objective is to integrate security levels across all dimensions in order to a) ensure trusted interaction across devices, machines and networks; b) maintain integrity, authenticity and confidentiality of information; and c) sufficiently protect production data and intellectual property. The integration of appropriate security levels should provide ease of deployment and it should neither be detrimental to performance nor compromise user experience. Tailored security functionality should be provided in order to optimise performance and cost. IoT4CPS will develop guidelines, methods and tools to enable safe and secure IoT-based applications for automated driving and for smart production. The project will address safety and security aspects in a holistic approach both along the specific value chains and the product life cycles. To ensure the outreach of the project activities and results, the relevant stakeholders will be involved throughout the project and results will be disseminated to expert groups and standardization bodies. The main focus of IoT4CPS will be on developing, producing and operating, highly trustable components and applications for Connected and Automated Driving. As the design and production of these components requires a high degree of integration and information exchange along the life cycle, the methods and tools investigated are also highly relevant for the Smart Production use case. In this second use case, however, rather than considering the full bandwidth of Industry 4.0 applications, we focus our scope on the subset of the value chain that is linked to the main use-case. IoT4CPS will follow the ubiquitous security paradigm and address the entire technology stack from semi-conductors (sub-component level), via control systems (component level), to applications (system level). Additionally, specific aspects of accessing the surrounding infrastructures will be considered, as well. Orthogonal to the system integration level, IoT4CPS will address the product life cycle from development, via production to operational use. Thus, IoT4CPS will support digitalization along the entire product lifecycle, leading to a timeto- market acceleration for connected and autonomous vehicles. IoT4CPS will provide innovative components, leading to efficiency increases for the deployment of level 3 and level 4 autonomous driving functions, which will be validated in a vehicle demonstrator. The convergence of industry 4.0 and autonomous driving as promoted by IoT4CPS shall result in a competitive advantage for the Austrian region with respect to the development, validation and instrumentation of innovative components and solutions for connected and autonomous vehicles and smart production environments. 

Objective 1: Provide a framework library for trustworthy IoT tools and solutions supporting the entire IoT lifecycle and acting as technology bricks to develop trusted connected industrial applications

Most of the technical work in WP3 in the last period was related to further development of our tools and their features, as well as their exploitation w.r.t project use-cases. Major effort took place in T3.3. where cryptographic libraries were finalized and in T3.1 where we implemented features for our security tools and deployed them successfully.

We have successfully completed our deliverables D3.7 in a timely manner. In addition, we have successfully published our cryptographic library, as a part of our deliverable D3.6.2. The library and the user manual is available on IoT4CPS portal (https://iot4cps.at/results/repository/ ).Therefore, we can verify that from the WP3 point of view the milestone MS6: Final laboratory prototypes and security concepts was reached in 06/20. There has been an intensive collaboration between AIT and industrial partners, who showed interest in our set of tools for cybersecurity. A tool developed by AIT, called ThreatGet was successfully applied to analyze the security of mixed-criticality platform. This platform is the foundation of IoT4CPS autonomous driving demonstrator developed in WP6. As a part of another collaboration between partners, XNET integrated a C Library for Forward-Secret Key Exchange which was developed as a part of our T3.3. of WP3 into their platform for the demo.

Finally, we have conducted the feasibility of integrating cryptographic features from the library developed by TUG/AIT with the autonomous driving platform used in WP6. Unfortunately, due to challenges caused by the pandemic in 2020 and the related safety measures which we were unable to finalize the library integration and program the FPGA Device and test it on the board in our laboratory.

Also, a Watermark-based sensor security was evaluated and tested on a LORA platform demonstrating applicability for protecting highly distributed industrial application with extremely low-power and low-bandwidth wireless connectivity.

In WP4 all the developments planned for were completed during this final period and planned integrations into the use case demonstrators or the creation of own laboratory demonstrators were carried out. The deliverable D4.2 Functional and formal checks outlines the approaches that were undertaken in IoT4CPS at the area of Strategic Security Assurance covering hardware, protocols, system architecture and human aspects. Deliverable D4.3.2 Analytical Toolbox (final release) describes the refined methods for anomaly detection for IoT4CPS and its implementation as an Analytical Toolbox by analyzing data from hardware, from operating systems, and from the network traffic. The final version of automated test case generator was developed and verified by means of a demonstrator (D4.4.2). Deliverable D4.5 Laboratory demonstrator of reliable IoT discovery and classification describes the developed discovery tool and setup of the demonstrator. In D4.6 Laboratory demonstrator of IoT anomaly detection and threat intelligence two laboratory demonstrators illustrate novel anomaly detection approaches, even when state-of-the-art security measures fail and communication-based threat detection approaches.

The achievements of WP4 are well in line with the needs of the industrial partners and applied to the main industrial case demonstrator, AVL’s Device.CONNECT.

In WP5, the report D5.3 - “Report and Specification: Cross-Platform interoperation model” investigates the IoT platform interoperability standards and data models, and their relevance to the Automotive industry. The connected cars and their applications bring along both unique opportunities and risks. For example, sharing data with many parties in the vehicle ecosystem can improve a variety of driving features, e.g. it can increase driving comfort and safety, improve driving experience, optimize lifecycle processes related to manufacturing and the use of vehicles, contribute to societal targets related to sustainable manufacturing, reduction of fuel consumption, road safety, and more. At the same time, sharing vehicle data can compromise privacy of various stakeholders, e.g. by revealing behavioral patterns. Thus, the objective of this report is to raise awareness of good data practices in the Automotive industry and identify challenges and possible solutions for ensuring the quality of data interoperation among vehicle infrastructures.

In addition, the report D5.4.2 – “Identity, Security and Safety in Product Lifecycle Data Management” that is a successor of the D5.4.1 report, further captures identity and security aspects based on two automotive driving scenarios and extends the model created in D5.2 “Product Lifecycle Data Management (PLCDM) Stakeholder Perspectives” by adding a set of security threats, as defined in WP4 “Security Verification and Analysis” of IoT4CPS. The extended model ensures the inclusion of both multi-stakeholder and IoT-/ CPS-based assets (and their services) along lifecycle phases of connected car scenarios and adds the cybersecurity perspective to it. In this report, an additional safety and privacy analysis of Connected and Automotive Mobility (CAM) use cases (defined in D5.4.1) is provided. D5.4.2 also includes the localization techniques for safety and addresses trust and ethics in CAM applications.

The prototype is available from GitLab:

https://git-service.ait.ac.at/im-IoT4CPS/WP5-lifecycle-mgmt

Verification:

evaluation and feedback from industry partners

integration into industrial applications in WP6, WP7

8 refereed conference or journal publications

project deliverables D3.6b, D3.7, D4.3.2, D4.4, D4.5, D4.6, D5.4.3

Application, framework and libraries have been successfully integrated into both demonstrators (see also objective 2 and 3). All deliverables, as well as over 20 publications have been published with respect to objective 1 (see also chapter 3).

Objective 1 is fully achieved.

Objective 2: Provide innovative components, leading to efficiency increase by 10% for the deployment of connected vehicles and level 3 and level 4 autonomous driving functions

In WP6, the contributions to this objective were computation and communication platforms for connected and automated vehicles. On the long run, this replies to the market pull for higher automation, connectivity up to “autonomy”, also stemming from cyber-physical systems (CPS). CPS exploit a variety of different capabilities allocated within the cyber space and at the same time combine them with processes from our tangible world surrounding us. The need for higher digitization also pushes next generation vehicles and mobility towards becoming gadgets that satisfy many tasks not just mobility such as high-performance computing and connectivity. These features result in the need for complex computational algorithms and multi-discipline skills and abilities like sensor fusion for Advanced Driver Assistance Systems (ADAS) supported by newest AI technology. Such basis for a suitable Safety-Platform was developed successfully within WP 3 and was deployed for demonstration in WP 6. Besides following strict safety concepts, the platform replaces the uncontrolled growth of ECUs, each of them dedicated to only one specific function which does not scale well. It also satisfies the demand for an abstraction of the application from the data communication and computing system. It also provides a smooth integration firmware handling all the complex tasks of virtualization, multicore and hypervisor handling and memory and time management.

In support of WP 7, WP 6 successfully deployed the safety platform architecture from WP 3 and developed the Safety Platform (see Figure 1).

It also provided an implementation of the cognitive open vehicle platform in a real-world standard product base demonstrator car (see Figure 2).

 

The results were documented in detail in deliverable documents D6.1.c and D6.3.2 as well as in the White paper generated for the final project demonstration in December 2020.

As a development result from the cooperation of the WP 6 Partners (TTTech Auto, AVL, TUWien and IFAT) under the lead of TTTech, WP6 was successfully completed of the WP 6 partners during the last work period. The final evaluation provided evidence that Objective 2 was fully met and achieved as planned. No deviations to the plan were detected.

This objective is also supported by the results obtained in WP7, in the sense of providing for an I4.0 setting that is necessary to the production of automotive components. WP7 deliverables D7.2, D7.3 provide recommendations and guidelines regarding the applicability of tools, methods and models related to secure connectivity issues and traceability of components throughout lifetime. Moreover, in D7.4 provides details about the Security-By-Isolation concept, guidelines and testbeds for securing IoT products and for the secure set-up of production environment. These outcomes show the way to achieving the required efficiency increase and demonstrate the capabilities of the developed technologies targeting to the fulfilment of this objective.

Verification

Expert analysis regarding achievement of the objectives and integration in the project’s business model canvas and in the respective marketing materials. This activity was be performed in WP8, especially T8.2 and T8.3 (IoT4CPS value proposition update and recommendations).

Objective 2 is fully achieved.

Objective 3: Support the digitalization along the entire product lifecycle leading to a time-to-market acceleration of 10%

A relevant set of the developed technologies and components that were produced during the previous period, has been integrated into several industrial demonstrators encompassing aspects of real industrial settings for smart production use-cases. The demonstrators have been set up in a way that considers the heterogeneity of the industrial IoT environment and at the same time focuses on a high degree of reusability. The corresponding demonstrators are able to exhibit how trustworthy connectivity and lifecycle management aspects can be successfully addressed by covering security concepts and solutions for connectivity, testing, validation and traceability. These demonstrators show how digitalization along the entire product lifecycle and time-to-market acceleration can be achieved and they also offer applicability evaluation and recommendations to industries that are interested to further exploit the proposed solutions into their real industrial settings. This generate a valuable experience for more advanced Industrial 4.0 platforms in the future. Guidelines, recommendations as well as the demonstration results are available and documented in the project deliverables D7.2, D7.3, D7.4 and D7.5. Links to these results can be found on the IoT4CPS dedicated website as well as in the respective White paper. The results of IoT4CPS in these areas are broadening fundamental knowledge for trustworthy CPS.

WP7 added another demonstration to the show case of WP 6 and designed a use case for the Industry 4.0 related robotic world as an example for autonomous movement of equipment represented in an autonomously operating rover (see Figure 3). The deployed Safety-Platform proved to overfulfill the expectations of a 10% reduction of time to market due to significant acceleration in the design process of the “application” since the Safety-Platform provides ready to use software modules that cover all the time-consuming work of application support, multi core handling and virtualisation as well as hosting the safety related features. The increase of efficiency was found to be in the area of 20% to 50% depending on the scale of support available in platforms of similar purpose and “straight-on” developments of supporting software modules over and over again.

 

Verification

Expert analysis regarding achievement of the objectives and integration in the project’s business model canvas and in the respective marketing materials. This activity was performed in WP8, especially T8.2 and T8.3 (IoT4CPS value proposition update and recommendations).

Objective 3 is fully achieved.

Objective 4: Provide industrial demonstrators to showcase the integration of security concepts along the product life-cycle and across the value-chain.

The applicability of the IoT4CPS provided solutions is demonstrated not only in the laboratory but also into real industrial environments that showcase secure connectivity solutions, traceability and security testing throughout the product lifecycle. In the context of the Smart Production use case, project partners have proposed a principal I4.0 demonstrator architecture (D7.1) which has led to a variety of subsequent demonstrator use-cases and setups that integrate main technological components and techniques developed within the IoT4CPS project. The basic Smart Production infrastructure consists of three main components, namely, the Smart Hub, the Message Broker and the Backend Framework. Bidirectional connectivity for vehicle industrial testing is showcased. Industrial automation in this context enhances vehicular production units that provide monitoring and controlling of the basic vehicle sensors through the production plant. This facilitates the manufacturing process in terms of process automation, productivity optimization and predictive maintenance. The second demonstrator is based on Security-By-Isolation (SBI) architecture that also integrates other technical components of this project. SBI-based demonstrator makes possible the efficient and remote provisioning, maintaining and configuration of different devices that belong to different vendors, connected into large industrial equipment. The SBI-concept consist of SBI-Core, SBI-Hubs, SBI-Boxes and the technicians to coordinate the whole process and it is enhanced in its prerequisites, namely security and redundancy, by incorporating the solutions provided by the IoT4CPS project. Details and outcomes of these setups are provided into D7.5 and the corresponding White paper. Links can be found into the IoT4CPS main web page.

The obtained results and outcomes demonstrate an increased innovation capacity for Autonomous Driving and Smart Production in Austria.

Verification

Two demonstrators have been realized. The results have been documented in the project deliverables [D6.3b] for the automated driving use case and [D7.5] for the Industry 4.0 use case.

Objective 4 is fully achieved

Objective 5: Involve and support of Austrian IIoT/AD/I4.0 communities

IoT4CPS has participated in and has successfully organized events aimed at raising the awareness on the project and its findings. In the course of three years the consortium partners have participated in over 90 scientific and non-scientific events, published around 50 scientific paper and 6 white paper.

Verification:

IoT4CPS organized the following networking and dissemination

activities:

2 public events fully organized by the consortium
Public kick off at TU Wien in January 2018
Public closing at Summit Industrie 4.0 in December 2020

2 workshops at annual ARES conference
Frist Workshop on Industrial Security and IoT at the University of Kent, Canterbury in 2019 Second Workshop on Industrial Security and IoT remotely in 2020 (initially planned in at UCD, Dublin)

2 international and 3 national press releases
Neues österreichisches Leitprojekt für sicheres Internet der Dinge (IoT) gestartet
FLAGSHIP-PROJEKT IOT4CPS STÄRKT INDUSTRIE 4.0 STANDORT ÖSTERREICH

4 joined workshops with relevant stakeholder- or expert groups
IoT4CPS Pitch Session at Graz Security Week 2018
Austrian Village & Community Session at ICT Imagine 2018  
IoT4CPS Break Out Session at Vienna Cyber Security Week 2019
IoT4CPS Session at Digitization Workshop 2019
Salzburg Research _IoT Talk on “Security and Trust in the IoT” 2019
FITCE IoT Circle on Autmoated Driving and Industry 4.0
IoT4CPS Break Out Session at IDSF 2020

Objective 5 is fully achieved.

 

  • Partner: AIT Austrian Institute of Technology GmbH (Koordinator), AVL List GmbH, Donau-Universität Krems, Infineon Technologies Austria AG, JK Universität Linz / Institute for Pervasive Computing, Joanneum Research Forschungsgesellschaft mbH, Nokia Solutions and Networks Österreich GmbH, NXP Semiconductors Austria GmbH, SBA Research GmbH, Salzburg Research Forschungsgesellschaft, Software Competence Center Hagenberg GmbH, Siemens AG Österreich, TTTech Computertechnik AG, TU Graz / Institute for Applied Information Processing and Communications, TU Graz / Institute for Technical Informatics, TU Wien / Institute of Computer Engineering, X-Net Services GmbH.
  • Förderprogramm: ICT of the Future, ICT-intensive manufacturing systems – Industry 4.0, ICT-intensive mobility
  • Projektlaufzeit: 12/2017-11/2020