Cloud and Edge: price, performance and privacy considerations in IOT, by Tsvi Lev
Download as PPTX, PDF1 like82 views
The document discusses private computing for IoT, emphasizing the importance of privacy and data protection in the era of sophisticated technologies like AI and cloud computing. It outlines NEC's initiatives in promoting secure, private computing through methods such as multiparty computation (MPC) and trusted execution environments (TEE), highlighting collaborations with academic institutions. Additionally, the document addresses the challenges posed by IoT data privacy and regulatory compliance, urging the adoption of advanced privacy-preserving technologies.
Cloud and Edge: price, performance and privacy considerations in IOT, by Tsvi Lev
- 1. Tsvi Lev, Corporate VP & Head of NEC Labs Israel tsvi.lev@necam.com Private Computing for IOT
- 2. 2 © NEC Corporation 2015 NEC Group Internal Use Only2 © NEC Corporation 2019 NEC celebrates 120
- 3. 3 © NEC Corporation 2015 NEC Group Internal Use Only3 © NEC Corporation 2019 NEC Stats ▌Business In >160 Countries ▌9 Global Research Labs, 1,000 researchers ▌>0.5% of Revenue=>Research: ¼ Billion$ North America Europe, Middel East and Africa Greater China Japan Asia-Pacific 1 1 1
- 4. 4 © NEC Corporation 2015 NEC Group Internal Use Only4 © NEC Corporation 2019 Continued emphasis on Research Innovation
- 5. 5 © NEC Corporation 2015 NEC Group Internal Use Only5 © NEC Corporation 2019 NEC’s Israeli Center – Open Research Innovation ▌ Established to promote external technologies into NEC ▌Centered around AI applications to Vision, Cyber, Medical ▌Research collaborations with MIT,TAU, BGU, BIU. ▌30+ H/C and growing – 7 PhD, 10 MSc. ACM CCS Best Paper Edge AI for Vision Cyber Research AI for Healthcare
- 6. 6 © NEC Corporation 2015 NEC Group Internal Use Only6 © NEC Corporation 2019 1st Generation Cloud Use ▌SaaS – Office 365, Salesforce etc. ▌Lift and Shift - Offload on-premise servers: cost, reliability, security ▌PaaS – use Cloud DB, Web applications. ▌The Edge is a computer – on premise PC, user’s browser, smartphone. ▌Clear division of data ownership, governance, liability. ▌Privacy is ensured by ‘traditional’ cyber, encryption and regulation. ▌Ensured… Well..
- 7. 7 © NEC Corporation 2015 NEC Group Internal Use Only7 © NEC Corporation 2019 As predicted already in 1992..
- 8. 8 © NEC Corporation 2015 NEC Group Internal Use Only8 © NEC Corporation 2019 And now IOT..
- 9. 9 © NEC Corporation 2015 NEC Group Internal Use Only9 © NEC Corporation 2019 IoT - Cloud use ▌IOT sensors – upload data to cloud for processing, storage. ▌Cameras – heavy upload, some edge processing (alerts, detection). ▌A Jungle of protocols, O/S, data types, security models. ▌Mobile Apps to cloud are a mixed case..
- 10. 10 © NEC Corporation 2015 NEC Group Internal Use Only10 © NEC Corporation 2019 Privacy Liability and Regulation – who is responsible Edge Device Edge Platform Cloud Data on Edge Data in Motion Data on Cloud PC PC owner Service Provider PC owner Nobody Service Provider Mobile Apps Unclear Service Provider Not Clear Nobody Service Provider IOT Service Provider Service Provider Service Provider Service Provider Service Provider
- 11. 11 © NEC Corporation 2015 NEC Group Internal Use Only11 © NEC Corporation 2019 IoT Data Breaches create friction for everyone ▌Regulation: private (consumer) data storage and protection laws ▌GDPR – restricts permissions to use, borders, retention ▌Collateral damage – your IoT equipment/data can harm 3rd parties ▌Even ‘established encryption’ is not future proof – since 2015 it takes <4 hours to break a 512bit RSA key, which was 25% of servers in 2000, and 4% even today… 8% of Dyn’s customer base stopped using them
- 12. 12 © NEC Corporation 2015 NEC Group Internal Use Only12 © NEC Corporation 2019 The data of today can be stolen tomorrow Should we care? Financial Records, Location, medical records, documents have value 10-20 years after creation For example – location & time => where you live, where you work, health status, occupation, martial status etc.
- 13. 13 © NEC Corporation 2015 NEC Group Internal Use Only13 © NEC Corporation 2019 Private Computing: Data Use is actively limited to pre-defined, monitored objectives. ▌Privacy solutions emerge– forums, open source projects, corporate support – Microsoft, Intel, IBM, SAP, startups. ▌“High End Implementations” – partnerships of BFSI etc. Fast compute and network, high complexity implementation. Trends in Private Computing
- 14. 14 © NEC Corporation 2015 NEC Group Internal Use Only14 © NEC Corporation 2019 Secure, Private Computing for IoT – the IoTopia Initiative
- 15. 15 © NEC Corporation 2015 NEC Group Internal Use Only15 © NEC Corporation 2019 Privacy Concerns in IOT – Gartner Reccomendations ▌ IoT strategy MUST involve legal advisors. ▌ Privacy is not just PID – it is any information about users that does not serve the ‘stated purpose’ of the application. ▌ Recommend ‘privacy preserving’ tech like MPC, Blockchain etc. ▌ Estimate 1B$ in 2021 spent just on IoT Regulatory Compliance. ▌ Best to purge data asap – not hold it. Sample IoT application, which generates private data even if not PID
- 16. 16 © NEC Corporation 2015 NEC Group Internal Use Only16 © NEC Corporation 2019 ▌ We want answers to questions based on private date (eat) ▌ We don’t want to actually ‘hold’ the data (keep) ▌ Three approaches exist: TEE - Trusted Executed Environments/Secure Enclaves – e.g. Intel SGX, Arm TrustZone, RISC-V Keystone FHE - Fully Homomorphic Encryption – processing on encrypted (PKI) data. MPC - Multiparty Computation – collaborative computation, where no party has the information SO – HOW CAN WE EAT THE CAKE AND KEEP IT TOO ?
- 17. 17 © NEC Corporation 2015 NEC Group Internal Use Only17 © NEC Corporation 2019 A comparison of the methods Framework H/W Speed Quantum Resilient Information- Theoretic Safe Compute/power load on IOT side Shared Liability TEE Yes Fast No No Medium No FHE No Slow Yes No High No MPC No Medium Yes Yes Low Yes
- 18. 18 © NEC Corporation 2015 NEC Group Internal Use Only18 © NEC Corporation 2019 How it works
- 19. 19 © NEC Corporation 2015 NEC Group Internal Use Only19 © NEC Corporation 2019 Why now ? ▌Speed: MPC can now do ML, speech recognition, simple image recognition in real-time. In 1-2 years – complex image recognition. ▌GDPR and Privacy Activism – a lot of friction for setting up services. ▌Public Cloud is strong enough to carry MPC/FHE/TEE at scale. ▌5G – bringing multi-connectivity (used by MPC) and SDR – meaning MPC-share and encryption can be done at eNodeB. ▌Adoption of ML and DL provides ‘standard frameworks’ for analytics.
- 20. 20 © NEC Corporation 2015 NEC Group Internal Use Only20 © NEC Corporation 2019 Examples of private computing for IOT ▌Location based – safe driving, co-location, deviation from route, Person in need tracking, retail analytics. ▌Personal electronics (smartphones/wearables) falling down, sleeping, eating, sitting, exercise. ▌Biometrics – without disclosing user’s data! ▌Utility sensors (electricity, water, gas, dumpsters, doors) – smart billing, disaster detection, occupancy stats. ▌Camera – License Plate Recognition, people counter, event detection (fire, jam, crowding, violence, loitering). ▌Audio – event detection (cars, emergency services, gunshot, crowd, wind, rain). Speech Recognition. ▌Automotive and Mobility infra – using car sensors, road sensors
- 21. 21 © NEC Corporation 2015 NEC Group Internal Use Only21 © NEC Corporation 2019 Makes Cloud Solutions more secure than edge ▌Cyber protection at the edge requires engineering effort. ▌Alternatively, the IoT service provider can send the data to a CSP-provided ‘MPC Proxy’ ▌The proxy creates the MPC shares, routes them through the 5G backbone ▌Public Cloud managed servers run the DL/ML model with MPC support IoT Device eNodeB MPC GW MPC Server A MPC Server CMPC Server B CSP Network Public Cloud IoT Protocol
- 22. 22 © NEC Corporation 2015 NEC Group Internal Use Only22 © NEC Corporation 2019 How it works ▌ IoT service provider supplies IoT device IP protocol, and Analytics Algorithm using the IoT data fields. ▌ IoT devices are provisioned to use the MPC service at the CSP ▌ CSP provided MPC proxy proxies the as IoT server, running the IoT device protocol, while masking the data fields. ▌ The MPC proxy used the IoT data to create 3 or MPC shares ▌ Those shares are sent to 3 MPC servers along pre-defined IP routes. ▌ The Public Cloud hosted MPC servers run the MPC calculation and send results. ▌ MPC shares can be stored on separately managed S3 instances for future use.
- 23. 23 © NEC Corporation 2015 NEC Group Internal Use Only23 © NEC Corporation 2019 Why we need TEE/FHE/MPC support in IOT standards ▌Reference open source implementations for IOT side ▌Base Station/SDN open source implementations ▌Routing Model for device=>cloud, avoiding SPT (single point of tamper) ▌Public Cloud Based support ▌Reference implementations for key services.
- 24. 24 © NEC Corporation 2015 NEC Group Internal Use Only24 © NEC Corporation 2019 Architecture of the solution MPC shares to 3 switches in 5G NR BS, using open source S.W and H?W design 5G core network Need to preserver no contact between MPC shares Public Cloud (same region or multi-region) MPC server A MPC server B MPC server C IOT edge devices 5G NR BS with MPC share Option in it
- 25. 25 © NEC Corporation 2015 NEC Group Internal Use Only25 © NEC Corporation 2019 The pilot we are offering ▌MPC gateways-any IOT device can bind using IP with no S/W changes ▌Guaranteed ‘separate routing’ from GW to MPC servers ▌MPC servers in the public cloud, any entity can manage ▌Tools and Support for converting Keras/TF based DNN model into MPC IOT provider needs to: ▌Provide ML model ▌IOT data format and protocol
- 26. 26 © NEC Corporation 2015 NEC Group Internal Use Only26 © NEC Corporation 2019 IOT Edge Use cases
- 27. 27 © NEC Corporation 2015 NEC Group Internal Use Only27 © NEC Corporation 2019
Editor's Notes
- #4: NEC conducts business globally in over 160 countries with our Global HQ in Japan. Our network of 9 global research labs employ over 1,000 research professionals allocating over 1.2 Billion or more than 5% of NEC annual revenue to innovation and developing solutions that contribite to society.
- #6: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #7: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #9: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #10: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #11: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #12: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #13: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #14: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #15: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #17: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #18: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #20: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #21: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #22: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #25: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us
- #27: We looked on Medical startups in Israel, as SW solution that not evolves additional devices, We thought that CAD system is a good candidate for us, as it SW based solution that stand alone and not need specific device or system, the data itself is pixel base And It not tied to hospital Moreover most of the CAD solution base on DL/ML that become a majority field in NEC, and as NEC has already one of the best EMR system in Japan, we thought CAD project can be a good match for us