{"id":14147,"date":"2020-08-28T14:07:38","date_gmt":"2020-08-28T13:07:38","guid":{"rendered":"https:\/\/www.riskinsight-wavestone.com\/?p=14147"},"modified":"2020-08-31T08:33:56","modified_gmt":"2020-08-31T07:33:56","slug":"security-twins-a-new-security-trust-guarantee-for-connected-devices-2-2-2","status":"publish","type":"post","link":"https:\/\/www.riskinsight-wavestone.com\/en\/2020\/08\/security-twins-a-new-security-trust-guarantee-for-connected-devices-2-2-2\/","title":{"rendered":"“Security Twins”: A new security & trust guarantee for connected devices (2\/2)"},"content":{"rendered":"

In a\u00a0previous article<\/a>, we discovered how “Security Twins” could improve the security and trust of connected devices. In this new article we will now look at how the \u201cSecurity Twins\u201d can improve the security of physical accesses to a building through a PoC made by Wavestone in collaboration with the start-up Jitsuin using their tool: \u201cJitsuin Archivist\u201d.<\/p>\n

 <\/p>\n

What does \u201cJitsuin Archivist\u201d look like?<\/h2>\n

The start-up Jitsuin has developed a tool called “Jitsuin Archivist” based on Distributed Ledger Technology (DLT). The purpose of this tool is to know “Who did what to a Thing and When\u201d.<\/p>\n

As of today, 5 types of users can interact with the tool: Archivist Administrator, System Administrator, Maintenance Operator, Auditor, Custom (currently in beta version).<\/p>\n

 <\/p>\n

\"\"<\/figure>\n

Figure 1 \u2013 The 5 user roles of \u201cJitsuin Archivist\u201d<\/p>\n

 <\/p>\n

On this tool the user has access to the “Security Twins” of the connected devices. Indeed, after logging in, the user accesses a dashboard through which he has a global view of all the connected devices linked to the tool. He can see relevant statistics related to his IoT deployment, such as the number of critical incidents, the activity of connected objects, etc.<\/p>\n

The user can also access the “Manage Assets” page where he will find a map with the location of all the connected objects linked to the tool and a list of them (where he can also see in more detail the events linked to a particular connected device).<\/p>\n

 <\/p>\n

\"\"<\/figure>\n

Figure 2 – The different views of the tool “Jitsuin Archivist”: 1. dashboard with a global view, 2. all the objects and their location, 3. detailed view of an object, 4. all the actions of the object useful during security audits<\/p>\n

 <\/p>\n

The PoC: A House with a digital lock<\/h2>\n

Wavestone used Jitsuin’s tool to first address the issue of identity and access management in buildings in at the dawn of digital transformation and the to illustrate the usefulness of “Security Twins”.<\/p>\n

To do this Wavestone used the lego house “SmartHouse” :<\/p>\n

 <\/p>\n

\"\"<\/figure>\n

Figure 3 \u2013 The \u201cSmartHouse\u201d<\/p>\n

 <\/p>\n

Equipped with an RFID card reader, a Raspberry Pi microcontroller and a servomotor, the entrance door of the “SmartHouse” only opens to users who have an authorized access card. All actions related to opening, closing, granting of entry rights, etc. are recorded on “Jitsuin Archivist” (see figure 4).<\/p>\n

 <\/p>\n

\"\"<\/figure>\n

Figure 4 \u2013 The functional diagram of the \u201cSmartHouse\u201d<\/p>\n

 <\/p>\n

In order to facilitate the interaction with the digital lock of the \u201cSmartHouse\u201d, a platform allowing the simulation of different operations made by different peopled involved in the life cycle of connected devices has been created using the Django web framework and Bootstrap. This platform allows, among other things, to:<\/p>\n