90 likes | 218 Views
Telematics and Digital Health. Allen Hobbs, Ph.D. Co-Chair HL7 Health Devices 01-17-13. Introduction. Modern automobiles are becoming increasingly computerized with many components partially or entirely controlled by computers and networked both internally and externally.
E N D
Telematics and Digital Health Allen Hobbs, Ph.D. Co-Chair HL7 Health Devices 01-17-13
Introduction • Modern automobiles are becoming increasingly computerized with many components partially or entirely controlled by computers and networked both internally and externally. • There are over 250 million registered passenger automobiles in the U.S.. Virtually all new automobiles are now computerized. • The architecture is based on significant advances in safety (e.g. anti-lock brakes), fuel efficiency, and convenience. • Increasing computerization also creates new risks to be addressed. • Recent research has been focused on helping people enjoy the benefits of a computerized architecture while providing strong assurance of safety, security and privacy.
Computerization also Creates New Risks • Recent research has been focused on helping people enjoy the benefits of a computerized architecture while providing strong assurance of safety, security and privacy. • Two papers exploring safety, security and privacy are worth noting here. • The first is the “Comprehensive Experimental Analysis of Automotive Attack Surfaces “ and the second is the “Experimental Security Analysis of a Modern Automobile” • Comprehensive Experimental Analysis of Automotive Attack Surfaces, USENIX Security Symposium, August 2011 • Experimental Security Analysis of a Modern Automotive, IEEE Symposium on Security and Privacy, May 2010
Conclusion • Authors of the experimental studies note that automobile owners should not be overly concerned about attacks to automotive architectures. • Rather, they focus squarely on addressing potential automotive security and privacy issues that future cars will have – with even more sophisticated computer control and broader wireless connectivity. • Security and privacy protections will need to be addressed for voice, data and location. • For example, experimental analysis of remote exploit controls has found that an attacker who has compromised a automobiles’ telematics unit can record data from the in-cabin microphone (normally reserved for hands free calling) and exfiltrate data over the connected IRC channel. • It is easy to capture the location of the automobile and track where a driver goes.
Next Steps • IEEE, the world's leading professional association for the advancement of technology, today announced the completion of IEEE 1616a, a new standard based on IEEE 1616, the first universal standard for motor vehicle event data recorders (MVEDRs), similar to units found on aircraft and trains. • An adjunct to IEEE 1616, the new standard helps to provide greater consumer protections by improving the effectiveness of  these automotive “black boxes” with new lockout functionality designed to prevent data tampering, such as Vehicle Identification Number (VIN) altering and odometer fraud. It also addresses concerns over privacy rights by establishing standards protecting data from misuse. • Explore interface of IEEE 1616 with IEEE 11073 ( personal health devices ) for data analysis
Autonomous Vehicles Autonomous EMS / Ambulance Telemetry