23/03/2007 mail-to: site: A Security Framework for Smart Ubiquitous Industrial Resources Anton Naumenko, Artem Katasonov and Vagan Terziyan Dept. of Mathematical Information Technology, University of Jyväskylä P.O. Box 35, FIN-40014, Jyväskylä, Finland We are grateful to National Technology Agency of Finland, Agora Center (University of Jyväskylä), and cooperating companies (ABB, Metso Automation, TeliaSonera, TietoEnator, and Jyväskylä Science Park) of the SmartResource research project for the financial support.

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources2 Introduction Conventional approaches to manage and control security seem to have reached their limits in new complex environments. These environments are open, dynamic, heterogeneous, distributed, self-managing, collaborative, international, nomadic, ubiquitous, etc. We are currently working on a middleware platform focused on the industrial needs, UBIWARE. UBIWARE integrates Ubiquitous Computing with Semantic Web, Distributed AI, Security and Privacy, and Enterprise Application Integration. In this paper, we describe our long-term vision for the security management in complex multi-agent systems like UBIWARE, SURPAS. SURPAS aims at policy-based optimal managing of security measures.

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources3 Contents The UBIWARE concept The motivating industrial case The security implications of UBIWARE The SURPAS research framework The SmartResource platform The SURPAS abstract architecture

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources4 field crewoperatorexpertconsumersownermanageradministration USERS UBIWARE Production Automation Intelligence External Applications Distributed Semantic Data Warehousing Web Service Services ERPs, CRMs, SCADAs, Portals, etc W3C Semantic Web Standards The UBIWARE concept

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources5 The security implications of UBIWARE Existing security measures for the technologies on which UBIWARE relies are not in a mature stage. The security cannot be added to UBIWARE later. Security design has to be conducted throughout the development of UBIWARE. Characteristics of UBIWARE have different impact on security –Openness –Dynamics –Heterogeneity –Distributed nature –Collaborative social nature –Internationality –Self-management –Mobility –Ambient intelligence and pervasiveness

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources6 The Motivating Industrial Case Industrial impact, business benefits and security issues of UBIWARE for a domain of distributed power network management ABB is a global vendor of hardware and software for power networks. The power networks themselves are owned, controlled and maintained by some local companies. Four scenarios with potential add-value. –Information exchange between sub-networks –Transferring the tacit knowledge of humans to machines –New business model (Externalization of services) –Integration of contextual data for fault localization and risk analysis

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources7 DATA DATA DATA NONO ?? Heterogeneity of applications Semantic request Semantic response DATA Information exchange between sub-networks How to elaborate flexible and expressive framework for the distributed, collaborative and policy-based management of security?

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources8 Algorithm AlgorithmAlgorithm Algorithm History data Learning Service - Facilitator Transferring the tacit knowledge

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources9 ABB webService AlgorithmAlgorithm Algorithm Algorithm Algorithm Algorithm New business model Secure provisioning of (semantic) web services is still an open research question How to treat the privacy concerns of the owners of different sub-networks?

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources10 Service - Facilitator Context Provider Fault prediction: Integration of contextual data: risk analysis How to compute reputation and trust for the external contextual services because these issues influence the confidence in predicted risks, fault locations, etc

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources11 SURPAS Methodology UBIWARE Domains SURPAS Functionality SURPAS Conceptual Semantics Maintenance Services in Paper Industry Power-Network Management Telecom Network Services etc Merged semantics of domains and SURPAS SURPAS in UBIWARE Applications Functional SemanticsAlgorithmsAbstract ArchitectureReference Implementation Enforcement Function Administration Function The SURPAS research framework UBIWARE: Configuring and adding new functionality to the underlying industrial environment on-the-fly by changing high level declarative descriptions. SURPAS: Including new, and reconfiguring existing, security mechanisms, for the optimal secure state in response to the dynamically changing environment.

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources12 The SmartResource platform UBIWARE relies on results from the SmartResource project (Proactive Self-Maintained Resources in Semantic Web, see SmartResource technology gives a possibility to be smart to every resource in an industrial system. SmartResource is able –To proactively sense, monitor and control own state, –To communicate with other components, –To compose and utilize own and external experience and functionality for self-diagnostics and self-maintenance.

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources13 Live activity Agent’s Roles ActivityActivityActivity Activity Assign Role Assign Role activity Beliefs storage SmartResource Agent.class Repository of the Roles  Advantages include:  Flexibility for control and coordination  Remote control  Up-to-date role scripts  An agent may ‘learn’ how to play a new role in run-time  Inter-agent behavior awareness  To ‘understand’ how to interact with another agent  To coordinate behavior of several agents Externalization of behaviour models

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources14 Live activity Agent’s Roles ActivityActivityActivity Activity Assign Role Assign Role activity Beliefs storage SmartResource Agent.class Pool of Atomic Behaviours Repository of the Roles  Added advantages:  Ability to ‘learn’ new behaviours  “Light start” with on-demand extension of functionality On-demand access of RABs

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources15 Reusable atomic behaviours Agent’s Roles ActivityActivityActivity Activity Assign a role activity Beliefs storage Repository of Roles Pool of Atomic Behaviours SURPAS Policy Pool of Security Mechanisms MechanismMechanism Repository of Policies SmartResource Secure Agent Live activity with SURPAS Policy Enforcement Mechanism The SURPAS Agent’s architecture

23/03/2007A Security Framework for Smart Ubiquitous Industrial Resources16 Conclusions UBIWARE targets physical world objects and thus put security as the core need-to-be-addressed issue. We presented –The SURPAS long-term vision of policy-based optimal management of security in multi-agent systems like UBIWARE. –The security implications of UBIWARE. –The motivating industrial case. –The SURPAS research framework. –The SURPAS abstract architecture. SURPAS as an ambitious target further demands –prototyping of ideas, –reference implementations, –industrial deployments and evaluations, –rigorous and convincing specification of advantages.