1. APIs INTERNET OF THINGS APIs and Internet of things 01 ThingSpeak, Pachube and Fitbit 02 How APIs are Powering smart cities 03 Open APIs or the Insecure Internet of Things 04 APIs and wearables 05

2. 0101 The future world awaits us with APIs and IoT Connected homes and vehicles, wearables and smart cities are four fields in which APIs are driving forward the Internet of Things sector. These application programming interfaces boost business creation.

3. Wearables for tracking physical data, smart homes via home automation, connected vehicles, smart cities in fields like public services and security… Everything related to the future world is based on IoT (Internet of Things) and infrastructures created by companies or governments based on APIs. A review of various reports on business growth forecasts and volume of connected objects for the next few years reveals astonishing figures. It is most certainly fertile ground for growth, the birth of new innovative companies and high revenue generation in several fields: BI intelligence The consultancy firm forecasts a total of 34,000 million connected devices by 2020, of which 24,000 million will be IoT devices. These figures are far and above the 10,000 million recorded at the end of 2015. Its report predicts high investment in IoT by companies to bring down costs, increase productivity and branch out to new markets. CISCO the report by the telecommunications consultancy firm anticipates a multi-million investment in Internet of Things solutions, which would give a total volume of €12.7 billion by 2022, in fields such as enhancing the supply chain and logistics (€2.4 billion), increasing employee productivity (€2.2 billion) and cost reduction strategies (€2.2 billion). 01.APIs AND IoT

4. IC INSIGHTS it talks about five fundamental IoT sectors, i.e. connected homes and vehicles, smart cities, wearables and Internet. Revenue for IoT subsystems Source: IC Market Drivers 2015 Update 01.APIs AND IoT

5. No one can doubt that these days the Internet of Things goes hand in hand with APIs. Without application programming interfaces a viable world of connected objects just would not be possible. Energy consumption and connectivity require that the data be managed outside the device for the model to be sustainable. The Internet of Things and APIs are two software development fields that feed off each other. Indeed, IoT only took off properly when APIs stormed onto the scene. CONNECTED HOMES AND VEHICLES Connected homes are more a trend than a reality at the moment. For this to take off properly it probably needs an even bigger change in mentality in the average consumer. Having said that, economic outlooks forecast an increase in the number of connected devices in the home: 67% growth over the next five years, according to a Business Insider Intelligence report. according to a BusinessInsider Intelligence report Global connected- home device annual shipments Source:: ABI Research, TechNovio, Pike Research, Bi Intelligence Estimate 01.APIs AND IoT

6. The growth of the business is not only slowed down by consumer cultural aspects. It is also held back by the huge atomization of products: there are connected plugs, switches and lamps by many different manufacturers, each of which comes with its own remote control application.It is also held back by the huge atomization of products It is the same story with electrical appliances, security systems and leisure technology… The challenge is to merge everything into a single product to make the solutions easier to use. There is also discord between the connectivity systems that the devices use (some via WiFi; others, Bluetooth; and these are not the only ones). One possible solution are APIs. These interfaces connect the efforts of the device manufacturers on the one hand, and the application developers on the other. The users are the main ones to benefit from this. If, in addition, these APIs are open, the developers' work allows breakthroughs in creating an API ecosystem for connected homes or developing global applications for these types of devices. Something similar occurs in the connected vehicles market. For it to take off once and for all, it depends on whether developers can create applications that work across vehicle makes and models. Some examples show that this is possible, thanks to APIs by companies like OnStar and Automatic. 01.APIs AND IoT

7. The first company has spent three years working on APIs that allow third parties to develop apps that are then integrated into their platform. They have signed an agreement to incorporate their solutions into some General Motors vehicles to connect to emergency services, roadside assistance, navigation systems and on- board diagnostics. Automatic connects users to its vehicle via an adaptator and a mobile application. It provides information about mechanics and fuel consumption and data on emergencies and free parking. 01.APIs AND IoT

8. They also have a number of third party applications thanks to their API for developers. There are other companies that specialize in designing specific APIs to connect vehicles manufactured after 1996, for example, Carvoyant. applications thanks to their API for developers Carvoyant In both cases, products linked to connected homes and connected vehicles, many of the solutions are based on process automation via IFTTT ( If This Then That), a web service that allows devices from vary different origins to be connected. See video 01.APIs AND IoT

9. WEAREABLES Consultancy firm IDC predicts that in 2016 the sector will complete the sale of 111 million wearables around the world, a great deal lower than the 214 million expected by 2019. In their opinion, the annual growth rate over the next five years will be 28%.the annual growth rate over the next five years will be 28% Regardless of figures, one thing is clear: the second and third generation of wearables will record bettter performance and much more efficient data management than at the moment, mainly thanks to developers. There are currently more than thirty APIs for wearables on the market. Some of them are linked to leading sports brands like Adidas, Under Armour and Garmin and technology brands like Google, Microsoft and Samsung.Adidas Under Armour GarminMicrosoftSamsung Adidas has an application programming interface for its Adidas MiCoach service, a training platform for users to create exercise plans and check their personal progress. 01.APIs AND IoT

10. The API is a REST API which offers all kinds of resources to encourage third party developers to create applications with the customers' profile information, which is private and kept secure via a OAuth v2 security protocol. Under Armour has various REST APIs to create services for its different applications: Under Armour Women and MapMyFitness, MapMyRun, MapMyRide, MapMyWalk and MapMyHike after buying out the company MapMyFitness. In the case of Samsung (Samsung Simband) and Microsoft (Microsoft Health), the use of APIs is focused on health data collection and management. Samsung Simband API is written in C and C++ and enables real-time access to user profile data on the devices. Microsoft Health Cloud API is a RESTful API that gives third parties real-time acess to user data in JSON format to ehance Microsoft Health applications.Samsung SimbandMicrosoft HealthSamsung Simband API Microsoft Health Cloud API 01.APIs AND IoT

11. SMART CITIES A few years ago, talk of smart cities was more a premonition than a reality. Everyone could visualize future advances in data management and services in a major city, but projects were few and far between and not very viable. Now, with the array of opportunities opened up by APIs, when we speak of Smart Cities we refer to an actual business sector: more than 1,600 million devices connected in 2016 and around 3,300 million by 2018, according to Gartner, in fields like health, public services, transport, building…devices connected in 2016 and around 3,300 million by 2018 Some important smart city projects, aside from private company proposals, include major cities like Barcelona and New York which have created platforms and environments for developers in their ambition to become true Smart Cities. 01.APIs AND IoT

12. Barcelona city's project was City OS, a real-time Big Data platform to improve citizen life. By installing all kinds of sensors around the city, the government can collect and analyze data to anticipate problems in, for example, managing public services such as traffic or transport: simulations are created and also predictive models for various situations.City OS Another example, even more sophisticated, is New York. This city now has eight different APIs (Geoclient API, Open311 Inquiry, Events Calendar, DoE School Choice, City Hall Data Feeds) and three more in beta, HPD Data Feeds, Comptrollers Checkbook and DOT Data Feeds. Like other cities, New York also has an open data portal with more than 1,300 datasets.Geoclient APIOpen311 InquiryEvents Calendar DoE School ChoiceCity Hall Data FeedsHPD Data FeedsComptrollers Checkbook DOT Data Feedsan open data portal All of this information is logically available for developers through an open API provided by Socrata (SODA).an open API provided by Socrata This interface allows access to data on governments and public administrations, non-profit organizations and NGOs around the world. Transparency and business are possible thanks to APIs. 01.APIs AND IoT

13. APIs for IoT ThingSpeak, Pachube and Fitbit APIs have become the lifeblood of software. In the big business of the Internet of Things, application programming interfaces play an essential role in the collection, analysis, visualization and manipulation of data. Here are three good examples. 0202

14. When Marc Andreessen, one of the great gurus of venture capital investments in startups, wrote ‘Why Software is Eating The World’ in The Wall Street Journal back in August 2011, he probably already had in mind what APIs (application programming interfaces) would represent for developing software and new business models. It can be said that APIs are eating the world and an example is their influence on the Internet of Things (IoT). ‘Why Software is Eating The World’ These APIs enable developers to connect to the world of objects and interrelate the devices surrounding us: 'plugging in' our body to monitors of vital signs, automating our home, almost turning our vehicle into a living being… APIs have become the lifeblood of software and the so-called Internet of Things wouldn't exist without them. APIs incorporate and work with data that facilitate the connection between objects 02.THINGSPEAK, PACHUBE AND FITBIT

15. Today most solutions of the Internet of Things revolve around four basic pillars which are mobility, social economy, analysis of large volumes of data and cloud-based computing. According to a Cisco study, the estimated global According to a Cisco study market around IoT will rise to $14.4 trillion in 2022, a figure that has grown steadily in recent years. Therefore, there is business for developers and APIs are one of the main keys. $14.4 trillion Est. value of the global Internet of Things market by 2022 $3.7 Trillion from improved customer experience $3.0 Trillion Fromreduced time to market $2.7 Trillion In supply chain and logistics $2.5 Trillion In reduced costs $2.5 Trillion In increased employee productivity 02.THINGSPEAK, PACHUBE AND FITBIT

16. We will try to analyze three APIs of the Internet of Things here from a huge list of interfaces that are already operating in this expanding market:a huge list of interfaces THINGSPEAK API The ThingSpeak API always works with data; that is its specialty. This open API for the Internet of Things allows you to collect, store, analyze, visualize and act on the information collected in sensors and devices such as mobile and web applications, social networks like Twitter,, messaging solutions, VoIP and cloud-based solutions such as Twiliomessaging solutions, VoIP and cloud-based solutions such as Twilio, open source hardware such as Arduino, Raspberri Pi and BeagleBone (the kings of the Internet of Things and robotics) or computer calculation languages like MATLAB... ThingSpeak is an API known among developers and already has a large community.ArduinoRaspberri Pi BeagleBone and already has a large community. 02.THINGSPEAK, PACHUBE AND FITBIT

17. ThingSpeak API always works with channels, which contain data, location and status fields. To start working with this interface a channel needs to be created, where the information on devices and applications will be collected, data that can subsequently be analyzed and visualized in graphics (this is a fairly comprehensive tutorial on how to create graphics with ThingSpeak) and the final step is to operate on these documents. The process with the API is always the same.channel needs to be createdhow to create graphics with ThingSpeak In the end, the project path with the API will look similar to the following, replacing the fields CHANNEL_ID and FIELD_ID with the data from the newly-opened channel. An example of the type of graphics that be can be created as a result of the collection, analysis and visualization with ThingSpeak are these temperature measurements: 02.THINGSPEAK, PACHUBE AND FITBIT

18. PACHUBE API PACHUBE API (Xively) Pachube's API Pachube's API allows you to store, share and analyze real-time energy or environmental data collected by sensors in buildings and other devices. All the functionality of Pachube's system is provided by the API, which aids the information generated by buildings, energy meters or mobile devices with sensors being collected and analyzed and all these objects connected to each other. It is the true Internet of Things.Pachube's system Pachube's API functions in EEML (Extended Markup Language Environments), a protocol for exchanging data from sensors in remote environments, whether physical or also virtual (a typical example is the connection with Second Life objects). The fact that there is a universal protocol is what enables people to share with the community millions of pieces of real-time data from objects, devices or spaces around the world.Second Life The steps to start working with Pachube are quite simple: Add a device : developers give a name, description, and privacy permissions to the device they want to add and an ID is automatically assigned as well as the API key required to connect the terminal. Connect the device: the ID and API key need to be copied into the object code to establish a two-way relationship between the two. Not only devices can be connected, but also apps and services. To make that connection, there are all kinds of libraries here for Android devices, programmed in Java objects, C, Objective-C, Python, PHP, Ruby and JavaScript devices, and tutorials for open hardware such as Arduino or Raspberri Pi. librariestutorials 02.THINGSPEAK, PACHUBE AND FITBIT

19. Test run: once added and connected, developers can begin to see data values updated in real time on their channel and debug irregular changes seen in that information. 02.THINGSPEAK, PACHUBE AND FITBIT See video

20. FITBIT API Fitbit's API aids developers with the work of interacting with the data collected by any of the Fitbit products whether it be an application, a device or service. Today, Fitbit's API supports most languages for reading and writing information, but they offer a community for developers where it is possible to make suggestions and evolve the API.a community for developers What Fitbit's API ultimately allows is for anyone to be able to develop an app to access and manipulate data collected for a Fitbit device, provided it meets two obvious requirements: this must be data related to the actual user and no other person and meet the conditions of use established by the documentation of the actual API.the conditions of use established by the documentation of the actual API. 02.THINGSPEAK, PACHUBE AND FITBIT

21. How can you start to try and work with Fitbit's API? Registering the app: registering the app makes it possible to obtain the customer's credentials from the API. To do this you must first have an account in the Fitbit service (it is completely free of charge to open). Access to user data is done through OAuth authentication. Requests to Fitbit's API to read and write user data are made through this browser ofOAuth authenticationthis browser of the APIthe API. You may also subscribe to the API to update the data in real time (it is done like this).(it is done like this). Developers must choose a OAuth 2.0 library that operates with the programming language and development framework used for the data stream. Without this library, the authorization protocol cannot be created. API requests require the credentials of an authorized user. 02.THINGSPEAK, PACHUBE AND FITBIT

22. How APIs are powering Smart cities Companies and institutions are coming together to develop smart cities as international meeting points and business hubs. Barcelona, New York, the Australian government or the EU for example have been using APIs to drive connected cities. 0303

23. Ciudad inteligente in Spanish. Ville intelligente in French. Smart city in English. All of these terms refer to a single original concept: a city whose urban development is based on sustainability and its ability to improve the lives of its residents as well as provide companies, organizations and public administrations with everything they need in all possible spheres. And this includes mobility, the economy and the environment among other areas. Rudolf GiffingerRudolf Giffinger, professor at the Technology University of Vienna and one of the world's leading experts in urban development, defines smart cities using six clearly separate criteria : economy, mobility, environment (as mentioned before), administration, way of life and residents. Most cities in the world assess their characteristics as smart cities, both internally or relying on external parties, based on these values. To some extent, these six sectors are also the focus of daily efforts by governments and private companies to use smart solutions for data business and services.Technology University of Vienna six clearly separate criteria 03.APIs AND SMART CITIES

24. THE EXAMPLES OF BARCELONA AND NEW YORK As part of their journey toward becoming real smart cities, major cities strive to provide open and transparent information to their residents. In many cases, local governments allow access to relevant economic data: employability, investments, P&L of public companies, government tenders … And in practically all instances, this information can be processed by external parties through open APIs. Barcelona has several application programming interfaces with free economic information: the webpage of Greater Barcelona incorporates an API where developers are able to run queries on all types of data which have been sorted by collections: from services for companies to open or negotiated tenders. Queries are returned in JSON format, the default option. However, CSV, XML, KMZ and KML can also be used. Additionally. queries can be run in two languages, Catalan and Castilian.Greater Barcelona API where developers are able to run queries 03.APIs AND SMART CITIES

25. The API searches by fields in the various collections. If you wished to call the API to filter content by those fields, you would enter something like this: http://opendata.amb.cat/ {{collection}} /search? {{camp1}} = {{valor}} & {{camp2}} = {{valor}} & {{camp3}} = {{valor}} Greater Barcelona also shares open information about city news, information about the municipalities, mobility and sustainability studies, cooperation projects, information about parks, beaches, taxi activity and public transportation, etc.city newsinformation about the municipalitiesmobilitysustainability studies cooperation projectsparks beaches, taxi activity public transportation In the city itself there is the City OS project, an umbrella project for several other projects, including a very special one: Apps4bcn. This website is a repository of applications about all sorts of services in Barcelona as well as a meeting point for experts and developers. The portal's idea is for programmers to use open APIs ofis the City OS projectApps4bcnexperts Barcelona's local government to design applications that can then be assessed by experts from sectors such tourism, transport, urbanism, culture, healthcare, education, sports, etc. This is a truly interesting project. As for New York, the city has a portal exclusively for programmers where eight open APIs allow access to public information: GEOCLIENT API open geocoding service used in New York; completely free access. You only need to register and request a password. Obviously, this service is limited in terms of responding to requests in all applications that use the API as their data provider : up to 2,500 requests per minute and/or 500,000 requests per day. The API's source code is under Apache 2.0 license and can be found at the code repository GitHub. There is one dependency: developers must download GeoSupport from the Department of City Planning. Apache 2.0 licensecan be found at the code repository GitHubGeoSupport Department of City Planning. 03.APIs AND SMART CITIES

26. Open311 Inquiry this open API includes all information which is normally provided to NY residents when they call 311 or its app – data about services and facilities and FAQs. For example, information about public schools, parking, cleaning and waste service, city ads, etc. 311 or its app Events Calendar this API includes information about events sponsored by the city. Information is provided through a REST API in JSON or JSONP format; name, date and time are the fields used.events sponsored by the city DoE School Choice this API, in collaboration with CivicDashboards, provides developers withAPI, CivicDashboards information about public schools, curricula and after-school activities as well as educational reports. The entire education community has access to performance reports (A, B, C, D or F) about the schools which are based on the students' progress and performance as well as the school environment. Other APIs City Hall Data Feeds City Hall Data Feeds (RSS with information from the City Hall), HPD Data Feeds (information about housing and development), Comptrollers Checkbook (tracking of budget use) and DOT Data Feeds (information about traffic and public transportation).HPD Data FeedsComptrollers Checkbook DOT Data Feeds 03.APIs AND SMART CITIES

27. There are other examples of smart cities that share open data through APIs. For example, the Australian government has an API with CKAN, a platform for developing repositories of public,the Australian governmentan API CKANpublic, open data open data. This is a RPC (remote procedure call) API that provides information in lists or sets of data from the user's POST HTTP requests. The information is in JSON format. 03.APIs AND SMART CITIES

28. EUROPE-WIDE PROJECTS In Europe there are several very interesting mixed projects about the Internet of Things and the design of smart cities. European institutions and private companies are working together to create environments where open APIs –with free-use information and business opportunities– can be harnessed. The three most important projects are possibly FI-WARE, ICOS (Intelligent / Smart Cities Open Source Community) and Sofia (Smart Objects for Intelligent Applications).(Intelligent / Smart Cities Open Source Community) (Smart Objects for Intelligent Applications). FI-WARE open, independent community that works to build a sustainable, open ecosystem to develop smart applications in numerous sectors. This platform offers a series of public and free APIs for designing projects and products at a low cost. This proposal includes FIWARE Lab, a lab where users and companies can test the technology and exploit open data published by smart cities. 03.APIs AND SMART CITIES

29. ICOS Community of developers from the smart cities business sector which develops apps and solutions in this area. There are currently several interesting projects such as CKAN, the Australian government's open data platform (mentioned above) and projects by the European institutions (www.publicdata.eu); CiviCRM, an open-source CRM used by institutions such as the Greater Washington Urban League; MATSim, a tool for creating large-scale transport simulations; and HOYRESPIRO, proposal developed in BilbaoCKANwww.publicdata.euGreater Washington Urban LeagueMATSim HOYRESPIRO that provides georeferenced information about air quality, pollen levels and the weather. SOFIA project led by Indra in collaboration with companies such as Nokia, Philips or Acciona which focuses on the Internet of Things, and using sensors, augmented reality and virtual reality to drive smart cities forward. A private project, it has also been granted public funding. 03.APIs AND SMART CITIES

30. Open APIs or the insecure IoT API evangelists such as Kin Lane and companies like 3scale promote the open use of application development interfaces so that professionals can anticipate and solve errors that in the future could ruin investments in the Internet of Things (IoT). 0404

31. It is said that the heart always flies further and faster than the mind. Perhaps that phrase is too poetic if you want to talk about APIs, but in fact something similar happens with technology and security: the former always flies further and faster than the latter. And there's almost always a price to be paid. Today nearly everyone talks about the Internet of Things, connected objects and APIs, but rather less about the security needed in this development and business environment. Some professionals linked to the API economy have been talking for some time about the fact that opening up data and using open application development interfaces could help the development of secure environments by opening up the field so that more eyes can discover errors, anticipating them or resolving them in time. Among them is Kin Lane, one of the most important evangelists on the planet of the use of open APIs. His time sleeping in airports during his trips from one city to another are behind him. He is now supported by companies such as 3scale, Restlet and WS02, three players in the world of APIs, the Internet of Things and development. Kin Lanetime sleeping in airports during his trips from one city to another 3scale RestletWS02 04. OPEN APIs OR THE INSECURE IoT

32. He has always established a parallelism between the SDK (software development kits) for hardware and APIs, such as those for the Internet of Things market. After all, application development interfaces are like special SDKs. The problem is that if there is a security or operations fault in an SDK, its effect on an application is resolved with an update and a download, which could cost 2 or 3 euros or be completely free. In a connected object, an error in an API could bring disaster to a much more expensive investment. The room for maneuver is far from being the same. 04. OPEN APIs OR THE INSECURE IoT

33. SPACES FOR OPEN APIS The alliance between Lane and 3scale is leading major progress in boosting open APIs. Lane not only gives talks on his evangelizing mission, he also heads up interesting projects within the open API ecosystem, which in many cases improve the security of the final projects. One example is API Commons, a platform on which any developer can put his API under a Creative Commons License (CC BY-SA o CC0) so that other professionals can use it freely and improve it if they wish to.API Commonsa platform CC BY-SA CC0 The other two most important projects are: APIs.json APIs.json : a format for documenting APIs (licenses, prices, policies and technical and business specifications). It is a simple way of facilitating the initial work for developers who aim to use an API to develop an application or to connect objects within the IoT. There is an obvious parallelism between APIs.json and the sitemap.xml of a website. Lane and 3scale have their own generator of API.json formats for APIs.their own generator of API.json formats APIs.io APIs.io : a great search engine for APIs on the web. There is now a repository with a volume of 1,029 APIs. Of course, each of these APIs is described through an API.json format. 04. OPEN APIs OR THE INSECURE IoT

34. SECURITY PROTOCOLS: OAUTH2 OAuth2 is a framework for creating protocols, rather than a protocol in itself. Companies such as Google, Facebook, Microsoft and Twitter area already using OAuth2 as an authorization and security system for third-party use of their APIs. The normal protocols when a company develops an API are an API key or typical credentials such as username and password. These types of resources have some security problems, for example, in single page applications (SPA) based on the server side. In these cases, any developer can access the credentials from the browser: it's a gateway. 04. OPEN APIs OR THE INSECURE IoT

35. OAuth2 allows third parties to connect to an app's data without the need to have user credentials and a password. Of course, this full or partial access to data may be revoked at any time because access privileges, like user roles, can be modified. The OAuth2 security system is based on what is known as an access token and allows interaction with own systems without having to make these credentials available. Is OAuth2 a system without security risks? Obviously not. In fact, the level of security offered by OAuth was the cause of a dispute with Erna Hammer, one of the creators of the specification. Hammer claimed at the time that OAuth2 was "more complex and Erna Hammerone of the creators of the specification incomplete" and "less secure, interoperable and useful" than OAuth1, above all in native mobile applications, and that is the reason for his break with the IETF group, which is basically responsible for the OAuth2 project. The starting point with this protocol is limited, and if a team of developers wants to use it to provide access to its API, ideally they should have a security expert available.that is the reason for his break with the IETF group 04. OPEN APIs OR THE INSECURE IoT

36. A project based on user credentials and a password needs servers to support password identification. In the case of OAuth, the server using authentication by an access token may be different from the server that stores the protected resources for their use. With this security system, the access of third- party applications to resources is too wide- ranging, which greatly weakens the protection and security position of the owner of the API and the data. Unfortunately, it is not possible to limit access either in terms of duration or volume. If you want to revoke access to a third party, you must restrict it to all third-party applications that work with the API because it is only possible to restrict access with a change of password. In the case of OAuth, each user has an access token that may be revoked or restricted individually, without this affecting the rest. ADVANTAGES OF OAUTH2 A system using credentials has some problems compared with OAuth2: 04. OPEN APIs OR THE INSECURE IoT

37. Wearables based on APIs, an excellent business opportunity Google, Samsung, Microsoft, Adidas, Under Armour, Pebble, Fitbit, Misfit… Business derived from wearables is growing over time. Sales keep going up and more revenue is being forecast but none of this would be possible without APIs. 0505

38. The whole world of technology has the feeling that the future will take the form of a connected individual who has wearables implanted in their body and the ability to transmit data in real time. It would be a somewhat disturbing outlook – a human being conceived as an object of the Internet of Things, as a source of data information by means of an API, and as a transmitter of data for third- party applications. And this is sure to go beyond the industry since it represents a fantastic business opportunity.connected individual The number of wearables in the market is forecast to grow. Sales will increase and the growth rate will rise over the next few years. 05. WEARABLES BASED ON APIs

39. 2017 2015 2016 A report by the consultancy firm Gartner (January 2016) A report by the consultancy firm Gartner (January 2016) indicates that the number of devices will go up from million in 2015 to 322 million by 2017. A breakdown of the various wearables can be seen here: Forecast for Wearables Devices Worldwide (millions of units) 05. WEARABLES BASED ON APIs Total Bluetooth headset Smartwatch Wristband Fitness monitor Sport watch Chest strap Head-mounted Smart-garment Body-worn camera 232,01 274,59322,69 116,32128,5139,23 30,32 30,15 21,07 21,02 12,88 0,14 0,06 0,05 50,4 34,97 21,11 23,98 13,02 1,43 1,01 0,17 66,71 44,1 25,08 26,92 7,99 6,31 5,3 1,05 Source: Gatner/ Get the data

40. 2015 Unit Shipments 2015 Market Share 2019 Unit Shipments 2019 Market Share 2015-2019 CAGR To get another perspective into what will make up the future market of wearables we only need to look at the growth by operating system. At the end of 2015, a study by the consultancy firm IDC forecast that the growth rate by 2019 would be higher in wearables with Android Wear (up by 80.5%), Linux (up by 54.5%) and watchOS (up by 36.5%). It becomes apparent that smartwatches take center stage among consumers. Here is the breakdown:At the end of 2015, a study by the consultancy firm IDC Top Smartwatch Operating System with Shipments 05. WEARABLES BASED ON APIs Android Android wear Linux Pebble OS RTOS Tizen watchOS 0,4 3,2 0,2 1,8 0,8 1,7 13 2,1 15,2 0,9 8,6 3,8 8,2 61,3 1,1 34,3 1,1 2,3 1,9 2,5 45,2 1,2 38,8 1,2 2,6 2,2 2,8 51,1 25,8 80,5 5,8 23,8 9,5 36,5 54,5 Market Share and 5-Year CAGR Growth (Units in millions). Source: IDC Get the data

41. In the context of this new business that is yet to be harnessed, APIs play a starring role. Large technology companies that are investing in health- and sports-related devices such as Google, Samsung, Microsoft and Sony; companies that have more specific interests such as Garmin; multinationals connected to sportswear such as Under Armour and Adidas; smaller companies such as Pebble, Misfit, Fitbit and Rithmio; or companies that invest in mobile operating devices such as Tizen (Linux) are creating their own wearable market by launching APIs. The Programmable Web repository currently contains 37 application programming interfaces which are linked to the universe of wearables and aimed at external parties.Google SamsungMicrosoftSony Under Armour AdidasPebbleMisfitFitbitRithmio Programmable Web 37 application programming interfaces 05. WEARABLES BASED ON APIs

42. APIs are the most effective way of sending data from a sensor to a team of developers who need the information to design an application. They act as the vehicle for device manufacturers to generate business around smartwatches, virtual reality headsets or wristband/chest bands that measure your heart rate. Without them, wearables wouldn't make a lot of sense. It's absurd to collect data from the body without giving it a shape. At the moment, Google has several APIs connected to wearables. The first one is Google Fit REST API, the app programming interface for Google Fit, the platform for the users' physical activity; the second is Android Wear APIs for the company's operating system for wearables:Google Fit REST APIGoogle FitAndroid Wear APIs THERE WOULD BE NO WEARABLES WITHOUT APIS 05. WEARABLES BASED ON APIs

43. Google Fit REST API REST API that allows you to store and access data from Google Fitness Store using an external application. This interface offers you the possibility of carrying out operations (creating, aggregating or deleting) by using the data sources/sets gathered by the sensor. Google's API works with three types of data: completely public (standard data provided by the platform for any application), private data and information that can be shared with others. This API operates under the OAuth2 protocol. For this reason, developers must have a Google account, go to the Google Developers console and request their credentials through an access token; they will then receive a client ID to use Google's APIs. Android Wear API Android offers a series of APIs for developing applications and games for Google devices. This is always done within a development environment in Java programming language. 05. WEARABLES BASED ON APIs

44. Samsung also has an API for the Simband wristband, the company's wearable that collects data about the users' health. Simband runs in the Tizen operating system. The data are then processed and accessed through a platform developed by Samsung called SAMI. The wristband connects automatically with SAMI and loads information to the cloud. The device is controlled using a touchscreen. SimbandSAMI Simband API allows developers to access sensors and data collection algorithms in real time from Samsung's wristband. This interface has been written in C and has C++ functions for designing products. The API is supported by Doxygen, a tool for creating resource documentation in C++ which is compatible with other languages such as Objective-C, C #, PHP, Java, Python and Fortran. Also for the operating systems Mac OS X and Linux and executables for Windows. The authentication protocol is also based on OAuth2 and uses an access token.Doxygen Microsoft also has its own APIMicrosoft also has its own API: Microsoft Health Cloud API. This is an application programming interface for Microsoft's Microsoft Band, a wristband that collects data from the body for medical and sports analysis. A RESTful API with information in JSON format, it uses OAuth2 as its authentication method.Microsoft Band 05. WEARABLES BASED ON APIs

45. Pebble API Pebble is a smartwatch that connects to a smartphone using Bluetooth technology. The API and software development kits (SDKs) have been designed to allow third parties to develop specific applications for Pebble or other phones with which the smartwatch can connect. The idea is to be able to manage the information collected from the user's body, send or receive added data such as photos or text, control the smartwatch... Misfit Cloud API third-party applications can use this API to connect to an open platform which contains real- time user information. It's based on HTTP. Misfit's application programming interface offers a wide range of documentation for you to start any project.wide range of documentation APIS TO FIGHT AGAINST TECHNOLOGY COMPANIES Around large technologies companies such as Google, Samsung and Microsoft, there are companies whose core business is wearables; they release APIs for the community of developers. Some examples are Pebble, Misfit, Fitbit and Rithmio. They all have their own application programming interfaces aimed at generating business volume in the IoT. 05. WEARABLES BASED ON APIs

46. Fitbit API as with all other APIs, Fitbit's API allows developers to connect and develop applications and services from the data collected by the brand's wearables (wristbands or smartwatches). Its authorization protocols are OAuth2 and OAuth1. It's able to interpret several languages: Spanish, French, German, Japanese and English. Rithmio API REST API which allows you to integrate third-party applications with the company's platform and devices. Tizen APIs the Linux-based operating system for mobile devices has all kinds of APIs – authentication functions, linked to the framework, content, graphic development, user experience, interface, among others. 05. WEARABLES BASED ON APIs

47. share THIS MIGHT INTEREST YOU Infographic: What is an API?Infographic: This is Nimble PaymentsEbook: Framework and tools for the web of the future Ebook: Open Source for developers and business BBVA API Market: Financial APIs from BBVA to fuel innovative businesses

48. www.bbvaopen4u.com Interact with us on: BBVA no BBVA is not resposible for the opinions expressed here in Sign up To he BBVAOPEN4U newsletter and receive our news from the world of APIs, Open Platform and New Business.