1) The document discusses securing supply chain management and the Internet of Things through securing RFID and sensor technologies. 2) It provides examples of projects that use RFID and sensors to track shipments of hazardous materials and enhance supply chain security. 3) Academic resources are presented that research cybersecurity issues with connecting physical objects to networks through RFID, sensors, and how to ensure trust with an "Internet of Things."

1. Securing the Internet of Things:
secure supply chain management
Stephen Miles, Research Affiliate
MIT Auto-ID Labs
S_miles@mit.edu
Networking day on EU-US RFID lighthouse pilot
projects on May 5th, 2009
Avenue de Beaulieu 25, Room O/S1, Brussels
s_miles@mit.edu
1160 Auderghem

2. Multi-dimensional view of international conflict and
cooperation in cyberspace
MIT Center for International Studies (CIS)
Tuesday, April 21, 2009 Wall Street Journal Tech
By SIOBHAN GORMAN, AUGUST COLE and YOCHI DREAZEN
WASHINGTON -- Computer spies have broken into the
Pentagon's $300 billion Joint Strike Fighter project -- the Defense
Department's costliest weapons program ever -- according to
current and former government officials familiar with the
attacks… The intruders were able to copy and siphon off several
terabytes of data related to design and electronics systems,
officials say...The latest intrusions provide new evidence that a
battle is heating up between the U.S. and potential adversaries
Speaker: Dr. Joel Brenner over the data networks that tie the world together.
National Counter
Intelligence Executive, DNI
“Cyber International
Relations,”
MIT’s Center for
International Studies and
the Belfer Center for
Science and International
Affairs, Harvard Kennedy
School of Government.
13 Apr 2009 E38-714, MIT
Page 2, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

3. The Application of RFID to Enhance Supply Chain Security
Transatlantic Symposium on the Societal Benefits of RFID
Washington DC, USA September 22nd 2008
“The transportation sector has always been concerned with efficiency, security
and safety issues. After 9/11, the hazardous materials industry saw major
changes, intensifying security requirements. New regulations made it more
challenging to comply and to ship hazardous materials. Homeland Security has
provided an influx of resources to raise awareness and to develop improved and
better solutions. Tracking technologies such as RFID and sensors have proven
to bring substantial benefits to support the agenda.
The Sensor Net project, led by ORNL, shows how to integrate sensor-deployed
technologies and databases in hazardous material shipping. Sensor Net is an
RFID+sensor enabled application that helps to identify and monitor materials
as they move through the supply chain. It provides awareness of the location of
hazardous materials at every moment, in real time.”
Randy Walker (Transportation Programs Lead, SensorNet Program, Oak Ridge
National Laboratory)
Prepared by Rebecca Schindler for the European Commission, Information
Society and Media Directorate General, Networked Enterprise & Radio
Frequency Identification (RFID) Unit (D4)
Page 3, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

4. Lighthouse Pilot participant resources:
ORNL Sensornet
Oak Ridge National Laboratory (ORNL) and strategic partners are working
together to build a comprehensive incident management system for the near-
real-time detection, identification, and assessment of chemical, biological,
radiological, nuclear, and explosive (CBRNE) threats…
The web service interfaces use Open GIS Consortium (OGC) XML schemas for
publication of sensor data and alerts. OGC is an association developing open,
vendor-independent computing standards for geographic information systems
(GIS) and other related technologies. OGC specifies the usage of the Geography
Markup Language (GML), an XML grammar written in XML Schema, for the
encoding of geographic information. Although GML provides specifications for
describing a variety of geographical information, the fundamental element of
GML is a geographic "feature".
Page 4, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

5. Lighthouse Pilot participant resources:
UPU "Global Monitoring System – RFID Infrastructure”
The official size of the global letter post market is 437 billion items (UPU
2005). The Universal Postal Union (UPU) is a specialized agency of the
United Nations which has been charged with improving the global
performance of mail. A link between letter mail quality of service and the
payments made between countries has been agreed as the method for
achieving this objective. There is a need for a Global Monitoring System
(GMS) to provide the neutral and independent measurement for such a
scheme.
UPU is developing a Global Monitoring System (GMS) to measure
service performance that will use RFID (Radio Frequency Identification)
technology
First QSF Global Project to participate in the Global Monitoring System
under development*
• *Quality of Service Fund Regional Training Workshop; 2008, UPU
Page 5, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

6. European Secure Supply Chain Academic Resource:
FP7 Secure SCM project
• SecureSCM will realize secure computation protocols
for collaborative Supply Chain Management.
• Build novel protocols for data confidentiality in supply chain
optimization.
• Implement and evaluate those protocols under real world
constraints.
• Demonstrate the benefits of data protection in a number of
domains, including Aerospace and Logistics.
• Research the obstacles to practical adoption of
collaborative supply chain management.
Page 6, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

7. US Secure Supply Chain Academic Resources:
NSF CISE Cybertrust International Research Collaboration:
"How does cybersecurity change when we attach ‘things’ connected
by RFID, sensors and actuators to the network? “
• Mustaque Ahamad, co-director, Georgia Tech Information Security
Center.
CT-ISG: Trusted Passages: Managing Distributed Trust to Meet
the Needs of Emerging Applications
• Kevin Fu, University of Massachusetts, Amherst
CT-T Collaborative Research: Security for Smart Tags
• Berk Sunar, Worcester Polytechnic Institute,
CT-ER: Exploring Physical Functions for Lightweight and Robust
Cryptography
Page 7, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

8. GTRI and GT Ireland end-to-end presence for US-EC RFID
Lighthouse Pilot in Georgia and Ireland
MIT – SAP Modeling
the impact of security
on EPC network
performance
Page 8, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

9. Adding sensors for tracking containers in the US Navy
GTRI Container Security Device
•Developed for Department of Homeland Security
•Continually monitors for door openings
•Container visibility throughout the supply chain
My ID is…
I have been opened
in route…
GTRI Integrated RFID Sensor
In alignment with GS-1 Transportation Working
Group (TWG) XCAT Specifications
I am
emitting a I am located here…
chemical… •Developed for Department of Navy
•Monitors environmental conditions and location
of container
•Meets communication standards for safe
shipping
Page 9, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

10. Commercial asset tracking examples
• TrenStar beer keg tracking:
• iGPS pallet tracking
4/13 @6pm Stata Center
(Bldg. 32) Rm 144,
Tracking RTIs with RFID presents
challenges : placement for maximun
tags read, types and location of tags,
type and placement of readers,
choice of frequencies…
Page 10, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

11. Securing our Cities; Trash Tracking
MIT CSAIL
GSM RFID TAG
Lewis Girod
Page 11, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09

12. An ‘Internet of Things’ – "How do we ensure cybertrust when we attach ‘things’
connected by RFID, sensors and actuators to the network?“
photo background cc by benlo
Page 12, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09 (http://www.flickr.com/photos/25203067@N00/58482958/

13. Academic Resources; participants from the RFID Academic
Convocations/European Commission EU RFID Forum.
• RFID Academic Convocations: MIT
Open Courseware program -
http://ocw.mit.edu/OcwWeb/Engine
ering-Systems-Division/ESD-
290Spring-
2005/ConferenceVideos/
• EU RFID Forum; hosted by the
European Commission DGINFSO -
http://www.rfidconvocation.eu/Con
vocation.htm
• RFID Technology and
Applications, Edited by Stephen
Miles, Sanjay Sarma, John
Williams -
www.cambridge.org/978052188093
0
Page 13, “Securing the Internet of things;” s_miles@mit.edu
US-EC RFID Lighthouse Pilot Planning Session, Brussels 5/5/09