<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Stand to Research the Privacy Limitations of the Internet of Things in the DID's Perspective</article-title>
      </title-group>
      <contrib-group>
        <aff id="aff0">
          <label>0</label>
          <institution>Proceedings of the XX International Conference “Data Analytics and Management in Data Intensive Domains” (DAMDID/RCDL'2018)</institution>
          ,
          <addr-line>Moscow</addr-line>
          ,
          <country country="RU">Russia</country>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>Mikhail Shpak Bauman Moscow State Technical University</institution>
          ,
          <addr-line>Moscow</addr-line>
          ,
          <country country="RU">Russia</country>
        </aff>
      </contrib-group>
      <fpage>222</fpage>
      <lpage>225</lpage>
      <abstract>
        <p>Accelerated growth of the Internet of Things (IoT) expands the implementation of it in our everyday life. The IoT connects artificial intelligence and different physical applications or devices, in order to expand the usage scope and make cities more innovative. A great amount of data produced by the IoT is an example of Data Intensive Domains (DID). The first two parts of this article is a background overview of the IoT and areas, where the IoT is developing. The third part describes the privacy limitations and possible solutions. The fourth part is about the level of IoT privacy limitations in the era of DID. In Conclusion the Research Stand was developed and aims that are planned to achieve.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1 Introduction</title>
      <p>
        The Internet of Things is a new era of communication
between the people and the devices. Everyone is surrounded
with all possible types of electronics, which make life easier.
The Internet of Things is a network of smart devices. Smart
devices are machines or appliances that utilize different
protocols, such as RFID (Radio Frequency Identification),
Bluetooth or TCP/IP (Transmission control Protocol) and
technics to transfer information over the Internet and
exchange the data between the customers and services in the
cloud, as described by [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ]. The amount of smart devices has
already outnumbered the number of employees working in
offices, and this number is predicted to grow up-to 26 billion
by 2020. Following are some examples of industries, where
smart devices are frequently used and how do they produce
data.
Different areas of usage include smart homes, transport
and logistics, health and retail industries. We shall
consider these devices from the point of possible
personal data theft.
      </p>
      <p>Smart home devices are used to smart control door locks,
windows, air conditioner, heater, electricity plugs, coffee
machines, dishwashers, alarm clock, fire alarm, smoke
detectors and window shades. Smart home management
is divided into three parts: smart control, smart
powersaving and smart application.</p>
      <p>
        Transport industries smart devices are used to provide
mobile services in the car with high speed Internet. This
feature will enable real time traffic control, interaction
with the car manufacturer service for remote diagnostics
and improved company logistics automation. Moreover,
in the beginning of the self-driven car era, they start to
use Internet for information exchange between the cars
for better route selection and accident reports.
In health industry smart devices are used by a lot of
people. These are devices like smart watches to trace the
heart rate, glucose level for diabetics, sleep time
duration, workout results, breathing rate, body
temperature and other health indicators. These indicators
can be shared either with different applications to create
an overview of our day or with the doctor [
        <xref ref-type="bibr" rid="ref2">2</xref>
        ], who can
adjust medical treatment according to the received
information.
      </p>
      <p>
        In retail shops they use different sensors, lasers and RFID
scanners to improve their business strategy by better supply
chain management and creating customer’s profile.
According to the study of [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ] the improved store
performance, choice of products and customers footprint can
be measured by the means of indoor positioning system.
Table 1 (see Table 1) created by the author shows the
existence of the problem about customer’s personal
information in regards to every type of smart device.
According to Table 1, certainly, there are many different
ways to make life or business process easier, and people
continue looking for different ways to implement the Internet
of Things technologies in other industries. Thus, the trend of
Internet of Things will be constantly growing.
      </p>
    </sec>
    <sec id="sec-2">
      <title>3 Privacy limitations and Solutions</title>
      <p>
        Privacy is a very important aspect of human’s life,
especially when all devices people are using, sometimes
are able to collect sensitive information about our life.
The Internet of Things devices create information that is
used for the analysis purpose [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ].
      </p>
      <p>
        All devices in the Internet of Things generate data, and
not all people understand what happens after they agreed
with all the terms and conditions proposed by the
business. Users have limited rights in managing smart
devices. According to the study [
        <xref ref-type="bibr" rid="ref5">5</xref>
        ], in order to use the
collected data user permission should be acquired stating
what opportunities this data will make for the future use
of this technology.
control monitoring the status and the mode of
home devices
power- evaluates the user energy consumption
patterns and assists in reducing the waste of
energy
potentially expand the functionality of
home’s smart devices
real time traffic control, remote diagnostics,
logistics automation
for better route selection and accident reports
Air Quality Egg o monitor the air quality and
pollution level in the city and create a
pollution map
medical data from smart health devices,
medical supply management
Evaluate the business strategy
      </p>
      <sec id="sec-2-1">
        <title>Personal data leak issue</title>
        <p>Exists</p>
        <sec id="sec-2-1-1">
          <title>Exists</title>
        </sec>
        <sec id="sec-2-1-2">
          <title>Exists</title>
        </sec>
        <sec id="sec-2-1-3">
          <title>Exists</title>
        </sec>
        <sec id="sec-2-1-4">
          <title>Exists No</title>
        </sec>
        <sec id="sec-2-1-5">
          <title>Exists No</title>
        </sec>
      </sec>
      <sec id="sec-2-2">
        <title>Type of Information</title>
        <sec id="sec-2-2-1">
          <title>Status, mode</title>
        </sec>
        <sec id="sec-2-2-2">
          <title>Water amount, gas amount and electricity amount in a certain period of time</title>
        </sec>
        <sec id="sec-2-2-3">
          <title>Vulnerabilities in the software</title>
        </sec>
        <sec id="sec-2-2-4">
          <title>No data</title>
        </sec>
        <sec id="sec-2-2-5">
          <title>Information exchange between the cars (multihop) No data</title>
        </sec>
        <sec id="sec-2-2-6">
          <title>Exchange of health data with doctors, adjustment of treatment</title>
        </sec>
        <sec id="sec-2-2-7">
          <title>No data</title>
          <p>Next four subsections will discuss how to limit the
possibility of a hacker attack and other vulnerabilities.
An in-depth literature review has been made to
categorize many different types of vulnerabilities for
future implementation and modeling in the research
stand.</p>
        </sec>
      </sec>
      <sec id="sec-2-3">
        <title>3.1 Solution One – Light weight authentication method Numerical Control Information</title>
        <p>
          The Internet of things sensors, application and services
are usually connected by a software-defined networking
controller. This technology makes network control easier
by dividing network flow of the control plane from the
data plane. But the issue with this technology is that none
of the existing controllers have security firewall to block
malware containing packets from reaching the device
manager [
          <xref ref-type="bibr" rid="ref6">6</xref>
          ]. Current situation makes the privacy control
questionable in different smart devices.
        </p>
      </sec>
      <sec id="sec-2-4">
        <title>3.2 Solution Two – Controller with enhanced security firewall method (Data security and data encryption)</title>
        <p>
          Privacy question is very sensitive for people. More
than 60% of social media users identified the lack of
control on shared information [
          <xref ref-type="bibr" rid="ref7">7</xref>
          ]. People are using web
security surveillance IP-cameras inside their apartments,
but when people are at home, they continue recording,
and that makes their life more transparent. Someone who
has access to their Wi-Fi network can use
man-in-themiddle breach to gain unauthorized access to video
archives or can open the door lock. Attacker, who got
access to private medical data held on smart health
devices or got permission level to change the code of the
mechanisms, can potentially cause major health
problems or even death [
          <xref ref-type="bibr" rid="ref8">8</xref>
          ].
        </p>
      </sec>
      <sec id="sec-2-5">
        <title>3.3 Solution Three - Data encryption both local and in the cloud</title>
        <p>If the data from the smart devices will be stolen and
misused, it will have a big impact on privacy. Different
companies, such as social networks, smart phones,
laptops, some loyalty programs and other have total
overview of our life since 2010, they know what people
buy, where do they spend time and even how do they
look, because of recent implementation of face
recognition systems into our phones, tablets and laptops.
Local Internet providers are sharing Internet usage
information, such as cookies with different
advertisement organizations.</p>
        <p>
          Technologically advanced world makes people’s life
easier, but at the same time increases the dependence on
the used systems. As mentioned in the article by [
          <xref ref-type="bibr" rid="ref9">9</xref>
          ], the
autonomous vehicles are very dependent on the
infrastructure, and if some part of the infrastructure has
failed, because of the weather condition or a hacker
attack, appears an unforeseen time gap between
autonomous driving and driver’s involvement, because
they lose connection with out of sensor range neighbours.
Market leaders create smart device ecosystems, which
don’t have a proper security implementation.
        </p>
        <p>One example, in March 2018 Amazon has bought a door
bell system for 2 billion dollars. After implementing it
with Amazon Alexa they will have access to the
information about people, who are currently at home or
who went on vacation.</p>
      </sec>
      <sec id="sec-2-6">
        <title>3.4 Solution Four– Anonymizing data</title>
        <p>All these technologies are reducing privacy around the
globe, and if the access to the information is not managed
properly it can result in increase of criminal actions and
privacy violations in the future and subsequently limit
the usage of the Internet of Things. People can just accept
the fact they are being watched and somebody has access
to their life. Any business is interested in income, and
lack of attention to security measures may potentially
turn into problems with personal privacy and data
information security. If the Internet of Things data gets
compromised different consequences may happen. The
future privacy limitation is an expanding problem, which
will be discussed further.</p>
      </sec>
    </sec>
    <sec id="sec-3">
      <title>4 The level of personal information security</title>
      <p>
        The Internet of Things devices generate very large amounts
of data every day. All this data is accumulated, transferred,
stored and analyzed. As more devices will be sold, the more
attractive this data will become for hackers. The level of
security of smart devices is usually very poor. According to
research of [
        <xref ref-type="bibr" rid="ref10">10</xref>
        ], one of the problems is in numerical control
information. Numerical control information in Internet of
Things is about how devices interact with each other.
Access to the privacy information can be obtained because
of false routing or a replay attack. According to the study of
[
        <xref ref-type="bibr" rid="ref11">11</xref>
        ] personal information can contain names, address,
phone numbers, emails and others. The damage from the
loss of personal information refers to the violation of both
business and customers interests in the disclosed
information.
      </p>
      <p>Numerical</p>
      <p>Control
Device</p>
      <p>Lightweight
Authentication</p>
      <p>Protocol
Smart home
devices
Transport</p>
      <p>Health</p>
      <p>Retail
shopping
Smart
control</p>
      <p>Smart
Powersaving</p>
      <p>Smart
application</p>
      <p>Services in
the car</p>
      <p>Remote
diagnostics</p>
      <p>Smart
watch</p>
      <p>Treatment
adjustment</p>
      <p>Customer
profiling</p>
      <p>Supply
chain
RFID
sensors</p>
      <p>Networking
controller
Man-in-the</p>
      <p>middle
Anonimizing
data
The purpose of this paper was to prepare research stand
aimed to the privacy limitations and security analysis in
the Internet of Things using the content of the Table 2
(see Table 2), it describes the Problems and Solutions of
the IoT, as a summary of the previous section.</p>
      <sec id="sec-3-1">
        <title>Problem Solution</title>
        <p>
          Low level of personal Numerical Control
information security Information
Low level of the privacy Networking controller
control with enhanced security
firewall
Data theft and misuse Anonymizing data
Authentication process in A transfer security
transfer control between lightweight protocol
the Internet of Things
devices
Each problem is planned to be analyzed in regards to the
level, where the vulnerability may occur. During the
modelling process [
          <xref ref-type="bibr" rid="ref12">12</xref>
          ], sample data will be sent to the
IoT hub and different analysis and characteristics of the
problem will be measured at the solution implementation
point to verify the proposed stand structure and to
recommend possible solutions to eliminate gaps in
security.
        </p>
      </sec>
    </sec>
    <sec id="sec-4">
      <title>Conclusion - Future DID’s Impact on</title>
    </sec>
    <sec id="sec-5">
      <title>Privacy</title>
      <p>The topic identified for further research is data intensive
analysis in DID. Different types of the privacy
limitations’ and solutions’ are briefly described further
and illustrated by Figure 1 (see Figure 1) Scheme of
Research Stand. Different levels of dataflow are
presented on the scheme. First level is showing the
industries and types of implementation of the IoT. The
second level shows examples of data collecting methods.
The third level from IoT hub to Data Analysis shows the
process of collecting and processing the data and types
of vulnerabilities, which may affect the security. Each of
the solutions on the scheme gives an illustration of every
solution for better understanding, on which level each of
them may be tested and what other new possible
outcomes can be foreseen during the dataflow.
Acknowledgments. This work is supervised by
Associate Professor, PhD, Dr. Elena Smirnova, Faculty
of Informatics and Control Systems, Bauman Moscow
State Technical University.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <surname>Ko</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Lee</surname>
            ,
            <given-names>B.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Lee</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Hong</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Kim</surname>
            ,
            <given-names>N.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Paek</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          (
          <year>2015</year>
          ).
          <article-title>Sensor virtualization module: Virtualizing IoT devices on mobile smart phones for effective sensor data management</article-title>
          .
          <source>International Journal of Distributed Sensor Networks</source>
          ,
          <year>2015</year>
          ,
          <fpage>1</fpage>
          -
          <lpage>10</lpage>
          . doi:
          <volume>10</volume>
          .1155/
          <year>2015</year>
          /730762
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <surname>Buldakova</surname>
            ,
            <given-names>T.I.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Suyatinov</surname>
            <given-names>S.I.</given-names>
          </string-name>
          (
          <year>2014</year>
          )
          <article-title>Reconstruction method for data protection in telemedicine systems // Progress in Biomedical Optics and Imaging -</article-title>
          <source>Proceedings of SPIE</source>
          .
          <year>2014</year>
          . Vol.
          <volume>9448</volume>
          . Paper 94481U.
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <surname>Hwangbo</surname>
            ,
            <given-names>H.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Kim</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Lee</surname>
            ,
            <given-names>Z.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Kim</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          (
          <year>2017</year>
          ).
          <article-title>Store layout optimization using indoor positioning system</article-title>
          .
          <source>International Journal of Distributed Sensor Networks</source>
          ,
          <volume>13</volume>
          (
          <issue>2</issue>
          ),
          <fpage>27</fpage>
          -
          <lpage>40</lpage>
          . doi:
          <volume>10</volume>
          .1177/1550147717692585
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <surname>Perera</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Zaslavsky</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Christen</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Georgakopoulos</surname>
            ,
            <given-names>D.</given-names>
          </string-name>
          (
          <year>2014</year>
          ).
          <article-title>Context aware computing for the Internet of Things: A survey</article-title>
          .
          <source>IEEE Communications Surveys &amp; Tutorials</source>
          ,
          <volume>16</volume>
          (
          <issue>1</issue>
          ),
          <fpage>414</fpage>
          -
          <lpage>454</lpage>
          . doi:
          <volume>10</volume>
          .1109/surv.
          <year>2013</year>
          .
          <volume>042313</volume>
          .00197
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <surname>Perera</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Ranjan</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Wang</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Khan</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Zomaya</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          (
          <year>2015</year>
          ).
          <article-title>Big data privacy in the Internet of Things era</article-title>
          .
          <source>IT Professional</source>
          ,
          <volume>17</volume>
          (
          <issue>3</issue>
          ),
          <fpage>32</fpage>
          -
          <lpage>39</lpage>
          . doi:
          <volume>10</volume>
          .1109/mitp.
          <year>2015</year>
          .34
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <surname>Nguyen</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Yoo</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          (
          <year>2017</year>
          ).
          <article-title>Analysis of attacks on device manager in software-defined Internet of Things</article-title>
          .
          <source>International Journal of Distributed Sensor Networks</source>
          ,
          <volume>13</volume>
          (
          <issue>8</issue>
          ),
          <fpage>44</fpage>
          -
          <lpage>52</lpage>
          .doi:
          <volume>10</volume>
          .1177/1550147717728681
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [7]
          <string-name>
            <surname>Sarikakis</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Winter</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          (
          <year>2017</year>
          ).
          <article-title>Social media users' legal consciousness about privacy</article-title>
          .
          <source>Social Media + Society</source>
          ,
          <volume>3</volume>
          (
          <issue>1</issue>
          ),
          <fpage>1</fpage>
          -
          <lpage>14</lpage>
          . doi:2056305117695325
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <surname>Khera</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          (
          <year>2016</year>
          ).
          <article-title>Think like a hacker</article-title>
          .
          <source>Journal of Diabetes Science and Technology</source>
          ,
          <volume>11</volume>
          (
          <issue>2</issue>
          ),
          <fpage>207</fpage>
          -
          <lpage>212</lpage>
          . doi:
          <volume>10</volume>
          .1177/1932296816677576
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [9]
          <string-name>
            <surname>Lee</surname>
            ,
            <given-names>E.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Gerla</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Pau</surname>
            ,
            <given-names>G.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Lee</surname>
            ,
            <given-names>U.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Lim</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          (
          <year>2016</year>
          ).
          <article-title>Internet of vehicles: From intelligent grid to autonomous cars and vehicular fogs</article-title>
          .
          <source>International Journal of Distributed Sensor Networks</source>
          ,
          <volume>12</volume>
          (
          <issue>9</issue>
          ),
          <fpage>1</fpage>
          -
          <lpage>14</lpage>
          . doi:
          <volume>10</volume>
          .1177/1550147716665500
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [10]
          <string-name>
            <surname>Li</surname>
            ,
            <given-names>Y.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Li</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          (
          <year>2017</year>
          ).
          <article-title>A privacy protection mechanism for numerical control information in Internet of Things</article-title>
          .
          <source>International Journal of Distributed Sensor Networks</source>
          ,
          <volume>13</volume>
          (
          <issue>8</issue>
          ),
          <fpage>16</fpage>
          -
          <lpage>24</lpage>
          . doi:
          <volume>10</volume>
          .1177/1550147717726312
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          [11]
          <string-name>
            <surname>Lu</surname>
            ,
            <given-names>X.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Qu</surname>
            ,
            <given-names>Z.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Li</surname>
            ,
            <given-names>Q.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Hui</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          (
          <year>2015</year>
          ).
          <article-title>Privacy information security classification for Internet of Things based on internet data</article-title>
          .
          <source>International Journal of Distributed Sensor Networks</source>
          ,
          <volume>11</volume>
          (
          <issue>8</issue>
          ),
          <fpage>11</fpage>
          -
          <lpage>17</lpage>
          . doi:
          <volume>10</volume>
          .1155/
          <year>2015</year>
          /932941
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          [12]
          <string-name>
            <surname>Buldakova</surname>
            ,
            <given-names>T.I.</given-names>
          </string-name>
          , &amp;
          <string-name>
            <surname>Dzhalolov</surname>
            <given-names>A.S</given-names>
          </string-name>
          (
          <year>2012</year>
          ).
          <article-title>Analysis of data processes and choices of dataprocessing and security technologies in situation centers // Scientific</article-title>
          and Technical Information Processing.
          <year>2012</year>
          . Vol.
          <volume>39</volume>
          . No. 2. P.
          <volume>127</volume>
          -
          <fpage>132</fpage>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>