Page 204 - Trust in ICT 2017
P. 204

3                                                    Trust in ICT



            Figure II.2 shows a brief categorization of WGs into trust technical issues.



























                                           Figure II.2 – Trust domains of IETF WGs


            2       Activities in Online Trust Alliance (OTA) for IoT

            OTA  is  a  non-profit  organization  with  the  mission  to  enhance  online  trust  and  address  IoT  risks
            comprehensively. The framework presents guidelines for IoT manufacturers, developers and retailers to
            follow when designing, creating, adapting and marketing connected devices in two key categories: home
            automation and consumer health and fitness wearables.
            Through extensive research, this taskforce concluded that the safety and reliability of any IoT devices, Apps
            or  services  depend  equally  on  security  and  privacy,  as  well  as  a  third,  often  overlooked  component:
            sustainability.
            Although  the  IoT  framework  of OTA  has  identified various  requirements, most  of  them  can  be  seen  as
            reinterpretation of traditional security and privacy issues. Therefore, it is noticed that trust in OTA includes
            more broad range of scope covering security and privacy as well as regulatory issues [b-Gilson, b-OTA-2015].


            3       Activities in Trusted Computing Group (TCG) for Interoperable Trusted Computing
                    Platforms

            TCG is a not-for-profit organization formed to develop, define and promote open, vendor-neutral, global
            industry  standards,  supportive  of  a  hardware-based  root  of  trust,  for  interoperable  trusted  computing
            platforms.

            TCG technologies do not provide an immediate solution to all IoT device and service security needs, but they
            enable existing and new IoT solutions to be fundamentally far more robust than today’s state-of the art.

            Solutions developed by TCG includes authentication, cloud security, data protection, IoT, mobile security and
            end-to-end security. Similar to OTA, TCG has also focused on various solutions from existing security and
            privacy issues while taking into account additional concepts of trust.

            TCG has provided the following concepts for trust related terminologies in the architecture’s guide for cyber
            security [b-TCG 2013, b-TCG 2015].












            196
   199   200   201   202   203   204   205   206   207   208   209