4.2 Application-Specific Initiatives

Global Americas Europe Asia Government 1 1 2 1 Industry 11 7 7 2 Academia 3 3 3 1

Table 4: IoT Security Initiatives – Membership (Region vs Domain)

At the same time there are numerous national research initiatives, typically at university level, focusing on IoT security. Notable examples include the PETRAS83 research hub formed by a group of U.K. universities led by University College London.

4.2 APPLICATION-SPECIFIC INITIATIVES Many pilots address IoT security in the narrower context of a specialised application domain such as automotive or healthcare84, often under domain-specific names such as "intelligent transportation", “smart mobility”, "smart grid", or "e-health". In the automotive domain, notable examples include the Centre of Excellence for Testing and Research of Autonomous Vehicles (CETRAN)85 at the Nanyang Technological University in Singapore and the Security Credential Management System (SCMS)86 of the U.S. Department of Transportation. Enterprise Singapore has published a set of provisional national standards, known as Technical Reference (TR) 68, to guide industry in the development and deployment of fully autonomous vehicles in Singapore. The TR includes cybersecurity principles and assessment methodology. A vehicular IoT technology that is already widely deployed is the EU-wide eCall initiative87, intended to bring rapid assistance to motorists in the event of a crash by communicating the vehicle’s location and direction to emergency services; eCall has been mandatory for all new cars sold within the EU since April 2018.

The Smart Mobility Working Group of AIOTI88 has done substantial work detailing the application of IoT principles to connected vehicles. Intelligent Transportation Systems (ITS) groups worldwide, particularly ERTICO89 in Europe, are involved in a number of pilot projects in the area of smart mobility. ERTICO has also released recommendations90 on communication technologies for future Cooperative ITS (C-ITS) scenarios. At the same time, consumer privacy is a concern in automotive IoT applications; the American Future of Privacy Forum91 and National Automobile Dealers’ Association (NADA) have published a consumer guide92 highlighting the types of data that connected cars collect and transmit.

In healthcare, efforts include in-home monitoring services for the elderly93 from Fujitsu and Panasonic, the M.A.I.L. (Motion capture and Artificial Intelligence assisted Liposuction)94 system from Korean plastic surgery provider 365mc, and remote monitoring and management of in-vitro diagnosis (IVD) devices95 by Roche Diagnostics96 in China. Cybersecurity concerns have naturally begun to emerge: in 2015, the U.S Food and Drug Administration (FDA) ordered hospitals to stop using the Hospira Symbiq infusion pump, which delivers medications directly into the bloodstream,

83 https://www.petrashub.org/ 84 We discuss these domains in more detail in Annex A. 85 http://erian.ntu.edu.sg/Programmes/IRP/FMSs/Pages/Centre-of-Excellencefor-Testing-Research-of-AVs-NTU-CETRAN.aspx 86 https://www.its.dot.gov/factsheets/pdf/CV_SCMS.pdf 87 https://ec.europa.eu/digital-single-market/en/news/ ecall-all-new-cars-april-2018 88 https://aioti.eu/aioti-wg09-report-on-smart-mobility/ 89 http://ertico.com/ 90 http://erticonetwork.com/ ertico-releases-guide-about-technologies-for-future-c-its-service-scenarios/ 91 https://fpf.org/ 92 https://fpf.org/2017/01/25/ fpf-and-nada-launch-guide-to-consumer-privacy-in-the-connected-car/ 93 http://www.fujitsu.com/global/about/resources/news/pressreleases/2015/0625-01.html 94 https://customers.microsoft.com/en-us/ story/365mc-azure-iot-suite-machine-learning-korea-en 95 https://customers.microsoft.com/en-us/story/roche-diagnostics 96 https://www.roche.com/about/business/diagnostics.htm