Varnost eSIM v internetu stvari

PANJAN, KRISTJAN (author), Kos, Andrej (mentor)

Diplomska naloga je namenjena razumevanju delovanja sistema oddaljenega zagotavljanja naročnin in njegovega vpliva na varnost na področju interneta stvari. Uvodni del opisuje delovanje IoT in varnostna vprašanja, na katere bi proizvajalci morali imeti odgovore z namenom, da ta svet naredijo povezan in hkrati varen. V osrednjem delu je predstavljena arhitektura sistema eSIM in njegovo delovanje. Na koncu pa so predstavljeni akterji, ki skrbijo za razvoj in standardizacijo tehnologije ter s tem dvigujejo varnost, in načini, kako se tega lotevajo. eSIM je tehnologija, ki temelji na preverjenih in množično uporabljenih SIM karticah, ki skrbijo za povezljivost mobilnih naprav še danes. Pametno vezje in varnostni element znotraj teh kartic zagotavljata integriteto podatkov uporabnika in s tem zagotavljata varnost. Potreba proizvajalcev po novi obliki SIM kartice pa je prišla ravno zaradi interneta stvari ter težnji trga po zagotavljanju povezljivosti vse manjših in vse bolj nenavadnih naprav. Varnost je še vedno najpomembnejša tema v razpravah interneta stvari. Zagotoviti povezavo ni težko, težko je to povezavo narediti zaupanja vredno in odporno na razne oblike prestrezanja podatkov še posebej tistih občutljivejših, osebnih. Tukaj so GSM Association, Global Platform in ETSI združili moči in skupaj usmerjajo razvoj eSIM tehnologije ter z vso standardizacijo, ki je bila narejena do zdaj, stremijo k temu, da bi bila ta tehnologija, ki je od svojega začetka prišla daleč in si utira pot na trg poslovnih in potrošniških rešitev, še bolj dostopna hkrati pa varna. V tej diplomski nalogi so opisani delovanje in predvsem varnostne ovire in izzivi, ki se postavljajo razvijalcem, raziskovalcem in končno tudi potencialnim uporabnikom. Zagotovitev varnosti na področju eSIM in oddaljenega zagotavljanja naročnin ter interneta stvari je namen sodelovanja med glavnimi akterji, da še naprej skrbijo in dopolnjujejo varnostne elemente v eSIM ter s tem zagotovijo integriteto uporabnikov in podjetij v času, kjer bo vsaka stvar košček mozaika svetovne mreže povezanih naprav.

• Language: Slovenian
• Keywords: IoT, SIM, eSIM, varnost, standardizacija
• Work type: Undergraduate thesis
• Organization: FE - Faculty of Electrical Engineering
• Year: 2019
• PID: 20.500.12556/RUL-110063
• Publication date in RUL: 11.09.2019

Secondary language

• Language: English
• Title: Security eSIM in the Internet of Things

Abstract

The diploma thesis is aimed at understanding the operation of the remote subscription provisioning system and its impact on the Internet of Things security. The introductory section describes how IoT works and the security questions that manufacturers should have to answer in order to make this world connected and safe at the same time. The central part presents the architecture of the eSIM system and its operation. Finally, actors who are responsible for the development and standardization of technology are presented, thereby raising security and how to address it. eSim is a technology based on verified and widely used SIM cards that keep mobile devices connected today. The smart circuitry and security element inside these cards ensure the integrity of the user's data and thus provide security. Manufacturers' need for a new form of SIM card came precisely from the Internet of Things and the market's tendency to provide connectivity to smaller and more unusual devices. Security is still a top topic in the Internet of Things debate. It is not difficult to secure a connection, it is difficult to make that connection trustworthy and resistant to various forms of data interception, especially those of a more sensitive, personal nature. Here, the GSM Association, Global Platform and ETSI have joined forces to jointly direct the development of eSIM technology, and with all the standardization that has been done so far, strive to be a technology that has been brewing far and wide from the beginning to the business and consumer solutions market, even more accessible while safe. This thesis describes the operation and, above all, the security barriers and challenges posed to developers, researchers, and ultimately potential users. Ensuring eSIM security and remote provision of subscriptions and the Internet of Things is aimed at collaborating between key actors to continue to nurture and complement security features in eSIM, thereby ensuring the integrity of users and businesses at a time when every thing is a bit of a mosaic of a worldwide network of connected devices.

• Keywords: IoT, SIM, eSIM, security, standardization