SBT, NEC, and CTJ jointly developed cyber security measures for buildings, “Smart Secure Service,” launched.

SB Technology Corp. (Headquarters: Shinjuku-ku, Tokyo, President ＆ CEO: Shinichi Ata, hereinafter referred to as SBT), NEC Corporation (Headquarters: Minato-ku, Tokyo, Representative Director, President and CEO: Takashi Niino, hereinafter referred to as SBT) NEC) and Cybertrust Japan Co., Ltd. (Headquarters: Minato-ku, Tokyo, President: Yasutoshi Makara, hereinafter CTJ) are building automation systems (hereinafter referred to as BA systems *1) and factory automation systems (hereinafter referred to as FA systems *2).) will jointly develop and begin providing a cybersecurity countermeasure system called ``Smart Secure Service.''

"Smart Secure Service" combines vulnerability diagnosis services, security consulting services, IoT-GW *3 services, and operation/monitoring services to match the life cycle of building equipment, which requires higher security performance as buildings become smarter. This service provides a wide range of security measures. This will support the spread of smart buildings and smart factories in the Society 5.0 era, which requires efficient management and advanced functionality.
The three companies will hold a webinar on cybersecurity measures for BA/FA systems using "Smart Secure Service" on Thursday, October 29th.

▶Click here for details on “Smart Secure Service”
https://www.softbanktech.co.jp/service/issue/smart-secure-service

▶Click here for webinar details and application
https://www.softbanktech.co.jp/seminar/2020/1029-01/

■Background
In recent years, BA/FA systems are increasingly being linked with various systems and IoT devices inside and outside the building in order to efficiently manage buildings and improve convenience for building users. Along with this, the risk of cyber attacks targeting BA/FA systems is also increasing. The "Guidelines for Cyber-Physical Security Measures for Building Systems" formulated by the Ministry of Economy, Trade and Industry states that the control systems used in BA/FA systems are becoming more and more common in daily life, similar to IT systems, due to the general-purpose and large-scale networks. It points out that there is a risk of cyber attacks, and suggests the idea of considering IEC (International Electrotechnical Commission) standards, which are security standards for control systems, as security standards for building systems.

SBT and CTJ have been working on security measures for the BA system since 2017, when the three companies together with Takenaka Corporation conducted a demonstration experiment of building equipment vulnerability diagnosis for a building owned by Takenaka Corporation *4. From these efforts, we realized that the spread of smart buildings requires security measures tailored to the life cycle of building equipment, and based on the knowledge we gained from this, we proceeded with the development of ``Smart Secure Service.''

"Smart Secure Service" is a third-party organization that complies with general-purpose control system security standards "ISO/IEC62443" and "CSMS V2.0" and cloud service security standards "ISO27017/27018," and prevents unauthorized access and external As a service, we provide countermeasures against threats such as device malfunctions, program rewriting, virus contamination, and information leaks.

■Service details
"Smart Secure Service" consists of the following services.

• Vulnerability diagnosis service
  Conduct vulnerability diagnosis and penetration testing for control systems
  Investigation of vulnerabilities in IoT devices and control controllers assuming unauthorized access, malfunctions caused by external devices, program replacement, virus contamination, etc.
• Security consulting service
  Establishment of cybersecurity countermeasure guidelines based on planning/design/construction/completion stages as well as vulnerability diagnosis and penetration test results
  Compliant with general-purpose control system security standards “ISO/IEC62443” and “CSMS V2.0” (Figure 3)
• IoT-GW service (Figure 4)
  Implement cybersecurity measures centered on network relay IoT-GW
  Automatic detection of IoT devices, identification of device information, etc.
• Operation/monitoring services
  24/7 system monitoring in conjunction with Network Operations Center (NOC)
  help desk
  IoT-GW maintenance

The IoT-GW service provided by "Smart Secure Service" consists of the following devices and components provided by NEC and CTJ.

• NEC
  A cloud service that can ensure the authenticity of IoT-GW by recording and managing various information related to a device's lifecycle, such as manufacturing history, as a trail on the blockchain, and distributing certificates necessary for strict device authentication. NEC IoT System Security Lifecycle Services”
  The "NEC AI Accelerator" mentioned above ensures authenticity by supporting cloud services, is equipped with IDS/IPS functions based on permission lists, and processes large amounts of data from IoT devices at high speed with edge computing.
• CTJ
  EMLinux, an industrial-grade Linux OS for IoT devices that achieves long-term use
  “Secure IoT Platform (SIOTP)” is a trust service that guarantees the authenticity of IoT devices through secure certificate authority operations and device certificate distribution and management by certificate providers.

The IoT-GW service has demonstrated stronger security performance than conventional services in a performance verification conducted at a building running the Takenaka Corporation Group's BA system. *5 Utilizing the functions of this IoT-GW service, we provide proposals for new buildings and factories from the planning stage, and for existing buildings and factories, we provide services such as diagnosis of existing systems and formulation of guidelines, BA/FA system security countermeasure services, etc. "Smart Secure Service" provides comprehensive measures aimed at continuous lifecycle management that ensures the authenticity of information.

SBT will be responsible for the overall production of the development and commercialization of "Smart Secure Service," and will also provide comprehensive support for customers, including implementation consulting at the planning and design stage, help desk and operation monitoring services after IoT-GW service implementation. We provide security solutions. Additionally, as a sales point for Smart Secure Service, we provide technical support for proposals, design, and implementation.

■ Reference price and sales target
The price provided will be individually estimated based on the service to be performed, the scale of the building, and the number of IoT-GW units.
For reference, IoT-GW service, operation/monitoring service (Legend: 2 IoT-GWs per floor, total 22 IoT-GWs installed in a newly constructed building with a floor area of 4,000 m2, 10 floors above ground and 1 floor underground) The approximate initial installation costs and annual operating costs are as follows.

Sales target: SBT aims to receive orders for 200 buildings over the next five years.

We are considering further enhancements to Smart Secure Service, including the following functions.

• Industrial control protocol automatic recognition/conversion algorithm with emphasis on short delivery times, low prices, and connectivity with equipment.
• A component for security monitoring services that works with a security operations center (SOC) to detect, defend, and monitor cyber attacks 24 hours a day, 365 days a year.
• Advancing anomaly detection in industrial control protocols using AI

SBT, NEC, and CTJ will continue to work on supporting the strengthening of security measures for BA/FA systems, such as expanding the functions of "Smart Secure Service," and supporting the spread of smart buildings and smart factories in the Society 5.0 era. Masu.

• *1 BA system: A general term for systems that automate the management and control of building equipment, such as power reception and substation, heat supply, air conditioning, elevators, disaster prevention, and surveillance cameras.
• *2 FA system: A general term for systems that automate the management and control of factory equipment, including production management, manufacturing line control, raw material reception, product shipping, and warehouse management.
• *3 IoT-GW: Communication equipment that processes data with low power consumption and high speed, reducing communication volume and cloud processing load.
• *4 Security vulnerability diagnosis of IoT devices in BA systems conducted by Takenaka Corporation, SBT, and Cybertrust Japan in November 2017
  Start of demonstration experiment assuming a cyber attack on an office building (announced on November 16, 2017)
  A demonstration experiment simulating a cyber attack on an office building discovered a vulnerability in the building equipment system (announced on April 10, 2018)
• *5Performance verification of in-building cyber security countermeasure system conducted on BA network of actual building (announced on October 7, 2020)

Contact information for each company regarding "Smart Secure Service" is as follows.

• SB Technology Corp.
  Customer contact: sbt-ipsol@tech.softbank.co.jp
• NEC
  Digital Platform Division: til-pr@dpf.jp.nec.com
• Cybertrust Japan Co., Ltd.
  Customer contact: iot-biz@cybertrust.co.jp

■ Webinar held
We will be holding a webinar on cybersecurity measures for BA/FA systems using "Smart Secure Service".

▶Click here for webinar details and application
https://www.softbanktech.co.jp/seminar/2020/1029-01/

• *Company names, product names, and service names mentioned in this release are trademarks or registered trademarks of our company or each company or organization.