□ Smart city security model background and purpose
Smart City aims to be a sustainable city that provides various urban services by convergence or complex application of various technologies to improve the city’s competitiveness and quality of life beyond the quantitative and economic growth of existing cities.
However, smart cities are easily exposed to cyber attacks as information and communication technologies are applied very intensively.
These cyberattacks can eventually disable various smart city services, paralyze city functions, and in serious cases, pose a threat to citizens’ lives.
 |
| Smart City Security Model |
The smart city security model can be applied immediately depending on the relationship between the smart service security model and existing cyber security guides and guidelines, and the timing of smart city project promotion by local governments.
It is utilized by local governments that plan, promote, and operate the construction of smart cities, and private companies that develop and deliver smart city infrastructure, platform software, and devices to provide smart city services.
We hope to contribute to the development of a safe smart city.
□ Smart City Components
Smart City Components
□ Subjects using smart city
The subject of use is a citizen of a smart city using the service, a citizen of another city who has visited the smart city, or a foreigner.
etc. Since they are simply using the smart city service, security according to the user’s use of the service
Functions can be provided, but security requirements cannot be presented.
※ Citizens directly participate in living labs and regulatory sandboxes, so they can be seen as ‘operating entities’, but they
Information protection control can be applied to the space/procedure/facility, etc. used and enforced. does not become a target.
□ Smart city operator
The operating entity is the entity that envisions smart city services and provides services for citizens and visitors to use. They are responsible for operating more secure smart city services and, accordingly, meet several security requirements. must be satisfied
Local governments are key operating entities that plan, build, and operate smart cities. Local governments build an integrated operation center to operate smart city services and use related information systems to ensure that services are accessible to citizens and visitors.
make available Therefore, they must identify information protection requirements from the planning stage of smart city services, develop services, and operate services using information systems or devices with information protection applied. In addition, since the integrated operation center is a place where all smart city data is concentrated and processed, it must be able to satisfy the requirements in terms of special security.
The service provider is a local government or a smart city service operator (referred to as SPC) selected by the local government, and has the same status as the local government in building and operating smart city services. Therefore, local governments and
It must be able to satisfy the requirements in the same security aspect.
※ SPC: A special purpose company for the purpose of building and operating smart city services. It is a private sector operator selected and operated by Smart City.
□ Smart City related organizations
Other related organizations can be divided into data providers that provide city-related data and linkages that provide linked services. Data providers support city virtualization (digital twin, etc.) by providing GIS BIM, etc.
Linked institutions refer to institutions that provide services such as police / fire / hospitals in response to citizens’ emergencies.
These related institutions may present direct security requirements depending on the service, but most of them fulfill security requirements when linking/linking data or safely manage the transmitted information, and these are the main security requirements.
Since each institution’s own management system must meet the requirements, it is not covered in this document.
※ GIS (Geographic Information System) means a geographic information system. BIM (Building Information Modeling) is called building (building) information modeling, which is a method of virtually modeling facilities in a multidimensional virtual space. means process.
□ smart city infrastructure
Smart city infrastructure is the most basic and classic area that constitutes smart city services. Collection / storage / movement of data necessary for service operation such as server, database, network equipment, security equipment, management PC, etc.
play a role In particular, since most smart city infrastructures are operated by local governments, the same protection system as major information and communication infrastructures is required.
□ Smart city platform software
Smart city platform software belongs to the basic area of smart city services along with smart city infrastructure. Service web, mobile app, operating software, smart city platform (data hub platform, IoT platform, cyber
security platform, digital twin) and serves to process the collected data or provide information after processing the data to provide the result of the service requested by the user.
□ smart city devices
Devices such as sensors, Internet of Things, and IoT play a role in collecting data in smart city services. Accurate data must be collected to provide services planned and processed by the smart city platform software. also
Smart city devices are located closest to citizens, so it is common for users to use them normally, but they can be easily exposed to attackers with malicious intent or mistakes by users. According to these equipment characteristics
Even in the case of theft or loss, it is necessary to set security to minimize the impact on smart city services. Since these security settings must clearly reflect the characteristics of smart city devices, 「IoT security certification for IoT products」
Application standard” is required to apply security requirements.
□ smart city service
Smart city services refer to the various services provided by smart cities. Depending on the classification criteria, the terminology may be different, but smart transportation, smart healthcare, smart education, smart energy, smart environment,
Smart safety, smart life, smart factories, realistic content, and self-driving cars can be serviced.
□ Smart city security management
Smart city security management is an area that manages all components that operate smart city services. For smart city security management, the operating organization, physical space, business procedures, information system and business system for business processing are equipped.
and use it to perform the task of providing smart city services. Various risks that can occur in these tasks are diverse, so comprehensive security requirements must be applied from the management, physical, and technical perspectives.
Source : Ministry of Science and ICT, Korea Internet & Security Agency
