Intelligent Appliances: Increasing User Engagement with Future-Proof Security

AI Quick Summary

This project presents sustainable methods for intelligent appliances. These are methods and implementation guidelines designed to optimize the usage of household appliances, thereby decreasing their energy consumption and increasing their product lifecycles. This is done by engaging the user with secure, meaningful, and non-intrusive data, from both the appliance and the manufacturer, in real-time. The information is consolidated and presented in a platform-independent browser. Appliance DataIn ideal circumstances, our home appliances could provide us a wealth of data about:Energy consumptionWhat are easy ways that the user could reduce energy consumption?How does the consumption compare to other similar devices in similar modes of operation?What is the trend of energy consumption, based on the history of the device?Proper device usageIs the washing machine too full or half-empty?Is the oven pre-heated?Has the refrigerator lost power?Maintenance informationWhat is error code "E-18"?Why information can be communicated to the repair technician prior to the site visit?Why did my refrigerator start making that terrible noise?In practice, very-little of this data is available to users, manufacturers, technicians, and power operators.Why is this?This project pitch seeks to address this challenge and provide elegant, cost-effective solutions for making this available and encouraging users to take advantage of it.ProblemVery-few appliances have data connectivity (even those who are theoretically capable of it)Many older appliances exist that will never be retrofitted for data connectivityUsers do not want to connect their appliances directly to the Internet, due toComplexity of installationSecurity issues of Internet-connected devicesPrivacy concerns of data collectionWho wants an Internet connected toilet, even if there is no camera?Devices which feature bi-directional communication (control as well as monitoring) require some kind of login, security token, and/or session keyDevice logins often suffer from security vulnerabilities which were not foreseen at design timeAppliances have far-longer lifecycles than other types of Internet-connected devicesAdding Internet connectivity to appliances may shorten the lifecyclesThis can result in mountains of not-very-recyclable wasteInternet connectivity in appliances can be expensive to add and maintainApps must be made for multiple platforms (Android, IOS, Windows, etc)Different appliances will have different apps, drivers, libraries, software stackWill newer apps always be compatible with all versions of older appliances?The number of different apps that must be maintained by the manufacturer will grow exponentiallyFixing a security weakness that exists in multiple appliances and/or apps is dauntingWill anyone maintain Android and IOS apps for a 15-year-old washing machine?Is this another method of forced obsolescence?Related WorkMany solutions for appliance monitoring exist. However, virtually every solution in this space requires one or more of the following:Bi-directional communication with the device (requiring a login or security token)An AppDirect Internet connectivity for the applianceThese are all deal-breakers to widespread adoption.Long-term, bi-directional connectivity for appliances with multi-decade lifecycles is not realistic.This proposed solution requires none of these.Proposed SolutionBroadcast data from the appliance directly to a mobile phone browser (1-way communication, no login)Secure the broadcast using the appliance serial number as an encryption keyThe user loads a web page on a phone or some convenient deviceThe web page knows how to receive, decrypt, and format the data for the userThe user can submit the data back to the server (i.e., the appliance manufacturer) at the press of a buttonThe method of broadcast should not be considered private and should be openly-published.Further UsabilityInstallation can be done simply by pointing the phone at a QR code on the applianceLoads a URL for the appliance manufacturer into the browserProvides a hash of the device key/serial-number in the URLThe browser loads a web page that can decode the broadcasted dataThe user can view formatted device dataThe user can submit the data to the manufacturer at a click of a buttonThe user should be able to install the app with a few clicks, without reading a manual.What does this mean for Energy Usage?Awareness of energy consumptionEnable analysis of historical consumptionProvide tips about optimal appliance usageWashing machine half-empty or too fullPartially-clogged pipesNotices that the device needs maintenance for efficient operationInformation about error codes that are announced to the userAlters when the oven is preheatedProvide rich maintenance information to technicians without requiring a site visitWith these concepts in mind, it could be assumed that energy savings per appliance could be achieved.Scaling this globally, the amount of energy savings is an unrealistic dream.Minimal Implementation CostsHardware:Devices with no login requireLess processing powerLess RAMLess static storageSoftware:A device with a login requires more-complicated softwareMust be developed both for the appliance and a multi-platform appMust be written to be patched in case of a security vulnerabilityMaintenance:Mobile apps must be upgraded when the underlying platform becomes obsoleteMultiple platforms, multiple appliances and versions, and multiple apps create an impossible matrix of upgrades to maintainNot maintaining them invites an attack vector into the physical worldFeature-Rich BenefitsHigh adoption rate due to:Trivial installation processNo security risk of hackers breaking inNo permanent connection between the appliance and the InternetAllows the user and the manufacturer to get data from otherwise unconnected devicesFacilitate device maintenance by providing data without an on-site technicianRaise awareness of energy consumption and optimal device usageDecode and explain error codesProvide information about optimizing the device usageFuture proof security — no loginImplementationBroadcast appliance data over a standard mediumBluetooth, BLE, NFC, WiFi Halow, LoRaBroadcast data in a standard format (JSON/XML)Using a standard encryption algorithm with the device serial number as a keyBroadcast directly to a platform-independent browser, *without* the need for an appPublish the protocolRisksThe problem of getting device data directly into the browser is not practical/feasibleWebBluetooth, WebNFC, and WebUSB are all draft standardsThey pose significant security weaknesses and are occasionally disabled by default in browsersThere may be portions of the protocol/standard that are necessary for the use-case, but not yet functionalLow corporate acceptance of the solutionDoes not provide a permanent data connection to the applianceDoes not allow control of the applianceAllows 3rd-party companies, hobbyists, and competitors access to the data of individual appliances

Project Idea Metadata

• Project Idea Name: Intelligent Appliances: Increasing User Engagement with Future-Proof Security
• Date: 3/11/2022 1:22:18 PM
• Administrators:
  • Bryant Hansen

Project Idea Description

Appliance Data

In ideal circumstances, our home appliances could provide us a wealth of data about:

• Energy consumption
• What are easy ways that the user could reduce energy consumption?
• How does the consumption compare to other similar devices in similar modes of operation?
• What is the trend of energy consumption, based on the history of the device?
• Proper device usage
• Is the washing machine too full or half-empty?
• Is the oven pre-heated?
• Has the refrigerator lost power?
• Maintenance information
• What is error code "E-18"?
• Why information can be communicated to the repair technician prior to the site visit?
• Why did my refrigerator start making that terrible noise?

In practice, very-little of this data is available to users, manufacturers, technicians, and power operators.

Why is this?

This project pitch seeks to address this challenge and provide elegant, cost-effective solutions for making this available and encouraging users to take advantage of it.

Problem

• Very-few appliances have data connectivity (even those who are theoretically capable of it)
• Many older appliances exist that will never be retrofitted for data connectivity
• Users do not want to connect their appliances directly to the Internet, due to
• Complexity of installation
• Security issues of Internet-connected devices
• Privacy concerns of data collection
• Who wants an Internet connected toilet, even if there is no camera?
• Devices which feature bi-directional communication (control as well as monitoring) require some kind of login, security token, and/or session key
• Device logins often suffer from security vulnerabilities which were not foreseen at design time
• Appliances have far-longer lifecycles than other types of Internet-connected devices
• Adding Internet connectivity to appliances may shorten the lifecycles
• This can result in mountains of not-very-recyclable waste
• Internet connectivity in appliances can be expensive to add and maintain
• Apps must be made for multiple platforms (Android, IOS, Windows, etc)
• Different appliances will have different apps, drivers, libraries, software stack
• Will newer apps always be compatible with all versions of older appliances?
• The number of different apps that must be maintained by the manufacturer will grow exponentially
• Fixing a security weakness that exists in multiple appliances and/or apps is daunting
• Will anyone maintain Android and IOS apps for a 15-year-old washing machine?
• Is this another method of forced obsolescence?

Related Work

Many solutions for appliance monitoring exist. However, virtually every solution in this space requires one or more of the following:

• Bi-directional communication with the device (requiring a login or security token)
• An App
• Direct Internet connectivity for the appliance

These are all deal-breakers to widespread adoption.

Long-term, bi-directional connectivity for appliances with multi-decade lifecycles is not realistic.

This proposed solution requires none of these.

Proposed Solution

• Broadcast data from the appliance directly to a mobile phone browser (1-way communication, no login)
• Secure the broadcast using the appliance serial number as an encryption key
• The user loads a web page on a phone or some convenient device
• The web page knows how to receive, decrypt, and format the data for the user
• The user can submit the data back to the server (i.e., the appliance manufacturer) at the press of a button

The method of broadcast should not be considered private and should be openly-published.

Further Usability

• Installation can be done simply by pointing the phone at a QR code on the appliance

1. Loads a URL for the appliance manufacturer into the browser
2. Provides a hash of the device key/serial-number in the URL
3. The browser loads a web page that can decode the broadcasted data
4. The user can view formatted device data
5. The user can submit the data to the manufacturer at a click of a button

The user should be able to install the app with a few clicks, without reading a manual.

What does this mean for Energy Usage?

• Awareness of energy consumption
• Enable analysis of historical consumption
• Provide tips about optimal appliance usage
• Washing machine half-empty or too full
• Partially-clogged pipes
• Notices that the device needs maintenance for efficient operation
• Information about error codes that are announced to the user
• Alters when the oven is preheated
• Provide rich maintenance information to technicians without requiring a site visit

With these concepts in mind, it could be assumed that energy savings per appliance could be achieved.

Scaling this globally, the amount of energy savings is an unrealistic dream.

Minimal Implementation Costs

• Hardware:
• Devices with no login require
• Less processing power
• Less RAM
• Less static storage
• Software:
• A device with a login requires more-complicated software
• Must be developed both for the appliance and a multi-platform app
• Must be written to be patched in case of a security vulnerability
• Maintenance:
• Mobile apps must be upgraded when the underlying platform becomes obsolete
• Multiple platforms, multiple appliances and versions, and multiple apps create an impossible matrix of upgrades to maintain
• Not maintaining them invites an attack vector into the physical world

Feature-Rich Benefits

• High adoption rate due to:
• Trivial installation process
• No security risk of hackers breaking in
• No permanent connection between the appliance and the Internet
• Allows the user and the manufacturer to get data from otherwise unconnected devices
• Facilitate device maintenance by providing data without an on-site technician
• Raise awareness of energy consumption and optimal device usage
• Decode and explain error codes
• Provide information about optimizing the device usage
• Future proof security — no login

Implementation

• Broadcast appliance data over a standard medium
• Bluetooth, BLE, NFC, WiFi Halow, LoRa
• Broadcast data in a standard format (JSON/XML)
• Using a standard encryption algorithm with the device serial number as a key
• Broadcast directly to a platform-independent browser, *without* the need for an app
• Publish the protocol

Risks

• The problem of getting device data directly into the browser is not practical/feasible
• WebBluetooth, WebNFC, and WebUSB are all draft standards
• They pose significant security weaknesses and are occasionally disabled by default in browsers
• There may be portions of the protocol/standard that are necessary for the use-case, but not yet functional
• Low corporate acceptance of the solution
• Does not provide a permanent data connection to the appliance
• Does not allow control of the appliance
• Allows 3rd-party companies, hobbyists, and competitors access to the data of individual appliances

This project presents sustainable methods for intelligent appliances. These are methods and implementation guidelines designed to optimize the usage of household appliances, thereby decreasing their energy consumption and increasing their product lifecycles. This is done by engaging the user with secure, meaningful, and non-intrusive data, from both the appliance and the manufacturer, in real-time. The information is consolidated and presented in a platform-independent browser.