IoT and the Future of Engineering: Security Concerns Challenge Us to Innovate Better

In the dynamic world of the Internet of Things (IoT), the role of engineers is not just about designing and maintaining connected devices, but about shaping the very fabric of our interconnected future. As technology rapidly advances and IoT devices become an integral part of our daily lives, it's the engineers who stand at the forefront of this evolution. Meet Lomash Kumar, who has spent most of the past decade building AWS IoT.

Tell us about the Internet of Things and what excites you in that space?

The Internet of Things (IoT) refers to the network of physical objects or "things" embedded with sensors, software, and other technologies for the purpose of connecting and exchanging data with other devices and systems over the internet. These objects can range from ordinary household items to sophisticated industrial tools. Almost any device with a sensor or actuator attached to it and a network card can be considered a “thing” that is connected to the internet. Examples include wearable devices, smart thermostats, connected cars, smart refrigerators, and even smart city technologies like traffic cameras or sensors embedded in infrastructure.

IoT brings about a range of benefits that span various sectors. One of the most prominent advantages is the significant boost in efficiency and productivity. With IoT, resources such as electricity and water can be used more optimally, and tasks can be automated to improve speed and reduce human error. This increased efficiency often translates into reduced operational costs and, in turn, leads to economic benefits.

Additionally, the vast amount of data collected by IoT devices offers rich insights into processes, environments, and user behaviors, aiding businesses in making informed decisions and even predicting future trends or issues. On a more personal level, IoT enhances user experiences in many ways, such as creating more comfortable and energy-efficient homes through smart devices or assisting in health monitoring with wearable tech. Furthermore, IoT also contributes to enhanced safety and security by providing real-time monitoring and predictive maintenance, ensuring systems and machinery function optimally and safely.

The Internet of Things presents several challenges despite its vast potential. Foremost among these are security concerns; as devices become interconnected, they offer more entry points for cyberattacks, especially when handling sensitive data or critical infrastructure. Privacy issues are also paramount, with many devices collecting extensive data, raising questions about its storage, access, and use. Technical challenges like interoperability, given the plethora of devices from various manufacturers, make seamless communication complex.

Moreover, the sheer volume of data produced can lead to data overload, necessitating efficient storage and analysis solutions. Reliable connectivity remains essential, yet not universally available, and energy constraints, particularly for battery-operated devices, pose further challenges. Managing a growing number of devices, ensuring scalability, navigating varying regulations, and addressing the initial economic investments further complicate the IoT landscape. Thus, while IoT has transformative potential, addressing these challenges is crucial for its successful integration into our daily lives and industries.

I am personally interested in the security and privacy challenges of IoT. These are opportunities for engineers like me to innovate and simplify the foundations of device identity and security for the next generation of IoT devices. I continue to work towards this goal and have filed several patents on this topic during the past decade - all of which have been issued.

How important is security in the IoT space?

Security for the Internet of Things is crucial due to the vast number of interconnected devices, which creates a broad attack surface. Many of these devices are integrated into critical infrastructures, like energy grids, transportation, and healthcare. A breach could lead to significant disruptions, financial losses, and even pose safety risks. Additionally, with IoT devices collecting vast amounts of personal and sensitive data, security lapses could compromise user privacy. Therefore, ensuring robust security measures is essential to maintain trust, functionality, and the overall success of IoT implementations.

Tell us more about your blockchain-related patent

The patent you refer to is one of my favorites among my patents; it addresses “Decentralized techniques for managing device administration rights”.

By 2030, it's projected that there will be between 25 to 50 billion IoT devices connected to the internet. As these smart devices vastly outnumber humans, it's crucial, both operationally and for security, to robustly track each device's identity. In this patent, I introduce a system where devices are assigned an identity at manufacture, which they maintain throughout their life for simplified tracking. The challenge is creating a lasting, unchangeable identity system, as currently, individuals juggle multiple digital identities across various online platforms, despite having singular physical identifiers like a social security number.

This fragmentation exists because every digital platform has developed its authentication system, leading to no universal solution. Such a decentralized approach was chosen to avoid a single point of failure. My patent offers a solution to the device identity challenge using blockchain technology, a type of distributed ledger. This not only eliminates potential single points of failure but also makes the identity system inherently open.

What are you currently working on?

I am a principal software development engineer at Amazon Web Services, focusing on the Industrial IoT, helping customers in manufacturing, oil & gas, food and beverage, smart grid, and intelligent buildings, connect and manage their business-critical operations. Recently, I have helped deliver a cloud-edge hybrid solution: SiteWise Edge which brings cloud-like data-processing functionality to the edge that remains operational through long periods of network outages.

Lately, your career has been the subject of a book. Can you tell us more about it?

Yes. The book is called “Beyond IIT”. It was written by Anubhav Rohatgi and published by Taxmann. This book is a practical guide to long-term career success. It shows the reader how to craft their career and choose their adventure, even without an IIT degree. IIT or Indian Institute of Technology are centrally funded technical institutes located across India. They are very popular among aspiring engineers in India and have one of the toughest entrance examinations on the planet. Anubhav’s book follows 16 careers and showcases how one can be successful without necessarily studying at one of the IITs. My career is one of those 16 careers that the book talks about.

What career advice do you have for young engineers?

To all budding engineers, as you embark on your professional journey, remember that graduation isn't the end of your learning. In fact, continuous education becomes even more crucial in a world where technology evolves at lightning speed. Stay curious and hungry for knowledge—it's your best ally. Secondly, dive deep into your specific problem area. The world is in dire need of original thinkers who can innovate and address the next wave of engineering challenges. Don't merely scratch the surface; be the expert who uncovers layers beneath.

Lastly, while talent and insight are invaluable, there is no true alternative to hard work. It's the bridge between aspirations and success. Dedicate yourself, persevere, and always strive for excellence.