Gemalto as trust enabler in the drone ecosystem

The stakeholders of the commercial Drone ecosystem

Service providers

Drone Commercial manufacturers drone operators

Public authorities responsible for citizen safety and security

Drones are classed as unmanned aircraft vehicles (UAVs) They have many potential commercial applications requiring top-flight security, including:

Major retailers like Amazon, Drones can provide cost-effective and transporters such UPS and crop monitoring for improved DHL are studying the feasibility management and yields. Infrared of using drones for dispatching sensors evaluate crop health, small packages over short allowing farmers to respond with distances. fertilizer or insecticide treatments. Delivery Agriculture

Real-time visual inspection and Drones enable high-quality, real- thermal readings of power lines, time visual inspections of all oil and gas pipelines, nuclear types of construction including installations, wind turbines and buildings and bridges, keeping other installations can all be inspection teams safe. carried out by drone, allowing inspection teams to remain at a safe distance. Energy Construction

Drones offer an aerial view to search and rescue teams, firefighters, disaster response crews, and law enforcement operations, so they can quickly and safely evaluate emergency situations. Public safety

But security isn’t simple

Collision risk Drone hacking

There will be 10 times more commercial Hacking is a real issue for drones. Indeed, drones than manned aircraft by 2020. Bruce Snell, Cyber-Security and Privacy Near-misses involving drones and manned Director at Security has predicted aircraft saw a four-fold increase in 2016 that drone jacking will soon be a practical over the previous year in the UK, while in reality in the McAfee Labs 2017 Threats the US, pilots of manned aircraft reported Prediction report. 1,800 sightings of UAVs in 2016. Canada saw its first collision in 2017.

The need for control and regulation

Eur ope Strong regulations for preliminary commercial drones is likely to come into force in 2018

USA Asia Pacific The first FAA regulations for First commercial commercial drones drone regulations are are already into already in effect in some effect countries and are due to be reinforced

Some categories of commercial drones will connect via GSM to unmanned traffic management (UTM) platforms, which receive telemetry, flight plan updates, or command and control data. UTM platforms will allow regulations to be implemented to enable safe and secure low-altitude flights.

Seven key factors for a secure drone ecosystem Drone manufacturers and drone operators need to protect their assets and services, while public authorities need to ensure citizen safety and law enforcement. helps ensure trust at every stage:

1 Secure pilot and drone registration

Registering pilots and drones with public authority servers needs to be secure and reliable. Each drone must also be linked to its pilot, in the same way as a car’s license plate links it to a driver.

> Gemalto allows seamless and secure remote pilot and drone registration through mobile devices

• Remote ID verification via Gemalto’s Cogent biometric technology using facial recognition and liveness detection

• Remote digital drone ID registration

2 Protection of sensitive data on the drone

Each commercial drone comes with built-in firmware so they can be flown. It includes built-in security features such as forbidden areas, maximum altitudes, and range from take-off, which must be protected from modification.

> Gemalto helps drone manufacturers protect the integrity of their drones against physical attacks, securing such sensitive data on tamper-proof secure elements.

3 Seamless and secure connectivity

For easy worldwide deployment, drone manufacturers need their drones to connect seamlessly and securely to networks in all countries.

> Gemalto facilitates worldwide drone deployment through its eSIMs, remote provisioning platforms, and machine- to-machine (M2M) modules enabling seamless connectivity to any cellular network.

4 Reliable drone tracking

Public authorities need to be able to reliably identify drones in real-time, anywhere. Drone tracking data comprises digital IDs such as serial numbers, and dynamic data such as location and time. This data must not be modified.

> Gemalto protects drone tracking data through secure-element- based security and cryptography. IDs and dynamic flight data such as geolocation and time stamping are digitally signed and can be verified by public authority servers in real time.

5 Protection of flight control commands

Drones must be controlled by authorized platforms and operated by authorized pilots on the ground.

> Gemalto provides user-authentication solutions so that only authorized pilots can the remote-control applications used to control the drones from ground stations or mobile devices.

> Our solutions secure existing communication channels by command encryption that is decrypted in real- time by the machine. No commands can be executed that are not part of the encryption protocol.

6 Confidentiality of data exchange between drones and operators

Certain confidential information must be kept private, such as public-safety-related information during rescue operations.

> Gemalto encryption technology secures communication channels between the ground and the drone, ensuring that any data exchanged cannot be intercepted by a third party.

7 UTM data protection

All flight-related data must be securely stored and protected, for investigation or traceability purposes.

> Data is encrypted and stored on secure Gemalto servers in the cloud orp c onde r ed - July 2019 W eser v s r t o 2019 - All righ © Gemal t

Gemalto solutions allow you to:

Connect drones seamlessly to cellular networks in all countries Secure existing communication channels between ground stations and drones Identify pilots remotely with strong identity verification services