fbpx
Connect with us

Feature Articles

The launch of Wi-Fi network standards to enhance global roaming

Inside Telecom Staff

Published

 on

The launch of Wi-Fi network standards to enhance global roaming

The Wireless Broadband Alliance (WBA) is launching what it has called an open global roaming Wi-Fi federation standard and has announced that it is open for business from today.

It claims that the new standards and resulting federation will take away the need for roamers to search for Wi-Fi networks, to repeatedly enter or create login credentials, or to constantly reconnect or login to public Wi-Fi. They will instead automatically (and securely) connect to a global network via participating Wi-Fi access networks and avoid the annoying barriers that make hotel and venue Wi-Fi inconvenient.

All Wi-Fi organisations are welcome to join, according to WBA CEO, Tiago Rodrigues, from Wi-Fi-using venues, to device vendors and operator/identity providers.

Rodrigues said that “Wi-Fi was already arguably the most successful wireless technology of our time, but with globally agreed standards and policies [for roaming], we can take public-guest Wi-Fi to another level.”

The WBA says that its OpenRoaming simplifies Wi-Fi and works in a similar way to cellular roaming. Companies who join up can enable their end users to automatically connect on any Wi-Fi network that is managed by a federation member. Participating entities will range from enterprises to coffee shops, concert venues to connected cars:

WBA OpenRoaming creates a world where Wi-Fi users move from one network to another without needing to constantly re-register or sign-in,” promises the WBA.

For the more experienced Wi-Fi users, this approach might remove the challenge and sense of achievement experienced by successfully logging on to Wi-Fi from some distant bar or hotel room. For the rest of us, however, it is the right time for something to be done.

Whatever the situation, it does seem like there is now a solid movement developing to finally get a intelligible and open international Wi-Fi roaming system started. The list of heavyweight participants is impressive and currently includes: Airmesh, Airties, Aprecomm, American Tower, Aptilo, AT&T, Boingo Wireless, Broadcom Inc, Cisco, Cityroam, Comcast, Commscope, Deutsche Telekom, Eduroam, Eleven Software, GlobalReach Technology, Google, Hub One, Hughes Systique Corp, Intel Corporation, IT&E, m3connect, Nomosphere, Orange, Purple Wi-Fi, Samsung, Single Digits, Sun Global, Veniam, WifiCoin and Zephyrtel.

The technical foundations of the cloud federation are made up of a global database of networks and identities; a dynamic Wi-Fi network discovery mechanism, and a core Wireless Roaming Intermediary Exchange (WRIX).

Cyber security involves Public Key Infrastructure and RadSec, providing the certificate policy, management and brokerage services.

The service is essentially a network of roaming partners that all adhere to the OpenRoaming framework, says the WBA. Users may join any network managed by a federation member and the network automatically authenticates devices by using established identity providers, such as a service provider, device manufacturer, cloud ID or even loyalty memberships.

WBA OpenRoaming, bridges the gap between Wi-Fi and cellular networks and allows users to roam between Wi-Fi networks seamlessly and securely without the use of splash pages or sign-in screens.

For users who are customers of these ‘identity providers’, this means they will automatically connect. It is based upon a set of standards within the industry including WBA’s Public Keying Infrastructure (PKI Radsec) for secure exchanges, Wireless Roaming Intermediary Exchange (WRIX), Wi-Fi Alliance’s Wi-Fi CERTIFIED Passpoint, amongst others, that provide enhanced security and enable the federation to scale quickly.

Any company that owns or manages a Wi-Fi network, whether an operator, city, enterprise or venue, can become a member and enable their customers to automatically authenticate and connect to other national or international Wi-Fi networks within the WBA roaming federation ecosystem – creating and enhancing business revenues and customer satisfaction, it is claimed.

Pricing will be up to each provider, says the WBA, which points out that the system can support all sorts of different business and commercial models. The key will be the WBA Wireless Roaming Intermediary Exchange (WRIX) which will engineer interoperability along with settlement and billing. In reality, this looks like the costs for many users could simply come out of any access fee they already pay to their Wi-Fi provider or telco, a proportion of which will be passed onto the other federation members as a good old-fashioned settlement.

So really – let’s be clear about this – it’s a telco model providing some extra security applied to a global data network (the internet), which, doesn’t need to highlight ‘roaming’. A properly functioning internet connection already enables roaming; once logged in, a user can access all the services and applications they usually enjoy when ‘at home’.

In fact, the agenda here is to enable credential-sharing and present it as if it were equivalent to conventional cellular roaming and charge for it accordingly.

Advertisement

We’re a diverse group of industry professionals from all corners of the world. Our desire is to provide a high-quality telecoms publication that caters to an international market, offering the latest and most relevant telecoms information to businesses, entrepreneurs and enthusiasts.

Cybersecurity

Ways for remote workers to stop cybercriminals

Yehia El Amine

Published

 on

cybercriminals

The COVID-19 pandemic has drastically changed the way humans interact with each other across the board, handshakes have switched to fist bumps, massive conferences have gone digital in the form of webinars, and more importantly, employees have built makeshift offices within the comfort of their own homes.

According to Shefali Roy, former CCO & COO at TrueLayer, a UK-based FinTech firm, working from home has become the new norm.

“People are working longer and harder, which can be a big cause for concern with regards to employee burnout since they’re on high alert at all times due to the sudden merge of workstations and home comfort,” Roy said during a the MoneyFest 2020 webinar.

Thus, it isn’t strange for employees to start asking their employers about their work-from-home policy.

While remote working offers safety from a physical virus, it exposes employees to threatening digital viruses. Cybercriminals have taken advantage of this shift in the workplace and have targeted their sights around remote employees across the board.

According to a report published by Kaspersky there have been almost 726 million confirmed cyberattacks since the beginning of the year; “This has put 2020 on course to rack up somewhere in the region of 1.5 billion cyberattacks for the year,” the report stated.

While some companies have rejuvenated their IT security teams to deal with threats, many other companies haven’t and a big number of businesses are exposed to these breaches every day.

This leaves workers to fend for themselves against sophisticated cybercriminals’ intent on stealing their information and wreak havoc on businesses.

Fret not, according to the National Cyber Security Alliance, a U.S.-based cybersecurity non-profit, there are a number of ways that can help you protect your sensitive company information while venturing out of the digital safety of the office:

  • Think before you click. Cybercriminals are taking advantage of people seeking information on COVID-19. They are distributing malware campaigns that impersonate organizations like WHO, CDC, and other reputable sources by asking you to click on links or download outbreak maps. Slow down. Don’t click. Go directly to a reputable website to access the content.
  • Lock down your login. Create long and unique passphrases for all accounts and use multi-factor authentication (MFA) wherever possible. MFA will fortify your online accounts by enabling the strongest authentication tools available, such as biometrics or a unique one-time code sent to your phone or mobile device.
  • Connect to a secure network and use a company-issued Virtual Private Network (VPN) to access any work accounts. Home routers should be updated to the most current software and secured with a lengthy, unique passphrase. Employees should not be connecting to public Wi-Fi to access work accounts unless using a VPN.
  • Separate your network so your company devices are on their own Wi-Fi network, and your personal devices are on their own.
  • Always keep devices with you or stored in a secure location when not in use. Set auto log-out if you walk away from your computer and forget to log out.
  • Limit access to the device you use for work. Only the approved user should use the device (family and friends should not access a work-issued device).
  • Use company-approved/vetted devices and applications to collaborate and complete your tasks. Don’t substitute your preferred tools with ones that have been vetted by the company’s security team.
  • Update your software. Before connecting to your corporate network, be sure that all Internet-connected devices ‒including PCs, smartphones, and tablets ‒ are running the most current versions of software. Updates include important changes that improve the performance and security of your devices.

While employees can arm themselves with these helpful tips to fend off cyberattacks and breaches, remote workers can still educate themselves on how to spot phishing and ransomware attempts.

There are more than a handful of hints that could flag emails as suspicious or malicious, such as:

  1. Strange requests: these types of emails tend to give out information that’s out of the ordinary, maybe an unexpected request or one that isn’t directly relevant to you. The most likely case is that it’s a typical phishing email, even if the domain came from within your very own organization, call the sender and ask.
  2. Generic salutations: If someone is sending you an email and not addressing you personally, then chances are the sender doesn’t know who you are. Best-case scenario, it could be a marketing campaign, or the worst-case scenario is that you’re being targeted.
  3. Spelling errors: especially during emails, people will always double and triple check their emails for typos and spelling errors to remain professional. Thus, finding these errors are ‘phishy’ so beware!
  4. Be wary of attachments: this is exactly how cybercriminals worm their way into computers, which is why if the sender or email seems suspicious, chances are, the virus is laying in wait in the attachment.
  5. Shady URLs: hiding or spoofing links is the easiest thing to pull off, since the URL could take you to a different destination to where a link reads; although staying away from it is the best course of action, you could always hover over the link to check if the destination leads to where you expect it to.
  6. You’ve won our competition:while these traps can obviously be spotted, people are still falling for these schemes in 2020. Always remember, if it’s too good to be true, then it most likely is, so stay away.
  7. Scaremongering: A common approach used by cybercriminals is to claim something like “your account has been breached!”. This creates a sense of urgency and vulnerability and can prevent people from thinking clearly. If the claims in the email were true, would the sender really tell you in this way? Always check through a different means of communication.
  8. Change of behavior: Maybe you’ve received an email from somebody you trust such as your boss, or colleague, but the language used is different from normal. Maybe it’s too formal or informal. Maybe the email signature isn’t the normal one used. You’re probably used to the way these individuals talk to you, so if it’s not normal, something weird might be going on.

As time passes, and technologies get more and more advanced, so do cybercriminals, as they stay up to date with the technological winds of change to further find their weak points. Thus, employees who choose to stay remote have a responsibility toward their employers to remain safe online, as the damages are no longer measured on an individual level, but can take down entire organizations.

Continue Reading

Feature Articles

The importance of IoMT security across the healthcare system

Karim Hussami

Published

 on

IoMT

In our hyper-connected world, advancing technology in IoT is bringing promise to many systems across industry sectors.

The Internet of Medical Things or IoMT which is a subset of the Internet of Things is one of the many emerging technologies that has impacted the healthcare system and our lives.

Hospitals and medical centers depend on smart devices for doctors to monitor their patients and their medical situations quickly and efficiently. In addition, these devices offer more precise analysis and earlier recognition of medical issues with the help of information flow.

According to a report published by Deloitte, “Hospitals in the U.S. have an average of 15 smart medical devices per bed, while the IoMT market is expected to reach $52 billion by 2022.”

Security risks for smart devices

IoMT, like any other technological device, is also subject to security risks such as cyberattacks. Malicious activities have increased in number in the last few years targeting medical institutions and being the cause of major disruption in the healthcare system, financial losses, which has lowered patient’s confidence in healthcare.

For example, hackers disabled computer systems at Düsseldorf University Hospital in Germany last September and led to the death of a patient while doctors attempted to transfer her to another hospital. The ransomware attack scrambles data, making computer systems inoperable.

The hospital’s President Arne Schönbohm said hackers took advantage of a well-known vulnerability in a piece of VPN (virtual private network) software developed by Citrix and warned other organizations to protect themselves from the flaw.

The need to implement robust IoMT security solutions in the medical industry has never been more important. Encryptions and conducting a secure boot – making sure that when a device is turned on, none of its configurations have been modified – are some of the basic yet fundamental security measures providers and manufacturers of IoT devices can take.

Other important security measures:

  • A defense strategy should be put in place and implemented with multiple layers of security available to protect against any risk. Make sure that authentication is properly followed, device access is limited, and device-to-device communication is monitored carefully.
  • The IoT device should be tested before it is put into production. Monitoring device security should be done throughout its life cycle to ensure fewer vulnerabilities. After the machine has been produced, security measures should be incorporated into its design such as conducting a risk assessment before the device is released for use in the market. Authentication measures should be built into the device.
  • Create an environment for teaching the culture of security, where the IT department can inform employees about issues and their dangers on the system or company they work for. In addition, conducting regular trainings to recognize vulnerabilities, cyber threats, risks and anomalies will speed up breach response.

Cyberattacks will never simply vanish. No matter the level of precautions we take, there will always be a degree of risk but making sure devices are secure and teams are vigilant and prepared, may help reduce overall disruption caused by cybercrime.

Continue Reading

Feature Articles

Taiwan: plans that will enable Fintech firms to access more customer data

Karim Hussami

Published

 on

Taiwan: plans that will enable Fintech firms to access more customer data

An open database of information is highly relevant for enterprises to get an idea of people’s needs and preferences which will give companies a chance to improve the quality of their products and services and help cultivate new ones.

The Joint Credit Information Center (JCIC) in Taiwan is planning to establish a database for local financial technology firms to obtain information on consumers’ credit risk information, the Financial Supervisory Commission (FSC) reported.

One of the ways in which financial service providers tend to use or deliver innovative services, is by adopting new technology. This has led Taiwan financial industry to spend over $700 million in 2017, on FinTech R&D and solutions in the areas of AI, AML, biometrics, blockchain, cloud services, cybersecurity, data analytics, payment, among other tech initiatives.

More info, better service

Taiwan’s information technology infrastructure is well-developed, with 90% 4G penetration and 80% mobile penetration, according to the International Trade Administration. “Taiwan is a strong market for e-commerce, online entertainment, mobile payment, and other technology-driven services.”

According to FSC Banking Bureau, electronic payment users exceeded eight million people in April 2020.

Respectively, information about consumers is a crucial part in company’s businesses and continuity as well as its success, that is why sharing is essential to progress.

After Fintech companies held a meeting in June 2020 with Taiwan’s Financial Supervisory Commission (FSC) Chairman Thomas Huang, suggestions circulated during the discussion noting that the center should make its data accessible to the fintech firms for the fact that the type of information it provides could help with developing various financial products or services.

As plans go ahead, the database would be launched in October 2021, according to the Banking Bureau, adding that fintech companies could also use the National Development Council’s open data service.

According to the Taipei Times, up until this time, 426 financial sector companies including local banks, securities firms, credit cooperatives, insurance providers and credit card issuers are among the businesses that have benefitted from JCIC’s raw data – currently not including Fintech enterprises.

Consumer approval before gaining access

Accessing information related to consumers is not as simple as one might think because it depends on customer approval and whether they agree to share their personal preferences online for a specific service.

Banking Bureau Chief Secretary Phil Tong said, “With consumers’ approval, the agency (JCIC) would provide their lending and repayment data to the companies, including how much money they have borrowed, what kind of loans they have taken and whether they have repaid on time.”

According to sources, the new database will not include consumers’ raw data and will follow personal data protection rules. The JCIC doesn’t share customers actual financial records.

Obviously, the new normal in business practice is for companies to obtain information about their customers, whether by their own efforts or by the help of a third party. Today, data enables growth.

Continue Reading

Trending