The goal is to create an ethics policy and blueprint for cities to use as a template while developing smart cities solutions. The blueprint will take the form of a checklist for cities and industry to use in planning.

To deploy a sustainable federated public Wi-Fi solution across Singapore that is has easy to use secure authenticated access and jointly develop a set of best practices with cities, industry players, and the academia to promote coordinated public Wi-Fi deployment, to address signal interference issues, standardizing user experience and security.
• Sustainability, public expectations, privacy and security are the main challenges faced by most cities.
• The proposed project shall jointly develop a set of best practices so as to standardized user experience globally.

(Security and Privacy)
• By employing IEEE802.1x authentication standards (i.e. EAP-SIM, EAP-PEAP), users’ data over the wireless channels will be encrypted and secure.
• Users setting up for EAP-SIM/ EAP-PEAP are required to download a client app to setup their devices. The client apps are integrated directly to the service providers’ API servers. All apps go through source code review by independent security auditor before these are released.
• IMDA, as the programme owner, conducts biennial mandatory security audits (through appointed independent security auditor) on top of service providers own annual security review to ensure the Wi-Fi infrastructure continues to be secure by design.

An AI-augmented skills-based jobs placement programme by the Singapore infocomm Technology Federation (SiTF) to help mature and displaced workers transition effectively into the tech sector. The programme will be a combination of AI tools and high-touch engagements to drive outcomes.
This effort is also integrated into a larger national initiative called TeSA (TechSkills Accelerator) to improve the employability of Singaporeans and to meet the demand for skilled tech workforce by different industries across the economy. TeSA involves key industry and employer associations, tech companies in different sectors of the economy, key enterprise users of technology in different industries, government agencies both economic and regulatory ones, labour unions, students and professionals. TeSA is steered through a national Governing Council and various Sector Committees representing different industries. TeSA is led by the Infocomm Media Development Authority of Singapore (IMDA), with other partner agencies.

(Security and Privacy)
HTTPS and HSTS for Secure Connections
• Measures adopted includes encrypted web application connections, authentication (such as TLS 1.2), key exchange (such as ECDHE_RSA with P-256), strong cipher (such as AES_128_GCM).

Regular audits, and vulnerability checks
• Such as for SQL injections, cross-site requests, cross site scripting (XSS), unauthorized file access.

Encryption of sensitive data and communication
All card numbers are encrypted on disk with AES-256. Decryption keys are stored on separate machines.

User Privacy
• Customer data is stored in an access controlled database and not shared or made available to anyone outside the organization.
• Financial Data is not handled, processed, stored, or transmitted through local servers.
• Data use and ownership policies are clearly outlined in contracts.
• Compliance to the Singapore’s Personal Data Protection Act (PDPA).

Kansas City, MO (KCMO) and its partners have designed and implemented an IoT platform to develop a smart city network, starting with Kansas City’s streetcar starter line in their Downtown area. Based on this initial site, the team has will implement a model that would make Kansas City the largest smart city network in North America. It will be a city with a new IoT technology platform the is capable of improving particular aspects of city life – such as avoiding traffic jams, finding a parking spot, and getting a Wi-Fi connection at local venues.

Security and Privacy: The hardware and software for the Sensity smart city solutions were designed from the ground up to enable privacy and security principles. Devices can minimize the amount of data collected, retain information locally, process in the device rather than backhaul to the cloud. Further IoT devices are vulnerable to hacking unless designed correctly from the start. These concepts were hardwired into the design of the Sensity (now Verizon) solutions ensuring that privacy and information security concepts can be adopted by cites in their smart city solution deployments.

Develop and deploy electronic cargo tracking solutions in different settings (sea port, dry port and manufacturing FTZ) and across geographies (traversing from landlocked locations to ports, in East Africa and in Asia), for expedited customs clearance and enhanced trade facilitations. The solution is integrated across technology stacks, including end-devices, platforms and analytics, by ecosystem of accredited vendors. Involves security/field enforcement officials, customs officials, application developers, telco service providers, shippers and consignees.

Security and Privacy: There is a security module embedded in the device’s firmware and the middleware verifies the authenticity of devices reporting to it. Proprietary and open encryption standards/algorithms like AES256 are applied. At the application layer, devices which have not been associated to legitimate trips are ignored.

• Wide Area Protection for a Cluster of buildings from a mobile surveillance vehicle (called I-Man Facility Sprinter or “IFS”) manned by a 2-3 man specialist team.
• Deploying of security infrastructure comprising cameras, sensors and wireless connectivity in a mesh network architecture connected to the IFS vehicle
• Cameras and sensors provide the real time surveillance and trigger alerts to IFS which will be able to immediately respond to the situation
• Multiple IFS from neighboring clusters will provide the redundancy and support to any surge in demand in any particular cluster
• Several IFS can cover a large urban center to provide the immediate real-time security coverage and immediate response to any public safety and security incident(s)

Security and Privacy:
- Wireless communications using WPA2-AES 128 Bit encryption standard
- Multiple IFS provide redundancy with a “killer switch” to shut down any IFS if evident of any breach in physical and cybersecurity. The Kill switch is software based which will essentially block immediate use of the servers on the IFS. Note the server in the IFS has only 24hrs worth of data stored, not all the historical.

Urban Circulators utilizing LSEVs (Low Speed Electric Vehicles) as first/last mile solution in conjunction with public transportation, to serve transit deserts, food deserts and reach underutilized areas of medium to large cities. The scalability of the project would be able to translate to business complexes, universities and hospitals, to transport their customers and reduce traffic congestion. The environmental impact in using electric vehicles would reduce gas emissions. Challenges for public transportation include getting people to the transit stop or Park and Ride. By providing the circulator, customers would use their vehicles less, spend less money on gas, and help to curb CO2 emissions that are detrimental to the environment.

Security and Privacy: The dispatch software used for the demand-responsive, dynamic routes is secured with a 128bit SSL security. The software maintains security through use of passwords for both the user and driver interfaces and information is kept secure by the administrator. Only two company administrators have access to all customer and driver information, keeping their own logon information secure.

UrbanLeap empowers cities to test new technologies in an easy and actionable way:
• Enables cities to manage and track the life cycle of pilot projects
• Saves staff time by streamlining and automating processes
• Supports interdepartmental and intercity collaboration and vendor participation
• The City of San Jose is embracing innovation with a culture of experimentation and agile learning. However, implementation has been ad-hoc, disorganized, and uncoordinated.
• UrbanLeap will enable participants to streamline, digest, learn and scale projects in a measurable and coordinated way. It will help accelerate quality of life improvements by exponentially increasing the number of experiments the city is able to conduct over time. The platform will enable the city to manage and automate the lifecycle of pilot projects.

Security and Privacy: The platform and data storage are built on top of Google Cloud Platform which meets rigorous security standards. City data is accessible only by users with verified city email addresses. We follow security and privacy best practices and do not store sensitive user, city, or vendor data at present.

• Major flood event every year cause large amounts of residential and commercial damage
• A contributing factor to the flooding was blocked storm drains
• City responded by engaging a contract company to inspect and clean storm drains
• City has over 8000 storm drains within the city limits
• Clogged manholes, Rain Water catch basins, drain pipes cause blocking of water flow during rainy season leading to accumulation of water in low lands causing flood and damages in properties and quality of life.
• Installation of Ultra Sonic water level sensors in the manholes, water inlets monitoring water level and reporting to City operation center via wireless connectivity
• The Dashboard provides information of water level which could be incorporated with the rain prediction for advance flood prediction

Cybersecurity and Privacy: Cyber Security is provided by Nokia End User Security – anomaly detection and device management by Nokia IMPACT platform. The Nokia IMPACT IoT Platform provides a highly secure system, audited by numerous large organizations, through three key elements:
1. Platform access control
- Multi-tenanted system used to reflect the part of an organization within its group structure allows secure access to devices (gateways, aggregators, sensors, meters)
- Delegation allows assignment of secure user roles based on the security policy of the enterprise
- All passwords and other sensitive security information is encrypted internally within the database
2. End-to-end chain of trust
- Security is provided along the whole processing chain and establishes trust with endpoints via: Two-way authentication
3. Data privacy: multi-tenant
- Implements multi-tenancy by definition of groups, or domains. Adequate for both fixed and mobile devices:
- Devices registered on the platform are associated to a group based on policies and algorithms

The main purpose of the project is to expand the Smart Car project to next step - Smart Car system II that will enable citizens all kind of vehicle services, integrated into one system. The main target of this project is to guarantee advanced technologies and increase the type, accessibility and quality of the vehicle related public and private sector services from one point, online. In 2017 over Mongolia was counted 813,173 vehicles, of which 57% are registered in the capital city Ulaanbaatar. To meet the ever-increasing demand, it is necessary to provide all possible services in integrated web portal system and connect all public and private sector services to the one point – smartcar.mn, which enables online payment services, vehicle status information as well as provide all other vehicle-related services online. • Requires interoperable web and mobile interfaces.

Cybersecurity and Privacy: smartcar.mn web portal is located on the virtual server of National Data Center of Mongolia. Accordingly, system and services are ensuring the cybersecurity and privacy of internationally accepted standards.
• Standardized processes are not unique to city or region and can be replicated and scaled up in multiple cities/communities/over country.
• The system will have its own business model to create sustainable revenue stream.

The present Public Key Infrastructure (PKI) is known to be inadequate for the current scale of the Internet and the situation is exacerbated with the advent of IoT. Project GRACE implements a security architecture using an advanced form of pairing-based cryptography called Verifiable Identity-based Encryption (VIBE) to provide a simple, scalable and secure key management for the cloud services, the IoT and indeed the Critical Information Infrastructure (CII) which are otherwise vulnerable to the extant and new cyber-physical attacks.

Standards, Replicability, Scalability, and Sustainability:
Project GRACE adopts the best practices which exceed those in ISO 27002:2013. It implements the platform interfaces (hardware, hypervisor, OS, cloud services, IoT, etc.) and the IETF standard for transport security, i.e. TLS. The existing infrastructure, the standards, the protocols are largely retained with minor modification to ensure continued inter-operability.

Cybersecurity and Privacy:
Project GRACE contains a complete implementation of the security controls (authentication, authorization, audit - AAA) to achieve the security objectives (Confidentiality, Integrity and Availability - CIA). Privacy is closely related to confidentiality. Both the CIA and AAA triads are rooted in the secrecy of the private keys which bootstrap the protection of the environments against the cyber-physical attacks.

The I3 project is creating a tool that will allow device owners to directly manage how the data streams from their IOT devices are delivered to applications. Opensource Project includes support for privacy, trust, and incentive management. Communities are currently approaching smart cities deployments as a series of siloed structures. It is difficult to turn silos into networks which allow data to be leveraged between known and future applications and devices. I3 breaks down these silos so data streams can be managed over time as devices, applications, and services evolve over time.

Cybersecurity and Privacy: The I3 system is a real-time IOT traffic management that distributes data in accordance with IOT device owner directives. Device owners can change their directives at any time. Permission from applications are based on recorded opt-in instructions. I3 also plans a real-time security feature that alerts on detection of misbehaving devices.

IoT & AI based Smart Energy Management Platform was deployed in public buildings in Suwon City to provide optimal management building facilities, environment, and energy using the urban 3D map and 3D spatial modeling. With the M&V (Measurement & Verification) engine using a standard algorithm, IPMVP (International Performance Measurement and Verification Protocol) as well as data intelligence technology with deep-learning, the platform can quickly measure energy performance and determine energy efficiency. Challenges and solutions include:

(1) Interoperability: BAS protocol and IoT Protocol – Develop the hybrid smart gateway and deployed in local building
(2) Service for over the 100 buildings – Cloud service with 3D urban MAP for 100 Suwon-City’s 100 public buildings
(3) Data collection/processing and data security
- Process mass data transfer of facility energy data for more than 100 buildings
- Data security with SSL/DTLS/Auth2.0
(4) Energy saving – Verification of 15% saving of energy
(5) Verification of energy saving – M&V with IPMVP in cloud
(6) Tenant service – mobile tenant service (lighting/temperature control and IEQ service)
(7) Commercial services – Currently, service for 100 Suwon-city public buildings

Cybersecurity and Privacy:
(1) Verification on the field for 100 buildings with cyber security (SSL/DTLS/Auth2.0)
(2) Deployed cyber security on each segment (Device – Gateway – Web – Cloud Server)

- We developed a Smart Community Information Platform (SCIP) for achieving security and privacy management of smart city data and providing smart city data services considering time-, privacy-, and location- critical problems.
- We implemented the information platform for providing smart town services for 32,000 residents in 230-hectare area of Misono Town, Saitama City.
- We established a consortium (Urban Design Center Misono: UDCMi) for developing an ICT infrastructure and smart town services under the collaboration of Saitama City, academics, and stakeholders.
- The following facilities are now available; 20 Smart Houses, 160 BLE beacon antennas and Wi-Fi infrastructures in the area, town monitoring systems, purchasing record using e-money card, activity records using activity sensors and a data management center in UDCMi.
- Smart town services will be provided by Integrating retailing information (AEON), security service (SECOM), data management platform (Keio Univ, Softbank), town signage (HITACHI), medical care (TANITA and local hospitals), and other information and services.
- We will provide permanent smart town services maintained by usage revenue of the services.

Standards, Replicability, Scalability, and Sustainability:
- The system uses privacy control method proposed as a deliverable of ITU-T Focus Group of Smart Sustainable City and the data infrastructure proposed in IEEE Standards Association Smart Grid Vision Project Documents.
- All generated data of different infrastructures in the target town is integrated into smart community information platform (SCIP) using distributed networks, servers, and clouds, and service applications on SCIP are implemented as Docker containers for providing mobility in SCIP.
- SCIP API is an open library to design application software. It achieves secure and privacy-considered data interaction for data-oriented smart city services.

Cybersecurity and Privacy:
- The designed SCIP enables to encapsulate resident’s data in a dedicated town. The data anonymization and watermarking technology for anonymized prevents and preparing unexpected data leaks.
- Authorized Stream Contents Analysis (ASCA) technology provides security services in the network devices.

- Shirahama is a town on the Pacific coast having a beautiful beach, attracting more than three million tourists. Nearly 10 % are inbound, demanding free Wi-Fi Internet service. It has been promoting “Work in Shirahama”.
- Shirahama, on the other hand, has to prepare for earthquakes and tsunamis because it is officially said the probability of a large, M8-M10 class earthquake occurring within 30 years is approximately 70%.
- The project aims at clarifying the effectiveness of a resilient communication platform called NerveNet, developed by NICT, which provides resilient local communication as well as connectivity to the Internet.
The pilot system was installed in May 2015 and has been operated. Since nearly six thousand tourists and residents have used the network for one year after the installation, the town office recognized it to be necessary and allocated the budget to maintain and expand it to their office for SMEs to invite new companies from outside in 2016.

Standards, Replicability, Scalability, and Sustainability:
- NerveNet utilizes standard LAN and IP protocols and systems. Any network appliances with Wi-Fi or LAN interfaces can be connected to it. It provides transparent connection to the Internet. It works as IoT gateway to the IoT Working System on a cloud.
- IoT Working System is scalable and replicable because it works on a cloud and can interwork with other cloud-based middleware and applications.

Cybersecurity and Privacy:
NerveNet natively protects users and devices from cyberattacks and leak of privacy information by introducing device access (low-level) management, and instant path for acknowledged communication request between devices including gateways to the Internet.

• Deployment of solar waste compacting bins, ultrasonic fill-level sensors and trackers/beacons
• Utilization of data resource management platform to monitor & analyze various data points
• The project integrates hardware (M2M) and software enabling real-time data along , route optimization, fill-level information w/ push notifications, and analysis of historical collection data

Cybersecurity and Privacy:
Our data is protected by extensive certified cloud security protocols including, but not limited to: HTTPS (SSL/TLS), SHA-256 password encryption, AES-256 “at-rest” database encryption, 24/7 cloud watch monitoring, C5, Cyber Essentials Plus, DoD SRG, FedRAMP, FIPS, IRAP, ISO 9001, ISO 27001, ISO 27017, ISO 27018, MTCS, PCI DSS Level 1, SEC Rule 17-a-4(f), SOC 1, SOC 2, SOC 3.
We also comply with the laws and privacy regulations for: CISPE, EU Model Clauses, FERPA, GLBA, HIPAA, HITECH, IRS 1075, ITAR, My Number Act, U.K. DPA - 1988, VPAT / Section 508, EU Data Protection Directive, Privacy Act, PDPA - 2010, PDPA - 2012, PIPEDA, Spanish DPA Authorization.
We are aligned with the following security frameworks: CIS, CJIS, CSA, ENS, EU-US Privacy Shield, FISC, FISMA, G-Cloud, GxP (FDA CFR 21 Part 11), ICREA, IT Grundschutz, MITA 3.0, MPAA, NIST, PHR, Uptime Institute Tiers, UK Cloud Security Principles.

The project includes the evaluation, selection and implementation of three main aspects of the County’s SCADA system:
• Migration of SCADA’s wireless network to IP base High-Speed Network and Upgrade the county network infrastructure
• Upgrade the SCADA system to address the Cyber Security requirements
• Leveraging IIoT (Industrial Internet of Things) for dynamic and fast response to on-going requirements
The Water Utility Department at St. Johns County is constantly required to address the fast growth in population and tourism, while certain parts of its SCADA were aging, or not able to cope with the new requirements. In addition, the County must comply with the Federal and State Environmental Protection and regulations, which also required improvements to the SCADA system.
To address these requirements the County initiated several improvements projects. The County took this opportunity to the prepare its SCADA system for the challenges of the 21st Century, such as Cyber Security, to be the first building block for the County’s Smart City.
For the implementation, the County utilized best of breed technologies and products for wireless networks, Cyber Security and IIoT.

Standards, Replicability, Scalability, and Sustainability:
By leveraging the new SCADA technologies, i.e. IP Based Networks, and IIoT, while addressing the challenges of Cyber Security, the County is establishing its infrastructure for the 21st Century and Smart City. These technologies provide almost unlimited and open architecture to new applications and IP based future IP based technologies, while building the firewalls to protect it against any external or internal harmful activities.

Cybersecurity and Privacy:
The solution for the Cyber Security is based on an End-to-End approach, where every component of the SCADA system, as well as operational aspects are addressed. The solution covers the RTUs, the wireless communications and the SCADA. It utilizes the IT Security capabilities of all products, the RTUs from Motorola, the Wireless Network from 4RF, the VTScada from Trihedral and dedicated ICS/SCADA Firewalls and Software from Check Point. The County embraced the “complete” approach, which add Cyber Security to every part of the SCADA. The first phase is to replace all aging SCADA RTUs with the new Cyber Secured RTUs. The next phases are to secure the IP Wireless Network and the SCADA Control Center.

Cities and communities around the world are entering the next era of transformational change in which citizens and their surrounding natural and built environments are increasingly connected by digital technologies. In the coming digital industrial revolution, technology will widen the playing field to include greater participation of individuals and ideas from all walks of life as we reinvent who and what we are. These technologies not only have the potential to build a more inclusive community, but when thoughtfully applied could help realize greater socio-economic gains. Conversely, if these technologies are not available to all, we would fragment our communities more than they are today. Currently, pubic and provide sector organizations are not well prepared for a digital world and lack both technological and socio-economic understanding. The market puts too much emphasis on technology and not enough emphasis on education and realizing inclusive socio-economic gains. This lack of education and understanding is particularity apparent amongst community leaders and administrators. On the other hand, young people today have intuitive digital skills and hold the greatest promise to transform our society. New forms of education will be essential to realizing the socio-economic benefits of Smart Cities in a Digital World.

The World Digital School is a design based on social impact. It is the future of school as it has a mission based in compassionate change and positive societal disruption. The school believes that all communities and neighborhoods find safety and security in spaces that are more just. To allow for this reality, the World Digital School is a model for scalable educational future that believes that all students should study and experience learning through the lens of social, economic, and environmental justice. To do this, students will be tasked with real-world experiences supported by staff and partners that prepare students to be leaders, advocates, tech and social entrepreneurs. Combining the models of the Ashoka Changemaker schools with the networked communities envisioned by the Gates Foundation along with the local prototype of the Iowa Big School, the World Digital School allows students through projects, capstone experiences, and internships to use their problem solving and creativity to build a new community readiness.

● Work with the University City Schools to select a school site.
● Create vision, mission, requirements, SOW and project plan.
● Hold community and Playbook workshops to engage and educate the community.
● The development will include a school building, library, mixed use, short and long-term living spaces.
● Work with the community, developers and architects to confirm the best school design and features.

Cybersecurity and Privacy:
Areas of study will include: cybersecurity for greater communication and collaboration, use of the internet of things for empathy and compassion, ethically responsible social platform development, and growing the global mindset through VR/AR technology.

Create tutorials, workshop and practice use cases for smart cities.
Demonstrate smart city applications as per NIST framework (work in progress). The workshop also discusses about IoT standards and protocol which would help ; community partners and city/municipality staff to get familiar with national as well as international IoT standards.
Demonstrate how the vulnerability and external threats affect Cybersecurity and privacy. Build a model for the city and municipality leaders to visualize and take corrective steps.
Build prototypes as per municipalities requirement and scale for other cities.
Utilize NSF funded Maker’s space at Sonoma State University.
The Lab is open for all cities/municipalities to build their proto types. The Lab has facilities to build product from scratch. (paper concept to proto type)

Standards, Replicability, Scalability, and Sustainability:
The workshop and tutorials content shall be prepared to meet the desired IoT Standards for instance; IETF, ISO, OMA-LWM2M, IPSO and NIST smart city framework.

Cybersecurity and Privacy:
The workshop and lab sessions include Cybersecurity and Privacy teaching models.
It’s also planned to have few working prototypes to demonstrate how to address vulnerability and cyber security threats.

Galway has pioneered some smart city ideas. It has implemented an award winning 3 bin recycling scheme that achieved higher levels of recycling than any before seen in Ireland. Galway was the first city in Ireland to achieve the European Energy Award. It is involved in a number of projects to reduce energy usage and to lower the levels of carbon emissions. It adopted a smarter travel policy, including a new public transport strategy, various schemes to encourage citizen’s mobility (cycling and walking) and improved traffic management systems. The ‘slow the flow’ programme reduced the amount of drinking water being wasted in the City. In terms of education, Galway was possibly the first City in the world to achieve Green Flag status in all of its schools.

Galway Smart City - Light Pollution
This project ensure the design of external lighting that minimizes the incidence of light pollution, glare and spillage into the surrounding environment and has due regard to the visual and residential amenities of surrounding areas.

Galway Smart City - Air Quality and Noise This project aims for maintaining air quality to a satisfactory standard by regulating and monitoring atmospheric emissions in accordance with EU directives on air quality, by promoting and supporting initiatives to reduce air pollution, by increasing the use of public transport, developing urban woodland, encouraging tree planting and conserving green open space.

Standards/Interoperability:
A key concept in the design process and deployment activity of the Light Pollution, Air Quality and Noise Monitoring Smart System is to utilize available openstandards, including: Using available high-performance, low-power, low-cost general-purpose development Internet of Things technologies, services and applications that can be interfaced with existing off-shelf industry standard sensors and communication devices (e.g., Bluetooth, Wi-Fi for GSM modules). A main characteristic on this project is the interconnectivity of application data and the use of industry standard communication technologies such as Wi-Fi 3G/4G Cellular and Satellite technologies for data transmissions and collection. By Incorporating open-cloud, (open source and Virtual infrastructures, i.e. OpenIoT an open source European IoT platform), the secure development of the platform is interactive with web and mobile applications and high-performance data analytics. Complying with REST-API, MQTT and CoAP IoT Protocols for effective
communication from sensor data to the EC OpenIoT server, the interoperability allows user to access the real time data on any desktop or mobile devices.

Cybersecurity and Privacy:
The system Ver 2.0 shall be designed to address cybersecurity and privacy as per details proposed below:
(a) Add security software components to the cloud platform.
(b) Utilize device certification offered by approved institutions according to the International / National / Regional regulation.
(c) Add Encryption software/firmware to the end points such as sensors, actuators and MCU and d) Analyse the vulnerability and threats, and address by designing customized security model.

Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.Web-based application to give technical cybersecurity ratings near real-time available in all member municipalities; Tried and proven risk assessment methodology from pilot projects in all member municipalities.

The risk assessment methodology is adapted from NIST Cybersecurity Framework with a technical risk rating component and a human-facilitated risk assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships

Standards, Replicability, Scalability, and Sustainability:
● Uses the widely adopted NIST Cybersecurity Framework (NIST CSF).
● Standardized processes are not unique to city or region and can be replicated and scaled up in multiple cities/communities. The solution is planned to be replicated in 2 more cities in the US.
● The system will have its own business model to create sustainable revenue stream

Cybersecurity and Privacy:
● The web based applications used to provide near real time cybersecurity ratings to member municipalities and to match volunteers with member municipalities will be secured using SSL
Certificates employing Extended Validation.
● The system adheres to the highest security standards suitable for its risk profile and constantly monitors itself for risks

AFWEAR is a real-time network of environmental sensors, including rain and precipitation sensors that will be located throughout the city of Rohnert Park, a city at the base of Sonoma Mountain in Sonoma County, CA, located 50 miles north of San Francisco with population of 40,000. The purpose of the system will be the following:
• Improve flood response time and efficiency throughout the city.
• Link rainfall observations in the upper watershed (on the hill) and coasts to predictions of stream flow in the city.
• Provide ability to incorporate various environmental sensors, watershed models (assessment tools to plan and manage watersheds), and user-friendly communication tools into the network to allow for rapid understanding and collaboration between scientists, citizens, and city planners as necessary in response to environmental “events”.

Standards/Interoperability:
A key concept in design and deployment of AFWEAR is to utilize available open-standards, including: Using available high-performance, low-power, low-cost general-purpose development module (e.g., Intel Arduino 101) that can be interfaced with existing off-shelf industry standard sensors and communication devices (e.g., Wi-Fi for GSM modules).
• Utilizing industry standard communication technologies such as Wi-Fi 3G/4G Cellular and Satellite technologies for data transmissions and collection.
• Incorporating an open-cloud, open-source, secure development platform (such as IBM Blue mix/ AWS /ARTIK) to develop interactive web and mobile applications and high-performance data analytics.
• Comply with MQTT and CoAP IoT Protocol for effective communication from sensor data to the server. Such interoperability allows user to access the real time data on any desktop or mobile devices.

Replicability, Scalability, and Sustainability:
Using open-source hardware and software platforms, and off-shelf standard industry sensors, as well as incorporating standard communication protocols we ensure the system design is fully replicable.
• A key design issue is to ensure that the network performance is scalable both vertically and horizontally. The vertical scalability (expanding the network reach) will be ensured through using standard communication links. Furthermore, through utilizing IBM Bluemix, we ensure availability of a high-performance data center where large number of users can access large set of monitoring nodes. The horizontal scalability (expanding
node features) will be ensured through using open-source, low-cost hardware and on-board standard communication protocols such as I2C and SPI.
• Drafting a clear maintenance plan funded by the city of Rohnert Park will ensure sustainability of the network. Such plan will include participation of city authorities and Sonoma State University community (e.g., faculty and students). Furthermore, to achieve continuous flood monitoring, the network is required to have reliable power source and backup battery.

Cybersecurity and Privacy:
The AFWEAR system Ver 3.0 shall be designed to address cybersecurity and privacy as per details proposed below:
• Add security software components to the cloud platform
• Utilize device certification offered by cloud vendors for instance AWS, IBM Bluemix and Microsoft Azure
• Add Encryption software/firmware to the end points such as sensors, actuators and MCU.
• Analyze the vulnerability and threats, and address by designing customized security model.

The goal of this action cluster is to provide innovative solutions for managing drinking water, wastewater, stormwater and source water resources efficiently and effectively.
The smart decisions that balance energy usage with desired water quality and quantity will be supported through the development of cloud-based analytics that is driven with the “Big Data” from distributed array of environmental sensors. These “Internet of Things (IOT)” environmental sensors will be used to both monitor and control the environment. The new data will be supplemented with the data from the existing infrastructure such as SCADA historian databases and meter data. Additional data needs will be examined carefully to reduce their impact on operations. For example, water meter data is usually collected on a daily basis to prolong the battery life whereas the same data may be needed at five-minute intervals to generate an accurate demand picture. Innovative approaches that provide additional data through low-cost sensing and citizen participation will be explored.

Standards:
The lack of standards for data exchange of environmental data is a major issue. There is a significant body of work mainly related to the XML-based exchange of source water data, and the US EPA is relying on Environmental Sampling, Analysis and Results Data Standard (ESAR) and Water Quality Exchange (WQX). The Standard Energy Efficiency Data (SEED) Platform is used by DOE. However, there are no standards for the “Smart City Sensor Data.” Existing data exchange formats are mainly driven by the capabilities of the underlying transmission protocols. The commercial web services have adopted “REST with JSON payload” as their standard, and the environmental web services will need to be compatible with these commercial services so that all data, whether public or commercial, can be easily consumed. This project will develop web services that support “REST with JSON” as their public end-points. It will also develop draft standards for data packet definitions for the JSON datasets. This will be a critical piece of this work because JSON format can be interpreted in a variety of ways, and different interpretations can result in incompatibilities. The REST/JSON API will be defined to promote integration with the existing standards.

Replicability, Scalability, and Sustainability:
The key to replicability of the project achievements will be ensured through the development of a solid workflow that can be re-executed with minimal interactions with original stakeholders. Such a workflow will require the development of plug and play software and hardware to the extent feasible. The scalability of the solutions will be achieved through the deployment of distributed sensors, edge computing gateways and robust cloud backbones. A collaborative cloud-based platform to share learnings will support sustainability of the solutions.

Cybersecurity and Privacy:
The IoT solutions leverage the LoRaWAN protocol for the node to gateway transmissions, and use technologies based on the AWS IoT client and Azure IoT client to manage the gateways from a cloud-based orchestrator. This approach allows Software Defined Networking (SDN) while providing cybersecure communications. The node locations and related metadata are stored in secure cloud-based storage to protect privacy.
The LoRaWAN protocol includes advanced security mechanisms that have to be selected and implemented carefully. We created a Class A device in our implementation and used recommended OTAA (Over the Air Activation) method for authentication. We ran the LoRa Network server on the field gateway and send data forward using MQTT to the Azure IoT hub using security tokens to authenticate devices and services to avoid sending keys on the network. Additionally, security tokens were limited in time validity and scope. Our AWS-based orchestrator that manages specific field gateways uses the AWS X.509 based IoT client, and does not involve the opening of new ports into the firewall. So it substantially improves security while providing advanced device management features. In a nutshell, many millions of devices are communicating today with the architecture of LoRaWAN+ (Azure and/or AWS) but the architecture has to be carefully provisioned to provide the necessary security for the use cases. We demonstrated a cyber-secure and privacy protection architecture for our use cases using LoRaWAN, Azure and AWS.

Create reference architecture for Smart Lights and Sensors via deployment of CryptoMove Moving Target Data Protection to render data onto a constantly shifting and mutating defensive fabric, thereby greatly decreasing the likelihood of exfiltration of sensitive data, and likewise for ransomware probability. Cities are under increasing attack due to ransomware and other threat actors. CryptoMove’s proposed solution renders common attacks intractable as it removes contextual cues while increasing obfuscation via various distributed computation techniques. Key performance indicators include (a) increased recoverability of data, stemming from corruption / ransomware and (b) Decreased vulnerability of private/confidential data to standard attacks.

Cybersecurity and Privacy:
CryptoMove is currently being used by the Department of Homeland Security to secure live video data captured by drone fleets in flight. Fragmentation, Data Mutation, Encryption, along with constant movement are used to unanchor attackers from progressing down a kill chain.

Data is exchanged intensively within a Smart City, the correct usage of such information is vital to provide a better service to the citizens. Protecting user’s details is the key of a broader adoption of any application with intense data exchange and exploitation. The challenge resides on protecting user’s details (GPS position, health details/information) while at the same time being able to use it within the scope of an application. The proposed solution consists of an Encryption layer that allows the user to select what information he/she will be willing to share, and which details will remain private. The approach we are trying to implement is a multi-level encryption tool that will allow the user to decide which information they will share and which will be kept private. Also, a white-list approach will be tested to provide the user the possibility of selecting which kind of applications will be able to consume the user’s details without any restriction and which other applications will be blocked.
The solution includes a developer’s API that will implement SOTA encryption methods before consuming and storing any data.

Standards, Replicability, Scalability, and Sustainability:
The project will be developed using open source & royalty free applications which will ensure the sustainability and replicability. The Standards used will be according to HIPAA regarding data protection and we will also consider EU regulations regarding protecting user Data. Regarding scalability the usage of FIWARE data models will allow us the possibility of taking models built and tested by a big and strong community to ensure the integration of the solution with additional Smart City applications.

Cybersecurity and Privacy:
The solution aims at encrypting user data from its origin, implementing a whitelist approach will improve the usage of data. Along with that the solution considers data anonymization to ensure the privacy of the data. By following the standard and recommendations of both HIPAA and the EU regulation (eu) 2016/679 we try to ensure the proper compliance of user data protection.

Smart Beyoğlu is a mobile application project which provides fast access to all transactions related to the municipality and solutions for the citizens and business owners in Beyoğlu. Local and foreign tourists can get a lot of information such as details, location of business, hotels, restaurants etc., historical buildings and cultural events. It is a mobile app project that allows them to set up a network. The foreseen challenge is incudes that insufficient number of users and information security. The solutions to be applied for these challenges that proper promotion of the application via conventional and social media as well as encouragement to use by locals regarding local governance aspects. Also, the application is non-profit and belongs to local municipality which make easier to be trusted in terms of information security.

Standards, Replicability, Scalability, and Sustainability:
Since the menu contents in the application are filled in by the content owners, the application can easily be applied in each unit of settlement which makes the project can easily be designated to sustain.

Cybersecurity and Privacy:
The frequency and strength of Distributed Denial of Service (DDoS) attacks is on the rise. Through the exploitation of millions of insecure Internet-of-Things (IoT) devices, the creation of botnets waging highly distributed volumetric attacks is easier and more impactful than ever before. In addition to larger attack volumes, efforts are shifting from the network and transport layers to the application layer (layer 7). Application layer attacks are far more sophisticated, often requiring fewer resources to bring down a website or application, and can disrupt operations with even greater impact. Our provisions against DDoS attacks, including those that target UDP and ICMP protocols, SYN/ACK, are DNS and NTP amplification and Layer 7 attacks. Our global network has defended against sustained attacks over 20Gbps. By disrupting DNS resolution, a DNS flood attack will make a website, API, or web application non-performant or completely unavailable. In accordance with those, websites and applications require the resilience and intelligence of a scalable network to combat the biggest and newest attacks. Protecting against threats should not degrade performance caused by security induced latencies and security services must be easy to configure to eliminate misconfigurations, which introduce new vulnerabilities. In short, we take precautions at DDOS, SYN / ACK, HTTP Flood (Layer 7), DNS FLOOD, UDP Amplification (Layer 3 & 4).

Tracking a berry crop at the box, bin, or tote level from harvest in the field to end user. Monitor in near real time temperature, humidity, shock and other environmental conditions to ensure product quality after harvest, throughout transit and during storage. Potential to use blockchain to ensure authenticity of food safety certification which can travel with each sensor.
Berries are a high value, highly perishable crop. Buyers increasingly value local sourcing but sellers have few ways to prove provenance. No solutions currently exist to effectively monitor a crop after harvest but before it enters cold chain custody. Monitoring during cold chain is typically at the shipping container, not individual package or pallet level. Food safety certification is a cumbersome and imprecise process currently tied to overall shipments, not individual pallets or totes. Solution is a sensor that can be put on or in individual packages or boxes of crop, monitoring location, condition and carrying the required certifications. More accurate field to fork data could enable “just in time” last mile solutions from urban food hubs.

Standards, Replicability, Scalability, and Sustainability:
Sensors are currently developed and can be acquired and deployed in varying quantities depending on the scale and budget of the pilot project.
Partners include Oregon Department of Agriculture’s certification specialists who have an interest in developing new, better systems to authenticate and trace crops.
Grant funding is being pursued through Oregon State University and Oregon Department of Agriculture to scale this project to multiple additional berry crops in 2019.
Project is partnering with Curry & Co., a vertically-integrated food packing company to ensure grower and business needs are met, resulting in a more commercially viable product.

Cybersecurity and Privacy:
Sensors will only be applied in fields of willing partners, and will track data about crops not people. Data will be transmitted from the sensors through a cellular signal, and will utilize encryption. If the system were to be hacked, minimal damage could be done as the sensors are simply monitoring environmental conditions.
By incorporating blockchain technology, we can ensure better tracking of individual pallets, verify their provenance, including organic or other certifications, and even create permission levels so that certification technicians can access certain data, warehouse workers other data, and even allow retail buyers to access information like which farm it came from and imagery of the plant where the crop was processed.

• New environmentally conscious smart city “Mobile Edge cloud-based AI platform and services” plans by upgrading used smartphones and tablet PCs to IoT things that not use anymore and kept in drawer.
• One old smart device is upgraded to IoT things and integrates with various smart services (e.g. smart transportation signals, floor type smart phone crosswalk signals, smartphone digital multi advertisement signage) communication and other edge services to Suwon city and Sejong city in Korea.
• Over the past 10 years, as 7 billion smartphones have been produced, new smartphones have been replaced in less than 2 years, smart devices such as used smartphones have been disposed of or placed in drawers.
• Rather than producing new IoT that is essential for smart city, waste phone is upgraded to solve environmental problems and global environment pollution problems due to urban electronics contamination.
• Suwon City and Sejong City are planning to invest more than $50 million to transform their city into a smart city infrastructure, but they are limited in finding new models due to the increased cost of IoT devices and communication.
• To overcome this, it is possible to up-cycle waste cell phones into things, develop an edge device between thing-thing and edge cloud platforms, and distribute the existing centralized data center as an edge unitan alternative method of Smart city.

Standards, Replicability, Scalability, and Sustainability:
• Public data is data managed data created or acquired by a public institution and can be apply as new service model that delivered to and combined with the required private sector in a variety format. (as file, open API, other visual materials)
• For this, carrying devise stratagem of various public data, such as local governments and public organizations, can be implemented in conjunction with an up-cycling mobile edge platform based on open API.
• When the up-cycling industry for used digital products is activated by a public institution, it can also increase the affinity (greater accessibility) to the used products and expanding other industries.
• Establish strategies to spread the platform-based service model to other areas, cities and regions.
• Leading the digital innovation industry by continuing to spread up-cycling based smart city services.
• Evaluate the progress and performance of projects regularly to consider measures to recognize outstanding urban and regional programs or reward them with appropriate incentives
• Installation and use of waste smart phones at intersections (one by direction) for black boxes to maximize the impact of resource utilization, reuse,improved traffic congestion and reinforce safety due to collected data.

Cybersecurity and Privacy:
• Providing data confidentiality and integrity by applying Secure Socket Layer(SSL)/Transport Layer Security(TLS) standard network security protocol for mutual certification in order to prepare cyber security and cracking between in a number of IoT devices and edge computing’s connection environment though mobile up-cycling.

SBAC will focus on smart buildings within the environment of communities on a local and regional level. There are a number of issues pertaining to communications, connectivity and integration that need to be resolved. This group will discuss these issues and others that arise over time, as well as work to provide best practices and prototype demonstrations of such. SBAC will focus on 4 primary areas to start:

1. Interoperability of communications and applications between buildings and their environment (city, town, campus) and Security & Privacy – this will deal with cyber and physical security as well as privacy issues
2. Health Care- teleheath, telemedicine, smart building tech for health, interfacing with the health care community on prevention
3. Transportation – public and private transportation, connected and autonomous, applications and infrastructure
4. Energy – numerous issues including energy efficiency, demand by IoT applications and devices, and network infrastructure, energy generation, energy micro-grids.

Standards, Replicability, Scalability, and Sustainability:
This cluster is focusing its first efforts on key issues that need resolution as listed both above and in the KPIs/deliverables section. We anticipate the development of guidelines, frameworks, and, if needed, standards, that will incentivize the desired behavior in the construction of smart buildings, and as a result, smart cities. For example, seamless interoperability/interconnection between a building and a city’s infrastructure is paramount, otherwise neither will be effectively “smart.” Even just choosing this as a topic, will provide invaluable guidance that can be used by the real estate industry and communities across the U.S. to support infrastructure deployment, with buildings being a key component of that infrastructure.

Cybersecurity and Privacy:
As noted in the Interoperability focus above, cyber and physical security will be included in the areas covered. Buildings are extremely vulnerable with IoT devices proliferating an environment, many of which arer not security hardened. The group will be looking at this. Physical security is also very important both with regard to intelligent access controls, and also regarding such things as edge data centers which can be located in a small office in a building. Many vulnerabilities will need to be addressed.

Smart Waste is a system that enables direct cost reduction with easy to deploy smart sensor supporting up to 10 years of operational autonomy for remote waste container fill level measuring, geolocation, temperature, tilt, and collection routes optimization.
• Waste collection trucks capacity are not fully utilized
• Waste container fill levels are not known at the time truck rolls for collection means collection route is not optimized
• The Waste Management solution installs sensor inside existing waste container. Sensor usages cellular network connection to send data in to cloud based waste application and analytics platform.

Standards, Replicability, Scalability, and Sustainability:
• Ultralow power sensor with any existing cellular connectivity’s and multitenant SaaS solution ready to deploy without any modification
• Return of investment within 6-8months is anticipated

Cybersecurity and Privacy:
• Senor and smart waste application do not store end user personal sensitive data
• Geolocation of container data is transported using secure encrypted channel over wireless or wired connectivity.
• Waste application is stored in cloud with user and admin authorization and authentication for given tenant portfolio
• The deployment model is either in public cloud or vendor Cloud or City’s private cloud. Public cloud (such as AWS) has secure encrypted space/tenant.

- Use of PKI to mutually-authenticate IoT devices to networks & gateways
- Secure provisioning, registration and production PKI certificates
- Life-Cycle Management of IoT Device certificates - Communities are realizing the size and scale of IoT devices within their networks are challenging to manage.
- Botnet and DDOS attacks are threats to a healthy ecosystem, how can communities be secure from these threats?

This solution will provide a layer of security around IoT connected devices and networks. It will contribute to the overall health and safety of the entire community. With more and more community dependencies on connected devices, the proper security framework and on-going support is critical to health and safety of a community.

Standards, Replicability, Scalability, and Sustainability:
The security framework that is established by a city/community will be the foundation for many years to come. The cable industry has been doing this since the early 2000’s and were able to stop pirated cable. The WiMAX Forum provided spectrum to over 200 countries in the world with only authenticate devices being used on these networks with standards based PKI. The global aviation community is adopting a PKI based standard for use around the world.

Cybersecurity and Privacy:
The solution takes away the risk of any unknown or unwanted devices getting onto a community network because of the ability to use PKI to perform mutual authentication of an IoT device to the correct corresponding community IoT network. If a device doesn’t have the appropriate PKI certificate issued by the community, the device will not authenticate, thus not be allowed on a community IoT network. The use of a trusted party CA should be mandatory because a community has full knowledge and control of their PKI rather You can control that only authenticated devices are being allowed onto your networks.

• Build upon a Smart City blueprint, playbook, and coalition of Oakland communities to convene, share, and learn what’s possible with data, IoT, and Smart Cities then use that knowledge to co-create projects and programs germane to each constituency, micro-community, and individual sets of needs
• Leverage the coalitions to hunt and gather data for addition to a shared Public Data & IoT Utility to be operated and run as a shared data service for micro-communities to build political will, businesses to grow, and collective voice to be used to address micro- or meta-level risks and opportunities
• Leverage people, processes, and technology to collectively address issues of unsafe Bay Area Housing Environments to co-create inclusive solutions and investment opportunities to resolve the housing crisis and improve health region-wide
• Focus on short and long-term positive outcomes associated with sustainable Smart City solutions, and maintain a cadence of speed and success delivering projects to address current issues for constituents, businesses, and government agencies generated by past programs, policies, and investments like failing infrastructure, legacy lead poisoning, and institutionalized racism

Our main initiatives in 2018 will include using the Public Data & IoT Utility to address one of the worst health issues affecting young children in Oakland, and throughout the country, tied to unsafe housing conditions and failing infrastructure - Lead Poisoning.
Using Lead Poisoning as our use case we are engaging multiple contributing agencies, many Oakland communities, private-, public-, and Non-Profit sector organizations and funding streams to improve the quality of life for young Oaklanders and their families by reducing the number of children under six who may become lead poisoned this year if no changes are made from the way things work today.

Standards: We will create a public playbook and blueprint with live data dashboards to help cities facing issues of lead poisoning. It will include recommendations about how they can organize themselves as individuals, groups, and coalitions to start and maintain traction and progress toward lead abatement and ending lead poisoning in their cities and towns. It will be a living resource updated by Oakland stakeholders as they discover new, better, and/or alternative ways to deal with various aspects and challenges. This resource will remain available online and public data dashboards will be updated real-time as each new User chooses to share their data with the public. Standards described in the City of Oakland’s data collection and surveillance programs will also be included for reference about the types of information the city collects about constituents and how community members can get involved with setting direction and policy in the areas of cybersecurity and personal privacy.

Replicability: The playbook is based on Oakland, CA, and we estimate high re-use of many elements being co-developed today. Every city will be different so we want to provide many building blocks for cities to join the agenda of safe and healthy housing with fewer hurdles to overcome. In the case of Oakland, a group called the Neighborhood Community Policing Councils (since renamed to “Community Councils” or “NCPC”s) have direct access to Oakland Police, Oakland City Council Members, and elected officials to ensure the needs of their communities are heard and answered. This network of 56 NCPCs has recommended using their membership to organize pilots and train all the other NCPCs to roll out testing in as many neighborhoods as possible, at the same time. These 56 Beats map to the 146 micro-communities. Most cities have community models in place which will serve the program well. We will also connect with regional EPA Certified Lead Inspectors and certified Repair, Replace & Paint Lead Abatement Contractors called, “RRPs,” to ensure only trained professionals are doing the critical work of lead abatement on housing units.

Scalability: We are building an application, courtesy of Metropolitan Intelligence, to inform and guide the public through a process used in lead abatement circles called, “Find It. Fund It. Fix It.” This mantra is easy to remember but extremely difficult, complex, and time consuming to traverse as an individual, or family, today. Our GTLO application helps Users assess their own risk, gather data, and make informed decisions about how to abate lead from people, homes, and the environment. Descriptions about how this process and the data flows are included in following pages.

Sustainability: We are building into existing, formalized, community networks who have existing agenda to look out for each other to improve the quality of life where they live. We are expecting to see excitement grow for data discovery contributed by constituents, investors, and property owners who realize the positive impact of co-creating the first United States “lead-safe communities”. The agenda to create lead-safe, sustainable, energy-efficient housing districts will drive workforce development programs, new businesses, new real estate investment opportunities and increase property values.

Cybersecurity and Privacy:
The plan is to run predictive data analytics to identify high probability of lead poisoned housing, as a starting point, then reach out to those occupants to explain data privacy, security, and the power of owning your health, housing, and environmental data. We will use data to begin the conversations and note we are reaching out to them because we’re relatively certain they are currently at risk for becoming lead poisoned in their pre1978 housing. We ask them to use our GTLO app to learn more about the health of their families and potential lead hazards in their homes and explain the options around sharing this data with various groups. All efforts will be made to engage community members, provide translation services, and ensure they are clear about the importance of their data, the security around it, and the value it creates for them. Once they understand the implications associated with providing access to important data with others they can use the app to start assessing their situation and make informed decisions about Cybersecurity. These diagrams represent the types of groups Users may want to share data with and the conversations we’ll be having regarding Cybersecurity and data privacy.

• The Smart City methodology helps people imagine and learn about future state scenarios for their lives, businesses, and cities. The process produces clearly defined product solutions and projects they want to create, design, and implement.
• The methodology can be used to introduce people who have little to no knowledge about Smart Cities and facilitate learning experiences that create and build well-versed leaders who can drive, manage, and support Smart City initiatives. Digital Transformation aspects will include key performance indicators and checkpoints to ensure teams remain on course until goals and future vision are realized.
• We are submitting this methodology for consideration and use with the Education SuperCluster and Action Teams to help define what each group would like to create for the SuperCluster and how they want to interface with the existing SuperClusters to integrate and amplify existing knowledge within the GCTC.
• City governments do not have bandwidth, approval, or resources to reach outside predefined roles and responsibilities or be overly innovative or leading edge regarding Smart Cities and IoT projects. It’¬¬¬s not that they don’t want to work on new, exciting, high-value initiatives; they’re just not approved to work on things other than what taxpayers already voted for.
• Technology vendors have products and services to sell to cities but do not have the insight on the customer’s customer, the constituents, and mainly understand broad generalizations about what the public wants to see. Diverse constituencies do not fit in a normal sales life cycle and many of their needs go unheard for lack of time or resources.
• Constituents want more services, services that work, rapid responses, commercial-grade technology, and proactive services that are intelligence and tailored to them.

These entities do not speak the same language or have the same sense of urgency for the other groups’ timelines. The Smart City Vision, Strategic Planning, and Digital Transformation Methodology can be used to gather requirements from all stakeholders, get them on the same page, design plans to implement solutions that everyone can understand, and move forward on Smart City initiatives. These workshops address the Current State, Future State, Digital Transformation Roadmap, and the metrics that will be used to measure performance and stay on track to meet their Smart City vision objectives.

Cybersecurity and Privacy:

The need for coordination of cybersecurity landscape and data proviacy perspectives with intersections and collision points.

CONSTITUENT AGENDA = Don’t track me but give me great products and services!
• Individual freedom and personal anonymity
• Independence from govt. services
• Dependence upon govt. services
• Ability to receive commercial-grade technology services for low or no fee
• Ability to easily receive high value products and services in immediate context of need for those services
• Ability to be forgotten and remove all personal data from commercial and government systems
• Ability to retract data from systems in a useable format in a timely manner
• Ability to add requirements to surveillance policies

PRIVATE SECTOR AGENDA = If you’re not paying YOU are the product.
• Hunt and capture as much data about individual behavior as possible and use it to make money
• Create high resolution profiles about constituent and consumer behaviors to market products, run political campaigns, and drive large-scale behavioral change with learnings derived from this data
• Sell the data to whomever has money to buy it
• Ability to exclude individuals from equitable access to services based on backgrounds, ethnicity, political affiliations, economic status, and other characteristics

PUBLIC SECTOR AGENDA = We need to track people to maintain societal order and grow new revenue streams to support city services.
• Delivering complex services to 10s of 1000s of individuals on a daily basis
• Public Safety & Asset Protection
• Constituency Surveillance & Data Privacy Protections
• Open Data & Data Transparency while complying with HIPPA, ADA 508, and GDPR
• Vision and projects to address data usage and policies are not in sync with daily change in constituency needs
• Internet of Life Saving Things will save lives and require massive data governance policy creation & automation
• Ability to survive as a city when old business models stop generating revenue to keep the city running

REGULATORY AGENCY AGENDA = Stop tracking people without their knowledge!
• Create legislation that mandates Cybersecurity policies and procedures protecting consumers and constituents
• Work to educate and bring public-, private-, and non-profit sectors up to date on what is reasonable use of data
• Enforce compliance when constituents and consumers are tracked or surveilled without their permission
• Let people remove their data from third party systems
• Automate systems to allow people to be forgotten within commercial & government networks
• Protect the rights to privacy for the constituency

CIVIC is an open data platform to democratize public information and drive meaningful engagement through neutral, nonpartisan analytics. It's built entirely by multidisciplinary teams of volunteer coders, designers and domain experts using open source technology. Over the course of a 9-month project cycle, teams are trained on data-driven specializations and work directly with early adopter government partners bring new insight and build tools for important, and often complex civic issues.

Challenges:
• Technology is expensive, and very often within a government environment these projects are high risk, hard to manage, and often fail to deliver effectively.
• It’s hard to move fast when you’re entrenched in bureaucracy, and government has fallen behind common tech industry practices of iterative development.
• Cities and municipalities have made strides in creating open data resolutions and ordinances, but are still limited when it comes to creating visual, interactive experiences and meaningful outcomes.
• Data resources are splintered. Without strong data standards and a united goal to design integrated connected systems, investment in one area can become quickly
outdated and don’t necessarily translate to large scale progress.
• Data-driven tech is a highly competitive sector, with private industry struggling to meeting their need for an experienced workforce in fields such as data science, data visualization, and systems architecture.
• Academia is similarly struggling to meet data gaps in their curriculum and prepare candidates for the competencies needed in the workforce
• The enormity of work needed across the nation to update siloed government data sources into a useful format is staggering. Considering the talent needed to create
comprehensive reform, especially with a focus on intercompatibility between disparate systems, it’s hard to imagine a solution on the scale of funding mechanisms
typical in the venture-backed private sector. Short term Hackathons haven’t proven effective.

Solutions:
• Civic engages sustained, long term volunteer commitment by delivering a strong call to action, and a cohesive, useful end-product.
• We provide training to fulfill our own talent pipeline, but our needs have strong cross-over with private industry and has proven an effective model for top tier workforce development.
• We employ strong data standards across our system, so work done on one project often benefits multiple sectors.
• All our code is open source, and fully reproducible.
• From the thousands of applications we receive in Oregon alone, we believe our team methodology and call to action will resonate nationwide and can provide exponential benefit to the labor intensive work of migrating fractured data sources into a connected system.

Cybersecurity and Privacy:
A core function of the CIVIC Platform is to integrate data sources across multiple regions and stakeholders that can be combined for analysis and visualization in ways that drive insight on themes and stories. This with in mind, CIVIC is keenly aware of ongoing debate and discovery regarding potential use cases and threat models as they relate to government data in a public cloud. As our platform encourages data sources to be accessible, machine readable, and publicly available whenever possible, we are optimistic about how that data may be used to gain insight and potential for the CIVIC Platform serve as a test bed for innovating security standards and best practices for open data in cities.

Here are two main attack vectors that our platform prioritizes:
• A security breach to our data store and protecting personally identifiable information
• Taking publicly available multivariate aggregated data and deanonymizing it through a narrowing process

Anonymization of personally identifiable information
• Civic is careful to never present personally identifiable information, and information that is derived from personally identifiable sources is only ever presented in an aggregated form.
• Certain standards in the Civic Platform preempt the possibility of deanonymizing multivariate aggregated data through a narrowing process. For instance, a neighborhood may only have a handful of households that match a set of multivariate demographic criteria. CIVIC's process includes assessing these potential use cases individually, following the guidelines and best practice established by experts and avoids risk by limiting what data can be associated thorough our linked APIs.
• All our reports link back to the original datasets the data came from as well as a writeup on any methodologies used in analysis.
• In the event that data is asked of a user on the platform, (e.g., entering an address to frame data analysis in a personal way) the data is not stored and the user is informed that the data is not stored.

Protecting against a security breach:
• When working with government and third party vendors, the first and most important strategy to protect the integrity of raw data is to ensure original owners of these sources are implementing strong security standards to uphold the custodianship of their own data.
• In addition to storing data securely, it is important to recognize best practices for sharing data securely. Encouraging encrypted disks and API access keys from the point of origin helps to reduce risk by managing permissions through the life cycle of data and how it may be used or shared in the future.
• When we do ingress data on the CIVIC Platform, it is always stored in an encrypted format that can only be accessed through strict access control policies. This protects the data from a breach as well as the possibility of a bad actor working on the Civic Platform.
• The Civic Platform allows unprivileged users to query the secret data stores by either stripping records of PII or returning sufficiently aggregated data to anonymize individuals that match the aggregation criteria.
• The Civic Platform never creates APIs or websites that access secret data stores. Intermediate data stores are created that only contain anonymous data that results from unprivileged querying as described above.

The starting point for us was this simple question; “Why does the public service demand keep growing as the resident population in Seoul is in decline? With pricier real estate, more citizens live outside Seoul, but commute to work and shop. How can we estimate the amount of citizens using public services in Seoul? It is the residents of the city plus those who work there during specific hours, but this is difficult to measure. A term from OECD, “de facto population,” is a concept under which individuals (or vital events) are recorded (or are attributed) to the geographical area where they were present (or occurred) at a specified time.

Challenges and Solutions:
● As gathering data entails personal information, it has always been a challenge to have individuals provide data
● Security is also an issue as personal data, such as location must be kept confidential
● Gathering data with private companies, such as Korea Telecom requires a high degree of trust
● Thus Seoul has been working closely with the private sector which has built up ample trust to be able to work together, even with sensitive issues such as personal data
● Data security is enhanced through non-disclosure clauses as well as utilizing closed servers and other cyber-security enhancements
● Personal data is also anonymized through aggregation

The performance targets are:
• Increase of passengers using Night Bus Service. By better knowing when and where citizens will be at these late hours and were they desire to go, optimized routes were devised which made the buses more useful, and increased their demand among citizens.
• Again, by knowing where nonresident commuters are going and coming from, optimized and more direct routes are devised, leading to a reduction of public transportation transit time.
• Increase in tourism satisfaction.

Standards, Replicability, Scalability, and Sustainability:
• Requires interoperable GPS, AVL and CAD interfaces, which is quite ubiquitous among other cities, ensuring replicability
• Standardized processes are not unique to city or region and can be replicated and scaled up in multiple cities/communities.
• The system will have its own business model to create sustainable stream.

Cybersecurity and Privacy:
As mentioned above, aggregation is being utilized to ensure individual privacy of the citizens even in the event of a security breach. Standard network security features, from firewall, WPA etc. has been implemented to ensure that breaches cannot occur.

The City of Coral Gables promotes the development of a smart city ecosystem that fosters innovation by bringing together through technology People, Businesses, Organizations, Things, and Systems. By leveraging strategic planning and innovation, the City’s digital transformation and smart initiatives can benefit our citizens with continual improvement to customer service and quality of life. Our smart city plan implements several interconnected and interoperable elements that include a Smart City Hub, Data Platforms, Internet of Things, and a robust and resilient technology infrastructure with high-speed communications.
Our recently launched new, work in progress, Smart City Hub is a public collaboration and open data platform that supports a beautiful and smart city. It aggregates in one place many elements: a Data Marketplace, an Application Store, Transparency Portals, Citizen Engagement tools, Enterprise Systems and eGov City Services, Internet of Things sensor data and dashboards, a Crime Intelligence Center, Data Platforms, GIS applications and open data, APIs and developer tools, and many more features and services. Together these interconnected and interoperable elements foster transparency, value creation, open data and analytics, actionable information, efficiencies, citizen engagement, mobility, accessibility, crowdsourcing, inclusion, and collaboration.
Please take a few moments and visit our Smart City Hub public platform at: www.coralgables.com/smartcity

Standards, Replicability, Scalability, and Sustainability:
This project, started as part of the Coral Gables IT Strategic Plan on October 2016, has already become a reference for neighbor cities who have approached us to gather information and framework to replicate. Our smart city plan engineering design poster explains how to implement our smart city model and hub with a bottom-up approach, which starts with a foundation of high-speed communications and resilience which includes a smart energy microgrid, and goes up to the value delivery layer (smart city hub) and smart city ecosystem (stakeholders).

Cybersecurity and Privacy:
This project follows ISC2, CIS, PCI FDLE and other design/functional compliance requirements, including IoT traffic and data segregation, cloud security, VLANs and traffic isolation, encryption, data governance best practices (risk management, detection, protection, technology management, response, and compliance). We are also incorporating Blockchain.

The City of Ruston, Louisiana has a number of ongoing projects to improve the quality of life for its residents, including a Smart Grid system and a downtown fiber optic network. Louisiana Tech University plans to develop low-cost improvements to city services using the fiber-topic and small cell installations to enable smart transportation, smart weather, and smart flood risk monitoring and notification capabilities that can be viewed via a Smartphone App. We also plan to study the use of smart re-closers, wireless connectivity, and solar power potential.
The issues that the City of Ruston faces include managing the power distribution to all residents and businesses, handling downtown parking and congestion, dealing with natural disasters including floods and tornados, and finding ways of reducing energy consumption. We propose a Smarty City collaboration with Louisiana Tech University for exploring expansion of the Smart Grid system to collect other sensor data, esp. regarding weather and transit conditions. We plan to make relevant statistics available to Public Works via an online dashboard.

Standards, Replicability, Scalability, and Sustainability:
The project can ensure replicability, scalability, and sustainability of operations. The principal participants at Louisiana Tech University plan to record and publish the procedures that we undertake to establish this Smart City infrastructure, and record the discussion of meetings with city officials to keep track of important negotiations. These records will establish replicability, which in addition to any publications and demonstration at the GCTC expo, will ensure that other university researchers can follow our steps to form teams with public officials and install similar sensing equipment. The project will demonstrate scalability by demonstrating how such a network can expand over time, by adding additional sensors to acquire a finer-grained information about weather and transit conditions. The project will be sustainable because it will formalize a consistent upkeep and maintenance schedule by both university faculty and public employees. Any equipment initially prototyped and installed by faculty participants will be transferred to the city once a formal upkeep procedure has been set in place.

Cybersecurity and Privacy:
The proposed solution was designed to address user uncertainties and risks of both cybersecurity and privacy. The proposed project is intended to address the question of whether the Smart Grid data is secure and private. We plan to first identify what security measures are presently being undertaken to encrypt or restrict access to this data. For this, we plan to study in depth the embedded systems used for data collection and their operating systems, the available wireless protocols and cloud infrastructure for security flaws. Smart meter data will be classified as public or private information to determine whether it could be shared and used for purposes such as load balancing or whether it must be protected from unauthorized parties. Our approach will make it more difficult for malicious users to perform interference using techniques such as adding artificial noise and lightweight cryptography solutions.

• PPP demonstration project leveraging fiber optic, smart poles and wireless technologies (CBRS, Wi-Fiber, TIP Open Network, etc.) for connecting underserved neighborhoods.
• Coalition between non-profits, municipals, and corporations to improve broadband for public good.
• Focus on connecting community centers, service organizations, and local government facilities.

Standards, Replicability, Scalability, and Sustainability:
• Project uses COTS technologies, replicable by other communities.
• Scalability is limited by fiber capacity and available RF spectrum – additional fiber and RF channel planning to create scalability.
• Project is sustainable via a shared Multi-Use Converged Infrastructure for the deployment of free public Wi-Fi, Private LTE, enhanced county operational networks, including the delivery of cellular and other third party services.

Cybersecurity and Privacy:
• Project will leverage NIST cybersecurity framework and GCTC cybersecurity advisory committee resources.
• The solution also takes away the risk of any unknown or unwanted devices getting onto a community network because of the ability to use PKI to perform mutual authentication of an IoT device to the correct corresponding community IoT network.

Monitor Power Quality parameters such as voltage dips, sags, harmonics, THD, TDD and transients; monetize losses due to power quality; and minimize the troubleshooting time using our Power SCADA tool anywhere in Real Time. Get alarms and reports straight to your device in time.

Standards, Replicability, Scalability, and Sustainability:
• Standards: The commercial devices selected would be UL Listed and conform to all applicable industry standards (eg: IEEE, IEC, NEC, etc.).
• Replicability: Install prototypes at similar industries and compare results.
• Scalability: As long as the CTs and PTs are available, the devices can be installed in any 3 phase circuit ranging from 208V to 750kV.
• Sustainability: Electronic devices while operating do not pose any harm to the environment. Redundant servers available to back up data and operation during maintenance, power loss or catastrophes.

Cybersecurity and Privacy:
• User support through phone, email and on-site visit would be available to help them acquainted with the GUI, reports and alarms.
• It is proposed to use Verizon wireless for the data transfer over cell phone medium.
• Two physically isolated servers host and analyze data and automatically come into action should one fail. The facilities are backed up with generators in case of utility power failure.

- kWh usage, cost, and carbon emission savings by managing power on computers without impacting user productivity, or IT maintenance via software IOT sensor
- Savings significantly impacts all Sustainability Plans with energy efficiency, Carbon Emission reductions, and kWh aversion. Scalable on a Global basis.
- No Cost, minimal effort POC to show savings using real data from the prospect’s environment.
- Minimal impact on IT schedules, savings in under 90 days.

Standards:
Our IOT sensor is a standard, familiar MSI file that installs similar to any application IT departments use routinely. It uses a standard SSL certificate to securely communicate only to the server and the server ONLY communicates with the agent. All communications are initiated from the agent. Our application does not require any IT infrastructure changes, and uses all standard networking ports.

Replicability:
Using the same simple deployment processes. eiPower Cities can extend eiPower savings beyond municipal buildings to school districts’, and counties. Our product is the simplest way to realize Smart City Sustainability goals and Energy Efficiency Savings.

Scalability:
eiPower is an IOT application, capturing small amounts of data from many devices. The computing power to accomplish this is minimal. Additionally, our server application can be multi-hosted to keep Cities, departments, schools, and counties distinct. The power of the Cloud enables eiPower to serve hundreds of thousands of computers globally.

Sustainability:
eiPower reduces kWh consumption, thus reduces power from carbon plants, or reduces the amount of storage and generation for renewable energy infrastructures. Energy efficiency, carbon reduction, and energy savings are all part of Cities Sustainability plan.

Cybersecurity and Privacy:
eiPower only transmits power event data, such as on/off/hibernate/standby. These power states, are coded and can ONLY be sent to the server via SSL. No personal data, keystrokes, or tracking is collected. There is no server-initiated communication, it is all done from the agent. The IOT sensor can ONLY exchange data with the server, the server can ONLY exchange data with the IOT sensor.
The IOT sensor cannot be modified or spoofed as it is signature is signed with an SSL certificate.
Finally, if the user modifies computer power schemes, they are changed backed immediately instead of the next reboot, or login.

A regional consortia approach to cybersecurity education and workforce readiness was formed by Southwestern Ohio Council for Higher Education (SOCHE) in cooperation with the Air Force Institute of Technology, the Dayton Development Coalition, University of Cincinnati, University of Dayton, and Wright State University. The coalition has expanded over time to other higher education, K-12 and industry partners. The consortium’s mission is to serve as a resource for education, research and workforce development in cybersecurity and information assurance.
The consortium originally formed based upon the urgent need for cybersecurity workforce in this region of the country. Both public and private employers were concerned with the ability to access the workforce they needed from the local area. The Cin-Day Cyber consortium went to work trying to understand the local supply and demand for cybersecurity employees. In addition, the consortium worked to create sustainable partnerships with public and private partners in order to better understand their long-term workforce needs.

Standards, Replicability, Scalability, and Sustainability:
The Cin-Day Cyber Corridor team is very robust with strong buy-in. The consortium has built a strategic plan focused on meeting required industry standards, replicability, scalability and sustainability. The team meets quarterly to review plans, status and next steps.

Cybersecurity and Privacy:
The Cin-Day Cyber consortium partners are all compliant with NIST standards as well as other cybersecurity standards based upon their institutional requirements.

"UPsouth a technology platform that supports Auckland Council connect with young citizens and empower them to become civic entrepreneurs.
The Southern Initiative (TSI) is a place-based initiative in South Auckland, New Zealand, that aims to create a prosperous, resilient area where communities thrive.
To deliver on its mission, TSI wanted a way to engage with young people in South Auckland. Itsnoon’s civic empowerment platform ‘UPsouth’ enabled young people, of Māori, Pasifika and other ethnic backgrounds, aged 15-24, generate thousands of thoughts, ideas and commentary on important local issues while earning micropayments for their contributions.UPsouth is an online platform for young people to express their creativity, share ideas and earn money for their input in response to call-ups from government, companies and organisations seeking community input to various challenges. It’s a new way of developing and nurturing a network of young people who lead together and support one another’s development in both an entrepreneurial and altruistic way.
Civil bodies and relevant organisations sponsor questions on UPsouth that help connect citizens to their cities. Examples of “calls” are:

1) If you had the power to end child poverty what would you do?
2) What do you love about your city?
3) Do you control your device or does your device control you?

Participation on UPsouth is designed to encourage the ‘new’ way of working - collaboration, critical thinking, creative thinking and honing communication skills. Participants practice reflection on the question, apply it to their unique circumstances, think of responses, ideas and suggestions while expressing themselves via text, video, music, art or other creations. The youth earns micropayments as acknowledgement for showing up while practicing key 21st century skills.

Standards, Replicability, Scalability, and Sustainability:
Itsnoon’s technology solution has now been further developed to scale. the technology offer now includes SAAS models for a variety of uses cases, primarily
- Cities
- Causes and
- Business Innovation.
Community engagement can incentivised through micropayments, digital currency or other social incentives. Calls or Questions can be supported / raised with as little as $10 and anyone on the community (in addition to parent sponsors of the platform) can raise and sponsor calls) creating network effects on the platform and sustained engagement.

Cybersecurity and Privacy:
Itsnoon’s technology platform is built on AWS infrastructure and has passed all AWS compliance requirements that includes several security capabilities and services to increase privacy and control network access. These include: Network firewalls that are built in, web application firewall capabilities and fully encrypted database."

NoTraffic is developing a solution that enables cities to manage and control traffic based on a network of smart sensors, Vehicle-to-Infrastructure (V2I) communication & real-time optimization of signalized intersections. NoTraffic will install the system (4 sensor units and a control unit) at phase one at 1-2 intersections in the city of Redlands CA. Phase one includes collecting data for 2-3 months. Phase 2 will include connecting to the traffic light system and a cloud control panel at the municipality to manage and control the traffic. As this pilot program will commerce successfully, the intention is to install the system throughout the whole system.

Standards, Replicability, Scalability, and Sustainability:
As the pilot in Redlands City is planned in the pilot phase to be in 1 or 2 intersections; once it is successfully implanted it is planned to be installed throughout the whole city. Once the NoTraffic system is installed the control of the city’s transportation

Cybersecurity and Privacy:
One of NoTraffics founders- Uriel Katz, and other engineers in the company are cybersecurity experts that are focused on this topic. NoTraffic system is built with top of the line security and firewalls. All the data collected is located on a secure cloud that the city alone has access too. As well, as the information to the control unit for each intersection has its own safety security installed so no safety accidents can happen- such as the could be no situation that all the lights are green in all direction which will cause a collision as the traffic control has very strict safety regulation that NoTraffic system can’t modify or change, thus- no cyber attack can overtake through our system.

Build a catalog of 3D maps with clear identification of safety-related objects to help first responders navigate safely and quickly during emergency/crisis.

Challenges and Solutions:
• Lack of availability of rich interior maps to first responders, with details of objects of their interest. It delays and impacts response time of first responders.
• The project will collect data to build 3D indoor maps with annotated objects of interest (e.g. exits and fire extinguishers) for first responders.

Standards, Replicability, Scalability, and Sustainability:
• Methods used during the project will be used to generate similar 3D maps for buildings on a large scale
• The indoor maps catalog of a diverse set of buildings can be used as benchmark for 3D indoor maps generation of other buildings with similar characteristics

Cybersecurity and Privacy:
• Access to survey data and GIS application will be provided only to authorized personnel only on request basis.
• We will encrypt our data with per-namespace keys to prevent unauthorized access and give fine-granularity access to authorized users.
• For privacy, we will use automated methods to remove humans in our camera images.

WIOMAX has developed a smart Decision Support System (DSS) integrated with Vehicle-to-Everything (V2X) for better road safety and increased urban mobility. The main purpose of this project is to apply the smart transportation solution and incorporate pedestrians and cyclists as beneficiaries of the innovative technology, for empowering walkable and bikeable communities through enhancing road safety, sustainability and smartness of cities. Challenge: Moving towards sustainability while making tremendous strides into digital transformation, the city of Seat Pleasant, Maryland expects to apply smart transportation technology to improve road safety and to increase walkability and bikeability of communities.

Solutions: We propose a Smart City collaboration with the City of Seat Pleasant, Maryland for exploring the practical benefits from increasing walkability and bikeability of cities through applying WIOMAX’s smart DSS system integrated with V2X communication into practice, especially regarding new bike trail along Maryland Route 214 that connects Prince George's County, Maryland, with DC.

Standards, Replicability, Scalability, and Sustainability:
• Requires common wireless communication and intersection infrastructure such as GPS, CANBUS, approaching vehicle detector at intersection, wireless vehicle-to-infrastructure communications.
• Standardized processes are not unique to city or region and can be replicated and scaled up in multiple cities/communities. The solution is planned to be replicated across the United States.
• The system will have its own business model to create sustainable revenue stream.

Cybersecurity and Privacy:
Vehicle-to-Everything (V2X) communication is integrated into the smart decision support system. Accordingly, system and services are ensuring the cybersecurity and privacy of nationally accepted standards.

Infrastructure domain
• Infrastructure is managed by city with physical access control to prevent unauthorized use.
• Minimum amount of data is distributed at the infrastructure side as using edge computing technology.
• Any data on storage are encrypted with Advanced Encryption Standard (AES) 256bits.
• Data aggregation will be performed at infrastructure to remove privacy information. There is a risk mitigation plan to assess and minimize cybersecurity risks.
• Intrusion detection is used to alert and prevent unauthorized network usages.

V2X domain
• Secure connections are used: encrypted wireless secure connections and transport layer security authentication to provide privacy and data integrity.

User domain
• Only limited user data stays locally at their devices, and user data is preprocessed to remove user privacy information
• All data on storage are encrypted with Advanced Encryption Standard (AES) 256bits.
• Security module is embedded in user devices to verify the authenticity of devices reporting to it.

User Privacy
• Ownership and usage policies of data are clearly outlined in contracts.
• Permission of user’s data collection must be granted by users.
• Device owners can change their directives at any time.
• Compliance to United States data protection and privacy regulations.

The Council of Great Lakes Region (CGLR) Regional Action Cluster will address the United Nations’ seventeen Sustainability Development Goals (SDGs) by consistently measuring sustainability at the neighborhood, city, state/provincial and regional levels. The cluster will also develop a framework to measure human well-being and ecosystem services by identifying bottom-up citizen co-creation actions taken across institutional boundaries. Open Action dashboards will display progress and link to knowledge achieving stated goals and objectives around the SDGs. Achieving ‘sustainability’ where it most counts, at the sub-national level and in our cities, remains a significant challenge, especially in economies such as Canada and the United States and in cross-border regions like the bi-national Great Lakes, which is home to 107 million people and accounts for 30% of combined Canadian and American economic activity and employment. As human population increases and more people migrate to cities (some aspiring to be ‘smart’), facilitating sustainability through citizen co-design and co-creation to address local gaps in sustainability and smart services, requires innovations through local-scale collaboration and networking as a potential long-term solution. Developing a methodology that can be used consistently across all of the world’s urban areas provides greater impetus for continued use.

Standards, Replicability, Scalability, and Sustainability:
The project will develop applications’ relationships that are standard across different frameworks as a way to convert ground level metrics to predictive shifts in high level indicators and design an Action Dashboard with Action Cards (and associated links to Knowledge Assets) for reuse and scalability. This core objective of the CGLR action cluster will be monitored in the following way:
1. Participation numbers and quality of Action Cards designed/re-used across communities.
2. Participation numbers and quality of Knowledge Assets designed/re-used within and across communities.

Cybersecurity and Privacy:
The open platform will have a public layer that will encourage easy participation and a protected layer that uses Google’s cryptographic authentication and authorization at the application layer for inter-service communication. This provides strong access control at an abstraction level and granularity that administrators and services can naturally understand. Together these layers will address the challenges of making local knowledge available for actions without compromising privacy, detect platform abuse, ensure content is not compromised, and promote trust through appropriate processes (e.g. review, roles and responsibilities).

• Leverage cutting-edge mobile software platform to empower healthcare providers to effectively extend care beyond brick-and-mortar facilities and deliver clinical support in a coordinated, data-driven, and timely manner
• Empower patients with technology to become active stakeholders in their care
• Shift from a reactive model of care (care delivery only when patient is sick) to a more proactive, continuous one (intervening sooner and keeping patients healthy through monitoring/virtual communication)
• Strengthen communities and populations by using improved access to care as a fulcrum

• Rural communities are challenged with access to appropriate care, transportation/distance to healthcare providers, lack of understanding of care plans, absence of data on patient wellbeing when not in clinical setting, fragmented data/communication, overtaxed providers, lack of specialist support, financial pressures both on patients and local clinics/hospitals.
• The proposed solutions consist of increasing access through a virtual care platform. This platform has the following elements:
o Optimize in-person visits by routing all care delivery that doesn’t require it through virtual model (e.g., telemedicine)
o Provide real-time and simple care plans to ensure clear understanding amongst patients
o Unify data system that allows for easy sharing of patient information between providers
o Seamless integration into workflows with dynamic triaging of those particular patients in need enabling efficient resource/time allocation
o Revenue generation through capture of new streams of reimbursement

Standards, Replicability, Scalability, and Sustainability:
• Standardized operating procedures and models have been developed to ensure rapid understanding of key community needs and deployment based on the unique nuances of the stakeholders in that community (e.g., capacity differences, capital available, population needs)
• New revenue streams will ensure long-term sustainability by leveraging billing codes focused on value-based care
o Billing codes include chronic care management, remote patient monitoring, and telehealth
o Investing in this program is a net financial benefit for partner institutions and allows for both the capture of revenue that they are currently eligible for but not capturing and generation of new revenue streams

Cybersecurity and Privacy:
• The proposed solution is fully compliant with federal HIPAA regulations with multiple technical safeguards to detect breaches of the system.
• Protected Health Information (PHI) is never used for commercial purposes and contractual agreements (e.g., Business Associate Agreements) provide further legal protections to the partner institutions.
• Patients will also have a clear terms of use and privacy policy that explains the HIPAA compliant nature of the platform and who/how their PHI will be used (only by providers delivering them care)

The Action cluster will aim to help collaborate with key stakeholders in the public health community to help create a Guide on best practices, case studies, and standards. The Guide will help guide key decision makers as they begin to formulate their policy positions on Blockchain and Public Health issues.

Standards, Replicability, Scalability, and Sustainability:
The data captured from our Guide will provide direction to the level of blockchain adoption and help identify barriers to adoption.

Cybersecurity and Privacy:
The Guide will have a section that focuses on the cyber element of blockchain. We will provide use cases that spotlight how the utilization of blockchain is helping diminish cyber risk.

• Establish a wireless living lab at an Iowa State University research farm for cross-domain, cross-discipline research, education, and pilot of smart ag and rural connectivity solutions
• Work with wireless and agriculture research and education communities as well as potential rural communities in scaling the living lab software and hardware systems as well as services

Standards, Replicability, Scalability, and Sustainability:
• CyNet will be developed and deployed using open-source hardware and software platforms (e.g., USRP SDRs and OpenAirInterface), thus facilitating replicating the system into other universities and communities.
• CyNet can be scaled to large producer farms and communities by using wireless backhaul solutions and by deploying more wireless base stations.
• As an essential infrastructure for research, education, and pilot demonstration/deployment of smart agriculture and rural connectivity solutions, CyNet will engage diverse, broad user communities, which will help sustain the infrastructure itself.

Cybersecurity and Privacy:
Security and privacy-protection mechanisms such as virtualization, authentication, and least-privilege access control will be adopted.

AnitaB.org and ISACA (the Information Systems Audit and Control Association), under the support of the Connect Chicago program, aim to create an accessible cybersecurity training program that can help close the skills gap. Out team will offer training and workforce opportunities for women in underrepresented communities in Chicago. Our program will take them through skills training in a cohort environment with mentorship, role models, and career advancement available. This pilot program is supported by the Connect Chicago Innovation Program, a fund managed by the City Tech Collaborative in partnership with philanthropy, industry, and the City of Chicago.
Women are missing out on a profession with relatively high wages, job security, and the opportunity for advancement in their careers. Our program seeks to address these issues by giving women the skills they need to take the next step in their career. We will introduce them to mentors and role models who can help them see what a cybersecurity career could look like for them. By getting and keeping women in cyber, we create a better workforce and a safer digital world for everyone.

Standards, Replicability, Scalability, and Sustainability:
This program could be replicated globally. Both AnitaB.org and ISACA have a global footprint. We could look at scaling in terms of number of classes run, number of people in a class, and locations classes are held. We see this project as easily scalable and replicable.
We also feel that many companies and organizations will have a vested interest in our success. With their help, we can make sure our students graduate from our program with the skills needed in their organizations. It creates a win/win for both groups – we get the funding we need to appropriately run our programming and they get the opportunity to hire well trained staff.

Cybersecurity and Privacy:
As mentioned above, cybersecurity professionals are in short supply. By training women in cyber, we help increase the number of professionals and increase the diversity in the profession.
We also create a group of cyber professionals in areas of the city that may not have them. They can become mentors and role models.

NTT Smart Cities Solution leverages IoT edge analytics for public safety. High definition video cameras, sound and motion sensors, and an array of IoT devices are integrated and deployed to monitor a location or venue to create a multi-channel solution. The solution, in turn, provides situational awareness, warnings and alerts to city agencies and venue security teams of incidents as they develop.

The system proactively provides early notification of potential and active public safety incidents to command and control authorities. If the city deems it appropriate they then notify the appropriate first responders. By leveraging advanced analytics including machine learning technologies, the system “learns” normal patterns and detects patterns that appear abnormal. The initial use cases are limited to specific types of incidents that can be detected through video and sound sensor analytics running on edge compute devices as well as social media monitoring. As the system evolves, we expect to expand detection capabilities to detect and alert to a wider variety of incident types.

Our current solution includes technology for “lost person” identification and “vehicle identification”, to assist should an Amber Alert be issued. It also includes wrong way vehicle detection. Future plans could also include facial recognition modules or other advanced detection components and may also include more automated incident response component for greater awareness of the developing situation.

Standards, Replicability, Scalability, and Sustainability:
• By creating a repeatable infrastructure, the safe city is transferrable to other municipalities
• The cognitive data engine allows for advanced thinking and processing of data, the input could be from anything sensors, social media, cameras or IoT devices—the engine does not care the inputs, it is how data is processed and handled that makes it innovative and unique
• The solution is developed on an open platform that used commercially available appliances to establish the data collection, normalization of the data and movement / tracking of the appliances to allow further analytics using proprietary technology and then the display of information back to the users.
• The open platform allows for scalability and replicability within an existing municipality and beyond to potential regional uses of the information captured and processed.

Cybersecurity and Privacy:
• The project uses both IoT and data already collected by the city to provide advanced analytics and advance safety. Privacy is protected as data is not actually stored together in one place – a portion of the data is stored on the edge and part on the city data center. Data is only displayed to authorized personnel on combining the information.
• The solution also takes away the risk of any unknown or unwanted devices getting onto a community network because of the ability to use PKI to perform mutual authentication of an IoT device to the correct corresponding community IoT network.

• Integrates technology into every aspect of the organizational structure and functioning of a senior village organization (Waterfront Village) as a model aging-in-place project
• Develops programs that realize the potential of technology for elders, their families, and their caregivers in community committed to aging-in-place
• Provides the technical support that makes its possible for people ageing-in-place to become familiar and comfortable using advanced technology.
Senior villages are neighborhood-based membership organizations of staff, volunteers, and vendors supporting residents who wish to age in place. Senior villages typically offer services to residents aged 62 or older to allow them to remain in their homes for as long as they wish and are physically and mentally able.
In Washington DC the largest population cohort is seniors. Contrary to popular opinion, seniors not millennials are the single fastest growing group. Nothing equals the potential of technology to offset decreased mobility and increased fragility of elders. Villages of members committed to aging-in-place offers a laboratory communities where the most advanced technology can provide necessary and essential services for older adults.
Apps that facilitate life for older people are proliferating; telemedicine is expanding, virtual communication is already a social reality, and new kinds of services for older adults come online daily.
Traditional government sponsored urban services organized to help the aged are rooted in assumptions and conditions that reflect the race, class and economic conditions of the late 1960s and 70s. They also echo visions and stereotypes of aging that have become obsolete.
This collaboration between the Village and the city of Washington offers an opportunity to introduce new thinking and new programming that to facilitate a 21st century vision of aging.

Standards, Replicability, Scalability, and Sustainability:
The changes in the use of technology within Waterfront Village can be expanded to the 13 villages in DC and also to the 53 villages in the region. These can also provide models for more distant implementation.

Cybersecurity and Privacy:
The project will address cybersecurity and privacy through technical means and will also asses the participants perceptions of security through interviews.

Develop approaches which improve indoor mapping techniques and datasets in the US to make them more common and available for use nationwide.

• Very few standards and best practices are available to create reliable, affordable and consistent indoor maps
• The project will map 10 public schools comprising of 1,201,082 sq ft of indoor space with state of the art lidar. This data will be attributed with relevant public safety indoor features and available for nationwide use.

Standards, Replicability, Scalability, and Sustainability:
• Common reference dataset for working groups to establish standards for indoor mapping
• Use of commercially available sensor for replication of results
• Data collection in common public buildings (schools)
• Publishing of tools and methods used to derive results

Cybersecurity and Privacy:
Data will be hosted on a State data clearing house website within the state’s IT infrastructure.
- Data will be collected after hours to avoid any people in the dataset.
- Data is being collected in public buildings only.

The Gunpo City traffic signal system was created with a voluntary idea, based on the experience of operating a traffic information system and with the application of the latest IT technology trend.
Thus, we have prepared a stepping stone for the provision of traffic signal information to the private sector in the era of automated vehicles of the 4th Industrial Revolution which had not felt concrete until now.
Traffic signals are also not up-to-date, since it is not possible to be aware of a situation - such as an accident caused by the signal system, a mass breakdown of traffic signals, or an open signal controller door - before it is reported.
If traffic signals are provided to the private sector, traffic accidents can be prevented since automated vehicles will be able to accurately perceive traffic signal information. In addition, we will be able to know when and where the green signal will be on, which will give rise to many startups in various areas (like finding the short-cut), ultimately leading to the creation of numerous jobs.

Standards, Replicability, Scalability, and Sustainability:
• Global Standards compliant smart city platform
• Apply Artificial Intelligence algorithm
• Wireless Communications : LTE and 5G communications
• Gunpo City further expanded the project to more intersections and is on-going
• Korean Local government is planning project expansion

Cybersecurity and Privacy:
• Korean Local government is planning project expansion Wireless(LTE) Traffic Signal Control System Using IoT technology
• Wireless(LTE) security is based on complementary systems, technologies, and features applied to the implementation of the signal system based on the wireless network
• We conceived an integrated control system for an effective operation of traffic signals and we prepared for the hacking of wireless communication with a three-layer security measure.(SSL VPN, Firewall, Server security solution)
• We completed the ‘Security Education for Local Government Personnel’ carried out by the NIS

DC Government desires dramatic benefits through the use of the ISO 55000 management system for asset management and asset visualization tools and processes piloted through the U.S. Federal Government. The Lab allows a series of DC Government problems to be addressed in a 4-week workshop requiring 20 total hours that points to publicly available solution sets that can be deployed by DC or any other municipality that sends students to courses.
The DC Government is interested in first exploring improved streetscape asset management, including pot hole management. A web-based, crowd-sourced approach that leverages apps and processes developed with the federal government will be shown as a possible solution. Other DC Government problems to address can include improved health care asset management, airport asset management, school facility asset management and much more that will be addressed over time.
It is possible for other municipalities want to establish a similar system.

Standards, Replicability, Scalability, and Sustainability:
The ISO 55000 standard for asset management will be taught in the class to help students understand how the course problem can be addressed in a repeatable, scalable and sustainable manner. Aligning the course solution set to ISO 55000 provides the students with a repeatable template.

Cybersecurity and Privacy:
The Federal Government use of web tools and processes includes cybersecurity and privacy protections that will taught in the class and will be repeatable by students.

The StormSense Project is an inundation forecasting research initiative to advance the field of emergency preparedness for flooding resulting from storm surge, rain, and tides. The scope of the project encompasses the interests of coastal local governments wishing to enhance their emergency preparedness via a network of 'Internet of Things' (IoT)-enabled water level sensors, collaborating with the hydrodynamic flood modeling and forecasting capabilities of the Virginia Institute of Marine Science (VIMS) and their VIMS TideWatch Network.

The Lake Tahoe Basin End Warning Systems, will provide a cross-jurisdictional system that emergency managers will use to improve performance, while providing predictive insights and more connectivity between first responders, traffic and transit operations, and the public. The system will integrate Smart Street lights, SaS, and publicly available datasets to provide a better understanding of visitors in the Lake Tahoe Basin including travel movements and duration of stay, emergency roadway issues including closures or hazards caused by landslides, fires, toxic spills, avalanches, tree falls, and power outages. These criteria will be considered for real-time detection and notification systems and reduction in secondary incidents.
First responders and transportation agencies of the Lake Tahoe and Truckee region would also like to develop a Bi-State preliminary exploratory study of a consolidated command center for dispatch services of fire and emergency services with an integrated traffic management center that is consistent with the Commerce Department’s National Telecommunications and Information Administration (NTIA) and the Transportation Department’s National Highway Traffic Safety Administration (NHTSA)

Standards, Replicability, Scalability, and Sustainability:
Nevada DOT, Highway Patrol, and the Regional Transportation Commission (RTC) of Southern Nevada are implementing the SaS platform proposed that was integrated with the RTC’s ITS system, and Nevada is testing expansion of the system statewide, we will build off of lessons learned and develop the aspects that are necessary to implement solutions in a rural area. Southern Nevada’s initial findings have shown an improvement of 10 to 15 minutes in incident response time in just a few months’ time prior to the artificial intelligence aspects of the system. We will work with other jurisdictions to expand the system and develop strategies to incorporate the communication system through lease agreements to maintain long-term operability of the system.

Cybersecurity and Privacy:
While it is difficult to fully anticipate the integration details until the project is funded, it is expected that the data will be maintained and stored on a dedicated secure cloud based data warehouse which will remove the need for IT infrastructure maintenance and will minimize bring-up and long term maintenance costs, all inter agency and cross agency communication will be done internally in using proprietary internal interfaces to the system and collaboration between the various systems will be handled through seamless secure encrypted communication using RESTful APIs.

Integration of available resources and services related to addiction in Hamilton County Ohio in to a program to breakdown data silos, determine best practices, and improve outcomes.
This includes a SMS text messaging platform branded “575-HOPE” to engage, inform, and educate those struggling with opioid addictions, and their caretakers. With the capability to proactively inform users that have interacted with the platform of emergency events, the AI-powered and callcenter backed application provides one point-of-entry for those in crisis, ongoing support for those in recovery, and a database of the journey of those individuals accessing services for evaluation by program providers and policy makers.

Standards, Replicability, Scalability, and Sustainability:
Since the 575-HOPE platform is SMS Text message based it can be implemented regionally and nationally quickly and easily. The platform doesn’t require users to have a data plan, is available to almost all phones as part of their basic service plan
and the service is available even in the most remote rural areas. The only requirement is a local addiction services call center partner that affords a safety net for messages not answered by AI, and to provide pertinent local information.
Demonstrated improvements in treatment standards, and reduced costs associated with overdoses could drive funding for expandability of the program in the future.

Cybersecurity and Privacy:
The project budget includes $32k in ongoing professional legal engagement to help define privacy standards and process within the text messaging application. Those engaging through the platform will be given the ability to opt out of the research component for the sake of privacy, with those terms still to be specifically defined upon approval of funding.

This is a project concept which is to create citizen-led, decentralized, local energy-based society that builds foundations on which the distributed resources (ESS, solar power) in the region that can proliferate profitable models which citizens invest, own, trade and operate.
1) This is to create an urban energy storage based on the optimal ESS (energy storage) introduction feasibility analysis in accordance with Energy usage analysis (big data).
2) This project intends to revitalize the energy production distribution resources through citizen-led photovoltaic power generation by developing photovoltaic energy on rooftop of the buildings along with development of photovoltaic energy in rural areas.
3) It intends to create power trading ecosystem that utilize distributed resources such as energy management efficiency by utilizing energy use analysis and citizen-led photovoltaic prosumer.

Standards, Replicability, Scalability, and Sustainability:
• Project sustainability
- (Local led) By creating the new industry backbone ecosystem such as co- operative operators led by local residents / traders, watt malls / energy self-supporting villages, it is expected that through securing over 9% of the profit model, is expected to vitalize energy trade of the shared resources from participations of the citizens.
• Project scalability
- (ESS sharing) It is possible to continuously expand towards work places including the energy multi consumers and other business units in the subjected areas that are mandatory to introduce such,
- (Prosumer) This can be expanded to the detached houses, multiplex housings, single-storey government office buildings and other unlisted work places, and is possible to expand B2C through electricity works and self-employment.
- (Power Brokerage) It is intending to expand electric power brokerage service by expanding potential demand due to improved profitability of the idle lands, rooftops of the buildings, and parking lots.
• Expandability to other areas/local entities
- Among the 31 cities and counties within Gyeonggi Province, based on the successful case in the city of Suwon where it is fulfilling eco-friendly energy city projects, it intends to expand electric power intermediation service by expanding potential demand due to improved profitability of idle land, rooftop, and parking lots, so to have it reflected in the policy project in other political entity’s “Regional Energy plan establishments.”
- Through the Gyeonggi Energy Cooperative, it intends to foster it as an implementing entity in a form of resident participating typed cooperative, and as social enterprise.

Cybersecurity and Privacy:
Through seeking efficiency and procurement of the energy within the region under the energy management system, it intends to vitalize energy trade ecosystem led by the citizens to establish the platform on energy management system and trade.
Also, when each organization creates a solution, the public (governance) is participating as a co-subject of the project from the beginning, and plays the role of mediating and sharing the amount of data of each participating enterprise.
⦁ Implementations using national dedicated lines secured of communication quality, security, stability, survivability etc
⦁ Cyber Security Management (G-IoT), using governmental G-IoT Network that support IoT service with various communication standards established by government agencies and local entities
⦁ Focal management on cyber security and privacy through the cooperation with Korean National Information Society Agency (NIA) that establishes and operates G-IoT

GO⋅PS is a smart city standard platform to utilize the element technology of the age of 4th Industrial Revolution as a means to solve urban problems.
The Gyeonggi Province of Korea, along with Gyeonggi Research Institute (GRI) and Gyeonggido Business and Science Accelerator (GBSA), is currently creating and operating an industry-academia-related consultative body to create a sustainable business model.
GO⋅PS matches companies, research institutes, and academics according to the demand of public urban matters, and uses its technologies, research works, and consulting methods to create solutions for problems and have them collected on the platform.
The GO・PS is currently comprised of three large departments namely, Smart Transport, Smart Energy, and Smart Healthcare. (It is planned to be expanded with more departments in the future)

Standards, Replicability, Scalability, and Sustainability:
After the solution of the current project is proposed, some projects that are active in this will be actually implemented and those methods will be informed and applied to the 31 local entities of the Gyeonggi Province, entire Korea and the whole world.
Because the local entities and related enterprises participate from the initial phase of the solution development, they have a strong will to implement the projects and can constantly revise and supplement them.
In addition, we expect that the GO・PS system will become more known and established in Gyeonggi-do, which will result in more participants and standardization and expansion as various solutions that will be created.

Cybersecurity and Privacy:
One of the key reason for establishing the platforms such as GO・PS lead by Gyeonggi Province(public) is to collect each of the solutions to have them shared.
Also, when each of the organization/institute creates a solution, the public (governance) participates as a joint entity of the project from the beginning to protect the sensitive data, and then, plays the role of adjusting and distributing the data of each participating company.
The GO · PS will collect and provide the necessary data to support projects in each field, and the issues of "Cybersecurety and Privacy" will be responded by using the G-IoT network of Korea National Information Society Agency (NIA).
One of the key issues in the commercialization of the GO·PS is the protection of intellectual property rights and the sharing of profits through the promotion of public-private partnerships, which will vary depending on individual projects in each of the fields, and the GO·PS will play a role as an intermediary partner to find ways to implement and resolve them.

Smart cities run largely on cloud services for efficiency and affordability reasons. Residents, government agencies, and small and medium businesses can benefit from an Architecture or Framework for privacy and rights-inclusive security practices across smart city and community cloud services. First, the City of Syracuse, New York, USA, in cooperation with Syracuse University and SC3-cpSriA Action Cluster(Smart City and Community Challenge Cloud privacy security rights inclusive Architecture) consider how the Architecture guidelines may apply. The SC3-cpSriA Action Cluster welcomes new members to broaden the debate. First, smart streetlight networks, catch basin monitoring, and water metering projects may consider if and how security, privacy, data protection and rights-inclusive cloud architecture guidelines may be followed. The ethics for facial recognition, machine learning and artificial intelligence systems and cloud services in future smart cities with privacy, security and rights-inclusive architecture will also be reviewed. Can architecture guidelines help protect citizens rights and encourage growth of smart city open data lakes, encouraging civic engagement and data privacy security and rights-inclusive innovation, entrepreneurship and economic development?

Standards, Replicability, Scalability, and Sustainability:
The project will ensure replicability, scalability, and sustainability by conforming to standards including: 3GPP/ITU 5G (defined in 2020); FEDRAMP;
FERPA; GCTC CPAC Privacy and Security Guidelines, GDPR; HIPAA; IEEE LoRaWAN; and:
ISO 37101, Sustainable development and resilience of communities— Management systems — General principles and requirements
ISO 37120:2014, Sustainable development of communities — Indicators for city services quality of life
ISO 37150:2014, Smart community infrastructures — Review of existing activities relevant to metrics
ISO/PWI 37153 Smart community infrastructures
NIST Framework for Improving Critical Infrastructure Cybersecurity; NIST Smart City Interoperability Reference Architecture (SCIRA);
NIST SP 800-53; NIST SP 800-171 & NIST SP 800-122, Guide to Protecting the Confidentiality of Personally Identifiable Information (PII);
NIST A Consensus Framework for Smart City Architectures IES-City Framework (Internet-of-Things-Enabled Smart City Framework) Release v1.0;
OMB Memorandum 07-16;
Open Specifications Model 0.5 for the Internet of Things
PCI
VMware SDDC & NSX SD-WAN by VeloCloud

Cybersecurity Privacy and Rights:
The objective of applying this architecture at a city level is engaging community residents – including businesses of all sizes, local, city, county and state government agencies, and civil society. This will improve the smart city privacy, security, and rights-inclusive operational and policy practices and awareness, while enhancing collaboration, reducing costs and enabling new services. It is anticipated that technologies such as Artificial Intelligence, Augmented Reality, Autonomous Systems, Blockchain, the Internet of Things, Machine Leaning and Quantum Computing may be safely and securely used more widely, while limiting opportunities for personal data abuse by malicious actors. This data classification for smart city cloud to edge architecture will offer a comprehensive approach and easy to use template for organizations to apply their own data classification policy. Eventually it is hoped to extend across all smart city and especially civic data across relevant domains and sectors enhancing personal data rights by design.

South Bend prides itself on being a Beta City – a City that embraces new technology, creative partnerships, and new approaches to improve resident experiences and service delivery. The Technology Resource Center (TRC) will not only be a home for this work, but will also house programming to make sure that our “Beta City” is equitable. The Center will offer in-demand tech training, host collaborative cross-sector projects and events, and provide opportunities for residents to engage with city problem solving through data and tech.
The City of South Bend is experiencing several ecosystem challenges and opportunities at once: First, we are experiencing increased demand for tech and data analytics skills. Second, as more tech and innovative programs are rolled out in out in our “Beta City”, we need a place where the public can learn about how they city is evolving and shape the city’s tech future.

Standards, Replicability, Scalability, and Sustainability:
Right now 4-5 years of operational and programmatic funding for the TRC is already secure. A 5+ year plan is being developed right now. In the long run, we see the TRC being its own nonprofit focused on ecosystem support and coordination around civic technology and skill building.

Cybersecurity and Privacy:
The City plans to leverage the TRC to host conversations and programming around privacy and data governance as it relates to the public.

Leveraging regional weather data and weather stations at individual vineyards to develop a regional prediction for when bud break and bloom will happen as well as highly specific predictions of those same dates for individual vineyards. Additional opportunities to predict and develop alerts for freezes, powdery mildew, and other events targeted at specific vineyards.
Weather patterns are inherently unpredictable, and agriculture is highly dependent on weather conditions. 100 growing degree days (bud break) and 500 growing degree days (bloom) are the critical points that drive all vineyard management during the growing season. Accurate prediction of these dates will enable better planning and more efficient management of vineyard operations. Additionally, late season freezes can damage buds, and diseases like powdery mildew can reduce quality and yield. Early prediction of problems will enable grower to deploy proven countermeasures and preserve their crop.

After merging Tainan City with Tainan County to be Greater Tainan, the changes in environmental factors such as transportation infrastructure and population increase have made the traffic management work more diverse and arduous. Based on the challenges, a smart system is necessary to enable more accurate and effective decision-making and traffic management. A cross-organized, integrated and IOT value-added systems including intelligent traffic control, smart public transportation, smart parking management, smart vehicle sharing, and smart cloud platform is proposed and developed.
* The urban arterial or scenic area are usually congested due to the high traffic flow on weekdays and holidays respectively. An intelligent driving path guidance and dynamic traffic signage control could distribute and balance the flow then relief the traffic jam.
* The greater area might increase the budget for constructing the transportation infrastructure. To integrate and cooperate the facilities of all divisions of the transportation bureau could leverage management efficiency. For example, the streaming of the bus ahead camera can be used for dynamic road traffic monitoring, violation detection, and investigation of traffic accident.

Standards, Replicability, Scalability, and Sustainability:
The strategy of combined driving path guidance and dynamic traffic signage control is a general approach and can be extended to the other similar areas.

Cybersecurity and Privacy:
- Although the automatic license plate recognition is adopted for OD travel time calculation in this system, the plate information is hashed to make sure the privacy
- The system is built and run within Government VPN environment and two layers firewall are designed to prevent the cyberattacks

"Provide an efficient and effective solution using artificial intelligence and smartphones to monitor and maintain roadway infrastructure with a data-driven approach. Projects at RoadBotics aim to provide better data and identify which roads are failing and which roads need early intervention in order to avoid total reconstruction.
Manual road inspection method is subjective, time-consuming, and labor-intensive. An alternative - sensor retrofitted vans provide granular information, but they are very expensive, and therefore infrequent. With artificial intelligence and smartphones, RoadBotics automates the process for governments, lowers the cost, saves time, and provides a powerful library of objective visual data to help prioritize pavement maintenance needs.

Standards, Replicability, Scalability, and Sustainability:
● There is a desperate need to improve the world’s civil infrastructure, and it starts with how they are monitored and maintained. RoadBotics’ use of smartphones to collect data and artificial intelligence to assess the collected road images is a readily available process that can be scaled and replicated across the world. The inexpensive and frequent assessment would lead to improved roads, sidewalks, and bridges, far lower maintenance costs, and less material waste.

Cybersecurity and Privacy:
● Because RoadBotics has been aware from early on that the data collection process has the risk of incidental capture of PII [personally identifying information], the analytics process is designed to remove such data preemptively. At the moment, RoadBotics irreversibly obscure license plates and faces, but could rapidly implement other mechanisms for PII protection.
● RoadBotics uses a first class cloud security provider (Google Cloud Firebase) for secure authentication of our systems, and never capture online financial data from any municipalities."

The Data Equity for Main Street Project is a Data Literacy and Civic Tech project that has aimed to engage community members in open data and empower them to participate in open data projects. By engaging in a curriculum that is meant for those who want to learn about and give feedback on open data, rather than just publish open data, participants improve their digital (data) literacy skills and be exposed to opportunities to use open data to inform community issues or answer individual questions. The project is moving into a new phase, from a in-class online model, to an online, interactive model. We seek to identify the impact of this new online, interactive model.
Open data presents an exciting opportunity to make the data that the government collects available to everyone to support entrepreneurial activity, policy analysis, advocacy and more. While many local and state governments have begun to release data, there is not a central place (physical or online) where community members can go to learn about why open data may be relevant to them. This curriculum creates that opportunity by leveraging the power of local libraries, already the place where people come to expand their digital literacy skills.

Standards, Replicability, Scalability, and Sustainability: In the first phase of our project, we created a curriculum that really required a formal class (using powerpoints etc.). In this phase, we have developed an online, interactive curriculum that still supports libraries or other community institutions that wish to teach the class, but just as easily allows people to take the class by themselves. We believe this online version is more scalable and sustainable, and will test that during this phase.

Cybersecurity and Privacy: The curriculum includes sections about what open data is, helping program participants differentiate between data that includes personally identifiable information and public, open data.

Smart City Diaries is a documentary television series that showcases the phenomenon of digital transformation in small and large cities in the developed and developing world. Destination cities will have undertaken smart city initiatives to transform the way they manage their city operations and provide information and services to their citizens. Each city has unique physical, social and cultural qualities; the series will highlight individuals within these cultures to understand how rapidly changing technologies impact how they live, work, play and learn.

The series will be hosted by a mother-and-daughter team. Their perspectives differ as do their attitudes and levels of comfort with new technologies: one is a baby boomer, the other a millennial. One was CIO for a small California city, the other is a musician, songwriter, social justice blogger and social media expert. They are both smart and sassy, ready to explore a range of cities and the people who are impacted by Smart City transformations. Through the eyes of these two women, each show will reveal how these unique, global cities approach meeting the quality-of-life demands of residents, businesses and visitors through increased use of technology in an era of the Internet of Things, shifting populations and shrinking budgets and resources.

Standards, Replicability, Scalability, and Sustainability:
We will establish a set of criteria for what elements will be included in each episode – for instance:
• A city in which an identified and significant (meaning affecting many citizens or responsible for high city operation costs) city operations challenge is being addressed by a smart city initiative
• A unique social or cultural tradition we can document and showcase.
• A set of leaders, citizens and tech or service providers willing to speak on the record on the smart city activities and their roadblocks, successes and benefits.
• A set of public and private sector sponsors for each episode or across multiple episodes or the entire series.

Cybersecurity and Privacy:
• Cybersecurity will be addressed as an issue throughout the series, with a visit to one city that specializes in cybersecurity, probably Talin, Estonia.
• We will work with city leadership in each of the cities we highlight for each episode. We do not believe that there will be specific cybersecurity concerns related to this project, but cybersecurity will be a topic that will likely come up in various discussions around data sharing, monetization, privacy, GDPR and related privacy programs that may develop.
• The series would address fears expressed generally by the public about technology and personal digital security as they move to a life in the cloud. If some participants wish to provide opinions anonymously, we can find ways to include their opinions (such as in aggregated numbers or general reporting) and not their identities.
• We will require releases for participants in the series; we will take any necessary precautions to protect the identities of non-participating passers-by as we are taping in city environments.

* Provide a completed and closed testing Area for Autonomous Car including traffic sign and speed.
* Provide NVidia Autonomous driving solution and also DGX Server for AI system training
* Provide UC-Win/Road and CarSim real-time simulator for driving behavior
* Provide HD Map for autonomous CarFor the developing stage of Autonomous Car, it costs a lot to collecting driving data and also get the safety problem when road testing.
Our lab including the driving testing environment and also simulator of all kinds of traffic and weather conditions. It saves cost and also ensure the safety in developing stage.

Standards, Replicability, Scalability, and Sustainability:
We set the test procedure and verified model which qualified with the government rule and could easily copy to other cities.

Cybersecurity and Privacy:
We also build up an information Security lab which help to ensure the security of V2X and automatics.

Smart Work Learn Play, initiated by the Housing Authority of the City of Austin (HACA), with support from Next Century Cities, the Transit Empowerment Fund and the City of Austin’s Digital Inclusion and Transportation departments, aims to ensure that the design, deployment and use of smart cities technologies are inclusive and equitable. The program hires HACA-resident Smart City Ambassadors to work local government and corporate partners to: 1) teach HACA residents how to use digitally-enabled education, workforce and transportation tools; 2) advocate for and manage meaningful partnerships with private smart city technology providers; 3) engage in democratic processes, online and face-to-face with local and other government officials; 4) participate in design of smart city systems and tools with a wide array of actors.

Standards, Replicability, Scalability, and Sustainability:
There are more the 4,000 public housing authorities in the United States, and thousands of subsidized housing providers. Because very low-income housing spans across major cities and most medium- and large-sized municipalities, and because housing is integral to smart city initiatives related to sustainability, education, workforce development and transportation, this program could be implemented at other sites across the United States. Additionally, many of the large- and medium-sized smart city technology and other product companies are deploying their technology in municipalities across the U.S. - if the curriculum, smart city digital literacy skills hierarchy, Smart City Ambassador capacity and development program are deployed in other cities, there could be a lasting impact in the way that corporate, non-profit and municipal partners engage the low-income community who by the very nature of their housing are embedded in the areas that can benefit most from smart city technology deployments.

Cybersecurity and Privacy:
Digitally-divided residents of cities are perhaps at the greatest risk of cybersecurity and privacy threats. Cybersecurity and Privacy issues are two of the topic areas select Smart City Ambassadors will develop expertise in. All smart city technology training courses delivered by vendors and Smart City Ambassadors in housing will include learning opportunities related to Cybersecurity and Privacy.

1. Engage with Constituents currently part of the City of Oakland NCPCs to keep an eye and report crime to their local police Beat Officers. Present IoT Kits to the NCPCs to invest in micro-grid infrastructure kits that include mesh networks, computer vision cameras, sensors, and secure communication channels to capture live data about events happening to community homes, block by block. Install series of “Capture” hardware devices and send this data to a secure data platform per kit owner.
2. Connect this data to a Machine Learning / AI platform to learn about this data, scan for license plates, and identifiable characteristics and connect these data with co-designed If This Then That event programs to understand what the cameras are seeing and appropriate notify community members and law enforcement officials who have the ability to act on and apprehend individuals committing crimes. This live data will be streamed and hosted in secure cloud services, locked down to each micro-grid kit owner, to determine who will have access to this data in the form of sharing, selling, buying.
3. If/when the constituent chooses to share or sell this data to City of Oakland public sector agencies like Oakland Police, Fire, Transportation, CA Highway Patrol they can provide live connections and streaming video to these agency devices in order to help Public agencies locate and apprehend people who commit illegal activities in and around homes and community gathering spaces.

Standards, Replicability, Scalability, and Sustainability:
The key factors in Augmented Neighborhood Watch is the premise that constituents will capture their own data and choose to share and/or sell their data with Public Sector agencies to these service agencies can more accurately deploy services to hyper-local, real-time, events and use automation to distribution actions using a basic If This Then That workflow
• Standards: Data Capture, Management, Storage, Delivery, and Security will follow best practices in Data Governance, Data Loss Prevention, and Cyber Security.
• Replicability: Kits and communities learning from each other’s experiences will help the model replicate itself rapidly, at low cost for constituents, businesses, and government agencies.
• Scalability: Services for data capture, management, storage, delivery, and x will be managed in Cloud Services that are designed to scale to real-time need and only charge for activities.
• Sustainability: The ability for constituents to buy and own their own resilient micro-grid infrastructure at low cost, and their ability to sell that data to interested parties will drive new revenue to constituents and reduce cost for government to deliver targeted services to constituents reducing overall cost to provide public services.

Cybersecurity and Privacy:
• MI Data Tenants Zones are split into four categories:
1. Commercial / Business
2. Public Sector
3. Individuals / Groups
4. Non-Profits / NGOs / Social Impact
• These zones are secured, and the data is locked down to the infrastructure Owners’ account.
• Constituents own data infrastructure, data governance, data streams, data access, data security and data loss prevention policies as they are the owners of the micro-grid data infrastructure.
• Training will be provided to each kit owner and a network of neighbors who are also using ANW whom they may connect with to connect clips of video and sensor data to create full lifecycle event series to use for their own Neighborhood Watch activities and to help provide live location data for police to respond to exact data, real-time.

The data platform is managed by Metropolitan Intelligence and kit and data owners can manage these services on their own or have MI monitor and manage their data accounts in order to derive the most value from these secured data sets.

Full incorporation of digital technology into all aspects of city life – creation of Smart Cities – is fast becoming a best practice for urban reality. However, a large percentage of low-income residents in Oakland (and everywhere) remain digitally disconnected. Therefore, Digital Inclusion must be central to Smart City Initiatives because Smart Cities require residents to be digitally connected and empowered.

123,000 Oakland residents do not have high-speed broadband Internet at home (30%).
88,000 Oakland residents do not have access to computers at home (21.4).

Tech for All is a solution that supports residents with refurbished computers, digital skills training, affordable Internet signup and tech support.
Tech Exchange, a Bay Area nonprofit, has developed the Smart Neighborhoods concept with the City of Oakland, Oakland Parks and Recreation, Oakland Housing Authority, Oakland Unified School District, Oakland Public Library, and East Bay Broadband Consortium.

A Tech Hub has been launched in Oakland’s San Antonio neighborhood that supports families with training, refurbished computers, tech support, and affordable Internet signup.
The Tech Hub is complimented by tech trainings and workshops held at affordable housing sites, schools, and community organization.

Standards, Replicability, Scalability, and Sustainability:
A core element of the project is the refurbishing of computers for community benefit. Urban areas throughout the world have companies that are cycling through technology and have retired assets that can be refurbished for disconnected community members. Outlier technology received through the program (switches, docking stations, etc.) can be sold to provide revenue to sustain the program.
Also, an element of the program is the workforce development, where youth from underserved neighborhoods receive internships to learn hardware skills and client service to provide tech support. As the program grows, interns are hired as staff as technicians.

Cybersecurity and Privacy:
Training community members to stay safe online is a core value. Merrit College has a Cybersecurity program; students hold club meetings at the Tech Hub and provide community workshops on safe browsing practices.

* Taipei Smart City revolves around turning the city into a living lab, meaning Taipei City is the test ground for innovative city solutions.
* Secondly, the Taipei Smart City programme is aimed at making Taipei City government function as a platform for city stakeholders to innovate the city, rather than as a planning and directing organisation.
* A next step may be to turn Taipei Smart City into an independent platform, supported by multiple city stakeholders, including the government, industry partners and knowledge institutes.

Standards, Replicability, Scalability, and Sustainability:
* Taipei Smart City should solely focus on creating Proof-of-Concept (PoC) projects, which have potential for scaling and replication. Projects which have no potential to scale and/or replicate, should not be started.
* Projects which do not involve multiple stakeholders should also not be started, since involvement of Taipei Smart City is not required if projects only involve two or less stakeholders.
* Projects which do not contribute to the sustainability and livability goals of the city need not be considered.
* Early involvement of stakeholders which are required later in the process for scaling and replicating should be assured.
* PoC project results should be well documented and be made into a guideline for further scaling.

Cybersecurity and Privacy:
Cybersecurity and privacy are issues which touch upon many technology related projects. Based on a database of projects, Taipei Smart City will be able to build a reference framework regarding the role of cybersecurity and privacy in each case. The reference framework will support in determining to what extent privacy should be protected, how it should be protected and when cybersecurity should prevail over privacy.

* BiiMe as the Digital ID to leverage with DLT
* Global roaming service based on the DID
* Increase the Data Liquidity, Data Integrity & Data privacy

Now the city is having data silo everywhere. All the entities can not really make the data easy used by the other department. The reason is about the data silo & privacy.
We tried to use the new Decentralized Identifier to solve the issue to make the citizen can own themselves the data & right. So there will be a new human centered smart city through DLT/Blockchain.

Standards, Replicability, Scalability, and Sustainability:
BiiLabs is based on the Open source & we did contribution into the related projects to have the domain know how & open source to increase the transparency.
We also followed W3C DID spec & GDPR to ensure the privacy to the people.

Cybersecurity and Privacy:
BiiLabs TangleID source code is following W3C DID spec & integtated with FIDO2 to comply the cybersecurity & privacy.

* Currently many cities in the world are facing similar challenges and have therefore developed their own Smart City strategy and are running their own Smart City projects. Considering the similarity of the challenges, there lies huge potential in effective knowledge exchange and collaboration.
* GO SMART aims to facilitate collaboration and knowledge exchange between Smart Cities, by means of one-on-one matchmaking, opportunity reports and workshops.

* Aligning stakes for different city stakeholders is a challenge, as every stakeholder has its own agenda.
> By being as open as possible and providing the platform for city stakeholders to meet, stakeholders can conduct a first scan to estimate the collaboration potential with other city stakeholders.
* The physical distance between places creates a threshold for collaborations.
> GO SMART as a platform tries to facilitate as much as possible using digital technology to reduce the threshold. Furthermore, also international events are fully utilized to make stakeholders meet eachother physically.
* Keeping the platform active and engaging is a challenge
> GO SMART actively provides the latest news on the platform and engages cities and other stakeholders to share their latest Smart City advancements.

Standards, Replicability, Scalability, and Sustainability:
* GO SMART as a platform aims to support scaling and replication of successful Smart City solutions.
* GO SMART aims to effectively match supply and demand of Smart solutions, meaning that every city does not need to reinvent the wheel.

Cybersecurity and Privacy:
Cybersecurity and privacy are issues which touch upon many technology related projects. Based on a database of projects, GO SMART will be able to build a reference framework regarding the role of cybersecurity and privacy in each case. The reference framework will support in determining to what extent privacy should be protected, how it should be protected and when cybersecurity should prevail over privacy.

Showing the connecting fiber of a Smart City with Local Government, Public and Private Utilities and Services, Smart Building Technology, Communicating and sharing of Information to residents, business and the community as a whole with emphasis on security throughout the process. Challenges include formulating a plan for collecting and sharing of analytic data while maintaining privacy for the public and understanding the ROI of various initiatives that communities are undertaking.

Standards, Replicability, Scalability, and Sustainability:
This designed project is built on the ability to scale itself both smaller and larger to have positive impacts on communities. The evaluations of ROI will help provide the sustainability model for any local government to determine its effectiveness.

Cybersecurity and Privacy:
Incorporating Network Automation tools to reduce configuration issues using advanced analytics while proactively monitoring the network for cybersecurity issues. Privacy concerns will be addressed as one of the hallmarks of the project.

Multnomah County, Oregon is partnering with Technology Association of Oregon (TAO) and other local groups to host a community collaborative problem solving event and an ongoing, community-based technology incubator called Breaking the Code.

We aim to break some of the barriers that exist among organizations that specifically serve people of color and the broad, local tech community. Partnering together gives us a platform to bridge the gap between the two and provide opportunities for Community Based Organizations (CBO’s) to become more efficient and effective in their targeted service delivery. A longer term goal is the creation of community-based and community-led technology start-ups.

Breaking the Code’s framework leverages assets from the public sector (data, staff, technology platforms, public infrastructure, small business incubation, etc.), and the technology industry (technology solutions, expertise, professionals, funding, etc.) with the goal of making CBOs more successful serving their community.

This, in turn, fulfils the promise of smart cities as “thriving communities” with well being across the life span, equity and access, sustainability, resiliency, and vibrant arts and culture.
Standards, Replicability, Scalability, and Sustainability: Each team is encouraged to build a solution that is effective and scalable for the specific CBO. Programs will also be evaluated for their innovation and promise, interoperability, potential for replicability, and the sustainability of their service delivery model.

Cybersecurity and Privacy:
The UN-Hackathon is designed to help identify the local community’s questions and needs for privacy and cybersecurity and to empower them to take leadership on solutions and partnerships in this regard (e.g., privacy of CBO electronic records, addressing community surveillance concerns, etc.). The CBO’s are typically the best judge of their privacy and security requirements. Some have adopted standards due to the nature of the services they provide (e.g., for some of the public health and safety CBOs, blockchain technology is being proposed for more secure transactions). The design and prototype process is also an opportunity to educate CBO’s about security and privacy issues. This program is in keeping with new Portland, OR initiatives on citizen privacy and cybersecurity: https://www.portlandoregon.gov/bps/article/729680

This project makes use of PowerMatcher-IoT from project defined at http://www.powermatcher-iot.com which uses IEEE P1451.99 IoT Harmonization and an IoT Broker at http://www.ipdx.net software developed in Sweden. The project adds IoT XMPP to bridge any IoT protocol to provide cyber protection of privacy to meet Global Data Protection Regulations (GDPR) in the EU that can also be use else where including the US and facilitates data sharing for monetization of eDaler a new eDaler (Digital Currency) developed in Sweden and the United States. New CyberAI concerns will be evaluated to determine what conditions will require protection by allowing the owner of devices to determine what or who can control of situations in the city or if connected to an industrial or manufacturing facility that operation of a device does not create an unsafe condition for the plant or when used in a smart city that it does not potentially harm humans.

Standards/Interoperability:
PowerMatcher-IoT was developed in US and Sweden and will make use of IEEE P1451.99 (Sensei-IoT*) IoT Harmonization Standard the 1st Semantic Web 3.0 Standard for the Internet for Things (IoT*) and will now include bridges to other IoT protocols use different sensor interfaces to connect the PowerMatcher-IoT framework with Renewable Energy systems such as Solar with Flexible Interfaces that with either map a region of the smart city to a corresponding section of a Solar farm.

Replicability, Scalability, and Sustainability:
Federation of PowerMatcher-IoT sites can be replicated world-wide being highly scalable and sustainable. PowerMatcher-IoT is under consideration for deployment in the Kingdom of Saudi Arabia. The use would be the first use in the Middle East of PowerMatcher-IoT and in the US which will include cyber security and AI protection as well as secure data sharing authorized by the IoT device owner.

The World Smart Sustainable Cities Organization (WeGO), established by 50 founding member cities in 2010, is an international association of city and other local governments, smart tech solution providers, and national and regional institutions committed to the transformation of cities into smart sustainable cities.
A diverse range of activities include capacity building programs, sessions and smart city conferences and study visits, feasibility studies and pilot projects, expos and exhibitions, smart city guidelines and best practice catalogs.

Standards, Replicability, Scalability, and Sustainability:
WeGO programs ultimately pursue successful implementation of smart city projects in member cities.
For example, the WeGO Feasibility Study Program aims at replicating existing solutions, well proven to be smart and sustainable, in member cities in the form of pilot projects. Pilot projects then serve as proof of evidence for further scaling of the project.

Cybersecurity and Privacy:
Acknowledging that cybersecurity and privacy are high priorities for cities and communities, WeGO includes these aspects of smart city in the curriculums and agenda of its meetings and training programs. When working with consultants for project implementation, WeGO also ensures cybersecurity and privacy requirements are met.

Establish a blockchain platform and develop blockchain-based public services to reduce the cost of paper-based certificate issuance, eliminate the forgery of documents, and provide a safe and secure ID verification platform so that citizens can experience more efficient and transparent public services.

Standards, Replicability, Scalability, and Sustainability:
• The platform is to be designed in an open source so that other local governments can use as well.
• The Standardized processes are not unique to city or region and can be replicated and scaled up in multiple cities/communities.
• The platform will require reduced fees from citizens but will be more widely used due to its easier accessibility so that the revenue stream will be sustainable.

Cybersecurity and Privacy:
• As the blockchain platform can protect data safely cutting any possibility of forgery, third parties can trust the certificates issued via the platform
• Blockchain-based identification enable citizens to manage their personal information securely and build trust between ID holders and verifiers.

The project will demonstrate the potential impact of creating a digital single market for smart cities based on the adoption of a minimum common set of de-facto platform standards enabling solutions to interoperate within, and be replicable across, multiple cities. Multiple solutions will be demonstrated as part of this project (GCTC Action Cluster), each solving a particular challenge of a given City. What is common to all of them is the adoption of platform standards allowing them to interoperate within and be portable across cities that have adopted smart city platforms “Powered by FIWARE” adhering to those standards.

Standards, Replicability, Scalability, and Sustainability: The project leverages on mechanisms that are being widely adopted as de-facto standards in smart cities:
- FIWARE NGSI API to get right-time access to context data describing what is going on in the city at global level, breaking information silos.
- Common Information Models now adopted under the umbrella of the Front-runner Smart Cities initiative launched by TMForum and FIWARE Foundation, which combined with the FIWARE NGSI API enable solutions to interoperate and be replicable (portable) across multiple cities with low cost of adaptation.
- TMForum Business Ecosystem Open APIs, which combined with FIWARE BAE components, enable creation of data marketplaces and the transformation of cities into platforms of a Data Economy.
FIWARE NGSI aligns with the ETSI NGSI-LD standard also adopted by GSMA and the FIWARE Context Broker component supporting integration of solutions via FIWARE NGSI has been adopted as CEF Building Block by the European Commission.
Adoption of these technologies is leading to creation of a sustainable ecosystem where solutions can be developed only once to be replicable in multiple cities with minimum effort of adaptation/configuration. This brings the right incentives for solution providers to invest in solutions which can scale in adoption.

Cybersecurity and Privacy: standards like OAuth2 and XACML will be used in the project, enabling enforcement of data access control policies expressed as access terms and conditions. Policies may be defined for preserving privacy.