We will go on with it. OT and York just reminded me of a formulation of a, of an idea from, from E B w who called operation technology, rustic it, in some sense, I think she's right. This is all technology. It's all hardware, all software somewhere works, and nobody knows exactly why we will go on with a view on the identity and access management world, how this has to change in view of the challenges of, of it. OT integration, please welcome Lou Marie for hello. So you are one of the founders of Ivied that's right. So I know you're part of this big organization,
Big, big family in ATO.
So it's, it's specific positions that we are product providers okay. In a worldwide worldwide company for service.
Okay. So be very interesting to hear your view on the future.
Yes. Thank you. So I'm responsible for AI products in, in Atos now, and coming from working with de with some products and we deliver products. I a is V in a very big company,
Which
Is a worldwide service provider. So a specific,
Specific position that
Give us a chance to make very large projects and to experiment all products in real projects, on historical historical customers of Atos.
So, yeah, my agenda today is first to explain you an experience that we have made a real experience that we have made on it. OT, convergence, it's a project that we are, we have, we proof of concepts that we have done with a large customer. Then after we will try to understand how this experience will change all view of the product view of the project. And I share prospect and project with you.
So yeah, you know that my colleague, just before Yari, I explained what was OT. I will not explain exactly what it is because you know, now what it is, we have industrial control system and those industrial control system, you have pumps, valves, oxygens transformers, a lot of things like that, that was before managed with very old protocols that are dead now or will dead soon that are replaced by new technologies with IP web services and so on.
So all historical customers like nuclear plant nuclear plant providers in France, in Germany, Swiss, and other other energy providers ask us, please, can we use normal AI products, the normal technologies to manage the OT networks that are now working with normal technologies, modern technologies, such as web services and other. So of course, it's a challenge because if we share technologies, we share the, the sweat and the risks that you have.
Hackers, you have bags, you have everything that we, that are risk for, for OT. And we cannot afford to have risk on operational technology, such nuclear plan, for example. So we worked with Swiss grid in Switzerland to make the requirement for OT, OT, I T OT conversions.
So the, it was very, very nice job to make with them the requirement. And the first requirement is that it and OT has to be isolated two different network with the air gap in between. It's something mandatory to have to be sure that you have no access to the OT network. So it's the first thing, whichever whichever the user is contractor employees, partners, you need to have isolation between the two networks. Second things is, of course, you have to audit and audit what is done on OT.
And we, it should be better to do it on the it system. It's easier. We have the tools and so on, and we have to use all the processes that are already in place in it.
So this is a requirement. The prerequisite is we have two things. New first it's possible to isolate, okay. We know how to do it. It now it OT has to be isolated. And second thing is now all the people who intervene on a, on a nuclear plant in, or whichever, whichever the OT is, they have either a specific device, which is given by the, by the company or they have a mobile phone, or they have a tablet.
So they have something with them that is possible to use, to make authentication authorization and so on. So we know that it's possible. So we implemented something we proposed to Swiss grid, something very specific.
So I, I tried to explain it it'll be difficult, but I tried to explain to you at the left part, yes, it's left. I think at the left part, you have the it with all the tools that you have today, office SAP, the products that we, we have deployed, we have the air gap. And at the right part, you have the OT, it's the energy network with pumps, fluid gates and everything like that. What we implemented is a specific concept that when a technician arrive in the OT, he enroll is mobile phone or his device or his tablet. And he enroll authenticate in the OT and the device ask the whites to the it.
That mean that it's something, something that it's completely compatible with the air gap, air gap concept.
If you, if you like the concept in, in authentication and authorization, it's the, the policy application is in it. The policy decision point is a mobile and the policy enforcement point is in OT. So it's something which is not Federation. It was not possible to implement Federation because you don't go from it to OT. It's there is no line. So mobile is some kind of token to bring authorization from it where you can get it and organize it to OT when you have only to implement, right?
So it's, it's implementation. It's a proof of concept. You can have demonstration here on the booth, if you want to know more how it works, because I can only give you some hints how it works. And of course, some benefits of this is of course, that we have a secure solution because we have a very strong access control with several, several level of two factors, at least two or three factors of authentication. We have no connection. We are not using any connection between it and OT.
And we are using the aim tools to give rights, to manage rights, to audit in the it, the standard product of the market. No big change in this.
So I think that you read perfectly German if you, but we have got a good, a good press, a good, a good code from our customer that is satisfied. They will start to implement it on each, on, on their network. And so I let, I know that you understand it's pretty good. Okay.
Now I want to go one step further, because this is a strange way to implement Federation with the mobile. It's interesting, but what can we do with that?
Is there any chance to replicate or to use this model for other market, for other needs, and really that's something that happened today that you know, that we have a lot of security sweats. Everybody's pick about that. Explain you that you have all this problem with terrorist and with Wiki licks with everything. So it's a generic way to say that everybody here understand what is sweat on the Haiti on the OT and
What happened is, or historical historical, another historical customer ask us. It was one year, one year ago to split. Is it?
So it's a reason why I say it's, it's it, it divisions because it's not it OT conversions it's divisions because they had a single it for all the civil and defense activities.
And we had deployed over there and they ask us to split into two part and to implement two networks with isolation, with a gap, exactly the same, the same as we did for Swiss grid, we have to split into two part and we are proposing to implement this way exactly the same way to have at the left part, all the civil activities with a normal and so on and at right part specific specific network, isolated and all the activities, all the activities on the defense defense network will be managed with this specific device.
You arrive, you authenticate with your smartphone, flashing earth, a cue card. You ask your right to the it, and you get the right you work. So it's something very interesting that come from it T and will be used for it, it separation. And we will have more and more this kind of request on historical customers, which has huge networks, huge network, and want to isolate some parts of, of the job. Okay.
So maybe as I say, we can imagine to have other projects in the future, for example, in banking area, where they will isolate specific part of their networks of their it, for example, for tweeting or for ATM networks, it's not something that exists today, but we have to think about that, that separation and isolation of part in it is a trend today.
So now I want to make a link with what will happen with the internet of things. It's next step. Next step is we are working for the moment with realte realte company.
And everybody speaks about this million of objects that everybody will have in the near future. And there is one thing very interesting. I know that this real it's it's in France, we estate management company, which build towers somewhere in, in Paris, and they have several towers and they don't want to share their objects. We say that objects, everybody will, will go and get the object and you have threatened on this object.
No, they don't want to share it. They want to have isolate isolate network with their objects in a tower.
And the, today you have about 20, 20, 20 things per room. So it's something like 10,000, 10,000 potential things in, in a tower.
And they want to have a specific specific network. And of course you have the same problem that for it, O T you need to have people coming on this tower, intervening on central, or yes, air control, air control, lights, lift, and so on. So the same thing, all the people, when they intervene, now, they have a device which is given by the company managing the realistic manager. So they take it, they enroll their smartphone or their device in the tower.
They get the right from the central it, and they work in the tower. So it's something that we are working in. It's really something new and a new requirement that we have to, to answer.
And we, we will work this year on that maybe we could imagine to have the same kind of thing for the telco sector, because in telco sectors, I know that a lot of telco operators imagine to have dedicated, dedicated network for things, not sharing things with everybody to have a dedicated, dedicated network. And in this case, they will have the same problem. And we could offer the same solution that we have these isolated networks and with all the technician intering for maintenance, remote operation, not operation intervention on, on the network can use this technology.
So I wanted to only to share the way we are working in, in Atos. We have a chance to have large projects existing along a big install base we are working with or former and not former historical customers to work with them and to build what is possible to do with now internet of things, separation of it, O T. And it's the way we are. It's a part building product is good, but building product with projects, with customers and with service providers is something interesting and the way we are working. Okay. Thank you for your attention.
Thank you very much.
Thank
You.
So, no, no, just say here for a second use. I mean, your solution is the same, more or less in the it and the OT and OT environment. Yes. So my question is, is there, I mean, there's a lot of different approaches targeting OT and OT differently. Also historically explain, explain from historical point of view. Do you see a real difference between OT and OT internet of things? Can we treat it the same way?
Will, will, will that difference disappear in five years or
So? I think that it, OT is the first step.
Anyway, OT is the first internet of things. Pumps, valves system are things. Yeah. So it's a way to implement in a little range, not so, so big implement IOT management, aim for IOT. We start with OT and we imagine how to grow with the number of objects that we forecast and that you forecast as well.
Okay. Okay. That's interesting. You thank you very much again. Thank
You.
Okay.