1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 60 61 62 63 64 65 Towards Trustworthy Smart Cyber-Physical-Social Systems in The Era of Internet of Things Jingwei Huang, Mamadou D. Seck, and Adrian Gheorghe Department of Engineering Management and Systems Engineering Old Dominion University 2101 Engineering Systems Building, Norfolk, VA 23529 Email: {j2huang,mseck,agheorgh}@odu.edu Abstract—The advent of a new wave of computing driven by the Internet of Things (IoT) and Big Data is reshaping the landscape of engineering systems design, operations, and management. As traditional devices and systems are transforming into smart devices and smart cyber-physical systems powered by IoT, more and more applications of Internet of Things are emerging as complex systems of smart systems, such as smart cities, in which an entity (including both human, software, and machines) highly relies on other entities in a network with respect to security, privacy, trustworthiness of data / information, and trustworthiness of services. Trust is emerging as a critical factor in systems design, operations and management. In this paper, we use Smart and Connected Senior Caring Systems as driving application, to discuss the features of Cyber-Physical- Social Smart Systems (CPS3) powered by IoT, to address the needs of trust in CPS3 design, and to explore approaches of trust formalisms for CPS3 design. Keywords: Internet of Things; Cyber-Physical Systems; Cyber-Physical-Social Systems; System of Smart Systems; System of Systems; Trustworthiness; Trust. I. I NTRODUCTION The great wave of computing driven by the Internet is still peaking; now we are on the path to yet another great wave, driven by Internet of Things (IoT), together with mobile communication and computing, cloud computing and Big Data. IoT, which connects things in the physical world with the cyber world, will be a trigger of many innovative applications. In a recent US National Intelligence Council report, IoT was identified as one of six disruptive civil technologies [1]. Indeed, through sensors and actuators, smart things in the physical world can be remotely located, monitored, and even controlled through the Internet; with mobile devices, people will have ubiquitous access to the Internet and the connected smart things in the physical world as well as the cloud services needed to handle those smart things. IoT, together with cloud computing, mobile communication & computing, semantic web, and social computing, will lead to many novel Cyber- Physical-Social Smart Systems (CPS3), such as smart cities, smart parking, smart traffic, smart homes, smart healthcare, smart transportation, smart supply chains, smart manufactur- ing, smart product life cycle management, smart environment monitoring, smart government services, ..., and so on. We will live in an integrated cyber-physical smart planet! On the other hand, we will face broader and greater challenges on security, privacy and trust. Correspondingly, in the engineering world, there will be a fundamental transformation in engineering systems design, operations and management. Behind those technological advances, societal changes and global issues such as globalization, urbanization, eco- environment and climate changes, sustainability, and aging are stimulating new needs for technologies, products and service. Those challenges provide fertile fields for the growth of novel cyber-physical-social smart systems powered by IoT. The conjunction of the societal challenges and the technology innovations triggered by IoT will breed new classes of en- gineered systems whose design, operations, and management will pose great challenges to systems engineers. Indeed, these systems, typically a system of smart systems such as smart cities, will consist of dynamic networks of devices, software and people, orchestrated in a complex and decentralized way, to generate new system services, some of which will be highly critical smart services. These envisioned systems share many novel characteristics. They entangle cyber, physical and social components (sensors, apps and people collaborate to deliver a unique service); they are diffuse (where exactly is your data when you put it in the cloud?); they continuously reconfigure (nodes enter and exit system seamlessly, – think of Uber); finally, they are intimate (Fitbit monitors your heart rate and archives it on the cloud). On account of these new characteristics, traditional qualities such as safety, reliability, or usability, which were exclusively centered on the technical system itself, are not anymore sufficient. Other qualities are needed to account for the com- plex relation that holds between the social and the technical. Chief among these qualities is the notion of trust. In the process of designing these Cyber-Physical-Social Systems, the designer will not only have to ask herself how to architect and design the system so that it is safe or reliable, but also, how to architect and design the system so that it is deemed trustworthy. This is particularly important because a system that is not trusted will either not be used at all, or will be used in ways that subvert its initial intent. For example, consider how the lack of trust in the privacy of a health monitoring service could lead a user to tamper with a sensor temporarily, thereby causing the system to misdiagnose a serious condition. In this emerging integrated cyber-physical smart world, one entity heavily relies on other entities in a network with respect to security, privacy, trustworthiness of data / information, and SoSE 2016 1570255165 1