Global Drone Security Network Event #2- Victor Vullard (Parrot)
This is the fifth post of GDSN #2 review, if you haven't read our previous reviews it is a good time to check out the great talks!
Victor Vullard (Parrot) - Security of a Drone Platform ANAFI
Thank you very much. And thank you for inviting me and giving me the opportunity to speak about parrot and how we implement cyber security. And before starting, I wanted to say that it's great to have such an event in which we speak about drone cyber security and counter UAS and all problems that may be posed by drones. So, it's really huge to have such an event. And thanks for that. And thanks also for everyone that is attending our previous presentation. So first, I'm going to talk about the cyber security of drone platforms. So Parrot is as the second worldwide drone manufacturer. And before starting about cyber security, I'm going to give you some more insight and information about our latest model of drones, which is called ANAFI USA, because that’s the drone we've been working first for the US Army since a couple of years now. And now we are selling it as a specific model to everyone, or at least people that may need it. so important to note that it's a high performing micro drone in its category. And what we do at parrot is small drones. We are not focused on drones with which we can carry a large payload or anything like that. But we want to have smaller drones that could fit in a backpack of a soldier or rescue team or postman and so on. One strong decision from Parrot was to manufacture this drone in the USA. So of course, this is driven by the fact that we are now working with the Defence Innovation unit and the US army, which is great. And it brings a lot to us because it leads us to improve our products and make it even more secure. it important to note also that we've been working a lot about how we secure the supply chain, and where comes the different parts which we need to build the drone. So, in the United States there’s a National Defence Authorization Act, that gives us some constraints and that we need to be compliant with. And basically, this states that we can’t include in our drones, certain components that may come from adverse countries seen from the United States. So, ANAFI USA, that's a professional drone, it's not for techies. Of course, you can take a great videos and photos. But it's used for both the public sector for professional such as inspection or mapping or eye agriculture. And it's also done for the public safety and defence. And like I said before, we want it to be pretty small and really quick to deploy. So, our target was to deploy it in less than a minute, which means that you've got it in your backpack, and from the moment that you open your backpack to the moment that the drone is flying there’s less than a minute. So you can unfold it quite easily as you can see in the video. It's pretty small. And then just launch it so that the drone is flying just any moment you need and then pretty quickly.
And of course, you can also land it on your hand. And it's important to underline that because for certain jobs, you may be piloting a drone and around you there’s snow, sand, or maybe you can be on a boat, and you don't want to land your drone on the ground. So, our drones, because it's pretty small, because there’s just some safety features that would, for example, cut off the motors, if the propeller touch you’re hand is pretty innocuous. And it's going to do that, it's great for the user experience and still stay safe doing so. So, of course, that's one of the lightest drones of its category. We've got a great vision capability, both for day and night. And for such a capability. It's only a 500-gram drone. So, half a kilo, and it flies for more than 30 minutes, which means that with less than a kilo in your backpack, which means a drone and three additional batteries, you can fly for two hours, which is quite a lot when you're doing surveillance or mapping or whatever. It's pretty stable, both outdoor and indoor. So, it's important to know that you can have GPS denied environments, and the drone will still be stable and fly pretty, pretty well. And concerning the environment in which you can fly, we are also IP53 certified, which means that the drone can fly under the rain, or even when there's a lot of dust or sand or whatever kind of environment. So, it's really robust. And you can use it in pretty much every environment. It's important to say that when you're doing surveillance, you really need a quiet drone, because the effectiveness of surveillance is that you will need to see people without them seeing you. So, ANAFI USA it's pretty quiet, that’s 79 db’s when it's just close to you, which means that when the drone is 100 feet from you, you can hardly hear it and then if you are in the middle of the desert with absolutely no noise, you have to be a bit further. But still, it's pretty quiet. And then very effective if you want to stay stealth and don’t let people see you.
One of the greatest strengths of ANAFI USA, is its very powerful zoom. So, there's a 32 times zoom, which is great for a drone of this category. Most of the time, 30 times zoom, 32 times zoom, you will find that in a drone which would weigh something between 5 to 10 kilograms. So here we are 10 to 20 times smaller, which means also that we are more quiet and more stealth and less easy to carry on you on your backpack when you take it on your missions. But still, it's just a great zoom. And the main objective of this zoom is that you can detect a person two miles away from you. Two kilometres away from you. That will be one the two knives. So, on a pretty long distance you can see things pretty well. And it's important for surveillance. It's also pretty important for the precision of mapping even if you're not doing surveillance. That's an example of videos that was taken by the drone when flying, and those soldiers jumping in with parachutes, they are more than eight kilometres away. So, 8 kilometres will be something like six miles. And you see that thanks to the zoom, you can have a clear vision and then count how many of them even if it's pretty far from the point where the drone is. Of course, there's also infrared and night vision. And thanks to a strong partnership with FLIR, we have a great integration of the camera. So, we include a FLIR boson, which allows a person to see at 200 meters, which means that at night when you're flying 200 meters away from someone, you can identify the person. So that's kind of images you may get when you're flying at night. We have also strong knowledge of all wireless protocols. So, on our consumers and some professional drones, our most professional drones, we use Wi-Fi, but on a optimized version of Wi-Fi. And since a few months we've included also other wireless chips and other protocols, especially for the defence sector. So important to state that ANAFI is real. That's a drone that has been produced and used by a lot of people. So, among Armed Forces, and public safety, we have a long list of users. And that's just a few, we can mention the FBI, the US Army, the armies in United Kingdom, Switzerland, France. And of course many more. It's also used by rescue teams and as especially by CASA, which is doing interventions for rescues. And we've been producing more than 150,000 units of ANAFI. So, ANAFI USA is just a new derivative of ANAFI. There are a lot of things that are common between ANAFI and ANAFI USA. And what's different is that there's a longer flight range. Of course, there's a way better video camera, both for day and night. But the rest of the drone is almost the same.
So, we've been doing those, we've been doing improvements on those platforms of ANAFI for 2 years now, which means that the software is pretty, pretty stable. And it's been tested a lot, before we launched the product. But we also had a lot of feedback from our users that allowed us to improve our products. And we've been doing so for 2 years now. And important to know that Parrot was the first drone manufacturer that was selling drones to the consumer. And we've been doing so for more than two years now. We've got high production capability And we've been producing more than 4 million drones right now. Which means that we are able to produce really stable drones and we have a lot of knowledge from those 10 years of activity in France and of course the greatest strength of Parrot is that there are more than 300 engineers working on drones, improving our products. And before we jump to the main subject about cyber security, I'd like to say that for those engineering, most of them may be working on the video feed or the embedded system or many other aspects of the drones, and not specifically on cyber security. But most of them have learnt a lot on cyber security. Some of them are good experts, and cyber security at parrot is not a matter of just a few persons. It's really a culture. And all those 300 engineers are really dedicated to cyber security, they really do understand what the problems, what problems are posed about cyber security. They think, with privacy in mind, whenever they add a feature, they wonder how we could secure it, how we can prevent users’ data to be exposed. And we speak a lot about technology, when we speak about trends. But for me, one of the greatest strengths of Parrot is that human being behind this technology is the ones that do the drones. And those are really dedicated to cyber security and privacy. Before speaking about cyber security, I will mention a few innovations. For example, here you see a video of ANAFI USA landing on a truck. So that's one of the features that is used, for example for border patrols, so that they can have their boat moving or have a vehicle moving and still they are able to launch the drone and have the drone go directly to the moving vehicle. And don't waste time when you've got a person which is dedicated to the task of having the drone land, of course you may waste time and here the drone is able to land even if the vehicle is moving. We've got a great subsidiary called Pix4D, and they produce great software for photogrammetry, which are used a lot for tactical mapping, and also for damage assessment, after a hurricane or after bombing or whatever. So that's one of the main added value of drones, you can launch it in just a few seconds or minutes. And within a few minutes, you will have a live mapping of the area below the drone
And that's great, because most of the time when you’re a soldier in need of a satellite feed, you would need some time before getting that. And maybe that won't be available or you encounter cloudy weather, which would prevent you doing so. And with the drone, you can adapt the way you fly it so you can fly under the cloud. And see whatever you need to see. So Pix4d is doing great software. And they are even doing a dedicated software for security, which is called Pix4D react. And the main difference is that you can use it offline. We've got a lot of defence and public safety users that are worried about having an internet connection all the time. And of course, this can be problematic for security reasons. But when they are in the middle of the desert, they may not have those kinds of internet connections. So, they don't want to be preventing, prevented from flying and from having live mapping when they are in that kind of environment. And it's great to have that kind of solution that allows you to do it completely offline. So now we are going to jump to our privacy and cyber security concerns. So first, at Parrot we really have privacy and cybersecurity in mind. And we want to implement privacy by design. It's not just something we do after everything else, that's something that is really deep into all of our processes. And when we develop a new feature, one of the main questions is, how do I secure it? How do I protect that data of my users? And at some point, if we need to share some data, or to propose to the user to share some data, we really want that the users has control over everything that is done. So first, I think I said that before, but there's no data transferred by default, which means that we've got services that allows the user to share data and post flight data on Parrot servers that can be used so that our own users can get the flight data from their computer or from another device or whatever they need. It's also used for customer support, to add customers adding all the data, and be more able to speak about what was done during the flight. But what's important is that even if we implement those features, it's enabled and we transfer data only if the user opts in, and by default, just nothing. So of course, we are GDPR compliant. So GDPR is a European regulation. And it's not a question of being a European company, because every company be that an American or Chinese or Asian company, selling to European customers, should be GDPR compliant. But we implemented GDPR features and all a lot of processes a long time ago. And that allowed us to improve, and to make sure that we didn't forget anything. So, it's really important for us, first, to be compliant to the relation. But it's also a regulation that drives our own mindset, the way we work and everything that is done in the company. Important to note that it's not mandatory for GDPR, but we host all of our data in Europe, in European servers.
There’s really good question about encryption. Because when you're using your drone, you may think that you need to have the encryption key written somewhere on the drone. And the way we work is that there's a key that is transferred from the ground control station to the drone. And inside the drone, this specific key is used only in volatile memory, which means that if an adverse party catches your drone, even if this adverse party installed memory components and use forensics techniques to recover the keys it can't. So, if a drone is crashed, then the adverse party cannot create anything and know your photos or videos on nothing. With almost the same principles, we also have additional protections against such forensics analysis to protect flight data and certain information such as return to home or return to position. And that’s enabled but only on our security edition. That's where we are today. But, as I mentioned, just a fabulous team at Parrot and hundreds of great engineers, and everyone is dedicated to security and really interested into improving even more the cyber security of our drones. So, I think that today, we already have a great level of security. But important to note, we are going to have even better features in in the next weeks, months and years. So, one of the examples and that's just one example amongst the several, we announced a partnership with WISeKey, it was back in July. And WISeKey is one of the main manufacturers of hardware security component. So, they produce, for example, Secure Element, which is FIPS140-2 compliant, which is a common criteria certified. And that's great, because that allows to securely store certain keys and to compute that some cryptographic functions in a secure way. And the fact that it's FIPS compliant means that the keys are generated in a safe way, that when we use randomness, that's real randomness. And every cryptographic feature, it is done the right way. So, stay tuned. Because with that kind of improvement, in a few weeks or months, we are going to announce even greater security features on our drones. It's, it's about over. So, I think that we've got a couple of minutes for questions.