Cyber Security Business Models in 5G 113
come from secure digital platforms or VPN providers who secure data transmission for
users by altering location data. Additionally, we see the potential of platforms with
intra‐platform payment options and the payments need to be secured as well. We give
Uber as an example here; in reality there are many more examples where the platform
needs to be secured for intra‐platform payments in addition to secure payment gateways. A secure IoT platform is a potential business model for the context layer. Finally,
these secure platforms can make new revenue by offering big data analytics from the
data they create and collect in the commerce layer.
When we look at location‐driven security, the most opportune business models
should rise in the context layer. In our analysis, indoor location owners can exploit one
of the challenges of 5G small‐cell base stations: getting seamless connectivity in indoor
spaces. Indoor locations, such as hospitals, universities, production factories, sports
arenas or shopping malls, can then take the responsibility to operate as a local operator. We call this role that of the micro operator. On top of standard connectivity, these
micro operators can add a layer of value‐added location‐specific service to a package,
often referred to as PMSE in the commerce layer. Ahokangas et al. [28] defined micro
operators as entities that offer “1) mobile connectivity combined/locked with specific,
local services, that is 2) spatially confined to either its premises or to a defined (but
narrow) area of operation, and is 3) dependent on appropriate available spectrum
resources”. However, micro operators’ major business partners will be MNOs and
NIVs for spectrum licensing and network infrastructure reasons. From the security
perspective, micro operators can consider procuring services from MNOs or other
security providers. For the content layer, there can be business around location‐
specific proprietary secure content, which is only accessible by authorized personnel
within the specific location. One example could be offering video content replays
during a sports event in a stadium.
Finally, for device‐driven security, we observe the commerce layer to offer key business opportunities. These opportunities can be monetized by offering secure devices
for commercial purposes. Devices can range from secure handheld mobile devices to
secure IoT devices. Additionally, examples for businesses in the commerce layer can be
different types of encryption software, applications and VPN providers, which secure
devices and content in various ways. We consider secure devices to create opportunities
in the context layer as well if the secure devices are targeted to secure specific contexts,
such as military contexts or a specific classified location. We also see the potential for
some businesses in the connectivity layer from the device‐driven security perspective
for the self‐driving vehicles of the future, for which vehicle‐to‐vehicle communication
will be key. Device‐driven security techniques can be deployed in this context too, for
secure communication in such dynamic‐mesh networks between multiple vehicles.
This listing of business model options for cyber security in 5G should not be considered as exhaustive, but rather as suggestive and a starting point from which to look for
more business models for new revenue generation. In order to create this framework,
we have used the business model as a boundary‐spanning unit of analysis [5,13,15] in
creating the security provisioning approach. These scenarios enabled us to draw the
technical landscape from both a service and user perspective. The technical landscape
also validates the scenarios we built from a technological point of view.
In our opinion, given that an organization identifies a viable business opportunity and
is able to invest sufficient sums to establish the required level of security, they can also
come from secure digital platforms or VPN providers who secure data transmission for
users by altering location data. Additionally, we see the potential of platforms with
intra‐platform payment options and the payments need to be secured as well. We give
Uber as an example here; in reality there are many more examples where the platform
needs to be secured for intra‐platform payments in addition to secure payment gateways. A secure IoT platform is a potential business model for the context layer. Finally,
these secure platforms can make new revenue by offering big data analytics from the
data they create and collect in the commerce layer.
When we look at location‐driven security, the most opportune business models
should rise in the context layer. In our analysis, indoor location owners can exploit one
of the challenges of 5G small‐cell base stations: getting seamless connectivity in indoor
spaces. Indoor locations, such as hospitals, universities, production factories, sports
arenas or shopping malls, can then take the responsibility to operate as a local operator. We call this role that of the micro operator. On top of standard connectivity, these
micro operators can add a layer of value‐added location‐specific service to a package,
often referred to as PMSE in the commerce layer. Ahokangas et al. [28] defined micro
operators as entities that offer “1) mobile connectivity combined/locked with specific,
local services, that is 2) spatially confined to either its premises or to a defined (but
narrow) area of operation, and is 3) dependent on appropriate available spectrum
resources”. However, micro operators’ major business partners will be MNOs and
NIVs for spectrum licensing and network infrastructure reasons. From the security
perspective, micro operators can consider procuring services from MNOs or other
security providers. For the content layer, there can be business around location‐
specific proprietary secure content, which is only accessible by authorized personnel
within the specific location. One example could be offering video content replays
during a sports event in a stadium.
Finally, for device‐driven security, we observe the commerce layer to offer key business opportunities. These opportunities can be monetized by offering secure devices
for commercial purposes. Devices can range from secure handheld mobile devices to
secure IoT devices. Additionally, examples for businesses in the commerce layer can be
different types of encryption software, applications and VPN providers, which secure
devices and content in various ways. We consider secure devices to create opportunities
in the context layer as well if the secure devices are targeted to secure specific contexts,
such as military contexts or a specific classified location. We also see the potential for
some businesses in the connectivity layer from the device‐driven security perspective
for the self‐driving vehicles of the future, for which vehicle‐to‐vehicle communication
will be key. Device‐driven security techniques can be deployed in this context too, for
secure communication in such dynamic‐mesh networks between multiple vehicles.
This listing of business model options for cyber security in 5G should not be considered as exhaustive, but rather as suggestive and a starting point from which to look for
more business models for new revenue generation. In order to create this framework,
we have used the business model as a boundary‐spanning unit of analysis [5,13,15] in
creating the security provisioning approach. These scenarios enabled us to draw the
technical landscape from both a service and user perspective. The technical landscape
also validates the scenarios we built from a technological point of view.
In our opinion, given that an organization identifies a viable business opportunity and
is able to invest sufficient sums to establish the required level of security, they can also