Logo Loading

Use Case 1 · Secured IoT devices to enrich strolls across smart city parks (Santander, Spain)

The deployment of different IoT devices in selected areas of a park near downtown Santander will feed the Park Guide application, allowing citizens and visitors to obtain information that enriches their park strolling experience and the Municipality officers to monitor closely these spots and perform complete evaluations that will derive in taking effective actions based on knowledge and alerts obtained from the measurements collected.

Hence, the main idea behind this pilot consists of deploying IoT devices that measure variables significant to the well-being of the city’s inhabitants, such as noise or CO2 levels, and overcrowding of selected areas through the sketching of heat maps. This information is relevant for the Municipality as well, since it is not covered as of today as part of the smart city deployments already existing and this data would help when analysing the area and programming specific actions.

Users interested in taking part in the experience will find QR codes scattered throughout the pilot site (Las Llamas Park in Santander, Spain) for them to join the pilot. A web application will enable these users to access and rate the quality of the data submitted, providing another layer of validation. Such activity will be encouraged via a rewards system targeting the most active users on the site.

Overall, the information provided by M-Sec will complement and enrich the one currently existing and will help the Municipality to extract valuable conclusions through the observation of diverse areas in the park.

Problem Overview:

This Use Case involves offering reliable data related to the overall environmental status and occupancy in specific areas of the park. Attackers can tweak the values registered by sensors and in the end trigger erroneous actions from the Municipality side. Therefore, data security and integrity are the main issues on the applicability and scalability of this solution.

All in all, the main goals designed for the system that will be tested during the execution of this pilot will be:

  • Enrichment of the current local information panels provided by the city government, through the introduction of digital sensors integrated into IoT devices and communications.
  • Improvement of data security and integrity through the use of M-Sec layers in the different elements that compound the service. For instance, the IoT devices located in the lower layer will integrate hardware security features that will encrypt the data generated


  • Santander Smart City: IoT infrastructure provider where the use case will take place, carrying out new tests in its well-known city-wide living lab.
  • Citizens: as the end-users, submitting data and also benefiting from that data as presented in the web app, enabling them to make informed decisions on how they use the city, e.g. if it’s a good day to go to the beach (using the heat map to show how crowded it is)
  • Municipal Services: becoming service providers establishing city-wide strategies and acting upon information aggregated within the app, such as excessive noise levels or overcrowding.

GDPR compliance:

The personal data which is collected at the registration phase of the “Park Guide” app enables the identification of a subject in a public space. However, it is not considered a high risk to privacy and, therefore, does not require a privacy impact assessment (PIA). This is due to the fact that the information requested during the registration process is just an e-mail address, to keep the user properly and directly informed of updates in the pilot, and a personal password. Upon consultation with local Data Protection Officers, it was made clear this kind of information requested from users does not imply the need to conduct such a DPIA.

During this registration stage, the user is first informed about the main concepts of the data protection, such as who the controller is, which the purpose of data collection is, what the legitimacy is, who the recipients are, as well as which their rights are; and then, they will authorize the data processing. Only when the user accepts this basic information, can they continue with the registration in the app.

Furthermore, data protection issues with the handling of personal data will be addressed by the following strategies:

  • Volunteers to be enrolled will be given comprehensive information so that they are able to autonomously decide whether they consent to participate or not.
  • The data gathered through logging, questionnaires, interviews and focus groups will be anonymised.
  • Data will be stored only in an anonymous form. The identifiers of the participants will be known only by the partners involved (TST) and will not even be exposed to the whole consortium.

Latest developments:

Before the COVID-19, regular meetings and conversations with Municipal Environmental Service representatives to identify potential end-users as well as to promote their participation were held. Afterwards, and due to the impact of the COVID-19 pandemic, the pilot implementation needed to be postponed and its schedule adapted.

The development of prototypes continued and testing was restricted to company premises, while the interaction and integration activities among partners in the consortium were exclusively conducted in a remote way.

The sensors installation at Las Llamas Park will take place in September, starting then the initial trial with a pilot that will run for a total length of 3 months. Recruitment of users will be conducted in a way to accommodate the social distancing mandates and assuring the attendees’ safety. The same will apply to the training sessions to facilitate the use of the Park Guide web application.

M-Sec Benefit:

Novel HW security features implemented in M-Sec will prevent IoT devices from external attacks and the introduction of blockchain techniques will contribute to foster the participation of end-users and thus improve the system effectiveness.

  • Enriching the urban laboratory dimension through the deployment of new devices, whose security has been reinforced.
  • Getting aggregated information of the park through a new user-friendly tool.
  • Obtain new reliable data sources, which can be used for internal consumption and/or make available to citizens.
  • Establishing a new communication channel with citizens

How can I join?

Contact Arturo Medela: amedela@tst-sistemas.es


Download the Use Case 1 Product Sheet



And watch our latest video on Use Case 1 implementation

Date 21/09/2018
Category Santander, use-cases

Enter your keyword