The IoT ecosystem suffers from a variety of problems around security, identity, access control, data flow and data storage that introduce friction into interactions between various parties. In many respects, the situation is similar to the early days of the Internet, where, prior to the establishment of Internet Exchanges, routing between different BGP autonomous systems was often point to point. We propose a similar solution, the IoT Exchange, where IoT device owners can register their devices and offer data for sale or can upload data into the IoT services of any of the big hyperscale cloud platforms for further processing. The goal of the IoT Exchange is to break down the silos within which device wireless connectivity types and cloud provider IoT systems constrain users to operate. In addition, if the device owner needs to maintain the data close to the edge to reduce access latency, the MillenniumDB service running in an edge data center with minimal latency to the edge device, provides a database with a variety of schema engines (SQL, noSQL, etc). The IoT exchange uses decentralized identifiers for identity management and verifiable credentials for authorizing software updates and to control access to the devices, to avoid dependence on certificate authorities and other centralized identity and authorization management systems. In addition, verifiable credentials provide a way whereby privacy preserving processing can be applied to traffic between a device and an end data or control customer, if some risk of privacy compromise exists.
翻译:IoT生态系统在安全、身份、出入控制、数据流动和数据储存方面存在着各种各样的问题,这些问题使各方之间的互动产生摩擦,在许多方面,这种情况类似于因特网早期的情况,在互联网建立互联网交换之前,不同BGP自主系统之间的路线往往指向点点。我们提议了一个类似的解决方案,即IoT交换,即IoT设备所有者可以登记其设备,提供数据供出售,或将数据上传到任何大型超大型云平台的IoT服务,供进一步处理。IoT交换的目的是打破安装无线连接类型和云提供者IoT系统制约用户运行的发射井。此外,如果设备所有者需要将数据维持在接近边端的边端,即IoT设备所有者可以将数据输入边端数据中心,提供各种Schema引擎(SQL, noSQL,等等)。IoT交换可以使用一些分散的识别码,用于身份管理、可核实的证书,用以授权客户更新和管制系统之间的中央身份验证系统,从而提供保存安全性更新和管制。