NETWORK DEVICE DATA EXCHANGE COORDINATION
Devices and methods for exchanging data over a network are described. One device includes a communication interface and an electronic processor coupled to the communication interface. The electronic processor is configured to receive, via the communication interface, at least one network message including a payload associated with an IoT device. The electronic processor is configured to retrieve a data exchange policy for the IoT device. The electronic processor is configured to determine whether the payload is valid based on the data exchange policy. The electronic processor is configured to in response to determining that the payload is invalid, process the at least one network message based on the data exchange policy.
1 . An electronic device comprising:
a communication interface; and
an electronic processor coupled to the communication interface and configured to receive, via the communication interface, at least one network message including
a payload associated with an IoT device;
retrieve a data exchange policy for the IoT device;
determine whether the payload is valid based on the data exchange policy; and
in response to determining that the payload is invalid, process the at least one network message based on the data exchange policy.
2 . The electronic device of claim 1 , wherein the electronic processor is further configured to in response to determining that the payload is valid, transmit, via the communication interface, the at least one network message.
3 . The electronic device of claim 1 , wherein the electronic processor is further configured to extract, from the at least one network message, a payload associated with the IoT device.
4 . The electronic device of claim 1 , wherein the electronic processor is further configured to
retrieve an acceptable range for the payload; and
determine whether the at least one network message is valid by comparing the acceptable range to the payload.
5 . The electronic device of claim 1 , wherein the electronic processor is further configured to
determine a transmission frequency for the payload;
retrieve an acceptable transmission frequency range for the payload; and
determine whether the at least one network message is valid by comparing the transmission frequency to the acceptable transmission frequency range.
6 . The electronic device of claim 1 , wherein the electronic processor is further configured to
extract the payload from an application layer of the at least one network message.
7 . The electronic device of claim 1 , wherein the payload includes at least one selected from a group consisting of a command to the IoT device, a configuration setting for the IoT device, an operational state for the IoT device, a data query to the IoT device, and a data value from the IoT device.
8 . The electronic device of claim 1 , wherein the electronic processor is further configured to process the at least one network message by dropping the at least one network message.
9 . The electronic device of claim 1 , wherein the electronic processor is further configured to process the at least one network message by placing the at least one network message in quarantine.
10 . The electronic device of claim 1 , wherein the electronic processor is further configured to process the at least one network message by generating an alarm.
11 . A method for coordinating data exchange with an IoT device, the method comprising:
receiving, via a communication interface, at least one network message including a payload associated with the IoT device;
retrieving a data exchange policy for the IoT device;
determining whether the payload is valid based on the data exchange policy; and
in response to determining that the payload is invalid, processing the at least one network message based on the data exchange policy.
12 . The method for coordinating data exchange with an IoT device of claim 11 , further comprising:
in response to determining that the payload is valid, transmitting, via the communication interface, the at least one network message.
13 . The method for coordinating data exchange with an IoT device of claim 11 , further comprising:
extracting, with an electronic processor, from the at least one network message, the payload.
14 . The method for coordinating data exchange with an IoT device of claim 11 , wherein retrieving the data exchange policy includes retrieving an acceptable range for the payload; and
determining whether the at least one network message is valid includes comparing the acceptable range to the payload.
15 . The method for coordinating data exchange with an IoT device of claim 11 , further comprising:
determining a transmission frequency for the payload;
wherein retrieving the data exchange policy includes retrieving an acceptable transmission frequency range for the payload; and
wherein determining whether the at least one network message is valid includes comparing the transmission frequency to the acceptable transmission frequency range.
16 . The method for coordinating data exchange with an IoT device of claim 11 , wherein extracting, from the at least one network message, a payload associated with the IoT device includes extracting the payload from an application layer of the at least one network message.
17 . The method for coordinating data exchange with an IoT device of claim 11 , wherein extracting a payload includes extracting at least one selected from a group consisting of a command to the IoT device, a configuration setting for the IoT device, an operational state for the IoT device, a data query to the IoT device, and a data value from the IoT device.
18 . The method for coordinating data exchange with an IoT device of claim 11 , wherein processing the at least one network message includes dropping the at least one network message.
19 . The method for coordinating data exchange with an IoT device of claim 11 , wherein processing the at least one network message includes placing the at least one network message in quarantine.
20 . The method for coordinating data exchange with an IoT device of claim 11 , wherein processing the at least one network message includes generating an alarm.
21 . A system comprising:
an IoT device;
an enterprise application server configured to remotely control the IoT device;
a database containing an information model of the capabilities of the IoT device; and
an IoT firewall, communicatively coupled to the IoT device, the enterprise application server, and the database, the IoT firewall configured to
receive, from the enterprise application server, at least one network message including a payload associated with the IoT device;
retrieve, from the database, a data exchange policy for the IoT device;
determine whether the payload is valid based on the data exchange policy; and
in response to determining that the payload is invalid, process the at least one network message based on the data exchange policy.
22 . The system of claim 21 , wherein the IoT firewall is further configured to
in response to determining that the payload is valid, transmit the at least one network message to the enterprise application server.
23 . The system of claim 21 , wherein the IoT firewall is further configured to
extract, from the at least one network message, a payload associated with the IoT device.
24 . The system of claim 21 , wherein the IoT firewall is further configured to
retrieve, from the database, an acceptable range for the payload; and
determine whether the at least one network message is valid by comparing the acceptable range to the payload.
25 . The system of claim 21 , wherein the IoT firewall is further configured to
determine a transmission frequency for the payload;
retrieve, from the database, an acceptable transmission frequency range for the payload; and
determine whether the at least one network message is valid by comparing the transmission frequency to the acceptable transmission frequency range.
26 . The system of claim 21 , wherein the IoT firewall is further configured to
extract the payload from an application layer of the at least one network message.
27 . The system of claim 21 , wherein the payload includes at least one selected from a group consisting of a command to the IoT device, a configuration setting for the IoT device, an operational state for the IoT device, a data query to the IoT device, and a data value from the IoT device.
28 . The system of claim 21 , wherein the IoT firewall is further configured to process the at least one network message by dropping the at least one network message.
29 . The system of claim 21 , wherein the IoT firewall is further configured to process the at least one network message by placing the at least one network message in quarantine.
30 . The system of claim 21 , wherein the IoT firewall is further configured to process the at least one network message by generating an alarm.