Upgrade to Pro — share decks privately, control downloads, hide ads and more …

IoT and API Management

IoT and API Management

More Decks by API Strategy & Practice Conference

Other Decks in Technology

Transcript

  1. *   *   IoT  PlaHorm  Challenges   Device  RegistraJon

     &  Management   IntegraJon   Security  -­‐  Data     Scalability   Event  Management   App/Firmware  Management   Security  –  Device  Access  
  2. *   *   IoT  Device   •  Piece  of

     hardware   •  Built  for  a  purpose   •  Capable  of  a  limited  func8onality   •  Control  interface   •  Input/output   •  Consumes  power   •  Constrained  Environment   CharacterisJcs   Summary   •  Func8onal  Capabili8es  (Actuators)   •  Administra8on  Capabili8es  (Management)   •  Monitoring  Capabili8es  (Sensor  Data)  
  3. *   *   Modeling  Device  as  an  API  

    • eg  :  HTTP  API  (not  limited  to)   ◦  Lock   ▪  GET  hJp://{ip}/{loca8onid}/sensors/door1lock/staus   ▪  POST  hJp://{ip}/{loca8onid}/sensors/door1lock/lock   ◦  Temperature  Sensor   ▪  GET  hJp://{ip}/{loca8onid}/sensors/temperature1   ◦  Motor   ▪  POST  hJp://{ip}/{loca8onid}/actuators/motor1/rotate/{turns}/{direc8on}   ▪  GET  hJp://{ip}/{loca8onid}/actuators/motor1/status  
  4. *   *   Advantages  -­‐  Devices  as  APIs  

    •  APIs  -­‐  Standard  IntegraJon  PaTern   ◦  Heterogenous  devices   ▪  protocols,  access  control  mechanisms,  data  formats   •  App  Developers  -­‐  Already  familiar  programming   paradigm   •  Seamless  IntegraJon  with  exis8ng  systems   •  Ability  to  re-­‐user  known  paTerns  for  securing,  hardening   APIs   •  API  Economy  
  5. *   *   Open  APIs        |

           Managed  APIs  
  6. *   *   Devices  Need  More  CapabiliJes..   • ThroJling

      • Caching   • Request  Rou8ng   • Buffering   • Stats  collec8on  &  monitoring  (Passive  Analysis)   • Aler8ng  (Real  8me  Analysis)   • Decision  Making  (Predic8ve  Analysis)  
  7. *   *   Sounds  familiar?   •  ThroJling  

    •  Caching   •  Request  Rou8ng   •  Buffering   •  Stats  collec8on  &  monitoring  (Passive  Analysis)   •  Aler8ng  (Real  8me  Analysis)   •  Decision  Making  (Predic8ve  Analysis)   Similar  requirements  in   API  Management  world  
  8. *   *   Mapping  Oauth(2)  -­‐>  IoT  Device  Access

      • Device  capabili8es  -­‐>  resources   • OAuth  (2.0)  tokens  -­‐>  authorize  access     • Tokens  -­‐>  expire,  grant/revoke  access      
  9. *   *   IoT  Device  Eco  System  +  API

     World   Crea8ng  a  new  Device  API  (versioning)   Registering  a  new  Device  Type  (OAuth2   applica8on  -­‐>  consumer  key)   Device  Owner  Registering  a  Device  (obtaining   access  token)   Device  Publishing  Sensor  Data   App  Accessing  Device  (Controls)   Device  Polling  for  Pending  Ac8ons   Wri8ng  Apps  for  Device  APIs   Virtualiza8on  (for  tes8ng)   Controlling  and  Monitoring  Devices