IoT Fundamentals

David Hanes, CCIE No. 3491, is a Technical Leader specializing in IoT and working in Cisco Technical Services as part of the Cloud Support Technical Assistance Center (TAC). With experience in the incubation of new technologies, he is currently leading the TAC support effort for Cisco’s IoT cloud solutions. He also has technical expertise in the areas of collaboration and cognitive computing.David has multiple patents issued and pending in the areas of IoT and collaboration. He is an active participant in the SIP Forum and in the IETF as an RFC contributor and author. David has written and contributed to various industry publications and white papers and is a coauthor of the Cisco Press book Fax, Modem, and Text for IP Telephony. He has spoken at industry and technical conferences worldwide and has been honored as a Hall of Fame speaker by Cisco Live.Since joining Cisco in 1997, David has worked as a TAC engineer for the WAN, WAN Switching, and Multiservice Voice teams; as a team lead for the Multiservice Voice team; as an escalation engineer covering a variety of VoIP technologies; and as a field trial support engineer. Prior to working at Cisco, David was a systems engineer for Sprint, where he gained his first computer networking experience working on the Frame Relay and X.25 protocols. He holds a degree in electrical engineering from North Carolina State University.Gonzalo Salgueiro, CCIE No. 4541, is a Principal Engineer in Technical Services, working on several emerging technologies and the services opportunities they offer. Gonzalo has spent more than 20 years at Cisco, establishing himself as a subject matter expert, innovator, and industry thought leader in various technologies, including Collaboration, ML/AI, Cloud, and IoT.Gonzalo is an established member of numerous industry organizations and is a regular presenter and distinguished speaker at a variety of technical industry conferences and Cisco events around the world. He currently holds various industry leadership roles, including serving as a member of the Board of Directors of the SIP Forum, co-chair of the INSIPID and SIPBRANDY IETF working groups, member of the IoT Directorate in the IETF, and co-chair of the WebRTC Task Group, IPv6 Task Group, and FoIP Task Group in the SIP Forum. He is an active contributor to various industry organizations and standardization activities.Gonzalo co-authored the Cisco Press book Fax, Modem, and Text for IP Telephony. He has also co-authored 24 IETF RFCs, 4 IEEE papers, 4 ITU contributions, and numerous industry and academic research papers on a variety of different technical topics. He is also coinventor of 65+ patents (issued and pending) and has contributed to various interop and open source development efforts. Gonzalo received a master’s degree in physics from the University of Miami.Patrick Grossetete is a Distinguished Engineer, Technical Marketing, working on field communication architecture and design (IEEE 802.15.4g/e RF, IEEE 1901.2a PLC, LoRaWAN, IPv6, 6LoWPAN, RPL, ...) in the Cisco Internet of Things Connected Group.He joined Cisco through its acquisition of Arch Rock, where he was Director of Product Management and Customer Solutions, focusing on IPv6-based wireless sensor network technology for smart grid, energy, and environmental optimization applications.Previously, Patrick led a product management team at Cisco, responsible for a suite of Cisco IOS software technologies, including IPv6 and IP Mobility. Patrick regularly speaks at conferences and industry events, including the IPv6 Forum, which he joined in 1999 as a Cisco representative. Patrick also acts as reviewer on European Commission–sponsored projects, including GEANT and ENVIROFI.Patrick is coauthor of the books Global IPv6 Strategies and Deploying IPv6 Networks, published by Cisco Press, as well as several white papers, such as Unified Field Area Network Architecture for Distribution Automation (2014) and IPv6 Architecture for Field Area Networks (2012). In June 2003, he received the IPv6 Forum Internet Pioneer Award at the San Diego Summit, and he is an IPv6 Forum Fellow. Before his days at Cisco and Arch Rock, he worked at Digital Equipment Corporation as a consulting engineer and was involved with network design and deployment. He received a degree in computer science from the Control Data Institute, Paris, France.Rob Barton, CCIE No. 6660 (R&S and Security), CCDE No. 2013:6, is a Principal Systems Engineer working in Cisco’s Digital Transformation and Innovation organization. Rob is a registered professional engineer (P.Eng) and has worked in the IT industry for more than 20 years, the last 17 of which have been at Cisco. Rob graduated from the University of British Columbia with a degree in engineering physics, where he specialized in computerand radio communications. Rob’s areas of interest include wireless communications, IPv6, IoT, and industrial control systems. Rob coauthored the Cisco Press book End-to-End QoS, 2nd edition. He resides in Vancouver, Canada, with his wife and two children.Jerome Henry, CCIE No. 24750, is a Principal Engineer in the Enterprise Infrastructure and Solutions Group at Cisco systems. Jerome has more than 15 years’ experience teaching technical Cisco courses in more than 15 countries and 4 languages, to audiences ranging from bachelor’s degree students to networking professionals and Cisco internal system engineers. Focusing on his wireless and networking experience, Jerome joined Cisco in 2012. Before that time, he was consulted and taught heterogeneous networks and wireless integration with the European Airespace team, which was later acquired by Cisco to become their main wireless solution. He then spent several years with a Cisco Learning partner, developing networking courses and working on training materials for emerging technologies.Jerome is a certified wireless networking expert (CWNE No. 45) and has developed multiple Cisco courses and authored several wireless books and video courses. Jerome is also a member of the IEEE, where he was elevated to Senior Member in 2013, and also participates with Wi-Fi Alliance working groups, with a strong focus on IoT and low power. With more than 10,000 hours in the classroom, Jerome was awarded the IT Training Award Best Instructor silver medal. He is based in Research Triangle Park, North Carolina.

• Foreword xxviIntroduction xxviiiPart I Introduction to IoT 1Chapter 1 What Is IoT? 3Genesis of IoT 4IoT and Digitization 6IoT Impact 7Connected Roadways 8Connected Factory 12Smart Connected Buildings 15Smart Creatures 19Convergence of IT and OT 21IoT Challenges 23Summary 24References 24Chapter 2 IoT Network Architecture and Design 27Drivers Behind New Network Architectures 28Scale 30Security 31Constrained Devices and Networks 32Data 32Legacy Device Support 32Comparing IoT Architectures 33The oneM2M IoT Standardized Architecture 33The IoT World Forum (IoTWF) Standardized Architecture 35Additional IoT Reference Models 39A Simplified IoT Architecture 40The Core IoT Functional Stack 43Layer 1: Things: Sensors and Actuators Layer 44Layer 2: Communications Network Layer 46Layer 3: Applications and Analytics Layer 59IoT Data Management and Compute Stack 63Fog Computing 65Edge Computing 68The Hierarchy of Edge, Fog, and Cloud 68Summary 70References 71Part II Engineering IoT Networks 73Chapter 3 Smart Objects: The “Things” in IoT 75Sensors, Actuators, and Smart Objects 76Sensors 76Actuators 81Micro-Electro-Mechanical Systems (MEMS) 83Smart Objects 84Sensor Networks 87Wireless Sensor Networks (WSNs) 88Communication Protocols for Wireless Sensor Networks 92Summary 93Chapter 4 Connecting Smart Objects 95Communications Criteria 96Range 96Frequency Bands 98Power Consumption 101Topology 102Constrained Devices 103Constrained-Node Networks 104IoT Access Technologies 107IEEE 802.15.4 108IEEE 802.15.4g and 802.15.4e 118IEEE 1901.2a 124IEEE 802.11ah 130LoRaWAN 134NB-IoT and Other LTE Variations 142Summary 146Chapter 5 IP as the IoT Network Layer 149The Business Case for IP 150The Key Advantages of Internet Protocol 150Adoption or Adaptation of the Internet Protocol 152The Need for Optimization 154Constrained Nodes 155Constrained Networks 156IP Versions 157Optimizing IP for IoT 159From 6LoWPAN to 6Lo 159Header Compression 161Fragmentation 162Mesh Addressing 1636TiSCH 165RPL 167Authentication and Encryption on Constrained Nodes 173Profiles and Compliances 174Internet Protocol for Smart Objects (IPSO) Alliance 174Wi-SUN Alliance 174Thread 174IPv6 Ready Logo 175Summary 175Chapter 6 Application Protocols for IoT 177The Transport Layer 178IoT Application Transport Methods 180Application Layer Protocol Not Present 180SCADA 182Generic Web-Based Protocols 189IoT Application Layer Protocols 191 Summary 204Chapter 7 Data and Analytics for IoT 205An Introduction to Data Analytics for IoT 206Structured Versus Unstructured Data 207Data in Motion Versus Data at Rest 209IoT Data Analytics Overview 209IoT Data Analytics Challenges 211Machine Learning 212Machine Learning Overview 212Machine Learning and Getting Intelligence from Big Data 218Predictive Analytics 220Big Data Analytics Tools and Technology 220Massively Parallel Processing Databases 222NoSQL Databases 223Hadoop 224The Hadoop Ecosystem 227Edge Streaming Analytics 230Comparing Big Data and Edge Analytics 231Edge Analytics Core Functions 232Distributed Analytics Systems 235Network Analytics 236Flexible NetFlow Architecture 238Summary 242References 243Chapter 8 Securing IoT 245A Brief History of OT Security 246Common Challenges in OT Security 249Erosion of Network Architecture 249Pervasive Legacy Systems 250Insecure Operational Protocols 250Other Protocols 253Device Insecurity 254Dependence on External Vendors 255Security Knowledge 256How IT and OT Security Practices and Systems Vary 256The Purdue Model for Control Hierarchy 257OT Network Characteristics Impacting Security 259Security Priorities: Integrity, Availability, and Confidentiality 261Security Focus 261Formal Risk Analysis Structures: OCTAVE and FAIR 262OCTAVE 262FAIR 265The Phased Application of Security in an Operational Environment 266Secured Network Infrastructure and Assets 266Deploying Dedicated Security Appliances 269Higher-Order Policy Convergence and Network Monitoring 272Summary 274Part III IoT in Industry 275Chapter 9 Manufacturing 277An Introduction to Connected Manufacturing 278An IoT Strategy for Connected Manufacturing 279Business Improvements Driven Through IoT 281An Architecture for the Connected Factory 282Industrial Automation and Control Systems Reference Model 282The CPwE Reference Model 284CPwE Resilient Network Design 286CPwE Wireless 289Industrial Automation Control Protocols 293EtherNet/IP and CIP 293PROFINET 294The PROFINET Architecture 296Media Redundancy Protocol (MRP) 297Modbus/TCP 298Connected Factory Security 299A Holistic Approach to Industrial Security 299Edge Computing in the Connected Factory 304Connected Machines and Edge Computing 304Summary 307References 307Chapter 10 Oil and Gas 309An Introduction to the Oil and Gas Industry 310Defining Oil and Gas 310The Oil and Gas Value Chain 313Current Trends in the Oil and Gas Industry 314Industry Key Challenges as Digitization Drivers 316IoT and the Oil and Gas Industry 319Improving Operational Efficiency 321The Purdue Model for Control Hierarchy in Oil and Gas Networks 321Oil and Gas Use Cases for IoT 323IoT Architectures for Oil and Gas 326Control Room Networks for Oil and Gas 327Wired Networks for Oil and Gas 328Wireless Networks for Oil and Gas 328Wireless Use Cases in the Oil and Gas Industry 332The Risk Control Framework for Cybersecurity in IoT 335Securing the Oil and Gas PCN: Background 337Securing the Oil and Gas PCN: Use Cases and Requirements 338Data Analytics for Predictive Asset Monitoring 341Summary 342References 343Chapter 11 Utilities 345An Introduction to the Power Utility Industry 347The IT/OT Divide in Utilities 348The GridBlocks Reference Model 350GridBlocks: An 11-Tiered Reference Architecture 352The Primary Substation GridBlock and Substation Automation 356SCADA 357IEC 61850: The Modernization of Substation CommunicationStandards 358Network Resiliency Protocols in the Substation 362System Control GridBlock: The Substation WAN 364Defining Teleprotection 364Designing a WAN for Teleprotection 367The Field Area Network (FAN) GridBlock 369Advanced Metering Infrastructure 371Other Use Cases 373Securing the Smart Grid 377NERC CIP 378Smart Grid Security Considerations 380The Future of the Smart Grid 381Summary 382References 383Chapter 12 Smart and Connected Cities 385An IoT Strategy for Smarter Cities 386Vertical IoT Needs for Smarter Cities 386Global vs. Siloed Strategies 389Smart City IoT Architecture 390Street Layer 391City Layer 394Data Center Layer 395Services Layer 397On-Premises vs. Cloud 398Smart City Security Architecture 398Smart City Use-Case Examples 401Connected Street Lighting 401Connected Environment 409Summary 411References 412Chapter 13 Transportation 413Transportation and Transports 413Transportation Challenges 415Roadways 415Mass Transit 416Rail 417Challenges for Transportation Operators and Users 418IoT Use Cases for Transportation 420Connected Cars 421Connected Fleets 422Infrastructure and Mass Transit 422An IoT Architecture for Transportation 427IoT Technologies for Roadways 427Connected Roadways Network Architecture 434Extending the Roadways IoT Architecture to Bus Mass Transit 440Extending Bus IoT Architecture to Railways 442Summary 447References 448Chapter 14 Mining 449Mining Today and Its Challenges 451Scale 451Safety 455Environment 455Security 456Volatile Markets 456Challenges for IoT in Modern Mining 456The OT Roles in Mining 456Connectivity 457An IoT Strategy for Mining 459Improved Safety and Location Services 459Location Services 461Improved Efficiencies 464Improved Collaboration 465IoT Security for Mining 466An Architecture for IoT in Mining 467IEEE 802.11 as the IoT Access Layer 468802.11 Outdoor Wireless Mesh 4684G/LTE 474Wireless in Underground Mining 475Industrial Wireless 476Isolated vs. Connected Mine Networks 476Core Network Connectivity 478Network Design Consideration for Mining Applications 479Data Processing 480Summary 481Chapter 15 Public Safety 483Overview of Public Safety 484Public Safety Objects and Exchanges 484Public and Private Partnership for Public Safety IoT 486Public Safety Adoption of Technology and the IoT 488An IoT Blueprint for Public Safety 489Mission Continuum 489Mission Fabric 490Inter-agency Collaboration 491Emergency Response IoT Architecture 493Mobile Command Center 494Mobile Vehicles: Land, Air, and Sea 501IoT Public Safety Information Processing 506School Bus Safety 508Bus Location and Student Onboarding/Offboarding 508Driver Behavior Reporting 510Diagnostic Reporting 511Video Surveillance 511Student Wi-Fi 513Push-to-Talk Communication 513School Bus Safety Network Architecture 513Summary 514Reference 5159781587144561, TOC, 5/16/2017