#redhat #rhsummit
IoT Solutions Made Simple
with Everyware IoT
Open. Integrated. Managed.
Franco Potepan
Director Software Product Management
May 2nd, 2017
#redhat #rhsummit
IoT
Open. Integrated. Managed.
Open IoT
Open Source
Open Standards
Open Hardware
No Vendor Lock-in
Large Eco-system
Interoperability
Simple & Quick Prototyping
Higher Quality
Customers as Partners
#redhat #rhsummit
About Eurotech
• One of the world top players in the global Embedded Computers market
• Behind the products & services of more than 20 Global 500 companies
• 20+ Years of experience in “M2M” systems
– 20+ Years experience in OT / embedded / gateway hardware & software
– 16 Years ago co-developed MQTT with IBM
– 10+ Years experience with Java in embedded
– 6+ Years history in M2M/IoT cloud platforms
• Strong vertical market competencies:
– Industrial & Logistics
– Transportation
– Defense & Security
– Healthcare & Medical
#redhat #rhsummit
MEDICAL DEVICE
REMOTE MANAGING
& MONITORING
SMART
CONNECTED
VENDING
ENVIRONMENTAL
MONITORING
& SMART CITY
PEOPLE FLOW
MONITORING
& COUNTING
INDUSTRIAL
SYSTEMS
CONTROL
CLOUD
CONNECTED
FITNESS
SPORTS
MEDICAL
MONITORIN
G
TRANSPORTATION
& LOGISTICS
Business Application Integration / other IoT Platforms
Everyware Cloud
IoT Communication Protocols
Middleware for IoT GatewaysEveryware Software Framework
IoT Integration Platform
OT / Field Protocols and Interfaces
#redhat #rhsummit
MEDICAL DEVICE
REMOTE MANAGING
& MONITORING
SMART
CONNECTED
VENDING
ENVIRONMENTAL
MONITORING
& SMART CITY
PEOPLE FLOW
MONITORING
& COUNTING
INDUSTRIAL
SYSTEMS
CONTROL
CLOUD
CONNECTED
FITNESS
SPORTS
MEDICAL
MONITORIN
G
TRANSPORTATION
& LOGISTICS
Business Application Integration / other IoT Platforms
Everyware Cloud
IoT Communication Protocols
Middleware for IoT GatewaysEveryware Software Framework
IoT Integration Platform
OT / Field Protocols and Interfaces
Connectivity / Message Routing
Device Registry and Management
Data Management and Storage
Event Management
Application Enablement
Communications/messaging
Data pre-processing
Real-time data analytics
Real-time actions/rules
Application Container
Remote management
Communications/messaging
Data acquisition
#redhat #rhsummit
Open Source
MEDICAL DEVICE
REMOTE MANAGING
& MONITORING
SMART
CONNECTED
VENDING
ENVIRONMENTAL
MONITORING
& SMART CITY
PEOPLE FLOW
MONITORING
& COUNTING
INDUSTRIAL
SYSTEMS
CONTROL
CLOUD
CONNECTED
FITNESS
SPORTS
MEDICAL
MONITORIN
G
TRANSPORTATION
& LOGISTICS
Business Application Integration / other IoT Platforms
Everyware Cloud
IoT Communication Protocols
Everyware Software Framework
OT / Field Protocols and Interfaces
#redhat #rhsummit
Eclipse Kura and Eclipse Kapua
Started Dec 2013, first release Sept 2014 Started Oct 2016, first release May 2017
Middleware for IoT Gateways
Code base donated by EUROTECH
Modular IoT Integration Platform
#redhat #rhsummit
Open Source - Eclipse IoT
Founded in 2012 by
#redhat #rhsummit
Eclipse IoT
Contributions by Company in 2016
#redhat #rhsummit
Open Standards
• M2M Messaging Protocol
• Low Bandwidth / Low Power
• 2-way Communication
• Publish and Subscribe
• Hierarchical Topic Namespaces
• Data Payload Agnostic
• Device Initiated Connection
• Firewall-friendly
• SSL and Authenticated
• Large ecosystem
Message Queue Telemetry Transport (MQTT)
Industrial
M2M/IoT Gateways
Open Portability
From Prototype to Production
Software portability
across HW Platforms
Open Hardware
Integrated
Integration @ Edge
Integration @ Data Center
End-to-end Modular IoT Solutions
Faster Innovation
Faster Time-to-Market
Integrated IoT
#redhat #rhsummit
MEDICAL DEVICE
REMOTE MANAGING
& MONITORING
SMART
CONNECTED
VENDING
ENVIRONMENTAL
MONITORING
& SMART CITY
PEOPLE FLOW
MONITORING
& COUNTING
INDUSTRIAL
SYSTEMS
CONTROL
CLOUD
CONNECTED
FITNESS
SPORTS
MEDICAL
MONITORIN
G
TRANSPORTATION
& LOGISTICS
Business Application Integration / other IoT Platforms
Everyware Cloud
IoT Communication Protocols
Middleware for IoT GatewaysEveryware Software Framework
IoT Integration Platform
OT / Field Protocols and Interfaces
Middleware for IoT GatewaysEveryware Software Framework
#redhat #rhsummit
Integration @ Edge
Everyware Software Framework (ESF) – Eclipse Kura
Develop IoT Edge
Computing Apps
Wires Data Flow
SQL Database
Full Java APIs
Connect to
Field Devices
Industrial Protocols
Modular Drivers
Connect to
IoT Cloud Services
Multiple Connections
Message Routing
Digital Twins
AWS IoT Azure IoT
RS 232/485
Bluetooth Low Energy
USB
CAN bus
GPS/GNSS
GPIO/I2C/PWM
Eclipse
Kapua
Everyware
Cloud
#redhat #rhsummit
Wires
#redhat #rhsummit
Integration @ Edge
Everyware Software Framework – Eclipse Kura
Red Hat Enterprise Linux | Yocto
Java 8 / OSGi
Device Abstraction
javax.comm / RS-485
Basic Gateway Services
DB Service
Clock Service
Device Profile
Watchdog
Network ConfigurationNetwork Configuration
Drivers
Connectivity and Delivery
Data Services MQTT Paho
AdministrationGUI
Applications
Your Application
RemoteManagement
Configuration
Management
javax.usb + udev
Cloud Services
Your Application
Firewall,
Port
Forwarding
Network
Monitors
Cellular, Wi-Fi,
Ethernet
GPS Position GPIO / SPI / PWM / I2C
jdk.dio
Modbus CAN bus
Custom Protocols
Updates
Management
RemoteAccess
Java USB HID APIs javax.bluetooth / BLEjavax.smartcardio
Security
Security Manager Certificate Manager SSL Manager Provisioning
Wires – Data Flows
Assets
Asset
OPC UA S7
Fuse / Camel Services
#redhat #rhsummit
MEDICAL DEVICE
REMOTE MANAGING
& MONITORING
SMART
CONNECTED
VENDING
ENVIRONMENTAL
MONITORING
& SMART CITY
PEOPLE FLOW
MONITORING
& COUNTING
INDUSTRIAL
SYSTEMS
CONTROL
CLOUD
CONNECTED
FITNESS
SPORTS
MEDICAL
MONITORIN
G
TRANSPORTATION
& LOGISTICS
Business Application Integration / other IoT Platforms
Everyware Cloud
IoT Communication Protocols
Middleware for IoT GatewaysEveryware Software Framework
IoT Integration Platform
OT / Field Protocols and Interfaces
Everyware Cloud IoT Integration Platform
#redhat #rhsummit
Integration @ Data Center
Everyware Cloud – Eclipse Kapua
Application Integration
Security
Device Management
Data Management
DeviceConnectivity(A-MQ)
Mobile &
Enterprise
Applications
@
Alerts &
Notifications
JBOSS BRMS
MessageRouting(Fuse)
Enterprise
Integration
Patterns
JBOSS Fuse
Administration
Real-Time Analytics
Data
Dashboards
Business
Intelligence
ETL Hooks
Device Registry
MQTT
Storage
Account Management Access Control
RESTAPIDeviceMgmtConsole
Device Management Protocols
Device Provisioning
Device Batch
Operations
IoT Devices
and Gateways
Cellular
Connectivity /
SIM Management
Platforms
Everyware Cloud
Administrator / Web Console
Managed
IT Management
OT Management
IT-OT Security
Managed IoT
IT Management
Appliance PublicPrivate and On Premise
Software Appliance SaaS EditionOn-premise
Appliance
#redhat #rhsummit
OT Management
• Device Provisioning
• Application Life-cycle Management
• Service Configuration Management
• Certificate Management
• Device Batch Operations
• Remote Access and Maintenance
Device Management
MQTT
on
Security
Administration
Data Management
Device
Connectivity
Application Integration
Device Management
Everyware Cloud Device Connectivity
Device Provisioning
1. Administrator creates a Provision Request
2. Device connects to the provision account and sends a provisioning message
3. Platform checks for a valid provision request for the device
4. Platform executes provision job sending the device:
a. Platform certificate for secure communication
b. New device configuration
5. The device applies new configuration and connects under target account
Application Integration
Security
Data Management
Device
Connectivity
Administrator
Gateway
1
2
4
3
Administration
Device Management
#redhat #rhsummit
Everyware VPN
Device Remote Access
Everyware Cloud
MQTT
Everyware VPN
Server
Remote Terminal
or Application
Management
Console
VPN
VPN
1
2
3
4
1. Gateway connected through MQTT
2. VPN connection to Gateway is requested
3. VPN connection from Remote Terminal is established and bridged
to the Gateway
4. VPN connection from Gateway is established
5. Through ESF NAT and port forwarding, Remote Terminal
can access devices connected to the Gateway subnet
Gateway
5
#redhat #rhsummit
IT-OT Security
Vulnerability Assessments
and Penetration Tests Cloud-level Security
 Integrated Certificate Management
 Validated Server Identity
 Tenant Isolation
 Role-based Access Control
 2-factor Authentication
Secure Communication
Device-level Security
 Unique Device Identity and Credentials
 Signed ESF/Application Code
 Encrypted Configuration and Storage
 SSL/TLS Encryption w/ Hostname Verification*
 Mutual Authentication
 Digitally Signed Messages
(*) addresses man-in-the-middle threat
#redhat #rhsummit
Open. Integrated. Managed. IoT.
Open Source
Open Standards
Open Hardware
Integration @ Edge
Integration @ Data Center
End-to-end IoT Solutions
IT Management
OT Management
IT-OT Security
As Simple As
Thank You

IoT Solutions Made Simple with Everyware IoT

  • 1.
    #redhat #rhsummit IoT SolutionsMade Simple with Everyware IoT Open. Integrated. Managed. Franco Potepan Director Software Product Management May 2nd, 2017
  • 2.
  • 4.
    Open IoT Open Source OpenStandards Open Hardware No Vendor Lock-in Large Eco-system Interoperability Simple & Quick Prototyping Higher Quality Customers as Partners
  • 5.
    #redhat #rhsummit About Eurotech •One of the world top players in the global Embedded Computers market • Behind the products & services of more than 20 Global 500 companies • 20+ Years of experience in “M2M” systems – 20+ Years experience in OT / embedded / gateway hardware & software – 16 Years ago co-developed MQTT with IBM – 10+ Years experience with Java in embedded – 6+ Years history in M2M/IoT cloud platforms • Strong vertical market competencies: – Industrial & Logistics – Transportation – Defense & Security – Healthcare & Medical
  • 6.
    #redhat #rhsummit MEDICAL DEVICE REMOTEMANAGING & MONITORING SMART CONNECTED VENDING ENVIRONMENTAL MONITORING & SMART CITY PEOPLE FLOW MONITORING & COUNTING INDUSTRIAL SYSTEMS CONTROL CLOUD CONNECTED FITNESS SPORTS MEDICAL MONITORIN G TRANSPORTATION & LOGISTICS Business Application Integration / other IoT Platforms Everyware Cloud IoT Communication Protocols Middleware for IoT GatewaysEveryware Software Framework IoT Integration Platform OT / Field Protocols and Interfaces
  • 7.
    #redhat #rhsummit MEDICAL DEVICE REMOTEMANAGING & MONITORING SMART CONNECTED VENDING ENVIRONMENTAL MONITORING & SMART CITY PEOPLE FLOW MONITORING & COUNTING INDUSTRIAL SYSTEMS CONTROL CLOUD CONNECTED FITNESS SPORTS MEDICAL MONITORIN G TRANSPORTATION & LOGISTICS Business Application Integration / other IoT Platforms Everyware Cloud IoT Communication Protocols Middleware for IoT GatewaysEveryware Software Framework IoT Integration Platform OT / Field Protocols and Interfaces Connectivity / Message Routing Device Registry and Management Data Management and Storage Event Management Application Enablement Communications/messaging Data pre-processing Real-time data analytics Real-time actions/rules Application Container Remote management Communications/messaging Data acquisition
  • 8.
    #redhat #rhsummit Open Source MEDICALDEVICE REMOTE MANAGING & MONITORING SMART CONNECTED VENDING ENVIRONMENTAL MONITORING & SMART CITY PEOPLE FLOW MONITORING & COUNTING INDUSTRIAL SYSTEMS CONTROL CLOUD CONNECTED FITNESS SPORTS MEDICAL MONITORIN G TRANSPORTATION & LOGISTICS Business Application Integration / other IoT Platforms Everyware Cloud IoT Communication Protocols Everyware Software Framework OT / Field Protocols and Interfaces
  • 9.
    #redhat #rhsummit Eclipse Kuraand Eclipse Kapua Started Dec 2013, first release Sept 2014 Started Oct 2016, first release May 2017 Middleware for IoT Gateways Code base donated by EUROTECH Modular IoT Integration Platform
  • 10.
    #redhat #rhsummit Open Source- Eclipse IoT Founded in 2012 by
  • 11.
  • 12.
    #redhat #rhsummit Open Standards •M2M Messaging Protocol • Low Bandwidth / Low Power • 2-way Communication • Publish and Subscribe • Hierarchical Topic Namespaces • Data Payload Agnostic • Device Initiated Connection • Firewall-friendly • SSL and Authenticated • Large ecosystem Message Queue Telemetry Transport (MQTT)
  • 13.
    Industrial M2M/IoT Gateways Open Portability FromPrototype to Production Software portability across HW Platforms Open Hardware
  • 14.
  • 15.
    Integration @ Edge Integration@ Data Center End-to-end Modular IoT Solutions Faster Innovation Faster Time-to-Market Integrated IoT
  • 16.
    #redhat #rhsummit MEDICAL DEVICE REMOTEMANAGING & MONITORING SMART CONNECTED VENDING ENVIRONMENTAL MONITORING & SMART CITY PEOPLE FLOW MONITORING & COUNTING INDUSTRIAL SYSTEMS CONTROL CLOUD CONNECTED FITNESS SPORTS MEDICAL MONITORIN G TRANSPORTATION & LOGISTICS Business Application Integration / other IoT Platforms Everyware Cloud IoT Communication Protocols Middleware for IoT GatewaysEveryware Software Framework IoT Integration Platform OT / Field Protocols and Interfaces Middleware for IoT GatewaysEveryware Software Framework
  • 17.
    #redhat #rhsummit Integration @Edge Everyware Software Framework (ESF) – Eclipse Kura Develop IoT Edge Computing Apps Wires Data Flow SQL Database Full Java APIs Connect to Field Devices Industrial Protocols Modular Drivers Connect to IoT Cloud Services Multiple Connections Message Routing Digital Twins AWS IoT Azure IoT RS 232/485 Bluetooth Low Energy USB CAN bus GPS/GNSS GPIO/I2C/PWM Eclipse Kapua Everyware Cloud
  • 18.
  • 19.
    #redhat #rhsummit Integration @Edge Everyware Software Framework – Eclipse Kura Red Hat Enterprise Linux | Yocto Java 8 / OSGi Device Abstraction javax.comm / RS-485 Basic Gateway Services DB Service Clock Service Device Profile Watchdog Network ConfigurationNetwork Configuration Drivers Connectivity and Delivery Data Services MQTT Paho AdministrationGUI Applications Your Application RemoteManagement Configuration Management javax.usb + udev Cloud Services Your Application Firewall, Port Forwarding Network Monitors Cellular, Wi-Fi, Ethernet GPS Position GPIO / SPI / PWM / I2C jdk.dio Modbus CAN bus Custom Protocols Updates Management RemoteAccess Java USB HID APIs javax.bluetooth / BLEjavax.smartcardio Security Security Manager Certificate Manager SSL Manager Provisioning Wires – Data Flows Assets Asset OPC UA S7 Fuse / Camel Services
  • 20.
    #redhat #rhsummit MEDICAL DEVICE REMOTEMANAGING & MONITORING SMART CONNECTED VENDING ENVIRONMENTAL MONITORING & SMART CITY PEOPLE FLOW MONITORING & COUNTING INDUSTRIAL SYSTEMS CONTROL CLOUD CONNECTED FITNESS SPORTS MEDICAL MONITORIN G TRANSPORTATION & LOGISTICS Business Application Integration / other IoT Platforms Everyware Cloud IoT Communication Protocols Middleware for IoT GatewaysEveryware Software Framework IoT Integration Platform OT / Field Protocols and Interfaces Everyware Cloud IoT Integration Platform
  • 21.
    #redhat #rhsummit Integration @Data Center Everyware Cloud – Eclipse Kapua Application Integration Security Device Management Data Management DeviceConnectivity(A-MQ) Mobile & Enterprise Applications @ Alerts & Notifications JBOSS BRMS MessageRouting(Fuse) Enterprise Integration Patterns JBOSS Fuse Administration Real-Time Analytics Data Dashboards Business Intelligence ETL Hooks Device Registry MQTT Storage Account Management Access Control RESTAPIDeviceMgmtConsole Device Management Protocols Device Provisioning Device Batch Operations IoT Devices and Gateways Cellular Connectivity / SIM Management Platforms
  • 22.
  • 23.
  • 24.
  • 25.
    IT Management Appliance PublicPrivateand On Premise Software Appliance SaaS EditionOn-premise Appliance
  • 26.
    #redhat #rhsummit OT Management •Device Provisioning • Application Life-cycle Management • Service Configuration Management • Certificate Management • Device Batch Operations • Remote Access and Maintenance Device Management MQTT on Security Administration Data Management Device Connectivity Application Integration Device Management
  • 27.
    Everyware Cloud DeviceConnectivity Device Provisioning 1. Administrator creates a Provision Request 2. Device connects to the provision account and sends a provisioning message 3. Platform checks for a valid provision request for the device 4. Platform executes provision job sending the device: a. Platform certificate for secure communication b. New device configuration 5. The device applies new configuration and connects under target account Application Integration Security Data Management Device Connectivity Administrator Gateway 1 2 4 3 Administration Device Management
  • 28.
    #redhat #rhsummit Everyware VPN DeviceRemote Access Everyware Cloud MQTT Everyware VPN Server Remote Terminal or Application Management Console VPN VPN 1 2 3 4 1. Gateway connected through MQTT 2. VPN connection to Gateway is requested 3. VPN connection from Remote Terminal is established and bridged to the Gateway 4. VPN connection from Gateway is established 5. Through ESF NAT and port forwarding, Remote Terminal can access devices connected to the Gateway subnet Gateway 5
  • 29.
    #redhat #rhsummit IT-OT Security VulnerabilityAssessments and Penetration Tests Cloud-level Security  Integrated Certificate Management  Validated Server Identity  Tenant Isolation  Role-based Access Control  2-factor Authentication Secure Communication Device-level Security  Unique Device Identity and Credentials  Signed ESF/Application Code  Encrypted Configuration and Storage  SSL/TLS Encryption w/ Hostname Verification*  Mutual Authentication  Digitally Signed Messages (*) addresses man-in-the-middle threat
  • 30.
    #redhat #rhsummit Open. Integrated.Managed. IoT. Open Source Open Standards Open Hardware Integration @ Edge Integration @ Data Center End-to-end IoT Solutions IT Management OT Management IT-OT Security As Simple As
  • 31.