Today the Internet of Things Alliance (IoTAA) enabler Work Stream 3 (eWS3) – Cyber Security and Network Resilience announced the release of the (IoTAA) IoT Reference Framework.

The IoT Framework was borne from the need for the IoT industry and consumers to access a consistent architecture when referring to their IoT environment(s) regardless of their level of complexity or application.

The Security and Network Resilience enabler workstream within the IoTAA recognised that it would be impossible to create a specific reference security architecture for each and every unique combination of the billions of potential IoT devices the world may see deployed. A straight forward “generic” framework per se was required.

Matt Tett, eWS3 Chair said “Members had to challenge traditional architecture models to develop an IoT Reference Framework that is applicable to any IoT ecosystem. The Framework they have developed is highly adaptable and ensures that the full spectrum from top to bottom is covered. The best thing is that is has security embedded in it ensuring that no longer is information security bolted on as an afterthought, or left aside entirely”.

The IoT Reference Framework:

  • is applicable to any IoT solution architecture; and
  • takes into consideration end-to-end solution aspects, including IoT endpoints, connectivity, network, user, platform, application, solution and ecosystem.

The IoT Reference Framework serves the following purposes:

  • It provides a ‘common language’ to facilitate discussions amongst the IoT community;
  • It provides factual, vendor-neutral information on end-to- end IoT building blocks; and
  • It assists organisations to clearly and simply document and articulate their IoT solution requirements.

Further information on the published IoT Reference Framework can be found here: