Last updated: 15 January 2022
IoT systems and their interdependent building blocks can be various and complex.
However, an IoT ecosystem is typically built up with 7 distinct essential components.
- Chapter 1 will cover the basics of an industry-grade Internet of Things ecosystem architecture and its key layers.
- We'll move to the business ecosystem from the IoT technical ecosystem and list the major consortia and alliances shaping business and technologies. That's chapter 2.
- In the third part of the page, we'll also give an overview of the legal IoT ecosystem and briefly mention the latest IoT regulations in the EU, UK, and the USA. It's changing. You should know about it.
So, if you're looking for a global picture of the IoT ecosystem in 2022 and understand how it may impact your projects, you've come to the right place.
Let's get started.
The 7 components of an IoT ecosystem architecture
We know the feeling.
Navigating the IoT market can be difficult. The perceived barriers to entry when launching a new project seem countless.
Challenges can be more easily understood and overcome by identifying what building blocks IoT service providers need to consider when creating a proof of concept (POC).
So, an IoT ecosystem architecture is generally formed from a set of components which can be simplified into the following:
#1. Sensors in the IoT device
One starts with the sensors, which capture the data one wishes to send back.
The sensors themselves are simple enough. They could take temperature and humidity and measure pressure. That's self-explanatory.
#2. Device connectivity
The sensors are connected to a device or a part of the device.
And the device itself has an element that allows it to connect to the network to transmit data to the cloud and receive commands.
The network could be Wi-Fi, the network could be cellular, and it could be a lot of technologies.
But more about this later.
When the connection is cellular, a SIM card or eSIM is also required as part of the wireless access equipment hardware.
#3. Application in the smart device
On the device itself – and it's the third functional block of IoT systems– is an application. That's the logic that says, for example, "if the temperature exceeds 20 degrees, I send a notification to the network."
Or the logic might say, "I set to send temperature every one minute," so that's the application, the third building block, on the device.
But then, that's where the complexity starts.
The first set of jargon is in the smart device.
You need to have the application that's running. The application runs on a processor. That's called either an MCU, a multi-controller unit or an MPU multi-processor unit.
#4. The network
The fourth IoT layer is the network itself that connects from the device back to the cloud.
This device connects to the network. The network could be Wi-Fi, it could be Bluetooth, and the network could be cellular.
Let's focus on the cellular because many IoT applications are based on it for reliability and service levels.
And in cellular, you've got a host of options based on the bandwidth you want for your application or the battery.
The acronyms you would come across would be the usual 2G, 3G, 4G, and 5G of cellular.
4G networks
But within 4G – which is mainstream of IoT today – there are two broad categories.
- The LPWAN, a low-powered wide-area network, has two variants: category M (Cat-M or LTE-M) and category NB-IoT (Cat NB-IoT).
- Then you've got the mid-range bandwidth, category LTE-1 (LTE Cat 1).
And then, the high bandwidth applications typically use networks called LTE Advanced (LTE-A) or LTE Advanced Pro.
5G networks
And very soon, with the advent of 5G, a whole new set of acronyms will come up.
There's something called massive IoT, an extension in the 5G world of the CAT-M and CAT NB we spoke about in 4G LTE environments.
Something that will be brand new on networks is called Ultra-Reliable Low Latency Communication (URLLC). This is for IoT applications that need extremely low latency between the generated data and its availability in the cloud.
So that's the kind of acronyms one will encounter along the way, and the type of technology one will have on the network itself.
#5. The application (and processing) on the cloud
We are coming over to the cloud.
Now that the data comes back, it's stored in a database. It is treated/processed. There are actions taken on it. That's sitting in the cloud.
This part is a typical IT application.
#6 Data Analytics
The one thing that would be different out there, though, more in IoT than in enterprise applications, is machine learning or analytics - some people call it AI (Artificial Intelligence).
This is really different for IoT because the value in IoT is in the data generated and the results that derive from analyzing the data leveraging virtual data analytics.
So, this is something that will specifically come across the analytic side.
More often, that's running in the cloud, the sixth functional layer of the IoT ecosystem.
Big data analytics can benefit the IoT-enabled smart grid, where millions of data are collected and stored.
#7. Security
There's a seventh IoT pillar that underlies all of this.
And that's a security building block: the security at the device, the security at the cloud, and the channel between the device and the cloud.
Security is a broad concept that needs to be adapted to the use case.
But the general security principles established in IoT and the acronyms used are PKI, public-key cryptography, encryption, mutual authentication, and certificates.
Therefore, an IoT ecosystem has different elements to consider, each with a fair amount of interdependence on the other building blocks.
Alliances and consortia
An important factor is the attitude taken by technology providers such as wireless module and equipment suppliers, network connectivity suppliers, and public cloud providers leading to the emergence of protocol standards and understandable security methodologies.
Each plays an essential role in the IoT ecosystem and these players have recognized that there is a need to make IoT much easier to implement. This in turn, shortens development cycles and therefore helps to get solutions to the market quicker and the objectives to be achieved sooner.
Today, alliances, consortia, and standardization bodies shape the IoT ecosystem at large with agreements to ensure standardization for compatibility, secure interoperability, safety, and quality.
They are either focus on technology frameworks or vertical industries.
We will find, of course, the "usual suspects": ISO (International Organization for Standardization) and ITU, ETSI, World Wide Web Consortium (W3C), IEEE Internet of Things, IFET (Internet Engineering Task Force).
Major alliances and consortia include Eclipse IoT, Apache Foundation, Open Mobile Alliance (OMASpecWorks), OASIS, IEC, OpenFog Consortium, IoT Consortium, OneM2M, AIOTI, Open Connectivity Foundation (OCF), OMG (Object Management Group), UPnP Forum, HYPER/CAT, OPEN INTERCONNECT (OIC), oneM2M, to name a few.
AllSeen Alliance (merged with OCF) focuses on consumer devices while Thread Group and Apple's HomeKit focus on connected homes.
Apple's HealthKit focuses on fitness and health, EnOcean Alliance on building automation, ESMIG on smart meters.
Open Automotive Alliance focuses on connected cars, Industrial Internet Consortium (IIC) on industrial and work use cases, GINIVI Alliance on transportation, HART Foundation (focused on industrial IoT).
The RFID Consortium, NFC Forum, Wi-Fi Alliance, Zigbee Alliance, LoRA Alliance help promote connectivity standards and certifications.
There's more.
The GSMA (Global System for Mobile Communications Association) is well known for its marketing and education activities. It represents mobile operators' interests worldwide, uniting more than 750 operators with almost 400 companies in the broader mobile ecosystem.
The Internet of things Consortium, m2m alliance, IMC (international m2m council) provide awareness, promotional tools, and activities to drive IoT adoption.
Needless to say, the vast array of alliances and consortia reflects the interests of high-tech industry companies for a booming market and illustrates how they compete for control of the IoT ecosystem.
This leads us to…
The IoT ecosystem and recent regulations
The growing pace of IoT adoption and the persistent insecurity of many devices set the stage for regulatory actions.
Lawmakers regulating the IoT industry are facing two distinct challenges:
- Make connected devices more resilient to cyber threats and attacks (IoT cybersecurity).
- Protect the privacy of personal information (IoT privacy).
Overview: Most recent regulations impacting the IoT in Europe and the United States ( Source: Thales DIS January 2021)
Regional scope |
Consumer Data Privacy |
Cybersecurity |
EU |
The General Data Protection Regulation
(EU GDPR Directive 95/46/EC) effective 25 May 2018 and became law in the EU and the UK. |
Effective 27 June 2019, and became law in the European Union and the UK. The NIS Directive (IoT infrastructure) became effective 24 May 2018 in the EU and the UK. Each country will have to pass a law. |
USA |
No comprehensive federal law regulating the collection and use of personal information yet but specific laws:
|
The IoT Cybersecurity Improvement Act of 2020 passed on 4 December 2020 |
California |
The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) SB-1121 became effective 1 January 2020 CPRA will be enforced on 1 July 2023 |
California's IoT cybersecurity law SB-327 became effective 1 January 2020 |
Self-regulatory regimes inspired (or not) by safety standards are gradually being replaced by country-specific regulations imposing security implementation requirements.
The good news?
Based only on the current legal requirements, the minimum level of requested cybersecurity for manufacturers and vendors is achievable.
But regulatory compliance on basic security for individual IoT devices is just the very first step.
Network operators also need to take additional actions.
They can put in place more high-level cybersecurity and solutions beyond the performance of individual devices to address the IoT more comprehensively.
Where do we fit in?
To support its clients, Thales delivers innovative IoT technology that simplifies and speeds enterprise digital transformation.
For 25 years, our customers - in a wide range of industries - have trusted our IoT solutions to seamlessly connect and secure their IoT devices, maximize field insights, and accelerate their global business success.
And in the IoT, time is of the essence.
More resources on IoT technologies and solutions
- Beyond 4G: a 5G technology overview
- The IoT Ecosystem: $500B+ of revenue shift (Markets and markets)
- How is IoT reinventing businesses today? (Forbes)
- IoT guidelines and standards: essential reading (NIST January 2020)
- ENISA: how to implement security by design for IoT (November 2019)
Now it's your turn
If you have a question about the components of IoT or the IoT ecosystem architecture in general or want to learn more about how IoT technology is transforming the world, we'll be glad to help.
We're looking forward to hearing from you.