Advancing IoT System Dependability: A Deep Dive into Management and Operation Plane Separation

TL;DR

This paper introduces a novel management and operation plane separation in IoT systems, enhancing dependability by enforcing policies through a flexible, identity-independent framework, demonstrated across multiple datasets.

Contribution

It presents a new management plane with a flexible, identity-independent policy framework that improves policy enforcement and system dependability in large-scale IoT systems.

Findings

Achieves near-optimal policy expressiveness

Enhances dependability through policy enforcement

Validates effectiveness across three datasets

Abstract

We propose to enhance the dependability of large-scale IoT systems by separating the management and operation plane. We innovate the management plane to enforce overarching policies, such as safety norms, operation standards, and energy restrictions, and integrate multi-faceted management entities, including regulatory agencies and manufacturers, while the current IoT operational workflow remains unchanged. Central to the management plane is a meticulously designed, identity-independent policy framework that employs flexible descriptors rather than fixed identifiers, allowing for proactive deployment of overarching policies with adaptability to system changes. Our evaluation across three datasets indicates that the proposed framework can achieve near-optimal expressiveness and dependable policy enforcement.