IoT Data Orchestrator for Context-Aware Secure Routing

The patent segments the traditional vertically integrated tenancy architecture into separate functional layers: data collection layer, data processing layer, and data sharing layer. This segmentation allows data isolation at the collection layer while enabling controlled sharing at the processing and sharing layers through dynamic tenancy assignment, thus resolving the contradiction between security and sharing capability.

The patent implements dynamic tenancy assignment where data consumers can be assigned to different tenancy groups based on licensing data and device claim information. This dynamic approach allows the system to adaptively control data sharing permissions rather than using static isolation, enabling cross-domain sharing while maintaining security through policy-based access control.

The patent introduces a data broker as an intermediary component that facilitates controlled data sharing between isolated tenancy groups. The data broker receives data from multiple sources, applies routing rules based on licensing information, and delivers data to authorized consumers, thus enabling value extraction from cross-domain data while maintaining isolation through the intermediary layer.

The patent creates a universal data sharing framework that can handle multiple data types, multiple consumers, and multiple licensing scenarios through a single unified system. This multi-functional approach allows the same infrastructure to serve diverse data sharing needs across different domains, maximizing data value utilization while maintaining isolation principles.

The patent performs preliminary security actions by establishing routing rules and tenancy assignments before data sharing occurs. The system pre-configures which data consumers can access which data sources based on licensing data and device claim information, conducting security validation in advance rather than during data transmission, thus enabling sharing while mitigating security risks proactively.

The patent implements feedback mechanisms where the data broker continuously monitors data sharing operations and validates access requests against licensing information and routing rules. This real-time feedback control ensures that data sharing remains within authorized boundaries, allowing versatile sharing capability while maintaining security through continuous validation and control.