Uno dei vantaggi nell'adottare il servizio Azure IoT Hub è quello di poter gestire il ciclo di vita dei dispositivi IoT. E con costanza, mese dopo mese, ci sono funzionalità sempre nuove. Parleremo del registro dei dispositivi, dell'identità dei dispositivi, con chiavi simmetriche o certificati, o TPM. E parleremo di moduli. Parleremo di procedure di provisioning per gestire lotti di device da implementare. E parleremo anche di device complessi quali i gateway per gestire elaborazione locale con Azure IoT Edge.

1. Gestire devices per l'Internet of Things
con Azure IoT (Hub)
Marco Parenzan

2. Who am I?
Marco Parenzan
Solutions Sales Specialist
Azure MVP
Marco Parenzan
marco.parenzan@insight.com
Twitter: @marco_parenzan
AZURE MVP

3. Agenda
Device Management with Azure IoT Hub
Azure Device Provisioning Service
Azure IoT Edge
Azure Sphere

6. 21B(80B)
Connected “things” by 2020(2025)
—Gartner(IDC)
$1.3T
Market for IoT by 2020
—IDC
Numbers of IoT
70%
of value enabled by IoT will
come from B2B scenarios
—McKinsey & Company
180 ZettaBytes
[180x021]2025
—IDC

8. Azure IoT Hub

13. Connect a device for…
• Telemetry
• Data flows in one direction from the device to
other systems for conveying status changes in
the device itself
• Inquiries
• Requests from the device looking to gather
required information or asking to initiate
activities
• Commands
• Commands from other systems sent to a device
(or a group of devices) to perform specific
activities expecting a result from the command
execution, or at least a status for that
• Notifications
• Information flows in one direction from other
systems to a device (or a group of devices) for
conveying status changes

14. Device app Back end
Azure IoT Device Twin
Device twin
Properties
Desired
Reported
Tags Organize
ConfigureImplement Configuration
Update Conditions
IoT Hub
Attest Compliance
Query and Events

15. IoT Hub Device Management
• Device Provisioning
• Automatic device registration including, management enrollment and initial configuration
• Device Twin
• Synchronize the device condition and configuration between cloud and device
• Methods
• Perform interactive actions (e.g command &control) on devices
• Jobs
• Broadcast and schedule device twin changes and methods at scale
• Queries
• Dynamic reporting across device twin and jobs to attest device status and health
• Patterns, Libraries, & Implementations
• Get started quickly with the most essential operations supporting a diverse set of platforms

16. Learnings over the years
• DON’T use a C2D Message for device configuration
• TTL will never be long enough.
• DON’T use a Direct Method for device configuration
• Direct methods are interactive (request/response).
• DO use Device Twin Desired Properties for configuration
• DO use Direct Methods for remediation
• DO use Device Reported Properties for config compliance

19. Answer these IoT questions…
• Have you thought about that in you IoT project?
• How will you connect your devices?
• How will you securely identify and enroll your devices?
• How do you scale enrollment for many devices?

21. Group devices and control
access according to your
organization's needs
Securely authenticate devices,
on-board for management
and provision for service
Monitor device inventory, health
& security while providing
proactive remediation of issues
Replace or decommission
devices after failure, upgrade
cycle or service lifetime
Manage devices at scale
Provide updates, configuration & applications
to assign the purpose of each device
PLAN
PROVISION
CONFIGURE
MONITOR
RETIRE

22. What is provisioning?
Registration Configuration Provisioning

25. Why Azure IoT Edge?
• Because not everything is on the cloud
• Latency
• Because there are also the devices...
• ...or the gateway
• Commercial/Industrual/Ruggered
• Look at Azure IoT Certified

26. Azure IoT Edge
• It’s a device!
• Gives a structure to the edge client
• Based on docker «philosophy»
• You need to build a container image
• You need a container registry

27. Azure IoT Edge «Edge» Architecture

28. Modules
• It’s a pipeline
• Custom modules
• C#/.NET Core
• JavaScript
• Standard!
• Functions
• Stream Analytics
• ML

32. IoT offers new frontiers for innovation
and the attacker
Percentage of large IoT
implementations for
which cloud-based
security services will be
essential to functioning
safely by the year 2020.
Percentage of IT security
budgets spent on IoT in
2020.
Percentage of cyber
attacks targeting IoT in
2020.

33. Driving Security Innovation: 7 Properties of
Device Security
• Well understood security principles and practices
• Device security rooted in hardware, but guarded with secure, evolving
software
https://aka.ms/7principles

34. What is Azure Sphere?
• A new Azure Sphere OS secured by Microsoft for the devices 10-year
lifetime to create a trustworthy platform for new IoT experiences
• The Azure Sphere Security Service guards every Azure Sphere device;
it brokers trust for device-to-device and device-to-cloud
communication, detects emerging threats, and renews device
security.
• A new Azure Sphere class of MCUs, from silicon partners, with built-in
Microsoft security technology provide connectivity and a dependable
hardware root of trust

35. Commercial proposition
• Open to any MCU Manifacturer
• Open to any cloud
• Open to any innovation

36. OS optimized for MCU, IoT and Security

37. Azure Sphere Security Service
• Protects your devices and your
customers with certificate-based
authentication of all
communication
• Detects emerging security threats
through automated processing of
on-device failures
• Responds to threats with fully
automated on-device updates of
OS
• Allows for easy deployment of
software updates to Azure Sphere
powered devices

40. Conclusions!
• Think about IoT now! It will be your problem...when, not if
• IoT devices become your asset
• IoT Hub is mainly an asset management tool
• Provisioning is something you don’t think normally
• Edge means long term, structure vision for gateway/device
development (at least, the compute part)
• Many things will change with Sphere...see you next year!
• Same event
• Same session title, session will be updated again

42. Let the past go and step off into the future