Commit 732f394e authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Added examples to low and medium risk networks

parent 7f911bfe
Loading
Loading
Loading
Loading
+1 −0
Original line number Diff line number Diff line
.DS_Store
media/.*.bkp
+20 −7
Original line number Diff line number Diff line
@@ -292,21 +292,34 @@ Manufacturer shall be responsible of implementing all security measurments regar

- Distributed element design
- Lesser importance with the device functionality and role in the deployment context
- Highly isolated management system design
- Isolated management system design

Examples:
#### IoT network with monitoring data collection
![IoT](./media/2025-08-10_iot.drawio.png)

IoT networks main focus is often data collection.
The hadware device can store pre-installed keys, that can be used to 
initialize the mutual authentication and authorization between the device and the supporting infrastructure.

User can pair the device to own account, and see the device listed in the application.

#### Home network deployment
![Home](./media/2025-08-10_homenetwork.drawio.png)

- IoT network with monitoring data collection
- Home network deployment
An access point discovers another device with management functions from the network.
The secrets seeding is done as part of the initialization of the device. Device factory reset clears the state and re-initilizes the discovery function.

There can be multple devices in the same network, and the NMS provides supporting services like DHCP and DNS caching.

### 4.3.2 Medium risk deployment

- Converged network design
- More than one installation site
- Often more than one installation site

#### Office network
![Office](./media/2025-07-30_office.drawio.png)

Examples:

- Office network

### 4.3.3 High risk deployment

+32 KiB
Loading image diff...
+21 KiB
Loading image diff...
+26.3 KiB
Loading image diff...