Proximity Routing Policy Enforcement for Trans-Border Internet of Things Data Governance Compliance

Abstract

The concepts and technologies disclosed herein are directed to proximity routing policy enforcement for trans-border Internet of Things (“IoT”) data governance compliance. A network gateway can receive, from a data source device, a device registration message comprising a device registration header. The network gateway can determine, based upon the device registration header and a data governance policy, whether the data source device is permitted to access a data governance zone. In response to determining that the data source device is permitted to access the data governance zone, the network gateway can determine, based upon a further data governance policy, at least one gateway of a plurality of gateways operating in the data governance zone to which the device registration message is to be forwarded. The network gateway can forward the registration message to the at least one gateway so that the at least one gateway is enabled for device operation.

1 . A data source device comprising:
 a processor; and   a memory comprising instructions that, when executed by the processor, cause the processor to perform operations comprising
 generating a device registration message directed to a last known successful network gateway, 
 sending the device registration message to the last known successful network gateway, 
 receiving, from the last known successful network gateway, a registration redirect message, 
 parsing the registration redirect message to identify a visited network gateway to which the data source device should be registered, and 
 forwarding the device registration message to the visited network gateway. 
   
     
     
         2 . The data source device of  claim 1 , wherein the device registration message comprises a device registration header comprising a plurality of data fields that uniquely identify the data source device, a network location of the data source device, and a network to which the data source device is connected. 
     
     
         3 . The data source device of  claim 2 , wherein the last known successful network gateway comprises a home network gateway operating in a home data governance zone. 
     
     
         4 . The data source device of  claim 3 , wherein the visited network gateway is operating in a visited data governance zone. 
     
     
         5 . The data source device of  claim 4 , wherein the operations further comprise:
 generating a data message; and   sending the data message to the visited network gateway.   
     
     
         6 . The data source device of  claim 5 , wherein the data message comprises a plurality of data segments comprising a first data segment associated with a network owner, a second data segment associated with a device owner, and a third data segment associated with a third party owner; and wherein the home network gateway is associated with the network owner, a home device gateway is associated with the device owner, and a home third party gateway is associated with the third party owner. 
     
     
         7 . A method comprising:
 generating, by a data source device comprising a processor, a device registration message directed to a last known successful network gateway;   sending, by the data source device, the device registration message to the last known successful network gateway;   receiving, by the data source device, from the last known successful network gateway, a registration redirect message;   parsing, by the data source device, the registration redirect message to identify a visited network gateway to which the data source device should be registered; and   forwarding, by the data source device, the device registration message to the visited network gateway.   
     
     
         8 . The method of  claim 7 , wherein the device registration message comprises a device registration header comprising a plurality of data fields that uniquely identify the data source device, a network location of the data source device, and a network to which the data source device is connected. 
     
     
         9 . The method of  claim 8 , wherein the last known successful network gateway comprises a home network gateway operating in a home data governance zone. 
     
     
         10 . The method of  claim 9 , wherein the visited network gateway is operating in a visited data governance zone. 
     
     
         11 . The method of  claim 10 , further comprising:
 generating a data message; and   sending the data message to the visited network gateway.   
     
     
         12 . The method of  claim 11 , wherein the data message comprises a plurality of data segments comprising a first data segment associated with a network owner, a second data segment associated with a device owner, and a third data segment associated with a third party owner; and wherein the home network gateway is associated with the network owner, a home device gateway is associated with the device owner, and a home third party gateway is associated with the third party owner. 
     
     
         13 . The method of  claim 7 , wherein the data source device comprises an IoT device. 
     
     
         14 . The method of  claim 7 , wherein the data source device comprises a combination of an IoT device and an asset. 
     
     
         15 . A computer-readable storage medium comprising computer-executable instructions that, when executed, cause a processor of a data source device to perform operations comprising:
 generating a device registration message directed to a last known successful network gateway;   sending the device registration message to the last known successful network gateway;   receiving, from the last known successful network gateway, a registration redirect message;   parsing the registration redirect message to identify a visited network gateway to which the data source device should be registered; and   forwarding the device registration message to the visited network gateway.   
     
     
         16 . The computer-readable storage medium of  claim 15 , wherein the device registration message comprises a device registration header comprising a plurality of data fields that uniquely identify the data source device, a network location of the data source device, and a network to which the data source device is connected. 
     
     
         17 . The computer-readable storage medium of  claim 16 , wherein the last known successful network gateway comprises a home network gateway operating in a home data governance zone. 
     
     
         18 . The computer-readable storage medium of  claim 17 , wherein the visited network gateway is operating in a visited data governance zone. 
     
     
         19 . The computer-readable storage medium of  claim 18 , wherein the operations further comprise:
 generating a data message; and   sending the data message to the visited network gateway.   
     
     
         20 . The computer-readable storage medium of  claim 19 , wherein the data message comprises a plurality of data segments comprising a first data segment associated with a network owner, a second data segment associated with a device owner, and a third data segment associated with a third party owner; and wherein the home network gateway is associated with the network owner, a home device gateway is associated with the device owner, and a home third party gateway is associated with the third party owner.