Smart Souq Al-Mubarakiya, IoT and OT trust zones
−
+
Reset
SVG
PNG
Card
click a component to trace its data flows
Smart Souq Al-Mubarakiya, IoT and OT trust zones
Public and partners
UNTRUSTED
Exposed services
DMZ
Data platform
RESTRICTED
Local unit
RESTRICTED
Field sensing
SECURE
OT and life safe…
SECURE
Operations cen…
MANAGEMENT
LoRaWAN uplink
counts only, no images
packet forward
decoded telemetry
buffered telemetry
publish over TLS
device certificates
persist
stream
state and history
alerts and events over TLS
security and safety events
alerts
operate
anonymized aggregates
filtered requests
wayfinding and open data
merchant login
safety alert handoff
approved commands only
dimming schedule
evacuation trigger
alarm state
Visitor phone, public a…
USER
Merchant portal user
USER
Kuwait Fire Force dispa…
SR 5.2
SERVER
Web application firew…
SR 5.2
WAF
Public API and open d…
SR 1.1, SR 2.1
APP
Ops analyst
USER
Operations dashbo…
SR 1.1, SR 2.1
APP
Ops access gateway
SR 5.2, SR 1.1
FIREWALL
SOC monitoring
SR 6.2
SIEM
MQTT broker
SR 1.2, SR 5.1
SERVICE
Time series store
SR 4.1, SR 7.3
DB
Digital twin and asset regis…
SR 2.1
APP
Device identity CA
SR 1.2, SR 4.3
HSM
Analytics and alerting
SR 6.1
APP
Local firewall and conduit
SR 5.1, SR 5.2
FIREWALL
Local unit, store and forw…
SR 3.1, SR 7.1
SERVER
LoRaWAN network server
SR 1.2, SR 4.1
SERVICE
LoRaWAN gateways
SR 1.2
SERVICE
Environmental and safety sens…
SR 1.2, SR 3.1
SERVICE
Anonymized footfall counters
SR 4.1
SERVICE
OT conduit firew…
SR 5.1, SR 5.2
FIREWALL
Lighting control…
SR 2.1, SR 3.1
SERVER
Fire panel and PA
SR 3.1, SR 7.1
SERVER
TRUST
untrusted
DMZ
restricted
secure
management
DATA
internal
secret
PII
a dashed flow names no control