SEMIoTICS Framework Open API

The SEMIoTICS Architectural Framework is the result of work undertaken during the implementation of the project.

The maintenance and evolution of the SEMIoTICS Framework Open API and its developed components is planned by the owner organizations. The table below indicates Open API reference points, descriptions and contact details for each component developed by the project.

Layer	Module Name	Open API	Description	Responsible
Application	Backend Semantic Validator	D4.11, D4.13	Semantic validation mechanisms at the Backend Layer	Nikolaos Petroulakis FORTH
Application	Pattern Orchestrator	D4.8, D4.13	Translating IoT and service orchestrations	Konstantinos Fysarakis Sphynx
Application	Pattern Engine	D4.8, D4.13	Monitoring and reasoning on pattern rules related to SPDI properties of backend components	Konstantinos Fysarakis Sphynx
Application	Backend orchestrator	D4.13	Integrating all backend services and exposing API	Mateusz Kaminski Bluesoft
Application	GUI	D4.13	Graphical User Interface	Mateusz Kaminski Bluesoft
Application	Security Manager	D4.12, D4.13	Granting access and necessary security checks at the Backend Layer	Henrich Poehls University of Passau
Application	Monitoring	D4.9, D4.13	Monitoring, learning, and predictive analytics.	Domenico Presenza Engineering
Application	Recipe Cooker	D4.11, D4.13	Creating recipes reflecting user requirements on different layers	Arne Broering Siemens
Application	Thing Directory	D4.11, D4.13	The repository of knowledge containing necessary Thing models.	Arne Broering Siemens
SDN	Resource Manager	D3.7, D3.11	Provides Path Manager with a resource view of the network	Ermin Sakic Siemens
SDN	Bootstrapping Manager	D3.7, D3.11	Initial flow configuration of just-connected switches, so to allow for seamless interaction with IoT devices	Ermin Sakic Siemens
SDN	Clustering Manager	D3.7, D3.11	Registry Handler used in state-keeping of other component’s knowledge base,	Ermin Sakic Siemens
SDN	VTN Manager	D3.7, D3.11	Assignment of individual network services to various network tenants	Ermin Sakic Siemens
SDN	Path Manager	D3.7, D3.11	Identification of nodes and ports combined into a path	Ermin Sakic Siemens
SDN	SFC Manager	D3.7, D3.8, D3.11	Service Function Chaining Manager used in Service Function Chains	Nikolaos Petroulakis FORTH
SDN	Security Manager	D3.7, D3.11, D4.12, D4.13	The security component responsible for the administration with respective tokens used for fast authentication during runtime.	Nikolaos Petroulakis FORTH
SDN	Pattern Engine	D3.7, D3.10, D3.11, D4.8	Retrieve network-specific rules and reasoning on them.	Nikolaos Petroulakis FORTH
SDN	VIM Connector	D3.7, D3.8	Connecting with the backend VIM component	Jordi Serra CTTC
NFV	NFV Orchestrator	D3.8, D3.11	Network Function Virtualization Combined with the other VIM Manager Component	Jordi Serra CTTC
NFV	VNF Manager	D3.8, D3.11	Virtualization-specific management tasks necessary in the NFV framework	Jordi Serra CTTC
NFV	Virtualized Infrastructure Manager	D3.8, D3.11	Virtual Infrastructure Manager (VIM) is a component that is aware of the physical infrastructure	Jordi Serra CTTC
Field	Semantic API & Protocol Biding	D3.9, D3.11	Binding different protocols and exposing common semantic API	Darko Anicic Siemens
Field	GW Semantic Mediator	D3.9, D3.11	Module responsible for the integration of brownfield semantics with IIoT semantics.	Darko Anicic Siemens
Field	Local thing directory	D3.9, D3.11	The local repository of knowledge containing necessary Thing models.	Darko Anicic Siemens
Field	Semantic Edge Platform	D3.9, D3.11	Enable a user to interact with SEMIoTICS IoT Gateway at the Field Level.	Darko Anicic Siemens
Field	Pattern Engine	D3.10, D4.8	Retrieve gateway specific rules and reasoning on them.	Nikolaos Petroulakis FORTH
Field	Security Manager	D4.12	Grant access and necessary security checks at the IoT gateway.	Henrich Poels University of Passau
Field	Local embedded intelligence	D4.10, D4.13	Use Case specific logic and embedded intelligence at the IoT gateway level.	Mirko Falchetto STMicroelectronics
Field	Supervisor and Local DB	D4.10, D4.13	Data persistence and self-adapting mechanism of the Generic IoT System.	Mirko Falchetto STMicroelectronics
Field	Monitoring	D4.9, D4.13	Monitoring and predictive analytics at the IoT gateway level.	Domenico Presenza Engineering

rule “Confidentiality – Sequence”

$s: Sequence($sId:=id, $pA:=placeholdera, $pB:=placeholderb, $Link:=link)

Property($sId:=subject, category==“Confidentiality”, satisfied==false)

if ($pA.hasOperationType(“storeData”)) {

insert(new Property($pA:=subject, category==“EncryptedStorage”, satisfied==false);

if ($pA.hasOperationType(“processData”)) {

insert(new Property($pB:=subject, category==“EncryptedProcessing”, satisfied==false);

if ($pB.hasOperationType(“storeData”)) {

insert(new Property($pA:=subject, category==“EncryptedStorage”, satisfied==false);

if ($pB.hasOperationType(“processData”)) {

insert(new Property($pB:=subject, category==“EncryptedProcessing”, satisfied==false);

insert(new Property($Link:=subject, category==“EncryptedChannel”, satisfied==false);

rule “Integrity – Sequence”

$s: Sequence($sId:=id, $pA:=placeholdera, $pB:=placeholderb, $Link:=link)

Property($sId:=subject, category==“Integrity”, satisfied==false)

if ($pA.hasOperationType(“storeData”)) {

insert(new Property($pA:=subject, category==“SafeStorage”, satisfied==false);

if ($pA.hasOperationType(“processData”)) {

insert(new Property($pB:=subject, category==“SafeProcessing”, satisfied==false);

if ($pB.hasOperationType(“storeData”)) {

insert(new Property($pA:=subject, category==“SafeStorage”, satisfied==false);

if ($pB.hasOperationType(“processData”)) {

insert(new Property($pB:=subject, category==“SafeProcessing”, satisfied==false);

insert(new Property($Link:=subject, category==“SafeChannel”, satisfied==false);

rule “Availability – Sequence”

$s: Sequence($sId:=id, $pA:=placeholdera, $pB:=placeholderb, $Link:=link)

Property($sId:=subject, category==“Availability”, satisfied==false)

insert(new Property($pA:=subject, category==“Redundancy”, satisfied==false);

insert(new Property($pB:=subject, category==“FaultManagement”, satisfied==false);

insert(new Property($pA:=subject, category==“Uptime”, satisfied==false);

rule ” Signed Message Verification – Sequence”

$P1: Placeholder($pl1:=placeholderid)

$P2: Placeholder($pl2:=placeholderid)

$OP: Operation(($pl1:=subject, operationType==”SignMessage”)

$OP: Operation(($pl2:=subject, operationType==”VerifyMessage”)

$ORCH: Sequence ($seq:=placeholderid, $pl1:=placeholdera, $pl2:=placeholderb)

$PR: Property ($seq:=subject, category==“SignedMessage”, satisfied==false)

modify($PR){satisfied=true};

rule ” SignedMessage Verification with Certificate #1 – Placeholder”

$P1: Placeholder($pl1:=placeholderid)

$Op: Operation($pl1:=subject, name==” SignMessage “)

$PR: Property ($pl1:=subject, category == “SignedMessage”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)){

modify($PR){satisfied=true};

rule ” SignedMessage Verification with Certificate #2 – Placeholder”

$P1: Placeholder($pl1:=placeholderid)

$Op: Operation($pl1:=subject, name==“StegoRetrieve”)

$PR: Property ($pl1:=subject, category == “SignedMessage”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)) {

modify($PR){satisfied=true};

rule ” Audit Log Verification – Sequence”

$P1: Placeholder($pl1:=placeholderid)

$P2: Placeholder($pl2:=placeholderid)

$OP: Operation(($pl2:=subject, operationType==”AuditLog”)

$ORCH: Sequence ($seq:=placeholderid, $pl1:=placeholdera, $pl2:=placeholderb)

$PR: Property ($seq:=subject, category==“AuditLog”, satisfied==false)

modify($pr2){satisfied=true};

rule ” Audit Log Verification with Certificate – Placeholder”

$P1: Placeholder($pl1:=placeholderid)

$Op: Operation($pl1:=subject, name==” Audit Log “)

$PR: Property ($pl1:=subject, category == “AuditLog”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)) {

modify($PR){satisfied=true};

rule “Authorisation – Sequence”

$s: Sequence($sId:=id, $pA:=placeholdera, $pB:=placeholderb, $Link:=link)

Property($sId:=subject, category==“Authorisation”, satisfied==false)

if ($pA.hasOperationType(“interface”)) {

insert(new Property($pA:=subject, category==“SingleAccessPoint”, satisfied==false);

insert(new Property($pA:=subject, category==“AuthorisationEnforcer”, satisfied==false);

if ($pA.hasOperationType(“interface”)) {

insert(new Property($pB:=subject, category==“SingleAccessPoint”, satisfied==false);

insert(new Property($pB:=subject, category==“AuthorisationEnforcer”, satisfied==false);

rule “Authentication – Sequence”

$s: Sequence($sId:=id, $pA:=placeholdera, $pB:=placeholderb, $Link:=link)

Property($sId:=subject, category==“Authentication”, satisfied==false)

insert(new Property($pA:=subject, category==“AuthenticationEnforcer”, satisfied==false);

insert(new Property($pA:=subject, category==“AuthenticatedSession”, satisfied==false);

insert(new Property($pA:=subject, category==“Blacklist”, satisfied==false);

insert(new Property($pA:=subject, category==“AccountLockout”, satisfied==false);

insert(new Property($pB:=subject, category==“AuthenticationEnforcer”, satisfied==false);

insert(new Property($pB:=subject, category==“AuthenticatedSession”, satisfied==false);

insert(new Property($pB:=subject, category==“Blacklist”, satisfied==false);

insert(new Property($pB:=subject, category==“AccountLockout”, satisfied==false);

insert(new Property($Link:=subject, category==“AuthenticatedChannel”, satisfied==false);

rule “Anonymisation – Sequence”

$P1: Placeholder($pl1:=placeholderid)

$P2: Placeholder($pl2:=placeholderid)

$PR1: Property($pl2:=subject, category==“Anonymity”, satisfied==true)

$P3: Placeholder($pl3:=placeholderid)

$s1: Sequence($sid1:=id, $pID1:=placeholderA, $pID2:=placeholderB)

$s2: Sequence($sid2:=id, $sID1:=placeholderA, $pID3:=placeholderB)

$PR2: Property($sID2:=subject, category==“Anonymity”, satisfied==false)

modify($PR2){satisfied=true};

rule “Anonymisation Verification with Certificate – Placeholder”

$P1: Placeholder($pID:=placeholderID)

$OP: Operation($opID:=operationID, $pID:=subject, operationType==“Anonymise”)

$PR: Property ($pID:=subject, category==“Anonymity”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)) {

modify($PR){satisfied=true};

rule ” Pseudonymisation – Sequence”

$P1: Placeholder($pl1:=placeholderid)

$P2: Placeholder($pl2:=placeholderid)

$PR1: Property($pl2:=subject, category==“Pseudonymity”, satisfied==true)

$P3: Placeholder($pl3:=placeholderid) $s1: Sequence($sid1:=id, $pID1:=placeholderA, $pID2:=placeholderB)

$s2: Sequence($sid2:=id, $sID1:=placeholderA, $pID3:=placeholderB) $PR2: Property($sID2:=subject, category==“Pseudonymity”, satisfied==false)

modify($PR2){satisfied=true};

rule “Pseudonymisation Verification with Certificate – Placeholder”

$P1: Placeholder($pID:=placeholderID)

$OP: Operation($opID:=operationID, $pID:=subject, operationType==“Pseudonymise”)

$PR: Property ($pID:=subject, category==“Pseudonymity”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)) {

modify($PR){satisfied=true};

rule “Pseudonymisation – Sequence”

$P1: Placeholder($pl1:=placeholderid)

$P2: Placeholder($pl2:=placeholderid)

$PR1: Property($pl2:=subject, category==“Unlinkability”, satisfied==true)

$P3: Placeholder($pl3:=placeholderid)

$s1: Sequence($sid1:=id, $pID1:=placeholderA, $pID2:=placeholderB)

$s2: Sequence($sid2:=id, $sID1:=placeholderA, $pID3:=placeholderB)

$PR2: Property($sID2:=subject, category==“Unlinkability”, satisfied==false)

modify($PR2){satisfied=true};

rule “Unlinkability Verification with Certificate – Placeholder”

$P1: Placeholder($pID:=placeholderID)

$OP: Operation($opID:=operationID, $pID:=subject, operationType==“CoverTrafficGeneration”)

$PR: Property ($pID:=subject, category==“Unlinkability”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)) {

modify($PR){satisfied=true};

rule ” Single Access Point Verification – Sequence”

$P1: Placeholder($pl1:=placeholderid)

$P2: Placeholder($pl2:=placeholderid)

$OP: Operation(($pl1:=subject, operationType==”StegoEmbed”)

$OP: Operation(($pl2:=subject, operationType==”StegoRetrieve”)

$ORCH: Sequence ($seq:=placeholderid, $pl1:=placeholdera, $pl2:=placeholderb)

$PR: Property ($seq:=subject, category==“Undetectability”, satisfied==false)

modify($pr2){satisfied=true};

rule “Undetectability Verification with Certificate #1 – Placeholder”

$P1: Placeholder($pl1:=placeholderid)

$Op: Operation($pl1:=subject, name==“StegoEmbed”)

$PR: Property ($pl1:=subject, category == “Undetectability”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)) {

modify($PR){satisfied=true};

rule “Undetectability Verification with Certificate #2 – Placeholder”

$P1: Placeholder($pl1:=placeholderid)

$Op: Operation($pl1:=subject, name==“StegoRetrieve”)

$PR: Property ($pl1:=subject, category == “Undetectability”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)) {

modify($PR){satisfied=true};

rule “Redundancy Verification”

$p1: Placeholder($pID1:=placeholderID)

$p2: Placeholder($pID2:=placeholderID, $placeholerType1:=type)

$p3: Placeholder($pID3:=placeholderID, $placeholerType2:=type, $placeholerType1==$placeholerType2)

$ch: Choice($chID:=id, $ pID1:=placeholderA, $pID2:=placeholderB, $pID3:=placeholderC)

$pr: Property($chID:=subject, category==“Redundancy”, satisfied==false)

modify($pr2){satisfied=true};

rule ” Fault Management – Sequence”

$P1: Placeholder($pl1:=placeholderid)

$P2: Placeholder($pl2:=placeholderid)

$ORCH: Sequence ($seq:=placeholderid, $pl1:=placeholdera, $pl2:=placeholderb)

$PR: Property ($seq:=subject, category==“FaultManagement”, satisfied==false)

insert(new Property($P1, “FaultManagement”, false));

insert(new Property($P2, “FaultManagement”, false));

rule ” Fault Management Verification with Certificate – Link”

$P: Placeholder($Id:=placeholderID)

$PR: Property ($Id:=subject, category == “FaultManagement”, verificationType == “Certificate”, $vermeans := means, satisfied==false)

if ($PR.checkCertificate($vermeans)) {

modify($PR){satisfied=true};

rule “Sequence Technical Interoperability Verification”

Placeholder($pA:=placeholderid)

Property ($pA:=subject, category==“technical”, $prvaluein1:=input_value, $prvalueout1:=output_value, satisfied==true)

Placeholder($pB:=placeholderid)

Property ($pB:=subject, category==“technical”, $prvaluein2:=input_value, $prvalueout2:=out_value, satisfied==true)

Sequence($sId:=placeholderid, $pA:=placeholdera, $pB:=placeholderb)

$PR: Property ($sId:=subject, category==“technical”, $prvalueout1==$prvaluein2, satisfied==false)

modify($PR){satisfied=true, input_value=$prvaluein1, output_value=$prvalueout2};

rule “Sequence Syntactic Interoperability Verification”

Placeholder($pA:=placeholderid)

Property ($pA:=subject, category==“dataFormat”, $prvaluein1:=input_value, $prvalueout1:=output_value, satisfied==true)

Placeholder($pB:=placeholderid)

Property ($pB:=subject, category==” dataFormat “, $prvaluein2:=input_value, $prvalueout2:=out_value, satisfied==true)

Sequence($sId:=placeholderid, $pA:=placeholdera, $pB:=placeholderb)

$PR: Property ($sId:=subject, category==” dataFormat “, $prvalueout1==$prvaluein2, satisfied==false)

modify($PR){satisfied=true, input_value=$prvaluein1, output_value=$prvalueout2};

rule “Sequence Semantic Interoperability Verification”

Placeholder($pA:=placeholderid)

Property ($pA:=subject, category==“semantic”, $prvaluein1:=input_value, $prvalueout1:=output_value, satisfied==true)

Placeholder($pB:=placeholderid)

Property ($pB:=subject, category==“semantic”, $prvaluein2:=input_value, $prvalueout2:=out_value, satisfied==true)

Sequence($sId:=placeholderid, $pA:=placeholdera, $pB:=placeholderb)

$PR: Property ($sId:=subject, category==“semantic”, $prvalueout1==$prvaluein2, satisfied==false)

modify($PR){satisfied=true, input_value=$prvaluein1, output_value=$prvalueout2};

rule “Sequence Organisational Interoperability Verification”

Placeholder($pA:=placeholderid)

Property ($pA:=subject, category==“Organisational “, $prvaluein1:=input_value, $prvalueout1:=output_value, satisfied==true)

Placeholder($pB:=placeholderid)