Hybrid Enabler Service - Service Specifications

The iotcomms.io Hybrid Enabler Service provides a secure and scalable solution for running iotcomms.io services within a private data center while benefiting from SaaS cloud-driven management and monitoring. Designed to meet strict compliance standards, it ensures seamless integration with local infrastructure and optimizes operational efficiency.

1. Supported Operating Systems

   The Hybrid Enabler Service supports deployment on compute hosts running the following operating systems:

   • Alpine

   • CentOS

   • Debian

   • RHEL

   • Red Hat Device Edge

   • Ubuntu

2. Data Privacy and Compliance

   The Hybrid Enabler Service is designed to comply with key privacy and security standards, ensuring sensitive data is protected and regulatory requirements are met:

   • GDPR Compliance

     Ensures data protection for European users.

   • HIPAA Compliance

     Supports healthcare providers managing sensitive patient data.

   • PCI Compliance

     Provides secure handling of financial data for payment and transaction environments.

3. Security Features

   The Hybrid Enabler Service incorporates robust security measures to safeguard both connectivity and on-premise hosts:

   • Encrypted Communication

     All communication between the Hybrid Enabler Service and iotcomms.io's cloud management is secured using TLS encryption, ensuring data is protected in transit.

   • Access Control

     Hosts are authenticated through mutual TLS, preventing unauthorized access to the Hybrid Enabler Service.

   • Isolated Deployments

     Each customer deployment is isolated within its own environment, ensuring data segregation and privacy.

   • Secure Configuration Management

     Hosts are configured with best practices for access control, firewall rules, and system hardening, ensuring a robust defense against threats.

   • Proactive Threat Monitoring

     Security updates and patches are applied proactively by iotcomms.io, mitigating vulnerabilities and maintaining compliance.

4. Local Data Management

   The Hybrid Enabler Service keeps critical data securely on-site:

   • Call Recordings

     Stored locally for the iotcomms.io Recording Service.

   • Media Files

     IVR phrases and recorded prompts for the iotcomms.io SIP Mediaserver Service remain in local S3-compatible storage.

   • Application Logs

     Retains logs containing sensitive or personal data, ensuring privacy and compliance.

   • Site-Local Cache

     Stores service data and provisioning information locally, with centralized provisioning data propagated to sites. This ensures services remain operational even if connectivity with cloud services is lost.

5. Local Deployed Services

   The Hybrid Enabler Service supports deployment of key iotcomms.io services:

   • SIP Core Service

     Handles SIP signaling, device registration, and call routing.

   • Recording Service

     Enables call recording and on-site storage of media files.

   • SIP Mediaserver Service

     Manages interactive voice applications and real-time media processing.

   • Alarmbridge Service

     Processes and stores alarm notifications and events locally.

6. APIs and Interfaces

   The Hybrid Enabler Service provides robust APIs and interfaces to enable seamless integration with local and external systems:

   • Local Interfaces for Service Access

     WebRTC, SIP and SIPRec interfaces are provided for local service integration within each deployment site.

   • Local APIs for Service Access

     Supports integration with on-premise applications for call management, media handling, and alarm processing.

   • Cloud APIs for Provisioning and Monitoring

     Provides access to configuration and status updates, ensuring efficient management while masking private data.

   • Web Interface for Scalability

     Simplifies the addition of hosts to an existing deployment.

7. Service Discovery and Networking

   The Hybrid Enabler Service includes advanced networking capabilities for local operations:

   • Local DNS Service

     Enables efficient discovery of APIs and site-local services, enabling site local communication.

   • Firewall Compatibility

     Requires minimal outbound HTTPS access for cloud management while maintaining strict control over local data flows.

8. Integration with Local Storage

   The Hybrid Enabler Service integrates seamlessly with local S3-compatible storage solutions:

   • Data Storage

     Supports secure on-site storage of media files, call recordings, and logs.

   • High Availability

     Ensures critical data remains accessible and operational during connectivity interruptions.

These specifications ensure that the iotcomms.io Hybrid Enabler Service delivers a robust, secure, and efficient solution for deploying and managing mission-critical services within a private infrastructure, with comprehensive security measures safeguarding both hosts and connectivity.