Security routing system for use in IoT apparatus

A routing system adapted for use in an Internet-of-things (IoT) apparatus, said IoT apparatus including a host communication control module supporting multiple communication protocols, and a controlled device, said routing system comprising a router device that includes:

• a connection unit that complies with the communication protocols, and that includes a plurality of input-output (I/O) ports including a first I/O port to be electrically connected to the host communication control module and supporting protocol conversion for any message from the host communication control module, and a second I/O port to be electrically connected to the controlled device and supporting protocol conversion for any message from the controlled device;
• a switch module electrically connected to said connection unit, and operable to selectively establish communication paths among said I/O ports;
• a control module electrically connected to said switch module for controlling switching operation thereof and supporting multi-channel operation;
• a storage module electrically connected to said control module, and including a program zone in which a plurality of application programs respectively corresponding to different application identifiers are stored, a setting zone in which environment setting information relating to said connection unit is stored, and a status zone in which status information that indicates a current execution status of said router device is stored, wherein the environment setting information includes application identifier information that indicates the application identifiers corresponding to the application programs that are capable of being used by said I/O ports, and priority information that indicates priorities of said I/O ports;
• and
• an identity verification module electrically connected to said control module, storing therein identity verification data and password data relating to identity verification for at least one user device that is connected to the host communication control module or at least one user of said at least one user device, and key data for encryption operation on transmission of messages, and encryption-decryption operation on the messages;
• wherein:
• when said control module receives an input message through said switch module and a source port which is one of said I/O ports, said control module determines whether to execute a routing process relating to the input message according to the environment setting information stored in said setting zone, the status information stored in said status zone, and a predetermined conflict management mechanism;
• when said control module determines to not execute the routing process relating to the input message, said control module controls switching operation of said switch module to transmit a busy response notifying one of a busy status and a waiting instruction to said source port through said switch module;
• and
• when said control module determines to execute the routing process relating to the input message, said control module executes the routing process that relates to the input message and that includes:
• upon determining that the input message includes a multi-channel management instruction, opening a specific channel corresponding to a specific kernel according to the multi-channel management instruction, closing other channels that correspond to the specific kernel, controlling switching operation of said switch module to transmit a channel management result to said source port through said switch module, and updating the status information that is stored in said status zone according to the channel management result;
• upon determining that the input message includes a user-device authentication instruction relating to a to-be-authenticated user device that generates the input message, transmitting the input message to said identity verification module, cooperating with said identity verification module to execute a verification procedure that corresponds to the user-device authentication instruction based on the identity verification data, the password data and the input message, and controlling, upon receipt of a successful verification result from said identity verification module, switching operation of said switch module to transmit the successful verification result to said source port;
• and
• upon determining that the input message relates to one of an application instruction and an application authentication instruction, performing
• an operation of executing one of the application programs stored in said program zone that corresponds to said one of the application instruction and the application authentication instruction to acquire an execution result,
• an operation of, upon determining that said one of the application programs that corresponds to said one of the application instruction and the application authentication instruction includes a control instruction relating to another one of said I/O ports, controlling switching operation of said switch module to transmit the control instruction to said another one of said I/O ports through said switch module, and updating the status information stored in said status zone, and
• an operation of, upon determining that the execution result does not contain any error messages or abnormal messages, controlling switching operation of said switching module to transmit a completion response corresponding to the input message to said source port for notifying that the routing process has been completed.