# US 11,310,203 B2 · IoT computer system and arrangement comprising an IoT computer system and an external system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,310,203 B2 - Document ID: US11310203B2 - Status: Granted - Kind: B2 - Application number: 16/494,447 - Filed: 2018-10-16 - Published: 2020-12-31 - Granted: 2022-04-19 - Earliest claimed: 2017-11-07 - Assignees: Fujitsu Technology Solutions Intellectual Property GmbH - Applicants: Fujitsu Technology Solutions Intellectual Property GmbH - Inventors: Nils Wittler; Jürgen Atzkern; Timo Bruderek - Web page: https://patentgrep.com/patent/US11310203B2 ## CPC - H04L 63/0263: {Rule management} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - G06F 21/606: {by securing the transmission between two devices or processes} - G16Y 10/75: Information technology; Communication - G16Y 30/10: Security thereof - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - H04L 63/162: {at the data link layer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G16Y: INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT] ## Abstract An IoT computer system, in particular a so-called edge computer system includes a first virtual operating environment and a second virtual operating environment. The virtual operating environments are logically separated from one another. An arrangement includes such an IoT computer system and at least one external system or device to which the IoT computer system is connected. ## Claims ### Claim 1 An Internet of Things (IoT) computer system comprising a first virtual operating environment and a second virtual operating environment, wherein the first and second virtual operating environments are implemented to each behave like an independent virtual computer system and are logically separated from one another such that one virtual operating environment has no access to the other virtual operating environment, wherein each of the first and second virtual operating environments are logically associated with an external system or device connected to the IoT computer system, wherein the first virtual operating environment is set up as a manufacturer environment to acquire telemetry data of the IoT computer system and to communicate the telemetry data to the external system or device logically associated with the first virtual operating environment, and wherein the second virtual operating environment is set up as an operator environment to record, process or control operating data from or for the external system or device logically associated with the second virtual operating environment. ### Claim 2 (depends on 1) The IoT computer system according to claim 1, wherein the virtual operating environments are each logically assigned to a communication network via at least one virtual network connection or a virtual network bridge, wherein the virtual network connections are configured such that a connection from the communication network associated with one of the two virtual operating environments to the communication network associated with the other virtual operating environment is prevented. ### Claim 3 (depends on 2) The IoT computer system according to claim 2, wherein at least one of the virtual operating environments connects to at least one physical network interface by the at least one virtual network connection. ### Claim 4 (depends on 3) The IoT computer system according to claim 3, wherein the physical network interface is a Local Area Network (LAN) interface or a Universal Serial Bus (USB) interface. ### Claim 5 (depends on 2) The IoT computer system according to claim 2, on which a basic operating system is set up, and a configuration of the virtual network connections is predetermined by the basic operating system. ### Claim 6 (depends on 5) The IoT computer system according to claim 5, wherein configuration of the virtual network connections is fixedly predetermined by the basic operating system and the IoT computer system is set up such that a change in the configuration of the virtual network connections by the respective virtual operating environments or through a respective communication network is prevented. ### Claim 7 (depends on 6) The IoT computer system according to claim 6, wherein configuration data for the configuration of the virtual network connections are stored in a protected or write-protected area of the IoT computer system. ### Claim 8 (depends on 5) The IoT computer system according to claim 5, wherein the basic operating system is set up such that a connection establishment from one of the communication networks or the respective virtual operating environments into the basic operating system is prevented. ### Claim 9 (depends on 2) The IoT computer system according to claim 2, wherein the virtual operating environments each comprise one or more firewalls set up to control a connection establishment from or to a respective virtual operating environment from or into the logically associated communication network. ### Claim 10 (depends on 1) The IoT computer system according to claim 1, wherein the virtual operating environments are set up as virtual machines. ### Claim 11 (depends on 1) The IoT computer system according to claim 1, wherein one or more virtual applications are each set up within the virtual operating environments for provision of predetermined functionalities. ### Claim 12 (depends on 1) The IoT computer system according to claim 1, further comprising at least one third virtual operating environment which is logically linked to one of the first and second virtual operating environments. ### Claim 13 (depends on 12) The IoT computer system according to claim 12, wherein the third virtual operating environment is logically linked via at least one virtual network connection or a virtual network bridge to the corresponding one of two virtual operating environments. ### Claim 14 An arrangement comprising: an Internet of Things (IoT) computer system comprising a first virtual operating environment and a second virtual operating environment, wherein the first and second virtual operating environments are implemented to each behave like an independent virtual computer system and are logically separated from one another such that one virtual operating environment has no access to the other virtual operating environment, wherein each of the first and second virtual operating environment is logically associated with an external system or device connected to the IoT computer system, wherein the first virtual operating environment is set up as a manufacturer environment to interrogate telemetry data of the IoT computer system and to communicate the telemetry data to the external system or device logically linked to the first virtual operating environment, and wherein the second virtual operating environment is set up as an operator environment to record, process or control operating data from or for the external system or device logically linked to the second virtual operating environment, and external systems or devices to which the IoT computer system connects, wherein the first and second virtual operating environments are logically linked to respective ones of the external systems or devices. ### Claim 15 (depends on 14) The arrangement according to claim 14, wherein the external system or device is a sensor, a control device or a processing or data server or a cloud server. ### Claim 16 (depends on 14) The arrangement according to claim 14, wherein the IoT computer system connects to a further external system or device, and the second virtual operating environment is logically associated with the further external system or device. ### Claim 17 (depends on 15) The arrangement according to claim 15, wherein the IoT computer system connects to a further external system or device, and the second virtual operating environment is logically associated with the further external system or device.