Method and apparatus for internet of things (IoT) dynamic policy management

A method for a broker policy manager (BPM), comprising:

• subscribing to a first topic comprising the BPM;
• receiving, from a certificate-based Internet of Things (IoT) broker, a published message on the first topic corresponding to the BPM;
• determining, based on the first topic comprising the BPM, that a first IoT client is a participant in an incident communications network corresponding to an incident;
• transmitting first instructions to the certificate-based IoT broker to change a first IoT policy associated with a first certificate of the first IoT client, to enable the first IoT client to publish or subscribe to a second topic that corresponds to the incident
• receiving a second indication that a second IoT client accepts an invitation from the first IoT client to join the incident communications network;
• transmitting second instructions to the certificate-based IoT broker to change a second IoT policy associated with a second certificate of the second IoT client that enables the second IoT client to publish or subscribe to the first topic corresponding to the incident;
• and
• determining that a third IoT client has a third certificate associated with the first certificate of the first IoT client based on a third indication received from the first IoT client, wherein the first instructions transmitted to the certificate-based IoT broker change a third IoT policy associated with the third certificate of the third IoT client to enable the third IoT client to publish or subscribe to the first topic.

A non-transitory computer-readable medium storing instructions that, when executed by a processor of a first electronic device, cause the first electronic device to perform operations for a broker policy manager (BPM), the operations comprising:

• subscribing to a first topic comprising the BPM;
• receiving, from a certificate-based Internet of Things (IoT) broker, a published message on the first topic corresponding to the BPM;
• determining, based on the first topic comprising the BPM, that a first IoT client is a participant in an incident communications network corresponding to an incident;
• transmitting first instructions to the certificate-based IoT broker to change a first IoT policy associated with a first certificate of the first IoT client, to enable the first IoT client to publish or subscribe to a second topic that corresponds to the incident
• receiving a second indication that a second IoT client accepts an invitation from the first IoT client to join the incident communications network;
• transmitting second instructions to the certificate-based IoT broker to change a second IoT policy associated with a second certificate of the second IoT client that enables the second IoT client to publish or subscribe to the first topic corresponding to the incident;
• and
• determining that a third IoT client has a third certificate associated with the first certificate of the first IoT client based on a third indication received from the first IoT client, wherein the first instructions transmitted to the certificate-based IoT broker change a third IoT policy associated with the third certificate of the third IoT client to enable the third IoT client to publish or subscribe to the first topic.