System, Apparatus and Method for Auto-Optimization of Access Control Policy and Key Management in A Network Authoring Tool

At least one computer readable storage medium comprising instructions that when executed enable a system to determine:

• a topology for an internet-of-things (IoT) network having first and second nodes;
• the first and second nodes are within first and second logical boundaries of the topology;
• a first boundary crossing exists when a first execution plan, when executed, crosses from the first logical boundary into the second logical boundary;
• and
• wherein (a) the first node is an abstraction of at least one of a first physical node included in the IoT network and a first logical node corresponding to the first physical node;
• and (b) the second node is an abstraction of at least one of a second physical node included in the IoT network and a second logical node corresponding to the second physical node.

A device comprising:

• at least one hardware processor;
• a security inference engine, coupled to the at least one processor, including at least one non-transitory storage medium having instructions stored thereon for causing the at least one hardware processor to determine:
• a topology for an internet-of-things (IoT) network having first and second nodes;
• the first and second nodes are within first and second logical boundaries of the topology;
• a first boundary crossing exists when a first execution plan, when executed, crosses from the first logical boundary into the second logical boundary;
• and
• wherein (a) the first node is an abstraction of at least one of a first physical node included in the IoT network and a first logical node corresponding to the first physical node;
• and (b) the second node is an abstraction of at least one of a second physical node included in the IoT network and a second logical node corresponding to the second physical node.

At least one computer readable storage medium comprising instructions that when executed enable a system to:

• present, in a user interface of an authoring tool, at least one level of abstraction for a network having a plurality of devices;
• receive information from a user regarding a subset of the plurality of devices to be provisioned with one or more security keys and an access control policy;
• automatically provision a key schedule for the subset of the plurality of devices in the network based on the information and a topological context of the network;
• and
• automatically provision the access control policy for the subset of the plurality of devices in the network based on the information and the topological context of the network.