Apparatus and methods for micro-segmentation of an enterprise internet-of-things network

A method for securing electronic communication over an enterprise internet-of-things (EIoT) network, the method comprising:

• micro-segmenting the EIoT network into a plurality of segments associated with a plurality of functions including:
• a first segment associated with a first of the functions;
• and
• a second segment associated with a second of the functions, the second segment isolated from the first segment;
• detecting presence, on the EIoT network, of an unsecured EIoT device;
• identifying:
• EIoT device data including at least one functionality of the EIoT device;
• and
• protocols of the EIoT device;
• translating the protocols to network-compatible form;
• determining, based on the device data:
• a correspondence of the one functionality with the first function;
• and
• a lack of correspondence of the one functionality with the second function;
• assigning the EIoT device to the first segment for information transfer involving the functionality;
• based on the assigning and using the translating, allowing the information transfer between the EIoT device and the first segment;
• and
• blocking the information transfer between the EIoT device and the second segment.

An enterprise internet-of-things (EIoT) secure communication system architecture comprising:

• at least one EIoT device associated with an unsecured network;
• and
• an enterprise system including:
• at least one enterprise processor;
• at least one enterprise network including software and hardware connections;
• and
• at least one non-transitory computer-readable medium storing program code including machine-readable instructions for instructing the processor to perform a method for facilitating secure electronic communication over the network connections between the EIoT device and the system, the method including:
• micro-segmenting the enterprise network into a plurality of network segments, each of the network segments associated with one of a plurality of network functions;
• detecting presence of the EIoT device;
• identifying protocols of the EIoT device;
• translating the protocols for the communication with the system;
• identifying functional characteristics of the EIoT device;
• determining, based on the EIoT device characteristics, at least one of the network functions associated with the EIoT device;
• and
• routing the communication to a segment corresponding to the at least one determined function.