SEMICONDUCTOR DEVICE FOR MANAGING USER DATA ACCORDING TO SECURITY LEVEL AND METHOD OF OPERATING THE SAME

A method of operating a hub which manages user data communicated between a server and a plurality of internet of things (IoT) devices includes storing a user data management rule set by a user, processing sensitive data among user data transmitted from one of the IoT devices according to the user data management rule to generate processed data, and transmitting the processed data to the server.

BACKGROUND

1. Technical Field

Embodiments of the inventive concept relate to a semiconductor device, and more particularly, to a semiconductor device for efficiently managing and storing user data according to a security level or sensitivity and a method of operating the same.

2. Discussion of Related Art

An internet of things (IoT) is a network of physical objects (“things) embedded with electronics, software, sensors, and network connectivity (e.g., connectivity to the Internet), which enables these objects to collect and exchange data. As an example, the things can be embedded systems such as home appliances, mobile devices and wearable devices. A thing of the IoT (e.g., an IoT device) may have a unique Internet Protocol (IP) address to identify itself when it is connected to the Internet and includes a sensor to obtain data from an external environment.

Sensitive data such as a user's biometric information or health information may be transmitted by an IoT device. However, since the level of security and authentication is different among IoT devices, it can be difficult to ensure the security of this sensitive data.

SUMMARY

According to an exemplary embodiment of the inventive concept, there is provided a method of operating a hub which manages user data communicated between a server and a plurality of internet of things (IoT) devices. The method includes storing, by the hub, a user data management rule set by a user; processing, by the hub, sensitive data among user data transmitted from one of the IoT devices according to the user data management rule to generate processed data; and transmitting, by the hub, the processed data to the server.

The method may further include storing the sensitive data that has not been processed in a memory of the hub.

The storing the user data management rule may include storing a basic data management rule, displaying the basic data management rule for the user to enable the user to request a change to the basic data management rule, and storing a changed data management rule according to the change request.

The method may further include authenticating the user using user authentication information; and allowing the user data management rule to be set, changed, or cancelled when the authenticating of the user is successful.

The data management rule may include at least one among a type of the sensitive data and a security level of the sensitive data.

The processing may include one of encrypting all of the sensitive data so that all the sensitive data is undistinguishable in the server and performing a blurring process on part of the sensitive data to that part of the sensitive data is undistinguishable in the server.

According to an exemplary embodiment of the inventive concept, there is provided a semiconductor device for managing user data communicated between a server and a plurality of IoT devices. The semiconductor device includes a first communication module configured to receive user data from one of the IoT devices, a data balancing module configured to process sensitive data among the user data according to a user data management rule set by a user to generate processed data, and a second communication module configured to transmit the processed data from the data balancing module to the server, where the semiconductor device enables the user data management rule to be set or changed by the user.

The semiconductor device may further include a memory configured to store the sensitive data that has not been processed.

The data balancing module may generate the processed data by processing a part or all of the sensitive data to be undistinguishable.

The data balancing module may compute trend information by performing an arithmetic operation on at least two data sets of the sensitive data, selecting the at least two data sets, or comparing the at least two data sets with each other and may output the trend information as the processed data.

The semiconductor device may further include a processor configured to authenticate the user using authentication information of the user and to allow the user data management rule to be changed or cancelled when the authentication of the user is successful.

The semiconductor device may be a hub.

According to an exemplary embodiment of the inventive concept, there is provided a semiconductor device for managing user data communicated between a server and a plurality of IoT devices. The semiconductor device includes a transceiver configured to receive the user data from one of the IoT devices and transmit processed data to the server, and a data processing circuit configured to perform a selected one of an encryption of all sensitive data among the user data or a blurring of part of the sensitive data to generate the processed data.

The semiconductor device may provide a user interface that enables a user to increase a security level to select the encryption and decrease the security level to select the blurring.

The semiconductor device may select one of the encrypting and blurring according to a user data management rule stored within the device. In an embodiment, the semiconductor device is configured to authenticate a user associated with the user data using authentication information stored within the device, and enables the rule to be changed by a user when the authentication is successful.

DETAILED DESCRIPTION

Pairing is a procedure for registering information (e.g., pairing information) associated with a second device (e.g., an internet of thing (IoT) device) in a first device (e.g., a master device or a hub) in order to wirelessly connect the second device to the first device. In an exemplary embodiment, a hub is a network hardware device for connecting multiple devices together. Hereinafter, pairing for authentication may be referred to as pairing authentication. Once the first device and the second device are paired with each other, no more pairing may be necessary between the first and second devices since the pairing information of the second device has been registered in the first device. However, when the pairing information of the second device is deleted from the first device, pairing between the first and second devices may need to be performed again.

It is assumed that a thing collectively refers to an integrated circuit, a semiconductor device, a semiconductor package, an electronic device, or an IoT device. The semiconductor device may be implemented as a module or a system in package (SiP).

FIG. 1is a block diagram of a data processing system100according to an exemplary embodiment of the inventive concept.FIG. 2is a block diagram of an example540A of a data balancing module540illustrated inFIG. 1. Referring toFIGS. 1 and 2, the data processing system100may include a plurality of IoT devices200,300, and400, at least one hub500, and at least one server110.

Each of the first through third IoT devices200,300, and400may be a device (or a thing) connected to the hub500without security authentication, a device (or a thing) connected to the hub500with limited security authentication, or a device (or a thing) connected to the hub500using a security authentication platform. In an embodiment, the security level of the second IoT device300is higher than that of the first IoT device200and the security level of the third IoT device400is higher than that of the second IoT device300. The third IoT device400and the hub500may use the security platform provided on https://www.artik.io/, but the inventive concept is not limited thereto. For example, the security platform may be SAMSUNG ARTIK.

As described above, each of the devices200,300,400, and500may be implemented as an IoT device, but the inventive concept is not limited thereto. The IoT device, which will be described hereinafter, may include an accessible interface (e.g., a wired interface and/or a wireless interface). The IoT device may refer to a device which can communicate data (via wired or wireless connection) with at least one electronic device (or another IoT device) using the accessible interface.

The accessible interface may include a local area network (LAN), a wireless LAN (WLAN) like wireless fidelity (Wi-Fi), a wireless personal area network (WPAN) like Bluetooth, a wireless universal serial bus (USB), ZigBee, near field communication (NFC), radio-frequency identification (RFID), or a mobile cellular network, but the inventive concept is not restricted thereto. The mobile cellular network may include a third generation (3G) mobile cellular network, a fourth generation (4G) mobile cellular network, a long term evolution (LTE™) mobile cellular network, or an LTE-advanced (LTE-A) mobile cellular network, but the inventive concept is not limited thereto.

The first IoT device200includes a processing circuit210, a memory230, and a communication module250. The processing circuit210may control the memory230and the communication module250. The processing circuit210may be an integrated circuit (IC), a processor, or a central processing unit (CPU). The processing circuit210may communicate a command and/or data for pairing with the hub500through the communication module250. When the first IoT device200includes at least one sensor, the processing circuit210may process a signal detected by the sensor and may transmit the processed signal to the hub500through the communication module250.

The memory230may store data which has been processed or will be processed by the processing circuit210or the communication module250. The communication module250may communicate a command and/or data with the hub500according to the control of the processing circuit210. The communication module250may be a wireless transceiver and may communicate with the hub500through the above-described accessible interface.

The second IoT device300includes a processing circuit310, a memory330, and a communication module350. The processing circuit310may control the memory330and the communication module350. The processing circuit310may be an IC, a processor, or a CPU. The processing circuit310may communicate a command and/or data for pairing with the hub500through the communication module350. When the second IoT device300includes at least one sensor, the processing circuit310may process a signal detected by the sensor and may transmit the processed signal to the hub500through the communication module350.

The memory330may store data which has been processed or will be processed by the processing circuit310or the communication module350. The communication module350may communicate a command and/or data with the hub500according to the control of the processing circuit310. The communication module350may be a wireless transceiver and may communicate with the hub500through the above-described accessible interface.

The third IoT device400includes a processing circuit410, a secure module427, a memory430, and a communication module450. The processing circuit410may control the secure module427, the memory430, and the communication module450. The processing circuit410may be an IC, a processor, or a CPU. The processing circuit410may communicate a command and/or data for pairing with the hub500through the communication module450. The secure module427may be a hardware secure module and may convert data (e.g., unencrypted data) which has been processed or will be processed by the processing circuit410into secure data (e.g., encrypted data). The secure module427may also convert data (e.g., unencrypted data) which has been processed or will be processed by the communication module450into secure data (e.g., encrypted data).

When the third IoT device400includes at least one sensor, the processing circuit410may process a signal detected by the sensor and may transmit the processed signal to the hub500through the communication module450. At this time, the secure module427may convert data to be transmitted to the communication module450into secure data.

The memory430may store data which has been processed or will be processed by the processing circuit410or the communication module450. The communication module450may communicate a command and/or data with the hub500according to the control of the processing circuit410. The communication module450may be a wireless transceiver and may communicate with the hub500through the above-described accessible interface.

The hub500may include a processing circuit510, a secure module527, a memory530, the data balancing module540, and a communication module550. The processing circuit510may control the secure module527, the memory530, the data balancing module540, and the communication module550. The processing circuit510may be an IC, a processor, or a CPU. The processing circuit510may communicate a command and/or data for pairing with each of the IoT devices200,300, and400through the communication module550. The secure module527may be a hardware secure module and may convert data (e.g., unencrypted data) processed or to be processed by the processing circuit510into secure data (e.g., encrypted data). The secure module527may also convert data (e.g., un-encrypted data) processed or to be processed by the communication module550into secure data (e.g., encrypted data). In addition, the secure module527may encrypt user data, which is determined to be encrypted according to a user data management rule, using an encryption key. The user data management rule will be described in detail with reference toFIGS. 3A through 3Cbelow.

The memory530may store data which has been processed or will be processed by the processing circuit510, the secure module527, the data balancing module540, or the communication module550. The memory530may include a secure region (or a secure memory) (not shown) which stores the secure data and a non-secure region (or a non-secure memory) (not shown) which stores non-secure data.

Each of the memories230,330,430, and530may be formed of volatile or non-volatile memory. The memories230,330,430, and530may be embedded in or removable from the devices200,300,400, and500, respectively. Each of the memories230,330,430, and530may be implemented as a hard disk drive (HDD), a solid state drive (SSD), a universal flash storage (UFS), or an embedded multimedia card (eMMC), but the inventive concept is not limited thereto.

The communication module550may communicate a command and/or data with the each of the IoT devices200,300, and400according to the control of the processing circuit510. The communication module550may be a wireless transceiver and may communicate with the IoT devices200,300, and400through the above-described accessible interface.

The hub500may also include another communication module for communicating with another server when there are more than one server110.

In an exemplary embodiment, the processing circuit510receives a pairing request from one or more of the IoT devices200,300, or400, selects an authentication technique from among predetermined pairing authentication techniques (or methods) based on the pairing request, and performs a pairing with the corresponding one or more IoT devices200,300, or400using the selected authentication technique. The processing circuit510may control or manage the pairing with each of the IoT devices200,300, and400. In an exemplary embodiment, the processing circuit510checks authentication history in response to the pairing request from one or more of the IoT devices200,300, or400, performs authentication using a pairing authentication technique suitable to the corresponding one or more IoT devices200,300, or400when there is no authentication history to generate an authentication result, and controls or manages the storing of the authentication result. The authentication result may be stored in the processing circuit510or the secure region of the memory530, but the inventive concept is not limited thereto.

In an exemplary embodiment, the processing circuit510registers, changes, or removes information of one or more of the IoT devices200,300, and400. The processing circuit510may also provide a user interface and a basic template to allow a user to set, change, or cancel a data management rule. In addition, the processing circuit510may authenticate a user using user authentication information. The user authentication information may be a user's fingerprint, a password, or personal identification information (such as an internet personal identification number (I-PIN) or a resident registration number), but the inventive concept is not limited to these examples. The user authentication information may be stored in the secure module527or in memory530.

For instance, when a user makes a request for setting, changing, or cancelling a data management rule; the processing circuit510may give permission for the user to set, change, or cancel the data management rule after authenticating the user by authenticating the user authentication information.

The data balancing module540may manage user data to be efficiently stored in at least one among the hub500and the server110according to the user data management rule. The data balancing module540may also manage so that sensitive data among the user data is processed according to the user data management rule to generate processed data and the processed data is transmitted to the server110. The data management rule may include a type of sensitive data, the security level of the sensitive data, and the storing place (or storing position) of the sensitive data, but the inventive concept is not limited to these examples.

FIGS. 3A through 3Care diagrams for explaining a user data management rule according to an exemplary embodiment of the inventive concept.FIG. 3Ashows an example of the basic template of a data management rule, which is provided by the hub500.

Referring toFIG. 3A, the basic template is provided to set the security level of sensitive data. The hub500may display the basic template shown inFIG. 3Aon a user terminal so that a user can set a security level by moving a control button561. For instance, when the user moves the control button561toward “strong”, the security level increases and when the user moves the control button561towards “weak”, the security level decreases. Data having a high security level may be sensitive data and a processing level of the sensitive data may increase, which will be described below.

The template ofFIG. 3Aused to set the security level may be individually provided for each of the IoT devices200,300, and400. For instance, when one or more of the IoT devices200,300, or400is registered in the hub500, the hub500may inform a user of the registration of the IoT device200,300, or400and may request that the user set the security level of the corresponding one or more IoT devices200,300, or400.

FIG. 3Bshows an example of setting a user data management rule by setting a thing corresponding to each security level. In the example illustrated inFIG. 3B, the security level is divided into level1, level2, and level3and there are five things, i.e., Thing_A, Thing_B, Thing_C, Thing_D, and Thing_E that have been registered in the hub500, but the inventive concept is not limited to the current example. The user may set the user data management rule by setting Thing_A to security level3, Thing_B and

Thing_D to security level2, and Thing_C and Thing_E to security level1. Data with a security level of a high numeral is sensitive data, and therefore, the processing level of the data may increase.

FIG. 3Cshows an example of setting a user data management rule by setting a security level and a storing position for each thing. In the example shown inFIG. 3C, the security level is divided into “strong”, “medium”, and “weak” and there are three things, i.e., Thing_A, Thing_B, and Thing_C that have been registered in the hub500, but the inventive concept is not limited to the current example. A user may set the user data management rule by setting the security level to “strong” and the storing position to “local” (e.g., the hub500) for Thing_A, setting the security level to “medium” and the storing position to “server” and “local” for Thing_B, and setting the security level to “weak” and the storing position to “server” for Thing_C. Here, that the storing position is set to “local” for a thing means that data of the thing is stored in the hub500and that the storing position is set to “server” for a thing means that data of the thing is stored in the server110. Alternatively, the storing position of sensitive data may be automatically set by the hub500.

Referring back toFIG. 2, the data balancing module540A includes a data balancing scheduler541, a data processing module543, a user data database (DB)545, and a user data management rule DB546. Each of the elements541,543,545, and546may be implemented as a hardware component or as a software component which can be executed in the processing circuit510. Alternatively, some of the elements541,543,545, and546may be implemented as hardware components while the rest of the elements541,543,545, and546are implemented as software components.

The data balancing scheduler541may control the number of times that data processed by the data processing module543is transmitted to the server110and a time (or an interval) at which the data is transmitted. For example, data may be transmitted to the server110by the data processing module543periodically at a period defined or controlled by the data balancing scheduler541. The data processing module543may process sensitive data among user data according to a user data management rule.

A sensitive data processing method may include hiding all or part of sensitive data so that the sensitive data cannot be distinguished. The method may also include computing trend information of sensitive data in a particular time unit (e.g., daily, weekly, or monthly). The trend information may be obtained by performing an arithmetic operation (e.g., averaging or addition) on at least two data sets, by selecting a data set from among at least two data sets, or by comparing at least two data sets with each other. Alternatively, the trend information may be computed by comparing a current value obtained by performing an arithmetic operation (e.g., averaging or addition) on at least two data sets or by selecting a data set from among at least two data sets with a previous value. The trend information may indicate “increase”, “no change”, or “decrease”.

The processing method of hiding all or part of sensitive data to be undistinguishable may include at least one among a process of encrypting the sensitive data and a processing of blurring the sensitive data. The sensitive data encryption process may mean encrypting all of the sensitive data into data that cannot be distinguished in the server110. Accordingly, the server110receives undistinguishable data from the hub500and stores it.

When necessary, the hub500may receive the “encrypted data” from the server110and decrypt the encrypted data, thereby restoring original data. In an embodiment, the server110cannot use the encrypted data and the server110is just used as a place for storing the encrypted data.

A sensitive data blurring process may be referred to as a sensitive data obfuscation process. The blurring or obfuscation process means processing part of sensitive data so that the part of the sensitive data cannot be distinguished in the server110or hiding (e.g., performing a mosaic process on) part of the sensitive data. In an embodiment, the sensitive blurring process is a process of hiding original data with random characters or data.

FIG. 4Ais a diagram for explaining the sensitive data encryption process andFIG. 4Bis a diagram for explaining the sensitive data blurring process. In the embodiments illustrated inFIGS. 4A and 4B, sensitive data includes biometric information such as a heart rate, a maximum blood pressure, and a minimum blood pressure. Referring toFIGS. 4A and 4B, encrypted data may be generated so that all original data cannot be distinguished at all while blurred data may be generated so that only part of the original data cannot be distinguished. For example, when only part of the original data cannot be distinguished from the resulting data, some characters of the resulting data may match characters of the original data in value and position. WhileFIG. 4Bshows that a character of the original data is replaced with an invalid number such as asterisk to create the blurred data, the inventive concept is not limited thereto. For example, a character of the original data could instead be replaced with a valid number so it would not be apparent that blurring has occurred.

The hub500transmits processed data such as blurred data or trend information to the server110for sensitive data according to a user data management rule, thereby increasing the security of the sensitive data and allowing the server110to analyze and use the processed data.

Referring back toFIG. 2, the user data DB545stores and manages user data received from the IoT devices200,300, and400. The user data management rule DB546stores and manages user data management rule information. In addition, the user data management rule DB546may store and manage a basic data management rule defined by a developer or the like.

As described above, the user data management rule is a data management rule set by a user. The basic data management rule or/and the user data management rule may be written using an extensible markup language (XML) or a hypertext markup language (HTML).

The hub500may provide a basic template for allowing a user to set or change the data management rule through a user interface. The hub500may include a user interface unit for providing a user a basic template and receiving a user's input or selection. Alternatively, a user may be allowed to access the hub500and set or change the data management rule using a user terminal such as a personal computer (PC), a tablet PC, or a smart phone.

FIG. 5is a block diagram of an example110A of the server110illustrated inFIG. 1. Referring toFIG. 5, the server110A includes a registration manager120, an intelligence manager130, a profile manager140, a user profile151, and an integrity profile153.

The registration manager120may manage the registration, change, and removal of the IoT devices200,300, and400. The registration manager120may receive a request of registration for one or more of the IoT devices200,300, or400from the hub500and may register the corresponding one or more IoT devices200,300, or400in response to the request. The registration manager120may perform authentication of the corresponding one or more IoT devices200,300, or400or the hub500before registering the corresponding one or more IoT devices200,300, or400.

The registration manager120may also receive user data from the hub500and store the user data in the user profile151. For instance, the registration manager120may classify the data of the IoT device200,300, or400by homes, hubs, clusters, or IoT devices when storing the data in the user profile151.

The registration manager120may determine one of a plurality of cluster types as a cluster type of a corresponding one of the IoT devices200,300, or400according to information and/or data of the corresponding one of the IoT devices200,300, or400. For instance, the registration manager120may classify a device connected to the hub500without secure authentication as a first cluster type, a device connected to the hub500with limited secure authentication as a second cluster type, and a device connected to the hub500using an secure authentication platform as a third cluster type. The registration manager120may classify IoT devices such as sensors or home gadgets as the first cluster type, IoT devices such as smart television (TV) or smart phones as the second cluster type, and IoT devices such as smart home appliances as the third cluster type.

The intelligence manager130analyzes IoT data stored in the user profile151and supports a service to be provided for a user based on analyzed information. For instance, the intelligence manager130may collectively analyze the data of the IoT devices200,300, and400to generate the analyzed information and may compute a relationship between the things from the analyzed information. The analyzed information and the relationship between the things which have been computed by the intelligence manager130may be stored in the integrity profile153.

The intelligence manager130may generate or support a service based on data stored in the integrity profile153. The profile manager140may manage and control the user profile151and the integrity profile153.

FIG. 6is a schematic flowchart of a method of operating the hub500according to an exemplary embodiment of the inventive concept. Referring toFIGS. 1, 2, and 6, the hub500may store a user data management rule in the user data management rule DB546in operation S110. For instance, the hub500may have a basic data management rule stored in advance and display the basic data management rule for a user to allow the user to change the basic data management rule to be suitable to the user. The hub500may provide a basic template to allow the user data management rule to be set or changed through a user interface. The user may access the hub500and set, change, or cancel the user data management rule using a user terminal such as a smart phone, a PC, or a tablet PC.

The hub500may first perform authentication of the user using user authentication information before allowing the user to set, change, or cancel the user data management rule. The user authentication information may be the user's fingerprint, password or personal identification information (such as an I-PIN or a resident registration number), but the inventive concept is not limited to these examples. The user authentication information may be stored in the secure module527. The processing circuit510of the hub500may compare the user authentication information stored in the secure module527with authentication information input by the user to generate a comparison result and authenticate the user according to the comparison result.

The hub500receives user data from one of the IoT devices200,300, or400(e.g., a thing) and stores the user data in operation S120. The data processing module543included in the hub500processes sensitive data among the user data according to the user data management rule to generate processed data in operation S130. The hub500transmits the processed data to the server110in operation S140.

FIG. 7is a detailed flowchart of a method of operating the hub500according to an exemplary embodiment of the inventive concept. Referring toFIGS. 1 and 2andFIG. 7, the hub500receives a pairing request from one of the IoT devices200,300, or400in operation5310. The hub500performs authentication of the corresponding one of the IoT devices200,300, or400using one of a plurality of predetermined authentication techniques in operation5320.

For instance, the hub500may select an authentication technique from among a plurality of pairing authentication techniques using an authentication request signal included in the pairing request from the corresponding one of the IoT devices200,300, or400and may authenticate the corresponding one of the IoT devices200,300, or400using the selected authentication technique. The authentication request signal may include an ID, a password, a media access control (MAC) address, a Wi-Fi protected access (WPA)-related signal, a WPA2-related signal, a digital signature, an ID-based encryption (IBE)-related signal, or a biometrics-related signal.

After authenticating the corresponding one of the IoT devices200,300, or400, the hub500completes pairing with the corresponding one of the IoT devices200,300, or400in operation5330and registers pairing information of the corresponding one of the IoT devices200,300, or400which has been successfully paired with the hub500in operation S340. Once the pairing information of the corresponding one of the IoT devices200,300, or400is registered, the hub500requests the user to set a data management rule for the corresponding one of the IoT devices200,300, or400that has been registered in operation S350. For instance, the hub500may notify the user that the corresponding one of the IoT devices200,300, or400has been registered and may display a basic template showing a basic data management rule for the corresponding one of the IoT devices200,300, or400in operation S350.

When the user sets the data management rule using the basic template, the hub500stores the data management rule set by the user in the user data management rule DB546in operation S360. When the user does not set or change the data management rule, the hub500may use the predetermined basic data management rule.

The hub500receives user data from the corresponding one of the IoT devices200,300, or400and stores the user data in the user data DB545in operation S370. The corresponding one of the IoT devices200,300, or400may access the hub500and transmit the user data to the hub500at a predetermined interval or time or when an event occurs. The hub500processes the user data according to the data management rule to generate processed data in operation S380and transmits the processed data (e.g., processed thing data) to the server110in operation S390.

The order of operations may be changed or at least two operations may be performed in parallel in other embodiments.

FIG. 8is a block diagram of a data processing system600A including the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept. Referring toFIGS. 1 through 8, the data processing system600A may include the hub500and IoT devices610,620,630, and640.

It is assumed that the structure of the IoT devices610is the same as or similar to that of the first IoT device200, the structure of the IoT devices630is the same as or similar to that of the second IoT device300, and the structure of the IoT devices620and640is the same as or similar to that of the third IoT device400.

An IoT or the data processing system600A may refer to a network among IoT devices that use wired and/or wireless communication. Accordingly, an IoT here may be referred to as an IoT network system, a ubiquitous sensor network (USN) communication system, a machine type communication (MTC) system, a machine-oriented communication (MOC) system, a machine-to-machine (M2M) communication system, or a device-to-device (D2D) communication system.

Here, an IoT network system may include elements, such as, an IoT device, the hub500, an access point, a gateway, a communication network, and/or a server. However, these elements are defined just to explain the IoT network system and the scope of the IoT network system is not limited to these elements. In an embodiment, the gateway is a piece of networking hardware used to exchange data between two different communication protocols.

The IoT network system may use a user datagram protocol (UDP), a transmission protocol like a transmission control protocol (TCP), an IPv6 low-power wireless personal area networks (6LoWPAN) protocol, An IPv6 internet routing protocol, a constrained application protocol (CoAP), a hypertext transfer protocol (HTTP), a message queue telemetry transport (MQTT), or an MQTT for sensors networks (MQTT-S) for exchange (or communication) of information among at least two elements therewithin.

When the IoT network system is implemented as a wireless sensor network (WSN), each of the IoT devices200,300,400,500,610,620,630, and640may be used as a sink node or a sensor node. The sink node is referred to as a base station and acts as a gateway connecting the WSN with an external network (e.g., an internet). The sink node may assign a task to the sensor node and gather events sensed by the sensor node. The sensor node is a node within the WSN and may process and gather sensory information. The sensor node may communicate with other nodes in the WSN.

The IoT devices200,300,400,500,610,620,630, and640may include an active IoT device which operates using its own power and a passive IoT device which operates using wireless power transferred from an outside source. The active IoT device may include a refrigerator, an air conditioner, a telephone, or an automobile. The passive IoT device may include a radio frequency Identification (RFID) tag or a near field communication (NFC) tag. However, when an RFID tag or an NFC tag includes a battery, the RFID or NFC tag may be classified as an active IoT device.

The IoT devices200,300,400,500,610,620,630, and640may include a passive communication interface such as a two-dimensional barcode, a three-dimensional barcode, a quick response (QR) code, an RFID tag, or an NFC tag. The IoT devices200,300,400,500,610,620,630, and640may also include an active communication interface such as a modem or a transceiver.

At least one of the IoT devices200,300,400,610,620,630, and640may transmit and receive control information and/or data through a wired or wireless communication interface. The wired or wireless communication interface may be an example of an accessible interface.

The hub500in the IoT network system600A may function as an access point. The IoT devices200,300,400,610,620,630, and640may be connected to a communication network or other IoT devices through the hub500.

Although the hub500is shown as an independent device inFIG. 8, the hub500may be embedded in one of the IoT devices400,610,620,630, and640. For example, the hub500may be embedded in a television (TV or a smart TV) or a smart refrigerator. At this time, a user may be allowed to monitor or control at least one of the IoT devices400,610,620,630, and640connected to the hub500through a display of the TV or the smart refrigerator.

The hub500may be one of the IoT devices400,610,620,630, and640. For example, a smart phone may be an IoT device functioning as the hub500. For example, the smart phone may perform tethering. For example, when the smart phone is connected to another computer and performing tethering, the computer may gain access to the Internet through the smart phone.

The IoT network system600A may also include a gateway625. The gateway625may connect the hub500, which functions as an access point, to an external communication network (e.g., an internet or a public switched network). Each of the IoT devices200,300,400,500,610,620,630, and640may be connected to an external communication network through the gateway625. In an embodiment, the hub500and the gateway625are implemented in a single device. Alternatively, the hub500may function as a first gateway and the gateway625may function as a second gateway.

One of the IoT devices200,300,400,500,610,620,630, and640may function as the gateway625. For example, a smart phone may be both an IoT device and the gateway625. The smart phone may be connected to a mobile cellular network.

The IoT network system600A may also include a gateway625and at least one communication network633. The communication network633may include an internet and/or a public switched network, but the inventive concept is not limited thereto. The public switched network may include a mobile cellular network. The communication network633may be a communication channel which transfers information gathered by the IoT devices610,620,630, and640.

The IoT network system600A may also include a management server635and/or a server645connected to the communication network633. The communication network633may transmit a signal (or data) detected by at least one of the IoT devices610,620,630, and640to the management server635and/or the server645.

The management server635and/or the server645may store or analyze a signal received from the communication network633. The management server635and/or the server645may perform the same operations as or similar operations to the server110A illustrated inFIG. 5.

The management server635and/or the server645may transmit the analysis result to at least one of the IoT devices610,620,630, and640via the communication network633. For example, the management server635may manage the states of the hub500, the gateway625, the communication network633, and/or each of the IoT devices610,620,630, and640.

The server645may receive and store data related with at least one of the IoT devices610,620,630, and640and may analyze the stored data to generate an analysis result. The server645may transmit the analysis result to at least one of the IoT devices610,620,630, and640or to a device (e.g., a smart phone) possessed by a user via the communication network633.

For example, when one of the IoT devices610,620,630, and640is a blood glucose monitoring IoT device which measures a user's blood glucose; the server645, which stores a blood glucose limit preset by the user, may receive a measured blood glucose level from the glucose monitoring IoT device via the communication network633. In an embodiment, the server645compares the blood glucose limit with the measured blood glucose level and transmits a warning signal to at least one of the IoT devices610,620,630, and640or a user device via the communication network633when the measured blood glucose level is higher than the blood glucose limit.

FIG. 9is a block diagram of a data processing system600B including the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept. Referring toFIGS. 1 through 9, the IoT network system600B may include a hub500, a smart phone300, IoT devices610,620,630, and640, a gateway625, a communication network633, a management server635, a distribution server645, and a plurality of servers645-1,645-2, and645-3.

Apart from the distribution server645and the servers645-1,645-2, and645-3; the IoT network system600B illustrated inFIG. 9is the same as or similar to the IoT network system600A illustrated inFIG. 8.

The distribution server645is connected with the servers645-1,645-2, and645-3and may distribute jobs to the servers645-1,645-2, and645-3. The distribution server645may analyze a request transmitted from the communication network633through scheduling to generate an analysis result, may predict the amount of data and workload related with a job based on the analysis result, and may communicate with at least one of the servers645-1,645-2, and645-3. In an embodiment, the distribution server645receives and analyzes state information from the servers645-1,645-2, and645-3and applies the analysis result to the scheduling. The overall performance of the IoT network system600B may be enhanced through the scheduling of the distribution server645.

FIG. 10is a block diagram of a data processing system600C including the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept.

Referring toFIGS. 1 through 10, the IoT network system600C may include a hub500, a smart phone300, IoT devices610,620,630, and640, a gateway625, a communication network633, a management server635, and a distribution server system650.

The distribution server system650may receive and store or analyze data from the communication network633. The distribution server system650may send the stored data or the analyzed data to at least one of the elements500,625,610,620,630,625, and640included in the IoT network system600C via the communication network633.

In an exemplary embodiment, the distribution server system650includes a distributed computing system driven based on a distributed file system (DFS). For example, the distribution server system650may be driven based on at least one among various DFSs such as Hadoop DFS (HDFS), Google file system (GFS), Cloud store, Coda, network file system (NFS), and general parallel file system (GPFS), but the inventive concept is not limited to these examples.

In an exemplary embodiment, the distribution server system650includes a master device651, slave devices652-1through652-M (where M is a natural number of at least 3), a system manager device653, a resource manager device654, and a policy manager device655. In an exemplary embodiment, less than 3 slave devices are present.

Each of the slave devices652-1through652-M may store a data block. For example, data transmitted via the communication network633may be divided into data blocks by the master device651. The data blocks may be stored in the slave devices652-1through652-M in a distributed fashion. For example, when the distribution server system650is driven based on the HDFS, each of the slave devices652-1through652-M may execute, as a data node, a task tracker to store at least one data block.

The master device651may divide data transmitted via the communication network633into data blocks. The master device651may provide each of the data blocks for at least one of the slave devices652-1through652-M. For example, when the distribution server system650is driven based on the HDFS, the master device651may execute, as a name node, a job tracker to schedule the distribution of the data blocks. The master device651may manage distributed storage information indicating a stored position of each of the data blocks that have been distributed. The master device651may process a data store request and a data read request based on the distributed storage information.

The system manager device653may control and manage the overall operation of the distribution server system650. The resource manager device654may manage the resource usage of each element included in the distribution server system650. The policy manager device655may manage a policy on an access to each of the IoT devices610,620,630, and640which are accessible via the communication network633.

The master device651, the slave devices652-1through652-M, the system manager device653, the resource manager device654, and the policy manager device655each may include a universal computer like a personal computer (PC) and/or a dedicated computer like a workstation and each may include hardware modules for realizing a unique function. The master device651, the slave devices652-1through652-M, the system manager device653, the resource manager device654, and the policy manager device655each may perform a unique function by running software or firmware using a processor core.

As shown inFIG. 10, the master device651and the slave devices652-1through652-M may share the communication network633with the IoT devices610,620,630, and640and may transmit or receive data (or a data block) with one another via the communication network633.

FIG. 11is a block diagram of an example500A of the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept. Referring toFIGS. 1 and 11, the hub500A may include a bus201, a first sensor501, a second sensor503, a display573, a secure module527, a processing circuit510, a communication module550, an actuator571, a power supply572, a storage device574, a memory575, and an input/output (I/O) device576. The storage device574and the memory575may be collectively represented by the memory530. The secure module527may be implemented as a hardware secure module, but the inventive concept is not limited thereto.

The elements530,527,530,550,571,572,573, and576may transmit or receive a command and/or data with one another via the bus201.

The first sensor501may transmit a detection signal to the processing circuit510. The display573may display data processed by the hub500A or may provide a user interface (UI) or a graphical user interface (GUI) for a user.

The processing circuit510may control the overall operation of the hub500A. The processing circuit510may execute an application providing an internet browser, a game, a moving image (e.g., video), a song, etc.

The communication module550may perform communication as a communication interface using LAN, WLAN like Wi-Fi, WPAN like Bluetooth, wireless USB, ZigBee, NFC, RFID, power line communication (PLC), or mobile cellular network. The communication module550may be implemented as a transceiver, a receiver, or a transmitter. The transceiver may include a receiver and a transmitter. In an embodiment, the receiver is referred to as a first communication module and the transmitter is referred to as a second communication module.

The storage device574may store a boot image for booting the hub500A. For example, the storage device574may be implemented as an HDD, an SSD, an MMC, an eMMC, or a UFS.

The memory575may store data necessary for the operation of the hub500A. For example, the memory575may include volatile memory and/or non-volatile memory.

The I/O device576may include an input device such as a touch pad, a keypad, or an input button and so on; and an output device like a speaker.

The second sensor503may be a biosensor which detects biometric information. For example, the second sensor503may detect a fingerprint, an iris pattern, a vein pattern, a heart rate, or blood glucose to generate a detection result; may generate detection data corresponding to the detection result; and may provide the detection data to a processor527-2of the secure module527. However, the second sensor503is not limited to the biosensor and may be a luminance sensor, an acoustic sensor (e.g., an acoustic wave sensor), or an acceleration sensor (e.g., an accelerometer).

The secure module527may include the processor527-2and a secure element527-3. The secure module527may be formed in a single package and a bus connecting the processor527-2and the secure element527-3may be formed within the package. The secure element527-3may have a function of defending against external attacks and thus be used to safely store secure data, e.g., the authentication information. The processor527-2may transmit or receive data with the processing circuit510.

The secure module527may include a secure element527-3. The secure module527and the processing circuit510may generate a session key through mutual authentication. The secure module527may encrypt data using the session key and transmit the encrypted data to the processing circuit510. The processing circuit510may decrypt the encrypted data using the session key to generate decrypted detection data. Accordingly, the security level of data transmission in the hub500A is increased. For example, the secure element527-3may be formed in a single package together with the processing circuit510.

The processor527-2of the secure module527may encrypt detection data output from the second sensor503and may store the encrypted data in the secure element527-3. The processor527-2may control communication between the processing circuit510and the secure element527-3.

The actuator571may include various elements necessary for the physical driving of the hub500A. For example, the actuator571may include a motor driving circuit and a motor controlled by the motor driving circuit. The power supply572may provide an operating voltage necessary for the operation of the hub500A. The power supply572may include a battery.

FIG. 12is a block diagram of an example500B of the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept.

Referring toFIGS. 1 and 12, the hub500B may include a first sensor501, a display573, a bus201, a secure module527, a processing circuit510, a communication module550, an I/O device576, and a memory530. The memory530may include a normal memory530-1and a secure memory530-2. Although the normal memory530-1is implemented in the memory530in the embodiment illustrated inFIG. 12, the normal memory530-1may be implemented in the secure memory530-2in other embodiments.

The elements501,510,527,530,550,573, and576may transmit or receive data with one another via the bus201.

The processing circuit510may control the overall operation of the hub500B.

The normal memory530-1may store data necessary for the operation of the hub500B. The normal memory530-1may be formed of volatile memory or non-volatile memory which stores data that does not require security. The secure memory530-2may store data that requires security in the operation of the hub500B. Although the normal memory530-1and the secure memory530-2are separated from each other in the embodiments illustrated inFIG. 12, the normal memory530-1and the secure memory530-2may be formed in a single physical memory. For example, the memory530including the normal memory530-1and the secure memory530-2may be removably coupled to the hub500B.

The structure and functions of the secure module527illustrated inFIG. 12may be the same as or similar to those of the secure module527illustrated inFIG. 11.

FIG. 13is a block diagram of an example500C of the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept.

Referring toFIGS. 1 and 13, the hub500C may include a first sensor501, a second sensor503, a display573, a bus201, a secure module527, a processing circuit510, a communication module550, a memory530, a power supply572, and an I/O device576. The elements510,530,573,527,550,576, and572may transmit or receive data with one another via the bus201.

The processing circuit510may control the overall operation of the hub500C. The first sensor501may transmit a detection signal to the processing circuit510. The second sensor503may be a biosensor which detects biometric information.

The structure and functions of the secure module527illustrated inFIG. 13may be the same as or similar to those of the secure module527illustrated inFIG. 11.

The memory530may store a boot image for booting the hub500C. For example, the memory530may be implemented as flash memory, SSD, eMMC, or UFS. The memory530may include a secure region530-4and a normal region530-5. A controller530-2may directly access the normal region530-5but may access the secure region530-4via a secure logic circuit530-3. In other words, the controller530-2can access the secure region530-4only via the secure logic circuit530-3.

The secure module527may store data output from the second sensor503in the secure region530-4of the memory530through communication with the secure logic circuit530-3of the memory530.

The power supply572may provide an operating voltage necessary for the operation of the hub500C.

The I/O device576may include an input device such as a touch pad, a keypad, an input button, etc.; and an output device like a speaker.

FIG. 14is a block diagram of an example500D of the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept.

Referring toFIGS. 1 and 14, the hub500D may include a processing circuit510, a sensor501, a communication module550, a memory530, and an I/O device586-1.

The hub500D may also include an application582and an operating system (OS)584.FIG. 14shows the layers of a user580, the application582, the OS584, and a hardware component586.

The application582may refer to software and/or service which performs a particular function. The user580may refer to a subject or object using the application582. The user580may communicate with the application582using a UI.

The application582may be created based on a service purpose and may interact with the user580through the UI corresponding to the service purpose. The application582may perform an operation requested by the user580and may call an application protocol interface (API)584-1and the content of a library584-2if necessary.

The API584-1and/or the library584-2may perform a macro operation for a particular function or, when communication with a lower layer is necessary, may provide interface for the communication. When the application582requests a lower layer to operate through the API584-1and/or the library584-2, the API584-1and/or the library584-2may classify the request as a security584-3, a network584-4, or a manage584-5.

The API584-1and/or the library584-2runs a necessary layer according to the request.

A driver584-6may manage the hardware component586and monitor the state of the hardware component586. The driver584-6may receive a classified request from an upper layer and may deliver the request to the layer of the hardware component586.

When the driver584-6requests the layer of the hardware component586to perform a task, firmware584-7may convert the request so that the layer of the hardware component586can accept the request. The firmware584-7which transmits the converted request to the hardware component586may be included in the driver584-6or be executed by the hardware component586.

The hub500D may include the API584-1, the driver584-6, and the firmware584-7and may be equipped with an OS that manages these elements584-1,584-6, and584-7. The OS may be stored in the memory530in a form of control command codes and data. When the hub500D is a low-price product, the hub500D may include control software instead of the OS since the size of the memory530is small.

The hardware component586may execute requests (or commands) received from the driver584-6and/or the firmware584-7in order or out of order and may store the results of executing the requests in an internal register (not shown) of the hardware component586or in the memory530. The results that have been stored may be returned to the driver584-6and/or the firmware584-7.

The hardware component586may generate an interrupt to request an upper layer to perform an operation. When the interrupt is generated, the interrupt is checked in the manage584-5of the OS584and then processed by the hardware component586.

FIG. 15is a block diagram of an example500E of the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept.

Referring toFIGS. 1 and 15, the hub500E may include the device application582and a communication module590. The communication module590may include firmware591, a radio baseband chipset592, and a secure module527.

The device application582, as a software component, may control the communication module590and may be executed by a CPU of the hub500E. The communication module590may perform communication via LAN, WLAN like Wi-Fi, WPAN like Bluetooth, wireless USB, ZigBee, NFC, RFID, PLC, or mobile cellular network. For example, the communication module590may be the communication module550.

The firmware591may provide the device application582and application programming interface (API) and may control the radio baseband chipset592according to the control of the device application582. The radio baseband chipset592may provide connectivity for a wireless communication network. The secure module527may include the processor527-2and the secure element527-3. The secure module527may authenticate the hub500E in order to connect to the wireless communication network and to access a wireless network service. For example, the secure module527may be implemented as an eMMC, but the inventive concept is not limited thereto.

FIG. 16is a block diagram of a data processing system700including the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept.

Referring toFIGS. 1 through 7andFIG. 16, the IoT network system700represents a usage scenario of vehicle management, collision prevention, or vehicle driving service and so on.

Referring toFIG. 17, the IoT network system700includes a vehicle701including sensors. The IoT network system700may also include an engine control unit (ECU)710, a hub500, and at least one service provider750and/or760.

The sensors may include an engine unit sensor {circle around (1)}, collision prevention sensors {circle around (4)} through {circle around (11)}, and vehicle driving sensors {circle around (12)} through {circle around (15)} and {circle around (a)} through {circle around (g)}. The sensors may also include a fuel level sensor {circle around (2)} and/or an exhaust gas sensor {circle around (3)}.

The ECU710may gather driving information732output from the sensors and may transmit the driving information732to the hub500via a communication network. The hub500may perform the function of a data server. In an embodiment, the hub500is embedded in the data server.

The ECU710and the hub500may transmit or receive vehicle status information734, driver information736, and/or accident history information738with each other. Although the hub500is formed outside the ECU710in the embodiments illustrated inFIG. 16, the hub500may be formed inside the ECU710in other embodiments. The hub500may transmit information from the ECU710to a server of the service company750.

The server of the service company750may provide a user's smart phone information obtained by analyzing the vehicle701with reference to the vehicle status information734, the driver information736, and/or the accident information738stored in the hub500. For example, Services provided by the service company750may include information about accidents on the roads, a guide to the fast route, notification of accident handling, accident claim value calculation information, human-error rate estimation information, and/or emergency rescue service.

The server of the service company750may share vehicle-related information output from the hub500with a user730who has subscribed to the service. The user730may make a contract with the service company750based on the shared information.

The server of the service company750may receive a driver's personal information from a second server740and may activate an access control and service function for the vehicle701of the driver using the personal information. For example, the server of the service company750may receive NFC tag information stored in a user's wrist watch, compare the NFC tag information with NFC tag information stored in the second server740, and unlock the door lock of the vehicle701. The server of the service company750or the second server740may transmit the arrival information of the vehicle701to an IoT device installed at the user's home when the vehicle701arrives at the user's home.

A server of the public service provider760may send traffic information to an IoT device, e.g., a smart phone of the driver of the vehicle701based on the accident history information738stored in the hub500.

FIG. 17is a block diagram of a data processing system800including the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept.

Referring toFIGS. 1 through 7andFIG. 17, the IoT network system800may include a user's smart phone830and a home network system810. The home network system810may include IoT devices200,300,400,812,814,816, and818. In an exemplary embodiment, the IoT network system800includes a communication network850, a server870, and a service provider890.

The home network system810may control various kinds of IoT devices in a building (e.g., a house, an apartment, or a high-rise) via a wired/wireless network and may share contents with the IoT devices. The home network system810may include a hub500, IoT devices812,814,816, and818, and a home server819.

The home appliance812may include a smart refrigerator (e.g., the third IoT device400), a smart washing machine, an air conditioner, etc, but the inventive concept is not limited thereto. The security/safety equipment814may include a door lock, a closed circuit television (CCTV) (e.g., the first IoT device200), an interphone, a window sensor, a fire detection sensor, or an electric plug and so on, but the inventive concept is not restricted thereto. The entertainment equipment816may include a smart TV (e.g., the second IoT device300), an audio game machine, a computer, etc., but the inventive concept is not limited thereto. The office equipment818may include a printer, a projector, a copy machine, etc., but the inventive concept is not limited thereto.

Each of the elements200,300,400,812,814,816, and818may be an IoT device.

Each of the IoT devices200,300,400,812,814,816, and818may communicate with one another through the hub500. For example, each of the IoT devices200,300,400,812,814,816, and818may transmit or receive detection data or control information with the hub500.

The IoT devices200,300,400,812,814,816, and818may communicate (or be paired) with the hub500via a communication network. The home network system810may use a sensor network, an M2M network, an internet protocol (IP) based network, or a non-IP based network.

The home network system810may be implemented as a home phoneline networking alliance (PNA), IEEE1394, a USB, a programmable logic controller (PLC), Ethernet, infrared data association (IrDA), Bluetooth, Wi-Fi, WLAN, ultra wide band (UWB), ZigBee, wireless1394, wireless USB, NFC, RFID, or a mobile cellular network.

The IoT devices200,300,400,812,814,816, and818may be connected to the communication network850through the hub500which functions as a home gateway. The hub500may convert a protocol between the home network system810and the communication network850. The hub500may convert a protocol among various types of communication networks included in the home network system810and may connect the IoT devices200,300,400,812,814,816, and818with the home server819.

For example, the home server819may be installed at home or in an apartment block. The home server819may store or analyze data output from the hub500. The home server819may provide a service relevant to the analyzed information for at least one of the IoT devices200,300,400,812,814,816, and818or the user's smart phone830or may transmit the analyzed information to the communication network850through the hub500.

The home server819may receive and store external contents through the hub500, may process data, and may provide the processed data for at least one of the IoT devices200,300,400,812,814,816, and818or the user's smart phone830.

For example, the home server819may store I/O data transmitted from the security/safety equipment814or may provide an automatic security service or power management service for the IoT devices812,814,816, and818based on the I/O data.

When each of the IoT devices812,814,816, and818includes a sensor for sensing luminance, humidity, or contamination; the home server819may analyze data output from each IoT device812,814,816, or818including the sensor to generate an analysis result and may provide an environment control service according the analysis result or send the analysis result to the user's smart phone830.

The communication network850may include an internet and/or or a public communication network. The public communication network may include a mobile cellular network. The communication network850may be a communication channel which transmits information gathered by the IoT devices200,300,400,812,814,816, and818of the home network system810.

The server870may store or analyze the gathered information and may generate service information related with the analysis result or may provide the stored or analyzed information for the service provider890and/or the user's smart phone830.

The service provider890may analyze gathered information and may provide various services for a user according to the analysis result. The service provider890may provide a service, such as remote meter-reading, crime/disaster prevention, homecare, healthcare, entertainment, education, civil service, etc., for at least one of the IoT devices200,300,400,812,814,816, and818or the user's smart phone830.

For example, the service provider890may receive information generated by at least one of the IoT devices200,300,400,812,814,816, and818from the server870and may provide a service of remotely reading information related with an energy resource (such as gas, water, or electricity) based on the received information. The service provider890may receive information generated by at least one of the IoT devices200,300,400,812,814,816, and818from the server870; may generate energy resource-related information, indoor environment information, or user status information based on the received information; and may provide the generated information for at least one of the IoT devices200,300,400,812,814,816, and818or the user's smart phone830.

The service provider890may provide an emergency rescue service for crime/disaster prevention based on security-related information, information about a fire outbreak, or safety-related information; or may send the information to the user's smart phone830. The service provider890may also provide entertainment, education, administration service, etc. based on information received from at least one of the IoT devices200,300,400,812,814,816, and818and may provide a two-way service through at least one of the IoT devices200,300,400,812,814,816, and818.

FIG. 18is a block diagram of a data processing system900including the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept.

Referring toFIGS. 1 through 7andFIG. 18, the IoT network system900may be a smart lighting-network system which controls a light emitting device (e.g., a light emitting diode (LED)). For example, the IoT network system900may be formed using various kinds of lighting fixtures and wired/wireless communication devices and may include a sensor, a controller, a communication unit, and a software component (e.g., software for network control and user maintenance and so on).

The IoT network system900may be used in a closed space defined as an inside of a building, such as a home or an office; and in an open space, such as a park or a street, as well. For example, the IoT network system900may be implemented to gather and/or process various kinds of information output from at least one sensor and may provide the information to a user's smart phone920.

An LED lamp905included in the IoT network system900may receive information about a surrounding environment from the hub500or the user's smart phone920and may control its light based on the information. The LED lamp905may also check and control the operation state of at least one of IoT devices901,903,907,909,912, and914included in the IoT network system900based on a communication protocol, e.g., a visible light communication protocol, of the LED lamp905.

The IoT network system900may include the hub500which performs the function of a gateway processing data transferred according to different communication protocols, the user's smart phone920paired with the hub500, the LED lamp905which can communicate with the hub500and includes a light emitting element, and the IoT devices901,907,909,912, and914which can communicate with the hub500according to various kinds of radio communication methods.

For example, the LED lamp905may include a lamp communication module903, which may function as a communication module.

Each of the IoT devices901,907,909,912, and914may include the light switch901, the garage door lock907, the digital door lock909, the refrigerator912, and the TV914.

In the IoT network system900, the LED lamp905may check the operation status of at least one of the IoT devices901,907,909,912, and914using a radio communication network or may automatically adjust its own luminance according to a surrounding environment or circumstance. The LED lamp905may also control the operation of at least one of the IoT devices901,907,909,912, and914using LED Wi-Fi (LiFi) using visible rays emitted from the LED lamp905.

The LED lamp905may automatically adjust its own luminance based on surrounding environment information transmitted from the hub500or the user's smart phone920through the lamp communication module903or based on surrounding environment information gathered from a sensor attached to the LED lamp905.

For example, the brightness of the LED lamp905may be automatically adjusted according to the type of a program on the TV914or the brightness of the screen of the TV914. For this operation, the LED lamp905may receive operation information of the TV914through the lamp communication module903wirelessly connected with the hub500or the user's smart phone920. The lamp communication module903may be integrated with a sensor included in the LED lamp905and/or a controller included in the LED lamp905into a module.

When a predetermined period of time elapses after the digital door lock909is locked with no one at home, the LED lamp905can be turned off according to the control of the hub500or the user's smart phone920. As a result, power waste is reduced. When a security mode is set according to the control of the hub500or the user's smart phone920, the LED lamp905is maintained in an on-state even if the digital door lock909is locked with no one at home.

An on or off of the LED lamp905may be controlled according to surrounding environment information gathered through sensors included in the IoT network system900. The LED lamp905including at least one sensor, a storage device, and the lamp communication module903may keep a building secure or may detect an emergency. For example, when the LED lamp905includes a sensor for detecting smoke, CO2, or temperature; the LED lamp905may detect fire and output a detection signal through an output unit or send the detection signal to the hub500or the user's smart phone920.

FIG. 19is a block diagram of a data processing system1000A including the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept. Referring toFIGS. 1 through 7andFIG. 19, the IoT network system1000A may be implemented as a service system providing services for users. The IoT network system1000A may include the IoT devices200,300, and400, the hub500, a user's smart phone1220, a communication network1200, and an information analyzer device1100.

The user's smart phone1220may be used by a subject who requests at least one service. The user may request a service using the smart phone1220and provided with the service.

The information analyzer device1100may analyze information to provide a service. The information analyzer device1100may analyze information necessary to achieve the goal of the service. The information analyzer device1100may include a universal computer like a PC and/or a dedicated computer like a workstation. The information analyzer device1100may include at least one computing device. For example, the information analyzer device1100may include a communication block1110, a processor1130, and a memory/storage1150.

The communication block1110may communicate with the user's smart phone1220and/or the hub500via the communication network1200. The communication block1110may be provided with information and data through the communication network1200. The communication block1110may transmit the result necessary to provide the service to the user's smart phone1220through the communication network1200. The processor1130may receive and process information and data to generate a processing result and outputs the processing result to provide the service. The memory/storage1150may store data that has been processed or will be processed by the processor1130.

FIG. 20is a block diagram of a data processing system1000B including the hub500illustrated inFIG. 1according to an exemplary embodiment of the inventive concept. Referring toFIGS. 1 through 7andFIG. 20, the IoT network system1000B may include the IoT devices200,300, and400, the hub500, the user's smart phone1220, the communication network1200, the first information analyzer device1100, the second information analyzer devices1310through1320. Apart from the second information analyzer devices1310through1320, the IoT network system1000B illustrated inFIG. 20is the same as or similar to the IoT network system1000A illustrated inFIG. 19.

While the IoT network system1000A illustrated inFIG. 19includes one information analyzer device1100, the IoT network system1000B illustrated inFIG. 20may also include the second information analyzer devices1310through1320. For example, the information analyzer device1310may include a communication block C1, a processor P1, and a memory/storage M1; and the information analyzer device1320may include a communication block CN, a processor PN, and a memory/storage MN.

The structure and operations of each of the second information analyzer devices1310through1320may be the same as or similar to those of the first information analyzer device1100illustrated inFIG. 20. Each of the second information analyzer devices1310through1320may analyze information necessary to provide a service for a user.

The first information analyzer device1100may manage the operation of the second information analyzer devices1310through1320. The first information analyzer device1100may distribute information or data subjected to analysis to the second information analyzer devices1310through1320. Information necessary to provide a service for a user may be processed in the information analyzer devices1100and1310through1320in a distributed fashion.

The first information analyzer device1100may include a communication block1110A, the processor1130, and the memory/storage1150. The first information analyzer device1100may communicate with the communication blocks Cl through CN of the respective second information analyzer devices1310through1320through the communication block1110A. The first information analyzer device1100may also communicate with the other elements1310and1320through the communication block1110A. The first information analyzer device1100may manage and schedule the information analyzing and/or processing performed by the second information analyzer devices1310through1320according to the operations of the processor1130and the memory/storage1150.

As described above, according to at least one embodiment of the inventive concept, a semiconductor device processes sensitive data among user data according to a user data management rule set by a user to generate processed data and transmits the processed data to a server, so that the security of the sensitive data is increased and the server is allowed to analyze and use the processed data.