A Technical Analysis of the UCLS Unified Meter Gateway

Executive Summary

The UCLS Unified Meter Gateway is an essential component within contemporary Industrial Internet of Things (IIoT) and smart building frameworks. This Python-based solution is architected to address the foundational challenge of industrial protocol fragmentation by serving as a universal translator. Its core purpose is to acquire, process, and standardize data from a multitude of disparate physical devices—including smart meters, building automation controllers, and industrial machinery—before securely transmitting this information to centralized cloud platforms. The gateway’s design is defined by its modularity, a forward-thinking Canonical Data Model (CDM) for data governance, and a robust, multi-layered security architecture. It represents a strategic and scalable solution for unlocking valuable intelligence from operational technology (OT) data, thereby enabling real-time analytics, predictive maintenance, and operational cost reduction. The analysis of its technical components reveals a pragmatic and well-conceived system built for longevity and interoperability in complex, heterogeneous environments.

Section 1: The Strategic Imperative of a Unified Meter Gateway

1.1. The Problem of Industrial and Residential Meter Fragmentation: A Legacy of Silos

The existence and strategic importance of the UCLS Unified Meter Gateway are rooted in a pervasive and long-standing challenge within the industrial and residential sectors: the fragmentation of communication protocols. This landscape is a patchwork of disparate, often proprietary, standards that create isolated data silos.1 In the industrial realm, for example, more than 30 different industrial Ethernet standards are in use, with a common solution for multi-protocol support often requiring a separate, physically distinct printed circuit board (PCB) for each protocol.3 This leads to a situation where integrating a new device necessitates a significant hardware change, hindering flexibility and increasing costs.3 A similar fragmentation exists in building automation, where protocols like BACnet and Modbus operate alongside energy metering standards such as DLMS and M-Bus.1

This fragmentation is not merely a technical inconvenience; it is a profound strategic barrier to leveraging data for business advantage. Traditional automation systems, such as Supervisory Control and Data Acquisition (SCADA) and historians, are ill-equipped to handle the demands of modern, cloud-based data applications. These legacy systems are described as being complex, expensive, and not optimized for artificial intelligence (AI) applications.4 They often restrict access to raw data, making it difficult for data scientists and engineers to develop machine learning models and extract actionable intelligence.4 Furthermore, these systems struggle with the sheer “massive data volume and velocity” generated by modern sensors and machines, which is essential for tasks like vibration analysis and real-time process monitoring.4 The lack of an efficient interface for accessing historical, raw data in these systems is a significant limitation that prevents the application of advanced analytics.4 The UCLS Gateway directly addresses these limitations by providing a unified view of energy usage and acting as a critical bridge to cloud platforms, thereby circumventing the data-locking nature of legacy systems. The true value of the gateway, therefore, lies in its ability to transform siloed, inaccessible operational data into a stream of usable, cloud-ready information, directly enabling the AI and analytics applications that traditional systems were designed to preclude.

1.2. The UCLS Gateway as an Architectural Solution: Bridging the OT-IT Divide

The UCLS Gateway is defined as a crucial architectural solution that bridges the gap between the operational technology (OT) domain of physical equipment and the information technology (IT) domain of cloud platforms and data centers.6 Its core function is to facilitate the real-time collection, processing, and secure transmission of energy data, which is indispensable for a wide range of applications in manufacturing, commercial buildings, and residential properties.6 By providing a “unified view of energy usage,” the gateway empowers manufacturers to optimize operations, reduce waste, and cut energy-related costs.6 For utility companies, it is vital for managing large-scale smart metering systems, supporting dynamic pricing models, and enabling load balancing and theft detection.6

The design of the UCLS Gateway is part of a broader trend toward edge computing, exemplified by the concept of an “in-meter gateway”.7 This innovation integrates gateway functionality directly into a smart meter, simplifying deployments and reducing costs by eliminating the need for a separate external device.7 The architectural choice to implement the UCLS Gateway as a Python script suggests a flexible, software-driven approach that can be deployed on a variety of hardware platforms. This makes it an instantiation of the “in-meter gateway” or “IoT Energy Meter Gateway” concept.6 The gateway’s design strategy is to handle data processing and protocol abstraction at the network’s edge, which enhances reliability and reduces data transmission costs to the cloud. This architectural pattern makes the gateway a scalable and future-proof solution that can adapt to different deployment models, from a dedicated external device to a function embedded directly within the meter.

Section 2: Data Acquisition and Protocol Abstraction Layer

2.1. Handling Disparate Metering Protocols

A key feature of the UCLS Gateway is its ability to abstract away the complexities of disparate industrial and metering protocols. This allows the application layer to interact with a normalized data stream, regardless of the data’s origin. The modular design, which is reflected in the script’s use of dedicated Python libraries for each protocol, is a direct counter to the fragmentation of industrial standards.3 This approach provides a software-based solution to what has historically been a hardware problem, making the gateway highly flexible and easily extensible.

2.2. Protocol-Specific Implementations

The gateway’s design incorporates a range of protocol-specific modules to ensure broad compatibility. A detailed breakdown of the technical implementations is provided below.

  • DLMS/COSEM (Device Language Message Specification / Companion Specification for Energy Metering)This is a leading application layer protocol for energy metering known for its object-oriented structure and robust security features, including authentication and encryption.1 A crucial component of this protocol is the Object Identification System (OBIS), which uses a hierarchical format (e.g., A.B.C.D.E.F) to uniquely identify data points within a meter.8 The script uses the
    dlms-cosem Python library, a tool designed to handle the low-level functions of the protocol, such as APDU encoding/decoding and encryption, allowing for communication over both TCP and serial interfaces.10 The library supports various authentication levels, including None, Low, High, HighMD5, HighSHA1, and GMAC.10
  • ModbusThe gateway’s design also supports the legacy Modbus protocol. While widely supported and simple to implement, Modbus lacks built-in encryption and a structured data model, which limits its use in complex or secure applications.1 The gateway leverages the
    pymodbus library, which provides a full Modbus protocol stack with both synchronous and asynchronous APIs.12 Its lightweight design and Pythonic interface simplify interaction with Modbus devices and make it suitable for a variety of hardware platforms, including a Raspberry Pi.13 The library’s capabilities include connecting to devices via TCP, TLS, UDP, and serial, with the option to address logical devices with a device_id.12
  • BACnet/IP (Building Automation and Control Networks)For building automation, the gateway uses BACnet/IP, an open protocol that simplifies integration and provides interoperability for systems like HVAC and lighting.2 The script utilizes the
    BAC0 library, an asynchronous framework built on BACpypes3.14 This allows the gateway to read properties and interact with BACnet devices in a non-blocking manner, which is essential for a responsive gateway application that must handle multiple data streams concurrently.14 The library can discover devices on a network and read/write values to properties, including the
    out_of_service property to simulate sensor data for testing.15
  • OPC UA (Open Platform Communications Unified Architecture)This modern, platform-independent protocol is designed for secure and reliable data exchange in industrial and central management systems.2 The gateway acts as an OPC UA client, using the
    python-opcua library to connect to and interact with a central OPC UA server.17 This provides a standardized way to relay data to a high-level management system, effectively merging building automation and industrial automation data streams.16 The library offers both low-level and high-level interfaces, supporting functionalities like server setup, node creation, and data history.17

The deliberate choice to integrate multiple, dedicated Python libraries, rather than developing a single, monolithic protocol stack, is a clear design philosophy centered on modularity. This approach provides a flexible and future-proof architecture. By using distinct libraries for each protocol, the gateway can be easily extended to support new standards simply by adding a new module. This decouples the core gateway logic from protocol-specific details, creating a flexible and scalable solution. This software-centric design is a direct and effective response to the hardware-based problem of industrial fragmentation, offering a more cost-effective and adaptable solution for long-term maintenance.

ProtocolPurposeData ModelSecurity FeaturesTypical Use Case
DLMS/COSEMEnergy MeteringObject-oriented, predefined classes 1Robust authentication and encryption 8Smart metering, energy management 1
ModbusIndustrial ControlSimple register-based 1None built-in 1Simple setups, legacy devices 1
BACnet/IPBuilding AutomationObject-oriented, standardized 2Authentication, data sharing 2HVAC, lighting, energy management 2
OPC UAIndustrial/Building IntegrationAbstract, extensible object model 2Robust encryption, authentication 2Central management, SCADA systems 16

Table 2.1: Comparative Analysis of Key Industrial Protocols

Section 3: Data Transformation and the Canonical Data Model

3.1. The Importance of Data Normalization

A significant challenge in data acquisition is that raw data from meters and sensors is often “messy,” inconsistent, and unstructured, with a variety of formats and frequencies.4 This raw state makes it difficult to ingest, store, and analyze data efficiently.4 To address this, the UCLS Gateway performs a critical function: data normalization. This process systematically organizes and structures data to “eliminate redundancy, improve consistency, and enhance overall data quality”.19 By transforming raw data into a clean, organized format, the gateway ensures a “standardized data format across your entire system,” which is essential for effective data management and analysis.20 The script’s likely use of a tool like pandas.json_normalize is a direct technical implementation of this concept, designed to flatten semi-structured JSON data into a clean, tabular format that is immediately usable for downstream processes.21

3.2. The Canonical Data Model (CDM)

The data normalization process within the UCLS Gateway is guided by a Canonical Data Model (CDM). A CDM is a design pattern that establishes a “common, standardized representation of data across diverse systems”.22 Rather than requiring bespoke, point-to-point data translations between every pair of systems, a CDM acts as a “universal translator,” simplifying integrations and enabling seamless data exchange.22 A key benefit of this approach is its remarkable scalability. Instead of a complexity that grows at an order of magnitude of n2 (where n is the number of systems), a CDM reduces the complexity to 2n, significantly lowering maintenance overhead and accelerating development.22 The model also enforces a “common vocabulary and set of standards” for data, which is crucial for data governance and for ensuring that data is consistently understood across the organization.22

Within the gateway, the normalized output adheres to a canonical schema. This ensures that data originating from a DLMS meter and a BACnet controller, for example, can be processed and analyzed uniformly by a central platform. The use of a standardized schema also ensures that data from a DLMS meter and a BACnet controller can be processed and analyzed uniformly. The use of a standardized schema simplifies the ingestion process and eliminates the need for further transformation in the cloud.

3.3. Standardizing Units with UCUM (Unified Code for Units of Measure)

A further layer of standardization is provided by the use of UCUM, the Unified Code for Units of Measure. The need for a system like UCUM arises from the inherent ambiguity of unit representation. Older standards suffer from name conflicts, incompleteness, and a lack of semantic clarity.24 UCUM provides a computationally verifiable, complete, and unambiguous system for unit representation, focusing on machine-to-machine communication rather than human readability.24 It is a “nomenclature” that defines building blocks and rules, allowing a computer to determine the meaning of an expression like “g/L”.25 This approach contrasts with simpler “codelists,” like those used by CDISC, which contain only one submission value for a unit and avoid potentially confusing symbols.25

The gateway’s design likely incorporates UCUM to tag each normalized data point with a standardized unit. For instance, this ensures that a kilowatt-hour from a DLMS meter is interpreted identically to a kilowatt-hour from a Modbus device, as each data point is accompanied by its UCUM representation. The integration of data normalization, a Canonical Data Model, and unit standardization with UCUM is a proactive architectural choice that demonstrates a deep understanding of the downstream challenges of data management. The gateway is not just a data collector; it is a data curator, ensuring that the data delivered to the cloud is immediately usable for analytics and AI, thereby maximizing its value and justifying the investment.

Raw Data Source (Example)Raw Data (JSON)Canonical Data Model (CDM) Representation
DLMS Meter (Active Energy){“obis”: “1.8.0”, “value”: 1234, “unit”: “kWh”}{“meter_id”: “dlms_A123”, “data_point”: “active_energy”, “value”: 1234, “unit_ucum”: “”, “timestamp”: “2024-01-01T10:00:00Z”}
Modbus (Temperature){“register”: 40001, “value”: 25.5}{“meter_id”: “modbus_B456”, “data_point”: “temperature_internal”, “value”: 25.5, “unit_ucum”: “Cel”, “timestamp”: “2024-01-01T10:00:00Z”}
BACnet (Supply Fan Status){“object_type”: “binary_input”, “instance”: 101, “present_value”: “active”}{“meter_id”: “bacnet_C789”, “data_point”: “supply_fan_status”, “value”: “on”, “unit_ucum”: “{status}”, “timestamp”: “2024-01-01T10:00:00Z”}

Table 3.1: CDM Schema for Unified Meter Data

Section 4: Security and Integrity by Design

4.1. Multi-Layered Security Architecture: A Defense-in-Depth Strategy

Security is not an afterthought in the UCLS Gateway’s design but a foundational principle, employing a comprehensive “defense-in-depth” strategy.26 This approach is a necessity for IIoT devices, which are often physically accessible and connected to critical operational infrastructure.28 The gateway’s security architecture is multi-layered, protecting the device, its communications, and the data it handles.

4.2. Securing Authentication and Data Integrity with HMAC

A cornerstone of the gateway’s security is its use of Hash-based Message Authentication Code (HMAC) signatures. This method is used for secure authentication and to ensure the integrity and temporal validity of requests.29 HMAC adds an extra layer of security by using a pre-shared secret key that is never broadcast, ensuring that a request is truly from the requesting user.29 An HMAC key consists of two parts: an Access ID, which is a public alphanumeric string, and a Secret, a private Base-64 encoded string.30 The secret is the most sensitive part of the credential, used to create the signatures that authenticate a request.30 The use of HMAC directly addresses the need for message reliability in potentially insecure network environments.29 A critical note is the importance of treating these secrets with the utmost care, similar to any other access credentials. Google recommends best practices such as regular key rotation and immediate deletion of compromised keys to mitigate risks.30 A maximum of 10 HMAC keys can be associated with a single service account.30

It is important to note that the research material does not mention HMAC-signed JSON audit logs 29, but rather focuses on HMAC for request signing to the Cloud Storage XML API. The provided documentation on HMAC keys for Google Cloud Storage explicitly states they can only be used with the XML API, not the JSON API.30

4.3. Device and System Hardening

The gateway’s security is further enhanced by device and system hardening measures. The use of a read-only filesystem is a simple yet effective protective measure. By setting this attribute, critical system files and data are protected from accidental or unauthorized modification or deletion.31 This design makes it significantly more difficult for an attacker to drop a malicious file to be executed later, thereby increasing the complexity of an attack and preventing the filesystem from being altered.32 While a read-only filesystem is not a foolproof defense against a highly privileged attacker who could simply remount the filesystem as read-write, it is a crucial layer of protection, particularly for embedded or portable devices.32

Host allowlisting is another proactive security strategy employed by the gateway’s design. This “default deny” principle restricts access by only allowing pre-approved applications or hosts to communicate.33 By limiting the software and hosts that can interact with the system, the gateway minimizes its attack surface and neutralizes threats like zero-day exploits before they can take hold.33 This strategy also simplifies compliance with industry standards like NIST and IEC 62443.33 To ensure a successful implementation, it requires close collaboration with operational teams to accurately define the list of approved applications and network connections.33

Additionally, a robust gateway design would include secure boot, which prevents the execution of malicious firmware by cryptographically verifying its integrity, and over-the-air (OTA) updates, which ensure the device is running the latest software and is patched against known vulnerabilities.26 These features are essential for a fleet of devices that may be deployed remotely and require periodic maintenance.

4.4. Network Security and Operations

The gateway’s security extends to its network operations. Industrial network security devices, such as industrial next-generation firewalls and Intrusion Prevention Systems (IPS), can be deployed in front of the gateway to enforce security policies without requiring changes to the existing network configuration.27 These devices can perform “virtual patching” to protect legacy devices from known vulnerabilities and can be used to segment networks, preventing the spread of a cyber incident like a network worm.27 This multi-faceted approach signifies that the gateway’s security architecture is not an afterthought but a core design principle, crucial for maintaining operational continuity and data integrity in an industrial context. The combination of HMAC authentication for communication, a read-only filesystem, and host allowlisting provides a pragmatic and mature security posture for IIoT environments.

Security FeatureMechanismThreat Mitigated
HMAC SignaturesUses a pre-shared secret to sign requests 29Unauthorized access, data tampering, replay attacks 29
Read-Only FilesystemPrevents modifications to system files 31Malware, unauthorized file drops, accidental deletion 32
Host AllowlistingBlocks unauthorized applications and hosts by default 33Zero-day exploits, unauthorized software installation 33
Secure Boot & OTA UpdatesCryptographically verifies firmware integrity 26Malicious firmware, known vulnerabilities 26

Table 4.1: UCLS Gateway Security Component Matrix

Section 5: Functional and Operational Breakdown

5.1. Command-Line Configuration and Data Handling

The UCLS Gateway script is designed for operational flexibility and ease of deployment. Its use of argparse for parsing command-line arguments makes the application highly configurable and scriptable.35 This design allows the same script to be deployed across different environments with varying connection parameters, such as a serial port for an older meter or a TCP/IP address for a newer one. Once configured, the gateway retrieves data from the connected meters. The script’s approach to data processing, which likely utilizes a library such as

pandas.json_normalize 21, demonstrates a common and efficient Python-based data manipulation technique. This function transforms the raw, semi-structured JSON data from the meters into a flat, well-structured table, preparing it for subsequent steps in the data pipeline.21

5.2. A Day in the Life of the UCLS Gateway: A Data Flow Narrative

The operational flow of the gateway is a streamlined, step-by-step process designed for minimal latency and high reliability.4

  1. Polling and Data Retrieval: The gateway, using its argparse-configured parameters, initiates a connection to a meter. It utilizes the appropriate protocol-specific library (e.g., dlms-cosem, pymodbus, BAC0) to read data. This process is often performed asynchronously to manage multiple connections concurrently.12
  2. Normalization and Standardization: The raw, protocol-specific data is then transformed into the predefined Canonical Data Model. This involves the normalization process described previously, with units being standardized using UCUM. The output is a clean, consistent data object that can be handled uniformly, regardless of its origin.23
  3. Secure Transmission: The normalized data is securely published to a central cloud platform. A lightweight messaging protocol like MQTT is ideal for this purpose, as it minimizes network bandwidth and resource requirements, which is crucial for resource-constrained IoT devices.36 A semantic layer, such as the OGC SensorThings API, can be used on top of MQTT to ensure that the data is not only exchanged syntactically but is also semantically “understood” by the cloud platform.36

The functional design of the script is purpose-built for efficiency. By using a command-line interface and structured data processing libraries, the gateway can operate as a lean, single-purpose application. This design avoids the overhead of a large application server and focuses on creating a fast, reliable data pipeline. The use of asynchronous libraries and lightweight protocols ensures that the gateway can handle a high volume of data from numerous devices with minimal latency, a key requirement for real-world IIoT deployments where network constraints are a common challenge.

Section 6: Insights and Strategic Recommendations

6.1. The UCLS Gateway’s Architectural Strengths

The analysis of the UCLS Gateway reveals a robust and forward-thinking architectural design. Its primary strengths can be summarized as follows:

  • Protocol AgnosticismThe gateway’s modular, software-centric design effectively decouples data sources from the application layer, directly addressing the problem of industrial and residential protocol fragmentation. This makes the system highly adaptable and extensible.
  • Data-Centric DesignBy employing a Canonical Data Model and standardizing units with UCUM, the gateway ensures data quality, consistency, and interoperability. It functions as a data curator, delivering high-value, usable data to cloud platforms for advanced analytics and AI applications.
  • Multi-layered SecurityThe adoption of a pragmatic, defense-in-depth strategy, including HMAC-based authentication, a read-only filesystem, and host allowlisting, demonstrates a mature understanding of the unique threat model faced by IIoT devices.

6.2. Strategic Recommendations for Future Development

Based on this architectural analysis, the following strategic recommendations are provided for future development and deployment:

  • Implement Secure Boot and Over-the-Air (OTA) UpdatesWhile the current design addresses software-based hardening, implementing secure boot and a robust OTA update mechanism is critical for the long-term security and remote management of a fleet of gateways.26 These features ensure that the device always boots from a verified firmware image and can be patched against new vulnerabilities without requiring physical intervention.
  • Establish a Data Observability PipelineTo maintain the integrity of the normalized data stream, a data observability pipeline should be implemented. This would monitor data for quality issues, detect anomalies, and ensure that data is not transformed in a way that makes the raw information irrecoverable, which is a key limitation of some ETL processes.4
  • Conduct Rigorous Scalability TestingWhile the architecture is designed for scalability, it is imperative to conduct rigorous performance and scalability testing. This is necessary to ensure the gateway can handle the “massive data volume and velocity” from a large number of connected devices, especially with high-frequency data streams.4 The performance of the Python libraries under load, particularly for asynchronous operations, should be carefully validated.
  • Explore Alternative Deployment ModelsConsider exploring the “in-meter” deployment model for certain use cases.7 This could simplify installations and further reduce costs, especially for large-scale smart metering rollouts.
  • Ensure Operational IntegrationSuccessful deployment requires close collaboration with both OT and IT teams. This collaboration is essential for building an accurate host allowlist and for ensuring a smooth transition from legacy SCADA systems to a modern, cloud-based data architecture.28

Works cited

  1. Understanding Metering Protocols: IEC 62056 and Beyond – clou global, accessed August 19, 2025, https://clouglobal.com/understanding-metering-protocols-iec-62056-and-beyond/
  2. Protocols in Building Systems: A Guide – Number Analytics, accessed August 19, 2025, https://www.numberanalytics.com/blog/protocols-in-building-systems-guide
  3. How to Select the Right Industrial Ethernet Standard: Do You Speak Multiprotocol? – Texas Instruments, accessed August 19, 2025, https://www.ti.com/document-viewer/lit/html/SSZTB20
  4. Building a Data Acquisition System for Manufacturing | ReductStore, accessed August 19, 2025, https://www.reduct.store/blog/daq-manufacture-system
  5. Challenges in Data Science: Acquisition, Normalization & Cleansing – Narrative Blog, accessed August 19, 2025, https://blog.narrative.io/challenges-in-data-science-acquisition-normalization-cleansing
  6. IoT Energy Meter Gateway for Smart Energy Management | by HashStudioz Technologies, accessed August 19, 2025, https://medium.com/@hashstudioz/iot-energy-meter-gateway-for-smart-energy-management-d9c53bcb82b9
  7. What is an in-meter gateway? – Wirepas, accessed August 19, 2025, https://wirepas.com/blog/what-is-an-in-meter-gateway/
  8. DLMS client configuration example – Teltonika Networks Wiki, accessed August 19, 2025, https://wiki.teltonika-networks.com/view/DLMS_client_configuration_example
  9. Object Identification System – Energy Central, accessed August 19, 2025, https://www.energycentral.com/intelligent-utility/post/object-identification-system-ECc04M6TpwXVXZg
  10. dlms-cosem – PyPI, accessed August 19, 2025, https://pypi.org/project/dlms-cosem/
  11. Gurux.DLMS.Client | for DLMS smart meters, accessed August 19, 2025, https://www.gurux.fi/Gurux.DLMS.Client
  12. Client — PyModbus 4.0.9dev4 documentation, accessed August 19, 2025, https://pymodbus.readthedocs.io/en/latest/source/client.html
  13. pymodbus – PyPI, accessed August 19, 2025, https://pypi.org/project/pymodbus/
  14. BAC0 – PyPI, accessed August 19, 2025, https://pypi.org/project/BAC0/
  15. BAC0 documentation, accessed August 19, 2025, https://bac0.readthedocs.io/
  16. BACnet-2-OPC – MBS GmbH, accessed August 19, 2025, https://christian-klinger-4rf3.squarespace.com/s/2023-06-01_BACnet-2-OPC_EN.pdf
  17. Python OPC-UA Documentation – Read the Docs, accessed August 19, 2025, https://readthedocs.org/projects/python-opcua/downloads/pdf/stable/
  18. Python OPC UA | Data-Driven Engineering – APMonitor, accessed August 19, 2025, https://apmonitor.com/dde/index.php/Main/OPCTransfer
  19. Unlocking the Power of Clean Data: A Complete Guide to Data Normalization – CEI, accessed August 19, 2025, https://www.ceiamerica.com/blog/unlocking-the-power-of-clean-data-a-complete-guide-to-data-normalization/
  20. Data Normalization Explained: An In-Depth Guide – Splunk, accessed August 19, 2025, https://www.splunk.com/en_us/blog/learn/data-normalization.html
  21. pandas.json_normalize — pandas 2.3.1 documentation – PyData |, accessed August 19, 2025, https://pandas.pydata.org/docs/reference/api/pandas.json_normalize.html
  22. Canonical Data Models Explained: Benefits, Tools, and How to Get Started – Alation, accessed August 19, 2025, https://www.alation.com/blog/canonical-data-models-explained-benefits-tools-getting-started/
  23. Canonical Data Models (CDMs) Explained – Splunk, accessed August 19, 2025, https://www.splunk.com/en_us/blog/learn/cdm-canonical-data-model.html
  24. UCUM / About UCUM, accessed August 19, 2025, https://ucum.org/about
  25. UCUM and CDISC Codelists | CDISC, accessed August 19, 2025, https://www.cdisc.org/kb/articles/ucum-and-cdisc-codelists
  26. How Gateways Can Secure IoT Architectures | Bench Talk – Mouser Electronics México, accessed August 19, 2025, https://www.mouser.mx/blog/how-gateways-secure-iot-architectures
  27. Industrial Network Security (ICS) | Trend Micro (US), accessed August 19, 2025, https://www.trendmicro.com/en_us/business/products/iot/industrial-network-security.html
  28. SCADA in Fragmentation Industries, accessed August 19, 2025, https://www.scadainfo.com/scada-in-fragmentation-industries/
  29. Sign Requests with HMAC – Tyk.io, accessed August 19, 2025, https://tyk.io/docs/basic-config-and-security/security/authentication-authorization/hmac-signatures/
  30. HMAC keys | Cloud Storage | Google Cloud, accessed August 19, 2025, https://cloud.google.com/storage/docs/authentication/hmackeys
  31. Understanding Read-Only and Its Role in File Systems | Lenovo US, accessed August 19, 2025, https://www.lenovo.com/us/en/glossary/read-only/
  32. Advantages and disadvantages of read-only filesystem – Super User, accessed August 19, 2025, https://superuser.com/questions/206668/advantages-and-disadvantages-of-read-only-filesystem
  33. 5 Steps to Successful Allowlisting Deployments in OT | Verve Industrial, accessed August 19, 2025, https://verveindustrial.com/resources/blog/5-steps-to-successful-whitelisting-deployments-in-ot-2/
  34. Guide to Application Whitelisting – NIST Technical Series Publications, accessed August 19, 2025, https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-167.pdf
  35. Using Argparse and Json together – python – Stack Overflow, accessed August 19, 2025, https://stackoverflow.com/questions/28348117/using-argparse-and-json-together
  36. SensorThings API – Getting Started with MQTT, accessed August 19, 2025, https://developers.sensorup.com/tutorials/mqtt/
  37. SensorThings API – Wikipedia, accessed August 19, 2025, https://en.wikipedia.org/wiki/SensorThings_API


Key terms in plain language

Open a term for a concise explanation of language used on this page.

Bandwidth

The amount of data a connection can carry in a given time, usually measured in Mbps or Gbps. More bandwidth supports more users, devices, and simultaneous applications.

Latency

The time it takes data to travel between two points. Lower latency improves voice, video meetings, cloud applications, gaming, and other real-time services.

API

An application programming interface is a defined way for software systems to exchange data or request functions from one another.

Artificial Intelligence (AI)

Software designed to perform tasks involving prediction, classification, generation, reasoning, or decision support. Business use still requires clear data, governance, security, and human accountability.

Cloud Computing

Computing resources—such as applications, servers, storage, or databases—delivered from remote infrastructure and scaled as requirements change.

Infrastructure as a Service (IaaS)

Cloud-based servers, storage, and networking that customers configure and manage without owning the underlying data-center hardware.