Skip to content

Latest commit

 

History

History
31 lines (25 loc) · 1.19 KB

architecture.md

File metadata and controls

31 lines (25 loc) · 1.19 KB
Raw

General Platform Architecture

At a high level, the architecture of the platform is based on four components - a web backend, a web frontend, and the individual devices, with a redis database being leveraged as a message broker and authentication system for the devices:

general-architecture

Device Authorization

In order for devices to receive messages, they must first authenticate with the redis service, which is what we're using to act as a message broker. This authentication scheme is handled by using redis ACL entries, with a global provisioning ACL burned into devices during firmware flashing.

sequenceDiagram
    Embedded Device->>Redis: AUTH <burn-in-acl>
    Redis-->>Embedded Device: +OK
    Embedded Device->>Redis: LPOP available_ids
    Redis-->>Embedded Device: 4af2bbd1
    Embedded Device->>Redis: AUTH 4af2bbd1
    Redis-->>Embedded Device: +OK
    note over Embedded Device,Redis: authorized for LPOP
    loop Every Second
        Embedded Device->>Redis: LPOP messages:4af2bbd1
        Redis-->>Embedded Device: <state-message>
    end

← README