Traffic Verification Based on API Function Control in IIoT Service Cluster

Typically, traffic within a cluster of IIoT (Industrial Internet of Things) services is secure by default. However, accidental access by privileged users inside the cluster, compromised services, and malicious requests carefully constructed by attackers can cause sensitive data leakage and threaten the data security of IIoT services and even the security of other applications themselves. In order to defend against possible threats from inside the IIoT service cluster, we propose an approach to implement traffic verification inside the IIoT service cluster based on API function control. The API function of the service, when handling requests from IIoT devices or other services, will asynchronously request the internal verification service to verify whether the request comes from a reliable intracluster service or IIoT device, and decide whether to return a response to the requester based on the result of the verification.