Abstract: In one aspect, a computerized method for implementing a software data diode-TCP proxy with a User Datagram Protocol (UDP) across a wide area network (WAN) comprising. The method includes the step of providing a WAN data diode using a uni-directional semantics protocol. The method includes the step of providing a set of data diode proxies in either end of a point-to-point WAN link. The method includes the step of providing a symmetric key encryption semantics to extend the WAN data diode securely across a specified WAN, wherein the symmetric key encryption semantics are implemented through the set of data diode proxies on either end of the point-to-point WAN link. The method includes the step of employing a uni-directional protocol in the WAN communication. The method includes the step of, with data diode proxies, terminating one or more data channels on either end of the point-to-point WAN link or transporting a requisite information across the WAN over the uni-directional protocol.

Abstract: In one aspect, a computerized method for implementing an automatic centralized firewall for industrial Internet of Things-based (IIOT) wide area network (WAN) fabric includes the step of providing an automatic centralized firewall in an IIOT-based WAN fabric. The method includes the step of strictly operating the automatic centralized firewall in a white-listed manner. The method includes the step of automatically discovering a set of subnet end points and a set of network address ranges for each network in the IIOT-based WAN fabric. The method includes the step of providing a set of flow rues at both ends of each machine network in the WAN fabric.

Abstract: In one aspect, a computerized method for implementing a machine-identity firewall includes the step of providing a bi-directional Remote procedure call (RPC)-style channels within a uni-directional Hypertext Transfer Protocol Secure (HTTPS) tunnel. The method includes the step of implementing a proxy authentication and a stream-binder on behalf of an entity which cannot embed a native-tunnel endpoint, wherein a proxy end point of the proxy authentication converts a first authentication format to another authentication format and bridges a communication path to another communication path. The method includes the step of implementing a for security key management. The method includes the step of implementing a stream firewall, wherein the stream firewall provides access control on a segmented per-stream basis.

Abstract: In one aspect, a computerized method for implementing edge web services includes the step of providing an edge device. The edge device is provided for free to a customer. The method includes the step of monitoring a usage on the edge device by the customer. The method includes the step of charging an edge-device entity based on the usage of the edge device and an application in the edge device. An orchestrator communicates the edge device usage statistics to an enterprise system that provided the edge device to the customer.