Abstract: An application specific gateway device includes a device data direction processor connectable to a particular type of internet of things (IoT) device and a client data direction processor connectable to a client of the IoT device. A data direction engine is connected between the device data direction processor and the client data direction processor. A communication state of the data direction engine is controllable by the device data direction processor to determine an enabled direction of data flow between the device data direction processor and the client data direction processor. The device data direction processor is configured to identify data that is received from the IoT device or from the data direction engine and that corresponds to a predetermined allowed data and communicate the received data, and to prevent communication of the received data if the received data does not correspond to the predetermined allowed data.