Abstract: An example system includes a vehicle having a first network and a second network of a different type than the first network; and a converged network device (CND) interposed between the first network and the second network and comprising a plurality of ports on the first network; wherein: the CND facilitates communications between the first and the second networks; and a first port of the plurality mirrors a second port of the plurality.

Abstract: An example system includes a mobile system having a first network zone and a second network zone of a different type than the first network zone; a converged network device (CND) interposed between the first network zone and the second network zone, the CND comprising: a policy manager circuit structured to interpret a policy comprising a network regulation description; a configuration circuit structured to configure a first network interface circuit in response to the network regulation description, and to configure a gatekeeper interface circuit in response to the network regulation description; wherein the first network interface circuit is structured to regulate communications between end points of the first network zone and end points of the second network zone; and wherein the gatekeeper interface circuit is structured to regulate communications between end points of the first network zone with at least one of an external communications portal or an external device.

Abstract: An example system includes a vehicle having a first network zone and a second network zone of a different type than the first network zone, a converged network device (CND) interposed between the zones, where the CND includes a policy management circuit that interprets a policy including a network regulation description, a configuration circuit that configures network interface circuit(s) in response to the policy, and the interface circuit(s) that regulate communications between end points of the network zones.

Abstract: An example system includes a vehicle having a first network and a second network of a different type than the first network; and a communication device interposed between the first network and the second network and structured to: generate network status data by monitoring communications of one or more devices on the first and/or the second networks; and transmit the network status data to a sensor device external to the vehicle.

Abstract: An example system includes a mobile system having an Ethernet based network and a controller area network (CAN) based network; a CAN control device disposed onboard the mobile system, connected to the CAN based network, and structured to control operation of a component of the mobile system; an Ethernet control device disposed onboard the mobile system, connected to the Ethernet based network, and structured to electrically communicate with the CAN control device; an Ethernet switch disposed onboard the mobile system and having a plurality of physical ports connected to the Ethernet based network; a CAN gateway disposed onboard the mobile system and connected to the CAN based network and the Ethernet switch; and a network convergence circuit defined at least in part by the Ethernet switch and/or the CAN gateway, and structured to facilitate electronic communications between the Ethernet control device and the CAN control device.

Abstract: An example method includes interpreting a policy comprising a network usage permission description; configuring a gatekeeper interface circuit in response to the network usage permission description; and regulating communications, using the gatekeeper interface circuit, between: end points of at least one network zone of a mobile system; and at least one of an external communications portal or an external device.

Abstract: An example system includes a system comprising a vehicle having a first network and a second network; a first device on the first network; and a converged network device (CND) interposed between the first network and the second network and structured to facilitate communications between the first device and the second network; wherein the first network is of a different type than the second network.

Abstract: An example system includes a vehicle having a first network zone and a second network zone of a different type than the first network zone; a gatekeeper interface circuit interposed between the first network zone and a transceiver selectively couplable to an external device, and further interposed between the second network zone and the transceiver; a policy manager circuit structured to interpret a policy comprising an external data access description; and a configuration circuit structured to configure the gatekeeper interface circuit in response to the external data access description; wherein the gatekeeper interface circuit is structured to regulate communications between end points of the first network zone and the transceiver, and to regulate communications between end points of the second network zone and the transceiver.

Abstract: An example system includes a first network zone of a mobile system comprising a first interconnected plurality of end points; a second network zone of the mobile system comprising a second interconnected plurality of end points; a converged network device (CND) interposed between the first network zone and the second network zone, wherein the CND is configured to regulate communications between end points of the first network zone and the second network zone; a first mobile system controller on the first network zone; a second mobile system controller on the second network zone; and a network redundancy circuit structured to selectively provide a regulation control command; wherein the CND is further configured to adjust the regulating the communications between end points of the first network zone and end points of the second network zone in response to the regulation control command.

Abstract: An example system includes a mobile system having at least one network zone; a policy manager circuit structured to interpret a policy comprising an external data quantity description; a configuration circuit structured to configure a gatekeeper interface circuit in response to the external data quantity description; and the gatekeeper interface circuit interposed between the at least one network zone and a transceiver selectively couplable to an external device, and further structured regulate communications between end points of the at least one network zone and the transceiver.

Abstract: An example system includes a vehicle having at least one network zone; a policy manager circuit structured to interpret a policy including a local domain name server (DNS), an authorization description, and a firewall configuration description; a configuration circuit structured to configure a gatekeeper interface circuit in response to the policy; and a gatekeeper interface circuit interposed between the at least one network zone and an external communication portal selectively couplable to an external device, and further structured to regulate communications between end points of the at least one network zone and the external communication portal.

Abstract: An example system includes a vehicle having at least one network zone, and a policy manager circuit that interprets a policy including a local DNS, an authorization description, and a firewall configuration description. The system includes a configuration circuit that configures a gatekeeper interface circuit in response to the policy, where the gatekeeper interface circuit is interposed between one of the network zones and an external communication portal, and regulates communications between end points of the network zone and the external communication portal.

Abstract: An apparatus for managing vehicle data collection including a policy acquisition circuit, a parameter acquisition circuit, and a parameter storage circuit. The policy acquisition circuit structured to interpret a vehicle policy data value including a requested vehicle property. The parameter acquisition circuit is structured to interpret a plurality of vehicle parameter values from a plurality of providing end points on at least one network zone of a vehicle. The parameter storage circuit is structured to selectively store at least a portion of the plurality of vehicle parameter values, determine a reserved memory amount associated with at least a portion of the plurality of vehicle parameter values by determining an amount of data to be collected to support plurality of vehicle parameter values; and perform the selectively storing the plurality of vehicle parameter values in response to the reserved memory amount.

Abstract: An example system includes a vehicle having at least one network zone; a policy manager circuit structured to interpret a policy comprising an external data routing description, wherein the policy includes a default policy value; a configuration circuit structured to configure a gatekeeper interface circuit in response to the external data routing description and the external data service description; the gatekeeper interface circuit interposed between the at least one network zone and at least one external communication portal selectively couplable to an external device; and wherein the gatekeeper interface circuit is structured to regulate communications between end points of the first network zone and the at least one external communication portal, and to regulate communications between end points of the second network zone and the at least one external communication portal.

Abstract: An example system includes a vehicle having an Ethernet based network and a controller area network (CAN) based network; a CAN vehicle control device disposed onboard the vehicle and structured to control operation of a component of the vehicle; an Ethernet vehicle control device disposed onboard the vehicle and structured to electrically communicate with the CAN vehicle control device; an Ethernet switch disposed onboard the vehicle and having a plurality of physical ports connected to the Ethernet based network; a CAN gateway disposed onboard the vehicle and connected to the CAN based network and the Ethernet switch; and a network convergence circuit defined at least in part by the Ethernet switch and/or the CAN gateway, and structured to facilitate electronic communications between the Ethernet vehicle control device and the CAN vehicle control device.

Abstract: An example system includes a vehicle having a first network zone and a second network zone of a different type than the first network zone, a converged network device (CND) interposed between the zones, where the CND includes a policy management circuit that interprets a policy including a network regulation description, a configuration circuit that configures network interface circuit(s) in response to the policy, and the interface circuit(s) that regulate communications between end points of the network zones.

Abstract: An example system includes a vehicle having at least one network zone; a policy manager circuit structured to interpret a policy including a local domain name server (DNS), an authorization description, and a firewall configuration description; a configuration circuit structured to configure a gatekeeper interface circuit in response to the policy; and a gatekeeper interface circuit interposed between the at least one network zone and an external communication portal selectively couplable to an external device, and further structured to regulate communications between end points of the at least one network zone and the external communication portal.

Abstract: An example system includes a vehicle having at least one network zone; a policy manager circuit structured to interpret a policy comprising an external data routing description, wherein the policy includes a default policy value; a configuration circuit structured to configure a gatekeeper interface circuit in response to the external data routing description and the external data service description; the gatekeeper interface circuit interposed between the at least one network zone and at least one external communication portal selectively couplable to an external device; and wherein the gatekeeper interface circuit is structured to regulate communications between end points of the first network zone and the at least one external communication portal, and to regulate communications between end points of the second network zone and the at least one external communication portal.

Abstract: An apparatus for managing vehicle data collection including a remote access execution circuit, a property translation circuit, a parameter acquisition circuit, a remote operation circuit, and a parameter conditioning circuit. The remote access execution circuit interprets a remote access request value including a requested vehicle property and/or a vehicle function value. The property translation circuit determines: a property request value responsive to the requested vehicle property; and/or an actuator command value responsive to the vehicle function value. The parameter acquisition circuit interprets vehicle parameter values responsive to the property request value. The remote operation circuit provides the actuator command value to a vehicle network zone endpoint. The parameter conditioning circuit generates, responsive to the property request value, vehicle property data from the vehicle parameter values. The vehicle property data corresponds to the requested vehicle property.

Abstract: A computer-implemented system and method for secure authentication of IoT devices are disclosed. The method for secure authentication of IoT devices comprises establishing a network connection with a network operator server via a control channel, establishing identity of the network operator server using a pre-shared server key from one or more of pre-shared server keys, establishing identity of the IoT device using a pre-shared client key from one or more of pre-shared client keys and cryptographically generating a session key for a network session to allow secure data exchange between the network operator server and the IoT device. The cryptographically generated session key is used for securely authenticating application running on the authenticated IoT device.