Reference Architectures · Study deck
Choosing an IoT Architecture Pattern
Picture a cold-room sensor that must raise a local alarm even when the outside link is down.
Blueprint Bina is your guide for this deck.
After studying this chapter
Learning objectives
You will be able to:
- Classify system flows (telemetry, commands, alerts, configuration, diagnostics, analytics, workflows) by response target, autonomy need, and ownership before choosing a placement pattern
- Choose the simplest architecture pattern (cloud-centered, gateway/fog, edge-autonomous, hybrid/federated) that satisfies the hardest flow without forcing every flow into the same tier
- Write an architecture selection record naming context, flow groups, chosen pattern, rejected alternatives, validation evidence, and review condition
- Select validation evidence (flow trace, outage drill, boundary test, operations drill, data-quality review) that proves a placement choice still holds
Major section
Start With the Decision You Can Defend
Those two needs already suggest different places for fast action and long-term analysis.
- A reference architecture is a guide, not a finished design.
- Its boxes do not prove capacity, security, cost, or support at the real site.
- Each box must answer a need on the card.
Major section
Flow Evidence Guides Selection
Architecture selection is not a vote for cloud, edge, gateway, or a favorite reference model.
- Beginner RuleChoose the simplest architecture pattern that satisfies the hardest flow, then record what the choice hides and which evidence would require another review.
- A single IoT system can contain several different flows.
- Periodic telemetry can tolerate delay, but a bounded local-control flow may need to continue when upstream services are unavailable.
- Diagnostics may need operating records, while analytics can often run centrally after data is buffered.
Major section
Flow Evidence Guides Selection (continued)
Treating every flow as if it has the same timing, autonomy, and ownership need is the usual source of weak architecture choices.
- For example, a campus building system might publish zone temperature telemetry over MQTT every minute, keep actuator setpoints inside a BACnet or Modbus gateway, and send nightly energy summaries to a time-series service.
- Those flows can share device identity, timestamp conventions, and inventory records, but their placement proof is different: outage logs for local control, buffer-drain evidence for telemetry, schema checks for analytics, and support records for operations.
- It should also name which deployment inventory changes would invalidate the comparison.
Major section
Split Requirements Before Patterns
The practical move is to split the system by flow before comparing patterns.
- Telemetry, alerts, commands, configuration, diagnostics, analytics, and user workflows can share infrastructure only where their timing, autonomy, data-quality, and ownership needs are compatible.
- Device logic keeps a local action and safe state close to the physical event.
- The paths in the Different flows can use different placement rules inside one architecture diagram show why one IoT system may use several placement rules.
- The simplest flow should not force every other flow into the same tier.
Major section
Split Requirements Before Patterns (continued)
The paths in Figure: Different flows can use different placement rules inside show why one IoT system may use several placement rules.
- A gateway can buffer telemetry and make site decisions while cloud services hold history, summaries, and analytics.
- Selection RuleThe hardest flow sets the minimum local capability.
- Environmental telemetry can be buffered and uploaded later.
Major section
Split Requirements Before Patterns (continued)
A cloud report can arrive later without blocking a time-sensitive local response, and a buffered event can replay after a link returns.
- Cloud-CenteredUse when devices can report upstream, local action is limited, and disconnected operation has low consequence.
- Gateway or FogUse when local buffering, protocol translation, filtering, aggregation, or site-level ownership is needed.
- Edge-AutonomousUse when bounded local decisions must continue without waiting for upstream connectivity or remote services.
Major section
Split Requirements Before Patterns (continued)
Edge autonomy needs outage logs showing local control continues without upstream access.
- Hybrid or FederatedUse when several sites, business units, or operational domains need local control plus shared coordination.
- The comparison in Figure: Pattern comparison should explain why each flow fits asks which flow sets the hardest requirement.
- Context: what is sensed, controlled, reported, or operated.
Major section
Split Requirements Before Patterns (continued)
Cloud-centered placement fits reporting with limited local action and low outage cost; its evidence includes schema checks for analytics.
- Gateway or fog work can buffer, translate, or filter data near a site, with drain tests for queued telemetry.
- Hybrid or federated placement adds boundary tests and interface owners across sites.
- A building may use more than one pattern for comfort control, telemetry, maintenance, and history.
- Maintenance diagnostics need device health, stale-reading, calibration, and replacement records.
Major section
Split Requirements Before Patterns (continued)
The full reading conveys: Pattern comparison should explain why each flow fits a cloud-centered, gateway or fog, edge-autonomous, or hybrid pattern, and what evidence would force another review.
- The fields below keep a hybrid or federated design precise enough for another reviewer to challenge.
- Rejected alternatives: what was simpler or richer, and why it did not fit.
- Validation evidence: traces, outage drills, boundary tests, inspections, or operating records.
Major section
Testable Architecture Selection
The under-the-hood question is not whether the pattern name sounds correct.
- The route in Figure: The review route moves from context and flow links site facts to design choice and tests; note when to review it again.
- Outage drill: proof of what continues, buffers, stops, or degrades when connectivity is unavailable.
- The route in the The review route moves from context and flow evidence to pattern choice, model lens, validation evidence, and a review condition tied to autonomy, data handling, ownership, operations, or evidence changes diagram links site facts to design choice and tests; note when to review it again.
- The three labels prevent a one-box testable architecture selection reading.
Major section
Testable Architecture Selection (continued)
Their relevance to hybrid/federated is: The review route moves from context and flow evidence to pattern choice, model lens, validation evidence, and a review condition tied to autonomy, data handling, ownership, operations, or evidence changes.
- Boundary test: proof that a device, gateway, cloud service, or application can change without rewriting unrelated layers.
- Operations drill: proof that field or support teams can commission, diagnose, update, and retire components.
- The reference model lens should expose the dominant review risk.
Major section
Testable Architecture Selection (continued)
A view-based lens helps when function, information, deployment, and operations views need separate reviewers.
- Data-quality review: proof that timestamps, freshness, duplicates, summaries, and missing data are represented correctly.
- A compact layer lens may be enough for broad device, network, processing, and application responsibilities.
- A testable selection has pass/fail evidence for each boundary it claims.
Major section
Testable Architecture Selection (continued)
A service-support lens helps when registration, routing, support services, data handling, and applications need clear boundaries.
- A constrained-device lens helps when energy, topology, retry behavior, local storage, or maintenance interval drives the design.
- If gateway autonomy is the reason for the pattern, the outage drill should show which commands continue, which telemetry queues, how stale readings are labeled, and when upstream reconciliation occurs.
- If central analytics is the reason, the evidence should show accepted schemas, duplicate handling, late-arriving data policy, and the owner of model or dashboard changes.
Deck summary
Key takeaways
Those two needs already suggest different places for fast action and long-term analysis.
- Architecture selection is not a vote for cloud, edge, gateway, or a favorite reference model.
- Treating every flow as if it has the same timing, autonomy, and ownership need is the usual source of weak architecture choices.
- The practical move is to split the system by flow before comparing patterns.
- The paths in Figure: Different flows can use different placement rules inside show why one IoT system may use several placement rules.
Retrieval practice
Recall check 1 of 4

Blueprint Bina says: answer from memory, then check your reasoning.
Q1A building-monitoring system has telemetry, local control, diagnostics, and analytics flows. What should the team do before choosing cloud, gateway, edge, or hybrid placement?
Show answer
Answer: B Mixed IoT systems need flow-by-flow placement: local-control paths may require gateway or edge autonomy, while telemetry, diagnostics, and analytics can often use buffered or central paths.
Retrieval practice
Recall check 2 of 4

Blueprint Bina says: answer from memory, then check your reasoning.
Q2A system has a local equipment-control flow that must continue during upstream outages and a trend-reporting flow that can wait. Which selection is strongest?
Show answer
Answer: D Architecture selection should split mixed requirements by flow and record the pattern, evidence, rejected alternatives, owner, and review condition.
Retrieval practice
Recall check 3 of 4

Blueprint Bina says: answer from memory, then check your reasoning.
Q3A battery field node has sparse links, local storage, and long service gaps. Which model lens best exposes its main review risk?
Show answer
Answer: B Those are the pressures that can break the field design.
Retrieval practice
Recall check 4 of 4

Blueprint Bina says: answer from memory, then check your reasoning.
Q4Why should an architecture selection record include a review condition?
Show answer
Answer: D Selection records need review conditions because flow, autonomy, data, ownership, operations, and evidence can drift after the original review.
Print reference
Answers
Answer key.
- B · Mixed IoT systems need flow-by-flow placement: local-control paths may require gateway or edge autonomy, while telemetry, diagnostics, and analytics can often use buffered or central paths.
- D · Architecture selection should split mixed requirements by flow and record the pattern, evidence, rejected alternatives, owner, and review condition.
- B · Those are the pressures that can break the field design.
- D · Selection records need review conditions because flow, autonomy, data, ownership, operations, and evidence can drift after the original review.