Sensors To Cities

How to Design IoT & Smart Infrastructure

52 modules

210 lessons

—

Part 1

Course Setup and the Incremental Ladder

Course Setup and the Incremental LadderSign in
Why Sensors to CitiesSign in
How to Use This CourseSign in
The Incremental Ladder (Step 0 to Step 6)Sign in
The Course LensesSign in
Diagram Legend and Notation TypesSign in

Part 2

What Is IoT and Smart Infrastructure?

What Is IoT and Smart Infrastructure?Sign in
From "Device with Wi-Fi" to InfrastructureSign in
Consumer vs Industrial vs Smart CitySign in
Systems-of-Systems ThinkingSign in

Part 3

Sensing, Actuation, and Feedback Loops

Sensing, Actuation, and Feedback LoopsSign in
Measure-Decide-Act: the Minimal Control LoopSign in
Physical to Digital: signals, samples, and eventsSign in
Open-Loop vs Closed-Loop ControlSign in

Part 4

Constraints in IoT Systems

Constraints in IoT SystemsSign in
Power, Bandwidth, Compute, Cost: Constraints as Architecture InputsSign in
Harsh Environments: When the World Is Part of the SystemSign in
Longevity and Obsolescence: Designing for 10+ Years of ChangeSign in

Part 5

Reference Layers in IoT Architecture

Reference Layers in IoT ArchitectureSign in
Layered Model: Device, Connectivity, Edge/Gateway, Cloud Platform, ApplicationSign in
Control Planes vs Data Planes: Separating Configuration/Identity from Telemetry/CommandsSign in
Responsibilities and SLIs: Where You Measure Health and Who Owns Which BoundarySign in

Part 6

Diagramming IoT and Smart City Systems

Diagramming IoT and Smart City SystemsSign in
Device Stack Diagrams: MCU, Sensors, Radios, Power, and Firmware BoundariesSign in
Edge-Gateway-Cloud Topologies: Making Data and Control Paths ExplicitSign in
City-Scale Maps and Overlays: Domains, Zones, Tenants, and Failure DomainsSign in

Part 7

Step 0 Sensors: Types and Characteristics

Step 0 Sensors: Types and CharacteristicsSign in
Sensor Families: Environmental, Motion, Position, Meters, and What Each Implies About Sampling and TrustSign in
Range, Resolution, Accuracy, Drift: How Sensors Fail and How You Detect Quiet DegradationSign in
Noise and Sampling Strategy: When Measurement Becomes a Data-Quality Problem at the SourceSign in

Part 8

Step 0 Actuators and Mechanisms

Step 0 Actuators and MechanismsSign in
Actuator Types: Relays, Motors, Valves, Lighting, Locks as "Outputs with Consequences"Sign in
Power Budgets and Duty Cycles: Thermal and Electrical Constraints as System LimitsSign in
Fail-Safe Positions and Mechanics: Designing Safe Behavior When Control Is LostSign in

Part 9

Step 0 Low-Power Embedded Devices

Step 0 Low-Power Embedded DevicesSign in
MCU vs MPU vs SoC: Capability Envelopes and What They Buy You in Software StructureSign in
Sleep/Wake and Duty Cycling: Energy as the Primary Scheduling ConstraintSign in
Local Storage and Memory Limits: Buffering, Loss, and ExplainabilitySign in

Part 10

Step 0 Local Buses and Short-Range Links

Step 0 Local Buses and Short-Range LinksSign in
I2C, SPI, UART, and GPIO Concepts as a Local Reliability BoundarySign in
Polling and Bus Topologies as Failure Propagation DesignSign in
First Integration Failure Modes as Systems BugsSign in

Part 11

Step 0 Connectivity Protocols: First Look

Step 0 Connectivity Protocols: First LookSign in
Wi-Fi, BLE, LPWAN-ish, Cellular, and Ethernet - Choosing Transport by ConstraintSign in
Range, Bandwidth, Power, and Cost Trade SpaceSign in
Matching Connectivity to Use Case - Telemetry-Only vs Command-and-ControlSign in

Part 12

Step 0 Single Device, Single Link Architectures

Step 0 Single Device, Single Link ArchitecturesSign in
The Minimal "Thing" - Sensor + Controller + Link + Simple BackendSign in
First Telemetry Loop - Sense -> Send -> Log, and What "Loss" MeansSign in
Why This Breaks at Scale - The Missing Concerns That Force Step 1 and BeyondSign in

Part 13

Step 1 Device Identity and Addressing

Step 1 Device Identity and AddressingSign in
Hardware Identifiers - Serials, MACs, and Why They Are Not Enough on Their OwnSign in
Logical IDs and Namespaces - Stable Identities Across Networks, Vendors, and ReplacementsSign in
Identity vs Addressing - Separating Who a Device Is from Where It Currently IsSign in

Part 14

Step 1 Provisioning and Onboarding

Step 1 Provisioning and OnboardingSign in
Manufacturing vs Field Provisioning - Different Trust Assumptions and Different WorkflowsSign in
Keys, Certs, Secure Elements (Conceptual) - Bootstrapping Secure Comms Without Leaking SecretsSign in
Commissioning UX - Installer Tools, QR Flows, and How Operational Mistakes Become Security IncidentsSign in

Part 15

Step 1 Lifecycle States and Transitions

Step 1 Lifecycle States and TransitionsSign in
Fleet State Machines - Staging, Active, Suspended, and Decommissioned as Explicit System RealitySign in
Faulted and Quarantined Modes - Containment as a First-Class Design GoalSign in
Maintenance States - Designing Transitions That Do Not Strand Devices or DataSign in

Part 16

Step 1 Device Registry and Digital Twins (Conceptual)

Step 1 Device Registry and Digital Twins (Conceptual)Sign in
Registry as System of Record - Why "Inventory" Is a Core Platform ServiceSign in
Digital Twin Basics - Configuration, Status, and Telemetry as a Unified RepresentationSign in
Assets vs Devices vs Locations - Modeling the World You Operate, Not Just the Hardware You ShipSign in

Part 17

Step 1 Configuration and Policy Management

Step 1 Configuration and Policy ManagementSign in
Per-Device vs Group Policy - Scaling Intent Without Losing Exceptions and OverridesSign in
Rollouts and Safety - Staged Configuration Changes and Blast-Radius ControlSign in
Misconfiguration Recovery - Detecting, Rolling Back, and Preventing RepeatsSign in

Part 18

Step 1 Inventory, Ownership, and Metadata

Step 1 Inventory, Ownership, and MetadataSign in
Ownership and Zones - Mapping Devices to Customers, Districts, and AgenciesSign in
Metadata and Tagging - Capabilities, Firmware Versions, and Status as Queryable Control SurfacesSign in
Governance of Visibility and Control - Who Can See and Operate What, and Why It Must Be AuditableSign in

Part 19

Step 2 Edge, Gateway, and Cloud Roles

Step 2 Edge, Gateway, and Cloud RolesSign in
Responsibility Boundaries - Device vs Gateway vs Cloud Services, and What Each Must Remain Correct Under FailureSign in
Thin vs Smart Devices - Capability Distribution as a Lifecycle and Security DecisionSign in
Gateways as Translators - Aggregation, Buffering, and Protocol Translation as System StabilizersSign in

Part 20

Step 2 Partitioning Logic: What Runs Where

Step 2 Partitioning Logic: What Runs WhereSign in
Filtering and Aggregation at the Edge - Reducing Bandwidth and Improving Resilience with Local DecisionsSign in
Local vs Cloud Control - Latency and Reliability Requirements that Force Control PlacementSign in
Cost and Operability - Where Complexity Lives and Who Must Debug It at 3 a.m.Sign in

Part 21

Step 2 Handling Intermittent Connectivity

Step 2 Handling Intermittent ConnectivitySign in
Store-and-Forward - Buffering Semantics and Durability ExpectationsSign in
Degraded Modes - What a Device or Gateway Does When It Cannot Reach the CloudSign in
Reconciliation After Reconnect - Deduplication, Ordering, and Eventual Truth for Telemetry and CommandsSign in

Part 22

Step 2 Edge Application Models

Step 2 Edge Application ModelsSign in
Gateway App Models Conceptually - Containers or Processes as Deployable Edge WorkloadsSign in
Secure Deployment and Updates - Pushing Code to the Edge Without Creating a New Attack SurfaceSign in
Sandboxing and Resource Limits - Preventing One Workload from Destabilizing the Whole SiteSign in

Part 23

Step 2 Cloud Services for IoT

Step 2 Cloud Services for IoTSign in
Core Platform Services - Messaging, Registry, and Device Management Roles (Conceptual)Sign in
Processing and Analytics Stack - Turning Device Data into Usable System OutputsSign in
Enterprise Integration Boundaries - APIs and Interoperability with Systems of RecordSign in

Part 24

Step 2 Edge–Cloud Architecture Patterns

Step 2 Edge–Cloud Architecture PatternsSign in
Canonical Telemetry Path - Sensor -> Gateway -> Event Hub -> Processing -> StorageSign in
Local Clusters with Shared Gateways - Site-Level Isolation and Failure ContainmentSign in
Multi-Tier Edge Hierarchies - Field -> Regional -> Cloud Patterns for Geography and ResilienceSign in

Part 25

Step 3 Ingestion Pipelines for IoT Data

Step 3 Ingestion Pipelines for IoT DataSign in
Protocol Families Conceptually - MQTT-ish, HTTP-ish, Streaming Ingestion and Their SemanticsSign in
Ingestion Endpoints and Gateways - Control Load and Validate EarlySign in
Backpressure and Admission Control - When "Accept Everything" Triggers City-Scale OutagesSign in

Part 26

Step 3 Data Models for Telemetry and Events

Step 3 Data Models for Telemetry and EventsSign in
Metrics vs Events vs Logs from Devices - Choosing Representations That Fit Queries and DecisionsSign in
Common Schema Skeleton - Timestamp, Device ID, Measurements, Tags as Stable MinimalismSign in
Heterogeneous Devices - Schemas That Tolerate Missing Sensors and Evolving CapabilitiesSign in

Part 27

Step 3 Normalization and Enrichment

Step 3 Normalization and EnrichmentSign in
Unit Normalization and Calibration - Turning Raw Readings into Comparable SignalsSign in
Context Enrichment - Location, Asset, Topology, and Why "Where" Is Often the Primary IndexSign in
Validation and Filtering - Rejecting Bad Data Without Masking Real IncidentsSign in

Part 28

Step 3 Storage for IoT and Smart Infrastructure

Step 3 Storage for IoT and Smart InfrastructureSign in
Storage Families Conceptually - Time-Series, Lakes, Operational DBs, and How Workloads DifferSign in
Hot vs Cold Data - Retention, Aggregation, and Cost BoundariesSign in
Indexing by Time, Device, and Geography - Designing for the Queries Operations Teams Actually RunSign in

Part 29

Step 3 Streaming and Batch for IoT

Step 3 Streaming and Batch for IoTSign in
Real-Time Monitoring vs Batch Analytics - Freshness Versus Completeness as a Trade-OffSign in
Streaming Pipelines Integration - Connecting to Broader Event and Stream ArchitecturesSign in
Reprocessing and Backfills - Changing Logic Without Losing Auditability of Past OutputsSign in

Part 30

Step 3 Data Access Patterns and APIs

Step 3 Data Access Patterns and APIsSign in
Dashboards and Apps - Serving Humans and Systems With Different Latency and Correctness NeedsSign in
Query Dimensions - Location, Asset, Time Range, and Event Type as Core Access KeysSign in
Multi-Tenant Data Access Control - Enforcing Visibility Boundaries Without Fragmenting the PlatformSign in

Part 31

Step 4 Downlink Command Channels

Step 4 Downlink Command ChannelsSign in
Reliable vs Best-Effort Commands - Choosing Semantics That Match Actuator ConsequencesSign in
Queues, ACKs, Retries - Delivery Mechanics and the New Failure Modes They IntroduceSign in
Idempotency and Sequencing - Preventing Duplicate Actions and Conflicting CommandsSign in

Part 32

Step 4 Configuration, Firmware, and Policy Updates

Step 4 Configuration, Firmware, and Policy UpdatesSign in
OTA Update Patterns Conceptually - The Architecture of Changing Devices in the FieldSign in
Canary and Rollback - Minimizing Blast Radius Across Thousands of DevicesSign in
Update Safety Constraints - Power Loss, Intermittent Links, and Bricking PreventionSign in

Part 33

Step 4 Rules Engines and Automation Workflows

Step 4 Rules Engines and Automation WorkflowsSign in
ECA Rules - Event-Condition-Action as a Compositional Automation PrimitiveSign in
Schedules and Calendar Behaviors - Time as a Policy Input and a Source of SurprisesSign in
Cross-System Workflows - Coordinating Devices, Data, and External Services Without Runaway LoopsSign in

Part 34

Step 4 Closed-Loop Control in IoT

Step 4 Closed-Loop Control in IoTSign in
Sensor Feedback to Actuation - Closing the Loop and Naming Control BoundariesSign in
Latency and Jitter - When Network Variability Breaks Control StabilitySign in
Keeping Control Local - Deciding When Loops Must Stay On-Device or at the EdgeSign in

Part 35

Step 4 Human-in-the-Loop Operations

Step 4 Human-in-the-Loop OperationsSign in
Operator Overrides - Designing Safe Manual Control and Reconciliation with AutomationSign in
Alerts and Escalation - Turning Telemetry into Accountable ActionSign in
SCADA/BMS-like Integration Concepts - Interfacing with Existing Operational Systems and PracticesSign in

Part 36

Step 4 Orchestrating Fleets and Zones

Step 4 Orchestrating Fleets and ZonesSign in
Policy by Group - Buildings, Districts, and Domains as Orchestration UnitsSign in
Coordinated Behaviors - Demand Response and Other Multi-Device Programs as Distributed Control ProblemsSign in
Priority and Conflict Resolution - What Happens When Rules Disagree and Humans InterveneSign in

Part 37

Step 5 Threat Models for IoT and Smart Cities

Step 5 Threat Models for IoT and Smart CitiesSign in
Device, Network, and Cloud Threats - Mapping Attack Paths Across LayersSign in
Safety vs Security vs Privacy - Different Harms, Different Mitigations, Shared BoundariesSign in
Impact Analysis - What "Outage" Means When Systems Affect Public ServicesSign in

Part 38

Step 5 Device and Firmware Security

Step 5 Device and Firmware SecuritySign in
Secure Boot Conceptually - Establishing Trust from Power-On to RuntimeSign in
Hardening and Minimizing Attack Surface - Making Compromise Harder and Less ValuableSign in
Signed Updates - Preserving Integrity Across Long-Lived Devices and Changing ToolchainsSign in

Part 39

Step 5 Network and Cloud Security for IoT

Step 5 Network and Cloud Security for IoTSign in
Mutual Authentication - Establishing Device-Gateway-Cloud Trust Without Shared FantasySign in
Segmentation - OT vs IT Boundaries and the Real Problem of Lateral MovementSign in
Zero-Trust-Inspired Patterns - Identity-Based Policy Enforcement for Device TrafficSign in

Part 40

Step 5 Safety and Fail-Safe Design

Step 5 Safety and Fail-Safe DesignSign in
Safe States - Actuator Behavior Under Loss of Control, Corruption, or UncertaintySign in
Redundancy and Fallback - Designing for Partial Functionality Rather Than Total CollapseSign in
Degradation Strategy - Graceful Degradation as a Platform Promise with Measurable OutcomesSign in

Part 41

Step 5 Monitoring, Alarming, and Incident Response

Step 5 Monitoring, Alarming, and Incident ResponseSign in
Security Monitoring for IoT - Detecting Anomalies Across Fleets and ZonesSign in
Containment Actions - Isolate Devices, Block Commands, Freeze Automation, and Communicate ImpactSign in
Post-Incident Remediation - Fleet-Wide Fixes, Policy Changes, and Preventing RecurrenceSign in

Part 42

Step 5 Governance, Compliance, and Civic Responsibility

Step 5 Governance, Compliance, and Civic ResponsibilitySign in
Data Privacy and Retention - Policies That Survive Vendor Change and Organizational TurnoverSign in
Public Trust and Transparency - Accountability as an Operational RequirementSign in
Interoperability and Standards - Avoiding Lock-In and Enabling Multi-Vendor EcosystemsSign in

Part 43

Step 6 City-Scale Reference Domains

Step 6 City-Scale Reference DomainsSign in
Mobility and Traffic - Sensing and Actuation Under Safety and Latency ConstraintsSign in
Energy and Utilities - Reliability, Metering Integrity, and Cross-Domain CoordinationSign in
Environment and Public Safety - Monitoring, Alerts, and the Boundary Between Observation and InterventionSign in

Part 44

Step 6 Smart City Platforms and Data Hubs

Step 6 Smart City Platforms and Data HubsSign in
Central vs Domain Platforms - Governance Trade-offs Between Uniformity and SpecializationSign in
APIs for Civic Apps and Partners - Designing Data Access Without Losing Privacy and ControlSign in
Cross-Agency Data Sharing - Boundaries, Contracts, and Operational CoordinationSign in

Part 45

Step 6 Multi-Stakeholder Governance and Ownership

Step 6 Multi-Stakeholder Governance and OwnershipSign in
Stakeholder Map - City, Utilities, Operators, Vendors, Citizens as Competing ObjectivesSign in
Responsibility Boundaries - Who Owns Outages, Data Quality, and Safety OutcomesSign in
SLAs, Contracts, Accountability - Treating Governance as Part of System ArchitectureSign in

Part 46

Step 6 Operations, Maintenance, and Field Workflows

Step 6 Operations, Maintenance, and Field WorkflowsSign in
Work Orders and Truck Rolls - Field Operations as the Real Last Mile of ReliabilitySign in
Asset and Lifecycle Management at Scale - Replacements, Upgrades, and Decommissioning as RoutineSign in
Predictive Maintenance Inputs - Using Telemetry to Schedule Work Without Over-Trusting ModelsSign in

Part 47

Step 6 Scaling from Pilot to City-Wide

Step 6 Scaling from Pilot to City-WideSign in
Pilot vs Production - What Changes When the System Becomes CriticalSign in
Rollouts by District and Domain - Controlling Blast Radius and Learning Rate SimultaneouslySign in
Brownfield Integration - Coexistence with Legacy Systems and Partial ModernizationSign in

Part 48

Step 6 Resilience, Disaster Scenarios, and Continuity

Step 6 Resilience, Disaster Scenarios, and ContinuitySign in
Designing for Outages: power loss, network loss, and degraded operations as expected statesSign in
Local autonomy vs central coordination: emergency postures and control placementSign in
Testing and drills: validating resilience as an operational discipline, not a documentSign in

Part 49

Step 6 Case-Style Reference Architectures

Step 6 Case-Style Reference ArchitecturesSign in
Smart Building Campus - Site Gateways, Automation, and Tenancy BoundariesSign in
Traffic Corridor and Mobility Hub - Latency, Safety, and Operational Monitoring PatternsSign in
Smart Grid Neighborhood - Reliability, Security, and Multi-Stakeholder Control SurfacesSign in

Part 50

IoT Architecture Patterns

IoT Architecture PatternsSign in
Telemetry-Only vs Command-and-Control vs Control-Loop Systems: escalating responsibility and riskSign in
Device-Gateway-Cloud vs Direct-to-Cloud: topology choices and failure containmentSign in
Narrowband Low-Power vs High-Bandwidth Systems: designing for constraints versus designing for richnessSign in

Part 51

Operational and Organizational Patterns

Operational and Organizational PatternsSign in
Team Models: platform vs domain teams vs vendor partnerships and how boundaries affect reliabilitySign in
Funding and Business Models: incentives that shape platform longevity and maintenanceSign in
Platform as Product for Civic Tech: roadmaps, onboarding, and measurable value deliverySign in

Part 52

Design Checklists for IoT and Smart Infrastructure

Design Checklists for IoT and Smart InfrastructureSign in
Device and Hardware Checklist: sensing, actuation, power, and field constraintsSign in
Connectivity, Edge, Cloud Checklist: identity, buffering, partitioning, and operabilitySign in
Data, Automation, Safety, Governance Checklist: making outcomes safe, auditable, and sustainableSign in

Course overview