System and method for management of secured devices
Methods and systems for managing distributed systems are disclosed. The distributed systems may include endpoint devices that provide computer implemented services. The configuration of the endpoint devices may impact the provided computer implemented services. To manage the configuration of the endpoint devices, a communication architecture may be used that includes tags used to relay commands between orchestration and endpoint devices, and data from the endpoint devices to the orchestration devices and/or other devices.
1 . A method for managing a secured device, the method comprising:
obtaining, by a personal computing device, a command from a deployment management service using a first channel, the command being for the secured device; and
performing, by the personal computing device, an action set based on the command, the action set comprising at least one action selected from a list of actions consisting of:
writing, using a second channel, the command to a tag associated with the secured device, the second channel directly connecting the personal computing device to the tag, and
reading, using the second channel, a package from the tag,
wherein the tag is operably connected to a compute complex of the secured device via a third channel, and
wherein the tag stores the command until read by the compute complex of the secured device, the tag being adapted to store the command regardless of operating state of the compute complex.
2 . The method of claim 1 , wherein the tag is a near field communication tag.
3 . The method of claim 2 , wherein the first channel uses a radio access network.
4 . The method of claim 1 , wherein the command comprises one selected from a group of commands consisting of:
resetting the secured device;
establishing a terminal console between the secured device and another data processing system; and
modifying network information for the secured device.
5 . The method of claim 1 , wherein the package comprises security data for the secured device, the security data being usable to cryptographically verify an identity of the secured device.
6 . The method of claim 1 , wherein the secured device is not operably connected to the deployment management service while the command is obtained and the action set is performed.
7 . The method of claim 1 , wherein the personal computing device is a cell phone.
8 . The method of claim 1 , wherein the compute complex hosts an agent of the deployment management service.
9 . A non-transitory machine-readable medium having instructions stored therein, which when executed by at least one processor, cause a system to perform operations for managing a secured device, the operations comprising:
obtaining, by a personal computing device, a command from a deployment management service using a first channel, the command being for the secured device; and
performing, by the personal computing device, an action set based on the command, the action set comprising at least one action selected from a list of actions consisting of:
writing, using a second channel, the command to a tag associated with the secured device, the second channel directly connecting the personal computing device to the tag, and
reading, using the second channel, a package from the tag,
wherein the tag is operably connected to a compute complex of the secured device via a third channel, and
wherein the tag stores the command until read by the compute complex of the secured device, the tag being adapted to store the command regardless of operating state of the compute complex.
10 . The non-transitory machine-readable medium of claim 9 , wherein the tag is a near field communication tag.
11 . The non-transitory machine-readable medium of claim 10 , wherein the first channel uses a radio access network.
12 . The non-transitory machine-readable medium of claim 8 , wherein the command comprises one selected from a group of commands consisting of:
resetting the secured device;
establishing a terminal console between the secured device and another data processing system; and
modifying network information for the secured device.
13 . The non-transitory machine-readable medium of claim 9 , wherein the package comprises security data for the secured device, the security data being usable to cryptographically verify an identity of the secured device.
14 . The non-transitory machine-readable medium of claim 9 , wherein the secured device is not operably connected to the deployment management service while the command is obtained and the action set is performed.
15 . A system, comprising:
at least one processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the system to perform operations for managing a secured device, the operations comprising:
obtaining, by a personal computing device, a command from a deployment management service using a first channel, the command being for the secured device; and
performing, by the personal computing device, an action set based on the command, the action set comprising at least one action selected from a list of actions consisting of:
writing, using a second channel, the command to a tag associated with the secured device, the second channel directly connecting the personal computing device to the tag, and
reading, using the second channel, a package from the tag,
wherein the tag is operably connected to a compute complex of the secured device via a third channel, and
wherein the tag stores the command until read by the compute complex of the secured device, the tag being adapted to store the command regardless of operating state of the compute complex.
16 . The system of claim 15 , wherein the tag is a near field communication tag.
17 . The system of claim 16 , wherein the first channel uses a radio access network.
18 . The system of claim 15 , wherein the command comprises one selected from a group of commands consisting of:
resetting the secured device;
establishing a terminal console between the secured device and another data processing system; and
modifying network information for the secured device.
19 . The system of claim 15 , wherein the package comprises security data for the secured device, the security data being usable to cryptographically verify an identity of the secured device.
20 . The system of claim 15 , wherein the secured device is not operably connected to the deployment management service while the command is obtained and the action set is performed.