Gateway enrollment for internet of things device management
Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In one example, enrollment credentials are generated that permit functionality limited to enrollment operations. A request to enroll a gateway with the management service is received. The request includes the enrollment credentials, and is received from the gateway. Gateway credentials are generated for authentication of the gateway with the management service. The gateway credentials are transmitted to an application executed by the gateway without being provided to the user by the application. The gateway is authenticated with the management service using the gateway credentials.
1. A system, comprising:
at least one computing device; and
a data store comprising a management service executable by the at least one computing device that, when executed, causes the at least one computing device to:
generate enrollment credentials that are limited to authentication of an enrollment request for enrollment of a gateway with the management service;
receive, by the management service, the enrollment request to enroll the gateway with the management service, the enrollment request comprising the enrollment credentials based on the enrollment credentials being entered by a gateway installation technician through a user interface generated by an application executed by the gateway;
in response to receiving, by the management service from the gateway, the enrollment request comprising the enrollment credentials: create, by the management service, a gateway account for the gateway, and generate gateway credentials for authentication of the gateway with the management service, wherein usage of the enrollment credentials for the enrollment request prevents the gateway installation technician from being exposed to the gateway credentials;
transmit the gateway credentials to the application executed by the gateway, wherein the gateway credentials are obfuscated to be inaccessible to the gateway installation technician; and
authenticate the gateway with the management service using the gateway credentials.
2. The system of claim 1 , wherein when executed the management service further causes the at least one computing device to generate at least one Access Control List (ACL) rule associated with the gateway.
3. The system of claim 1 , wherein when executed the management service further causes the at least one computing device to:
generate an activation schedule for at least one Internet-of-Things (IoT) device;
place at least one command to enroll the at least one IoT device with the management service in a command queue associated with the gateway;
receive a message to enroll the at least one IoT device from the gateway; and
transmit an enrollment response associated with the at least one IoT device to the gateway.
4. The system of claim 1 , wherein when executed the management service further causes the at least one computing device to:
receive Internet-of-Things (IoT) metrics data associated with an IoT device from the gateway, wherein the IoT metrics data comprises at least one tuple comprising a number and a time stamp; and
generate a management user interface based at least in part on the IoT metrics data.
5. The system of claim 1 , wherein the request to enroll the gateway with the management service is received through a connection that is secured based at least in part on a cryptographic protocol.
6. The system of claim 5 , wherein the cryptographic protocol is Transport Layer Security (TLS).
7. The system of claim 1 , wherein when executed the management service further causes the at least one computing device to generate an installation package comprising the application.
8. A non-transitory computer-readable medium embodying a management service executable in at least one computing device that, when executed, causes the at least one computing device to:
generate enrollment credentials that are limited to authentication of an enrollment request for enrollment of a gateway with the management service;
receive, by the management service, the enrollment request to enroll the gateway with the management service, the enrollment request comprising the enrollment credentials based on the enrollment credentials being entered by a gateway installation technician through a user interface generated by an application executed by the gateway;
in response to receiving, by the management service from the gateway, the enrollment request comprising the enrollment credentials: create, by the management service, a gateway account for the gateway, and generate gateway credentials for authentication of the gateway with the management service, wherein usage of the enrollment credentials for the enrollment request prevents the gateway installation technician from being exposed to the gateway credentials;
transmit the gateway credentials to the application executed by the gateway, wherein the gateway credentials are obfuscated to be inaccessible to the gateway installation technician; and
authenticate the gateway with the management service using the gateway credentials.
9. The non-transitory computer-readable medium of claim 8 , wherein when executed the management service further causes the at least one computing device to generate at least one Access Control List (ACL) rule associated with the gateway.
10. The non-transitory computer-readable medium of claim 8 , wherein when executed the management service further causes the at least one computing device to:
generate an activation schedule for at least one Internet-of-Things (IoT) device;
place at least one command to enroll the at least one IoT device with the management service in a command queue associated with the gateway;
receive a message to enroll the at least one IoT device from the gateway; and
transmit an enrollment response associated with the at least one IoT device to the gateway.
11. The non-transitory computer-readable medium of claim 8 , wherein when executed the management service further causes the at least one computing device to:
receive Internet-of-Things (IoT) metrics data associated with an IoT device from the gateway, wherein the IoT metrics data comprises at least one tuple comprising a number and a time stamp; and
generate a management user interface based at least in part on the IoT metrics data.
12. The non-transitory computer-readable medium of claim 8 , wherein the request to enroll the gateway with the management service is received through a connection that is secured based at least in part on a cryptographic protocol.
13. The non-transitory computer-readable medium of claim 12 , wherein the cryptographic protocol is Transport Layer Security (TLS).
14. The non-transitory computer-readable medium of claim 8 , wherein when executed the management service further causes the at least one computing device to generate an installation package comprising the application.
15. A computer-implemented method, comprising:
generating, by a management service executed in at least one computing device, enrollment credentials that are limited to authentication of an enrollment request for enrollment of a gateway with the management service;
receiving, by the management service, the enrollment request to enroll the gateway with the management service, the enrollment request comprising the enrollment credentials based on the enrollment credentials being entered by a gateway installation technician through a user interface generated by an application executed by the gateway;
in response to receiving, by the management service from the gateway, the enrollment request comprising the enrollment credentials: creating, by the management service, a gateway account for the gateway, and generating gateway credentials for authentication of the gateway with the management service, wherein usage of the enrollment credentials for the enrollment request prevents the gateway installation technician from being exposed to the gateway credentials;
transmitting the gateway credentials to the application executed by the gateway, wherein the gateway credentials are obfuscated to be inaccessible to the gateway installation technician; and
authenticating the gateway with the management service using the gateway credentials.
16. The computer-implemented method of claim 15 , further comprising generating at least one Access Control List (ACL) rule associated with the gateway.
17. The computer-implemented method of claim 15 , further comprising:
generating an activation schedule for at least one Internet-of-Things (IoT) device;
placing at least one command to enroll the at least one IoT device with the management service in a command queue associated with the gateway;
receiving a message to enroll the at least one IoT device from the gateway; and
transmitting an enrollment response associated with the at least one IoT device to the gateway.
18. The computer-implemented method of claim 15 , further comprising:
receive Internet-of-Things (IoT) metrics data associated with an IoT device from the gateway, wherein the IoT metrics data comprises at least one tuple comprising a number and a time stamp; and
generating a management user interface based at least in part on the IoT metrics data.
19. The computer-implemented method of claim 15 , wherein the request to enroll the gateway with the management service is received through a connection that is secured based at least in part on a cryptographic protocol.
20. The computer-implemented method of claim 15 , wherein the gateway account is unassociated with any user.