Extending management control to IoT devices
A technique uses a managed computing device to extend management control by an organization to IoT (Internet of Things) devices in a local environment of the computing device. The computing device discovers any local IoT devices and participates in a communication with a server to bring one or more of the IoT devices under management control. In some examples, extending management control involves enrolling selected IoT devices into a management framework of the organization and directing communications between the server and the respective IoT devices through the managed device, which provides a point-of-presence for administering management of the selected IoT devices in the local environment.
1. A method for extending management control to IoT (Internet of Things) devices, comprising:
processing, by a computing device, a request to scan for the IoT devices to extend management control in compliance with one or more policies of an organization entity, the computing device managed by the organization entity and communicatively coupled to a server of the organization entity over a computer network, wherein the IoT devices are enrolled into the organization entity through the server as requested by the computing device;
discovering, by the computing device, a set of IoT devices from a user profile of a user of the computing device, the set of IoT devices being unmanaged by the organization entity; and
responsive to the extended management control, enabling the IoT devices to communicate with the server of the organization entity without routing data through the computing device.
2. The method of claim 1 , further comprising the computing device routing data ingress from the server to the set of IoT devices and routing data egress from the set of IoT devices to the server.
3. The method of claim 2 , further comprising:
forming a logical network in which the computing device is a hub and the set of IoT devices operatively connect to the hub via respective spokes; and
directing communications between the set of IoT devices and the server through the computing device acting as the hub of the logical network.
4. The method of claim 3 , further comprising deploying a management policy for the set of IoT devices, the management policy defined by the entity.
5. The method of claim 4 , wherein deploying the management policy includes, for at least one of the set of IoT devices, scanning the respective IoT device(s) for malicious code.
6. The method of claim 4 , wherein deploying the management policy includes, for at least one of the set of IoT devices, updating software and/or firmware on the respective IoT device(s).
7. The method of claim 4 , wherein deploying the management policy includes, for at least one of the set of IoT devices, installing a set of skills on the respective IoT device(s), the skills developed for the entity.
8. The method of claim 7 , wherein the set of skills includes a skill that operates an IoT device as a voice assistant for accessing resources of the organization from the server.
9. The method of claim 7 , wherein the set of skills includes a skill that operates an IoT device as a voice assistant for controlling a function of the computing device, and wherein the method further comprises the computing device responding to control input from the IoT device based on a voice command.
10. The method of claim 4 , further comprising:
running a software component on the computing device; and
directing at least one of the set of IoT devices to be a source for input and/or a destination for output of the software component.
11. The method of claim 10 , further comprising prompting a user to allow the software component to use said at least one of the set of IoT devices for input and/or output of the software component.
12. The method of claim 10 , further comprising orchestrating activities among multiple ones of the set of IoT devices for providing input and/or output of the software component.
13. The method of claim 4 , further comprising, after establishing communication with an IoT device of the set of IoT devices, the computing device handing off communication with IoT device to the server, the IoT device then communicating with the server without routing data through the computing device.
14. The method of claim 3 , further comprising the computing device establishing an application-specific VPN (Virtual Private Network) with the server and conveying network traffic between the server and the set of IoT devices through the application-specific VPN.
15. A computing device for extending management control to IoT (Internet of Things) devices, comprising control circuitry configured to:
process, by the computing device, a request to scan for the IoT devices to extend management control in compliance with one or more policies of an organization entity, the computing device managed by the organization entity and communicatively coupled to a server of the organization entity over a computer network, wherein the IoT devices are enrolled into the organization entity through the server as requested by the computing device;
discover, by the computing device, a set of IoT devices from a user profile of a user of the computing device, the set of IoT devices being unmanaged by the organization entity; and
responsive to the extended management control, enable the IoT devices to communicate with the server of the organization entity without routing data through the computing device.
16. The device of claim 15 , wherein the control circuitry is further configured to:
form a logical network in which the computing device is a hub and the set of IoT devices are respective spokes of the hub; and
direct communications between the set of IoT devices and the server through the computing device acting as the hub of the logical network.
17. The device of claim 16 , wherein the control circuitry is further configured to:
run a software component on the computing device; and
direct at least one of the set of IoT devices to be a source for input and/or a destination for output of the software component.
18. A method for extending management control to IoT (Internet of Things) devices, comprising,
receiving, by a server of an organization entity, a request from a computing device to enroll an IoT device into an organization into which the computing device is already enrolled, the IoT device such that the IoT device becomes subject to one or more policies of the organization entity, wherein the computing device managed by the organization entity and communicatively counted to the server to scan for the IoT device to extend management control in compliance with one or more policies of the organization entity;
discovering, by the computing device, a set of IoT devices from a user profile of a user of the computing device, the set of IoT devices being unmanaged by the organization entity; and
responsive to the extended management control, enable the IoT device to communicate with the server of the organization entity without routing data through the computing device.
19. The method of claim 18 , further comprising directing the computing device to scan the IoT device for malicious code.
20. The method of claim 18 , wherein communicating with the enrolled IoT device is conducted over an application-specific VPN (Virtual Private Network) established between the server and a software component running on the computing device.
21. The method of claim 18 , further comprising:
adding data about the IoT device to a user profile of a user of the computing device;
receiving a request from the computing device to operate a software feature; and
in response to receiving the request to operate the software feature, (i) identifying the IoT device from the user profile and (ii) directing the software component on the computing device to prompt the user to use the IoT device for providing input and/or output of the software component.