Accessing corporate resources through an enrolled user device
Systems and methods are described for accessing resources of a Unified Endpoint Management (“UEM”) system through an enrolled device. In an example, an unenrolled device can be paired with an enrolled device. The unenrolled device can connect to the enrolled device on a local network. The enrolled device can verify the unenrolled device using a key provided during pairing. The unenrolled device can send requests for UEM resources to the enrolled device, which the enrolled device can send to a UEM server. The UEM server can send the requested UEM resources to the enrolled device, and the enrolled device can send the UEM resources to the enrolled device over the local network.
1. A method of managing data transfer between a Unified Endpoint Management (UEM) server for a device management system and an Internet of Things (“IoT”) device through a group of enrolled user devices, wherein each of the enrolled user devices includes i) a management application executing therein through which data is communicated with the UEM server and with which compliance of the enrolled user device with security setting at the UEM server is enforced; and ii) a UEM browser managed by the UEM server, and the IoT device does not have network capabilities to connect to the UEM server, comprising:
a process of registering the IoT device with the UEM server that includes:
sending, from the IoT device to a first enrolled user device in the group that is wirelessly connected to the IoT device in a local network, a unique identifier (“ID”) of the IoT device, and in response thereto, receiving, at the IoT device from the first enrolled user device, a security certificate provided by the UEM server and used by the UEM server in authentication of the IoT device; and
installing the security certificate in the IoT device; and
a process of transferring data from the IoT device to the UEM server that includes:
in an instance where the IoT device loses connection with the first enrolled user device and a data transfer session between the UEM server and the IoT device, via the first enrolled user device, is disconnected, detecting, at the IoT device, a second enrolled user device in the group by scanning nearby enrolled devices, and establishing a wireless connection with the second enrolled user device in the local network, the data transfer session being saved by the UEM server;
sending, from the IoT device to the second enrolled user device, the security certificate installed in the IoT device and the unique ID of the IoT device, and in response thereto, receiving, at the IoT device, a notification from the second enrolled user device that the UEM server has reopened the data transfer session between the UEM server and the IoT device, via the second enrolled user device, after detection of a saved data transfer session associated with the unique ID by the UEM server; and
sending, from the IoT device to the second enrolled user device, data to be transmitted to the UEM server by the second enrolled user device using the opened data transfer session.
2. The method of claim 1 , further comprising:
receiving, at the IoT device and through the second enrolled user device, data from the UEM server.
3. The method of claim 1 , wherein the IoT device detects the second enrolled user device using a localized wireless communication method.
4. The method of claim 1 , wherein the process of registering the IoT device with the management system further includes:
sending, from the IoT device to the first enrolled user device, data to be transmitted to the UEM server by the first enrolled user device in response to instructions provided by the UEM server.
5. The method of claim 1 , wherein, in an instance where the IoT device loses connection with the second enrolled user device before sending a portion of the data to be transmitted to the UEM server, the method further comprises:
detecting, at the IoT device, a third enrolled user device in the group by scanning nearby enrolled devices, and establishing a wireless connection with the third enrolled user device in the local network;
sending, from the IoT device to the third user device, the security certificate installed in the IoT device and the unique ID of the IoT device, and in response thereto, receiving, at the IoT device, a notification from the third enrolled user device that the UEM server has reopened a data transfer session between the UEM server and the IoT device via the third enrolled user device; and;
sending, from the IoT device to the third enrolled user device, the unsent portion of the data-to be transmitted to the UEM server by the third enrolled user device using the reopened data transfer session.
6. The method of claim 1 , wherein the unique ID is a vendor-defined string of alphanumeric characters unique to the IoT device.
7. The method of claim 1 , wherein the security certificate and the unique ID of the IoT device sent from the IoT device to the second enrolled user device cause the second enrolled user device to send the security certificate and the unique ID to the UEM server and thereafter a session request to the UEM server.
8. A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, cause the processor to perform a method of managing data transfer between a Unified Endpoint Management (UEM) server for a device management system and an Internet of Things (“IoT”) device through a group of enrolled user devices, wherein each of the enrolled user devices includes i) a management application executing therein through which data is communicated with the UEM server and with which compliance of the enrolled user device with security setting at the UEM server is enforced; and ii) a UEM browser managed by the UEM server, and the IoT device does not have network capabilities to connect to the UEM server, said method comprising:
a process of registering the IoT device with the UEM server that includes:
sending, from the IoT device to a first enrolled user device in the group that is wirelessly connected to the IoT device in a local network, a unique identifier (“ID”) of the IoT device, and in response thereto, receiving, at the IoT device from the first enrolled user device, a security certificate provided by the UEM server and used by the UEM server in authentication of the IoT device; and
installing the security certificate in the IoT device; and
a process of transferring data from the IoT device to the UEM server that includes:
in an instance where the IoT device loses connection with the first enrolled user device and a data transfer session between the UEM server and the IoT device, via the first enrolled user device, is disconnected, detecting, at the IoT device, a second enrolled user device in the group by scanning nearby enrolled devices, and establishing a wireless connection with the second enrolled user device in the local network, the data transfer session being saved by the UEM server;
sending, from the IoT device to the second enrolled user device, the security certificate installed in the IoT device and the unique ID of the IoT device, and in response thereto, receiving, at the IoT device, a notification from the second enrolled user device that the UEM server has reopened the data transfer session between the UEM server and the IoT device, via the second enrolled user device, after detection of a saved data transfer session associated with the unique ID by the UEM server; and
sending, from the IoT device to the second enrolled user device, data to be transmitted to the UEM server by the second enrolled user device using the opened data transfer session.
9. The non-transitory, computer-readable medium of claim 8 , the method further comprising:
receiving, at the IoT device and through the second enrolled user device, data from the UEM server.
10. The non-transitory, computer-readable medium of claim 8 , wherein the IoT device detects the second enrolled user device using a localized wireless communication method.
11. The non-transitory, computer-readable medium of claim 8 , wherein the process of registering the IoT device with the management system further includes:
sending, from the IoT device to the first enrolled user device, data to be transmitted to the UEM server by the first enrolled user device in response to instructions provided by the UEM server.
12. The non-transitory, computer-readable medium of claim 8 , wherein, in an instance where the IoT device loses connection with the second enrolled user device before sending a portion of the data to be transmitted to the UEM server, the method further comprises:
detecting, at the IoT device, a third enrolled user device in the group by scanning nearby enrolled devices, and establishing a wireless connection with the third enrolled user device in the local network;
sending, from the IoT device to the third user device, the security certificate installed in the IoT device and the unique ID of the IoT device, and in response thereto, receiving, at the IoT device, a notification from the third enrolled user device that the UEM server has reopened a data transfer session between the UEM server and the IoT device via the third enrolled user device; and;
sending, from the IoT device to the third enrolled user device, the unsent portion of the data-to be transmitted to the UEM server by the third enrolled user device using the reopened data transfer session.
13. The non-transitory, computer-readable medium of claim 8 , wherein the unique ID is a vendor-defined string of alphanumeric characters unique to the IoT device.
14. The non-transitory, computer-readable medium of claim 8 , wherein the security certificate and the unique ID of the IoT device sent from the IoT device to the second enrolled user device cause the second enrolled user device to send the security certificate and the unique ID to the UEM server and thereafter a session request to the UEM server.
15. A system for managing data transfer between a Unified Endpoint Management (UEM) server for a device management system and an Internet of Things (“IoT”) device through a group of enrolled user devices, wherein each of the enrolled user devices includes i) a management application executing therein through which data is communicated with the UEM server and with which compliance of the enrolled user device with security setting at the UEM server is enforced; and ii) a UEM browser managed by the UEM server, and the IoT device does not have network capabilities to connect to the UEM server, the IoT device comprising:
a memory storage including a non-transitory, computer-readable medium comprising instructions; and
a hardware-based processor that executes the instructions to carry out a method comprising:
a process of registering the IoT device with the UEM server that includes:
sending, from the IoT device to a first enrolled user device in the group that is wirelessly connected to the IoT device in a local network, a unique identifier (“ID”) of the IoT device, and in response thereto, receiving, at the IoT device from the first enrolled user device, a security certificate provided by the UEM server and used by the UEM server in authentication of the IoT device; and
installing the security certificate in the IoT device; and
a process of transferring data from the IoT device to the UEM server that includes:
in an instance where the IoT device loses connection with the first enrolled user device and a data transfer session between the UEM server and the IoT device, via the first enrolled user device, is disconnected, detecting, at the IoT device, a second enrolled user device in the group by scanning nearby enrolled devices, and establishing a wireless connection with the second enrolled user device in the local network, the data transfer session being saved by the UEM server;
sending, from the IoT device to the second enrolled user device, the security certificate installed in the IoT device and the unique ID of the IoT device, and in response thereto, receiving, at the IoT device, a notification from the second enrolled user device that the UEM server has reopened the data transfer session between the UEM server and the IoT device via the second enrolled user device, after detection of a saved data transfer session associated with the unique ID by the UEM server; and
sending, from the IoT device to the second enrolled user device, data to be transmitted to the UEM server by the second enrolled user device using the opened data transfer session.
16. The system of claim 15 , the method further comprising:
receiving, at the IoT device and through the second enrolled user device, data from the UEM server.
17. The system of claim 15 , wherein the IoT device detects the second enrolled user device using a localized wireless communication method.
18. The system of claim 15 , wherein the process of registering the IoT device with the management system further includes:
sending, from the IoT device to the first enrolled user device, data to be transmitted to the UEM server by the first enrolled user device in response to instructions provided by the UEM server.
19. The system of claim 15 , wherein, in an instance where the IoT device loses connection with the second enrolled user device before sending a portion of the data to be transmitted to the UEM server, the method further comprises:
detecting, at the IoT device, a third enrolled user device in the group by scanning nearby enrolled devices, and establishing a wireless connection with the third enrolled user device in the local network;
sending, from the IoT device to the third user device, the security certificate installed in the IoT device and the unique ID of the IoT device, and in response thereto, receiving, at the IoT device, a notification from the third enrolled user device that the UEM server has reopened a data transfer session between the UEM server and the IoT device via the third enrolled user device; and;
sending, from the IoT device to the third enrolled user device, the unsent portion of the data-to be transmitted to the UEM server by the third enrolled user device using the reopened data transfer session.
20. The system of claim 15 , wherein the security certificate and the unique ID of the IoT device sent from the IoT device to the second enrolled user device cause the second enrolled user device to send the security certificate and the unique ID to the UEM server and thereafter a session request to the UEM server.