IP Library Granted Patent US 11,595,392
Granted Patent B2
US 11,595,392 · App. 17/509,285 · Granted Feb 28, 2023

Gateway enrollment for internet of things device management

Inventors: Glen McCready (Palo Alto, CA); Ravishankar Chamarajnager (Atlanta, GA); Greg Bollella (Palo Alto, CA); Muhammad Akbar (Palo Alto, CA); Michael Robert Jones (Atlanta, GA)
Assignee: VMWARE, INC.
H04L63/10H04L9/32H04L63/02H04L63/08H04L63/101H04L63/166H04L41/046H04L41/22H04L41/28H04L67/562
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,595,392
App. No.
17/509,285
Granted
Feb 28, 2023
Kind
B2
Abstract

Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In one example, the gateway device transmits an enrollment request to a management service. The enrollment request includes enrollment credentials that are entered through a user interface. The gateway device receives gateway credentials that authenticate communications with a management service. Subsequent communications transmitted from the gateway device to the management service are authenticated using the gateway credentials.

Claims (53)

1. A system, comprising:

a gateway device comprising at least one hardware processor; and

a data store comprising instructions executable by the at least one hardware processor, wherein the instructions, when executed, cause the gateway device to at least:

transmit, by the gateway device to a management service, an enrollment request to enroll the gateway device with the management service, the enrollment request comprising enrollment credentials that are manually entered through a user interface generated using at least one application executed using at least one of: the gateway device, and a client device in communication with the gateway device;

receive, by the gateway device from the management service, gateway credentials that authenticate communications between the gateway device and the management service, wherein usage of the enrollment credentials for the enrollment request prevents a user from being exposed to the gateway credentials; and

transmit, from the gateway device to the management service, at least one communication that is authenticated using the gateway credentials, wherein the gateway device automatically uses the gateway credentials for authentication with the management service without user interaction.

2. The system of claim 1 , wherein the instructions, when executed, cause the gateway device to at least:

discard the enrollment credentials once the enrollment request is transmitted, and without storing the enrollment credentials on the gateway device.

3. The system of claim 1 , wherein the instructions, when executed, cause the gateway device to at least:

receive a unique gateway identifier that is assigned to the gateway device; and

store the unique gateway identifier on the gateway device.

4. The system of claim 1 , wherein the gateway device comprises an Internet-of-Things (IoT) agent that facilitates communications with IoT devices.

5. The system of claim 1 , wherein the instructions, when executed, cause the gateway device to at least:

store the gateway credentials on the gateway device, wherein the at least one application does not display the gateway credentials that are received.

6. The system of claim 1 , wherein the instructions, when executed, cause the gateway device to at least:

retrieve, by the gateway device from the management service, a command to enroll an Internet-of-Things (IoT) device that connects to a network using the gateway device; and

install, by the gateway device, a configuration file associated with enrollment of the IoT device.

7. The system of claim 6 , wherein the instructions, when executed, cause the gateway device to at least:

store, by the gateway device, enrollment data for the IoT device, the enrollment data comprising a device name and a device type of the IoT device, and an enrollment status; and

perform, by the gateway device, a validation of communications with the IoT device using the enrollment data.

8. A non-transitory computer-readable medium embodying instructions executable in at least one computing device that, when executed, causes the at least one computing device to:

transmit, by a gateway device to a management service, an enrollment request to enroll the gateway device with the management service, the enrollment request comprising enrollment credentials that are manually entered through a user interface generated using at least one application executed using at least one of: the gateway device, and a client device in communication with the gateway device;

receive, by the gateway device from the management service, gateway credentials that authenticate communications between the gateway device and the management service, wherein usage of the enrollment credentials for the enrollment request prevents a user from being exposed to the gateway credentials; and

transmit, from the gateway device to the management service, at least one communication that is authenticated using the gateway credentials, wherein the gateway device automatically uses the gateway credentials for authentication with the management service without user interaction.

9. The non-transitory computer-readable medium of claim 8 , wherein the instructions, when executed, cause the gateway device to at least:

discard the enrollment credentials once the enrollment request is transmitted, and without storing the enrollment credentials on the gateway device.

10. The non-transitory computer-readable medium of claim 8 , wherein the instructions, when executed, cause the gateway device to at least:

receive a unique gateway identifier that is assigned to the gateway device; and

store the unique gateway identifier on the gateway device.

11. The non-transitory computer-readable medium of claim 8 , wherein the gateway device comprises an Internet-of-Things (IoT) agent that facilitates communications with IoT devices.

12. The non-transitory computer-readable medium of claim 8 , wherein the instructions, when executed, cause the gateway device to at least:

store the gateway credentials on the gateway device, wherein the at least one application does not display the gateway credentials that are received.

13. The non-transitory computer-readable medium of claim 8 , wherein the instructions, when executed, cause the gateway device to at least:

retrieve, by the gateway device from the management service, a command to enroll an Internet-of-Things (IoT) device that connects to a network using the gateway device; and

install, by the gateway device, a configuration file associated with enrollment of the IoT device.

14. The non-transitory computer-readable medium of claim 13 , wherein the instructions, when executed, cause the gateway device to at least:

store, by the gateway device, enrollment data for the IoT device, the enrollment data comprising a device name and a device type of the IoT device, and an enrollment status; and

perform, by the gateway device, a validation of communications with the IoT device using the enrollment data.

15. A method, comprising:

transmitting, by a gateway device to a management service, an enrollment request to enroll the gateway device with the management service, the enrollment request comprising enrollment credentials that are manually entered through a user interface generated using at least one application executed using at least one of: the gateway device, and a client device in communication with the gateway device;

receiving, by the gateway device from the management service, gateway credentials that authenticate communications between the gateway device and the management service, wherein usage of the enrollment credentials for the enrollment request prevents a user from being exposed to the gateway credentials; and

transmitting, from the gateway device to the management service, at least one communication that is authenticated using the gateway credentials, wherein the gateway device automatically uses the gateway credentials for authentication with the management service without user interaction.

16. The method of claim 15 , further comprising:

discarding the enrollment credentials once the enrollment request is transmitted, and without storing the enrollment credentials on the gateway device.

17. The method of claim 15 , further comprising:

receiving a unique gateway identifier that is assigned to the gateway device; and

storing the unique gateway identifier on the gateway device.

18. The method of claim 15 , wherein the gateway device comprises an Internet-of-Things (IoT) agent that facilitates communications with IoT devices.

19. The method of claim 15 , further comprising:

storing the gateway credentials on the gateway device, wherein the at least one application does not display the gateway credentials that are received.

20. The method of claim 15 , further comprising:

retrieving, by the gateway device from the management service, a command to enroll an Internet-of-Things (IoT) device that connects to a network using the gateway device; and

installing, by the gateway device, a configuration file associated with enrollment of the IoT device.

Assignments (1)
CHANGE OF NAME Recorded Apr 15, 2024
From: VMWARE, INC.
To: VMWARE LLC
Reel/Frame 067102/0395 →
Continuity (3)
Continuation 15902321 · Feb 22, 2018
Provisional Application 62619666 · Jan 19, 2018
Related Publication 20220046021A1 · Feb 10, 2022