Systems and methods for managing BYOD devices in a video conference
Various embodiments provide systems and methods for authentication and feature enablement for bring your own device (BYOD) users of a shared conference room. For instance, when a BYOD device connects with a conference room host device, the BYOD device may communicate with a cloud-based management service to get authenticated, and the cloud-based management service may communicate and allowed or disallowed status to the conference room host device. Assuming that the BYOD device receives an allowed status, the conference room host device may then enable data communication, peripheral access, and a set of entitlements for the BYOD device.
1. A method comprising:
identifying that a user device has connected to a conference room host device;
blocking the user device from a data channel between a management agent at the conference room host device and the user device in response to identifying that the user device has connected;
receiving a message from a cloud-based management service to the management agent indicating an allowed status of the user device; and
opening the data channel between the user device and the management agent in response to receiving the message indicating the allowed status.
2. The method of claim 1 , further comprising:
disallowing access to a peripheral device, connected to the conference room host device, by the user device prior to receiving the message indicating the allowed status; and
allowing access to the peripheral device by the user device subsequent to receiving the message indicating the allowed status.
3. The method of claim 1 , further comprising:
providing a prompt to a user of the user device, wherein the prompt is configured to allow the user to choose to migrate a conference session from the user device to the conference room host device; and
migrating the conference session in response to user input.
4. The method of claim 1 , further comprising:
receiving, from the cloud-based management service, an indication of a service entitlement associated with a user group of a user of the user device.
5. The method of claim 4 , further comprising:
enabling the service entitlement in response to the indication of the service entitlement.
6. The method of claim 1 , wherein the user device comprises a laptop computing device or a tablet computing device, further wherein the laptop computing device or the tablet computing device does not include an enterprise-approved image.
7. The method of claim 1 , wherein the method is performed by the conference room host device, and wherein the user device comprises a laptop computing device or a tablet computing device, further wherein identifying that the user device has connected includes detecting a wired connection between the user device and the conference room host device.
8. An Information Handling System (IHS), comprising:
one or more processors; and
a memory coupled to the one or more processors, wherein the memory comprises computer-readable instructions, which upon execution by the one or more processors, causes the IHS to:
receive a notification from a user device, the notification indicating that the user device has connected to a conference room host device;
receive user device details from the user device in response to a request for the user device details;
authenticate the user device based at least in part on the user device details; and
transmit a message to the conference room host device indicating an allowed status of the user device.
9. The IHS of claim 8 , wherein the computer-readable instructions to cause the IHS to authenticate the user device comprises computer-readable instructions to cause the IHS to:
acquire a meeting participant list corresponding to a conference session active on the user device;
determine that an entry in the participant list matches a user ID received with the user device details; and
verify the user ID according to a directory service.
10. The IHS of claim 9 , further comprising computer-readable instructions to cause the IHS to:
prior to verifying the user ID, attempt to verify a device ID of the user device; and
verify the user ID subsequent to failing to verify the device ID.
11. The IHS of claim 9 , wherein the computer-readable instructions to cause the IHS to acquire the meeting participant list comprises computer-readable instructions to cause the IHS to:
communicate with an interface of an application, corresponding to the conference session, including requesting and receiving the participant list from the application.
12. The IHS of claim 8 , wherein the computer-readable instructions to cause the IHS to authenticate the user device comprises computer-readable instructions to cause the IHS to:
acquire a meeting participant list corresponding to a conference session active on the user device;
determine that an entry in the participant list does not match a user ID received with the user device details; and
verify the user ID according to a directory service.
13. The IHS of claim 8 , further comprising computer-readable instructions to cause the IHS to:
store a device ID of the user device in a trusted device list.
14. The IHS of claim 8 , wherein the computer-readable instructions to cause the IHS to authenticate the user device comprises computer-readable instructions to cause the IHS to:
acquire a meeting participant list corresponding to a conference session active on the user device;
determine that an entry in the participant list matches a user ID received with the user device details;
acquire a device ID of the user device; and
verify the device ID according to a trusted device list.
15. The IHS of claim 14 , further comprising computer-readable instructions to cause the IHS to:
communicate with an interface of an application, corresponding to the conference session, including requesting and receiving the device ID from the application.
16. The IHS of claim 9 , further comprising computer-readable instructions to cause the IHS to:
transmit an indication of a service entitlement associated with a user group of a user of the user device.
17. A non-transitory computer-readable storage device having instructions stored thereon for user device authentication, wherein execution of the instructions by one or more processors of an IHS (Information Handling System) causes the one or more processors to:
receive a notification from a user device, the notification indicating that the user device has connected to a conference room host device;
receive user device details from the user device in response to a request for the user device details;
authenticate the user device based at least in part on the user device details; and
transmit a message to the conference room host device indicating an allowed status of the user device.
18. The non-transitory computer-readable storage device of claim 17 , wherein the instructions to cause the one or more processors to authenticate the user device comprises instructions to cause the one or more processors to:
acquire a meeting participant list corresponding to a conference session active on the user device;
determine that an entry in the participant list matches a user ID received with the user device details; and
verify the user ID according to a directory service.
19. The non-transitory computer-readable storage device of claim 18 , further comprising instructions to cause the one or more processors to:
prior to verifying the user ID, attempt to verify a device ID of the user device; and
verify the user ID subsequent to failing to verify the device ID.
20. The non-transitory computer-readable storage device of claim 17 , wherein the instructions to cause the one or more processors to authenticate the user device comprises instructions to cause the one or more processors to:
acquire a meeting participant list corresponding to a conference session active on the user device;
determine that an entry in the participant list does not match a user ID received with the user device details; and
verify the user ID according to a directory service.