Vmware, Inc.

Airwatch LLC

Nicira, Inc.

Ravishankar Chamarajnagar

Michael Robert Jones

Hai James Le

Craig Farley Newell

Kalyan Regula

Adarsh Jain

Prasad Sawant

Devanand Kondur

Jayant Jain

Anirban Sengupta

Uday Suresh Masurekar

Adam Stephen Rykowski

Srinivas Nimmagadda

Kausum Kumar

Sagar Date

Sulay Shah

Leung Tao Kwok

Bo Gan

Alexey Makhalov

Sridhar Kommireddy

Utkarsh Singh

Sriram Nambakam

Sharath George

Raghunath Krishnamurthy

Maria Potapova

Systems herein allow an administrator to efficiently enroll computing devices into a mobile device management system, even when those computing devices are offline and not connected to the system. A management server can include a console that allows the administrator to enroll an offline computing device by selecting an offline enrollment option on a registration record. This option can cause the management server to create a device record, indicating the computing device is enrolled. The management server can also create and save a provisioning file onto a storage device, such as a USB drive. Assets, such as graphics and applications, specified by the device record are also saved onto the storage device. The storage device can be physically connected to the computing device, at which point the provisioning file guides automatic installation of the assets and implementation of device settings and compliance rules specified by the device record.

Offline sideloading for enrollment of devices in a mobile device management system

The present disclosure relates to centralized volume encryption key management for edge devices with trusted platform modules (TPM)s. In some aspects a volume encryption key is generated for a gateway device. A sealing authorization policy is also generated for the gateway device. The sealing authorization policy is generated based on a predetermined platform configuration register (PCR) mask and expected PCR values. The volume encryption key and the sealing authorization policy are transmitted from the management service to the gateway device to provision the gateway device with the volume encryption key.

Centralized volume encryption key management for edge devices with trusted platform modules

Disclosed are various examples of an action framework for configuring a gateway to perform actions on the gateway itself or in conjunction with connected IoT devices. In some examples, a command is transmitted from a management service to a gateway device to permit a gateway client application to execute on the gateway device. A command to register an action in association with the gateway client application is also transmitted. The management service then commands the gateway device to perform the action, and receives an action results message with information about the action.

Gateway action framework

Automatic tuning anomaly detection is described. The context metric keys are established during a training phase based on the surrounding context of data received from devices over time. Anomaly and tuning windows are also established for metric ranges of the context metric keys. After the training phase, incoming data is correlated against the keys to identify sets of the data associated with certain context metric keys. For any given context metric key, metric data values in the associated set of data fall either within or outside the metric range of the context metric key. If they fall outside the range for longer than the anomaly window, an alarm is raised. If they fall outside the range for longer than the tuning window, boundaries for the metric range are updated. Additionally, the contextual parameters of the context metric keys are also updated over time, as new data contexts appear.

Auto tuning data anomaly detection

Computer networks for secure demand-driven file distribution are described. In one example, a client device receives a notification to check in for updates. In response, the client device checks in with a device services computing device on a computer network. The device services computing device determines a path list to certain cache computing devices on the computer network for receipt of the files, builds a markup file including the path list to the files, and transmits the markup file to the client device. The markup file can also include unique identifiers of the files and an encryption key for secure distribution of the files. Using the markup file, the client device can request the files, and the computer network is physically and logically arranged to distribute the files among the cache computing devices and to the client device in a secure and demand-driven manner.

Secure demand-driven file distribution

Disclosed are various examples of an action framework for configuring a gateway to perform actions on the gateway itself or in conjunction with connected IoT devices. In some embodiments, a gateway client is permitted on a gateway device using a gateway configuration received from a management service. A command callback function is registered in association the gateway client. An action message is received. The action message specifies an action corresponding to the command callback function. The gateway client using the action message. A command object for the gateway client is generated based on the action message. The command callback function is invoked, and the gateway client processes the command object to perform the action.

Some embodiments provide novel methods for processing remote-device data messages in a network based on data-message attributes from a remote device management (RDM) system. For instance, the method of some embodiments identifies a set of RDM attributes associated with a data message, and then performs one or more service operations based on identified RDM attribute set.

Performing source network address translation based on remote device management attributes

Growing community of inventors

Atlanta, GA, United States of America

Ravishankar Chamarajnagar