Vmware, Inc.

Vamware, Inc.

Ravishankar Chamarajnager

Vasudev Yendapally

Michael Robert Jones

Glen McCready

Niranjan Maka

Greg Bollella

Muhammad Akbar

Devanand Kondur

Keerthana Parthasarathy

Him Kalyan Bordoloi

Amit Vasant Patil

Tiejun Chen

Gavin Lu

Amol Khare

Mandar Nadgouda

Mahesh Kumar

Paul Alexander Cowan

Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In some examples, a client device receives a gateway management installation package from a management service. The client device installs a gateway management application to the gateway device using the installation package. Enrollment credentials are entered through a user interface generated using the gateway management application and shown on the client device. The client device instructs the gateway management application enroll the gateway device with the management service. Usage of the enrollment credentials prevents a user from being exposed to gateway credentials that authenticate communications between the gateway device and the management service.

Gateway enrollment for Internet of Things device management

Disclosed are various examples for Internet of Things (IoT) device discovery and configuration. In some embodiments, a management service generates a console user interface. Through the console user interface, an Internet-of-Things (IoT) protocol is selected for an IoT discovery campaign to discover IoT devices that are deployed in an enterprise environment and utilize the IoT protocol. A gateway distribution list is defined for the IoT discovery campaign. A command is transmitted according to the IoT discovery campaign, causing a gateway device to discover IoT devices that are deployed in the enterprise environment and utilize the IoT protocol.

Internet of things device discovery and configuration

Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a baseline behavior profile for a gateway virtual machine is transmitted from a management service to a gateway security process executed in a gateway device. The management service receives an anomaly notification including an indication of an anomaly from the baseline behavior profile. The managements service generates a user interface that shows a description of the anomaly.

Threat detection and security for edge devices

Disclosed are various examples for gateway onboarding for IoT device management. In one embodiment, management service data is received. The management service data includes an enterprise identifier, and a management service address that specifies a network endpoint of the management service. A gateway is registered in association with the management service data based on receiving a registration request comprising: a gateway identifier, and the enterprise identifier. An activation request with the gateway identifier is received from the gateway, and the management service data is provided to the gateway.

Internet of things gateway onboarding

Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In one example, the gateway device transmits an enrollment request to a management service. The enrollment request includes enrollment credentials that are entered through a user interface. The gateway device receives gateway credentials that authenticate communications with a management service. Subsequent communications transmitted from the gateway device to the management service are authenticated using the gateway credentials.

Gateway enrollment for internet of things device management

Disclosed are various examples of utilizing blockchain for tracking and auditing of systems and processes that involve Internet-of-Things (IoT) devices. A command to install an IoT event definition that defines an IoT event for a specified asset type is transmitted. IoT event data that indicates an IoT event has been triggered based on the IoT event definition is received. An IoT event block is recorded to a blockchain, the IoT event block comprising sensor data and an indication that at least one IoT device triggered the IoT event.

Internet of Things blockchain auditing

Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In one example, enrollment credentials are generated that permit functionality limited to enrollment operations. A request to enroll a gateway with the management service is received. The request includes the enrollment credentials, and is received from the gateway. Gateway credentials are generated for authentication of the gateway with the management service. The gateway credentials are transmitted to an application executed by the gateway without being provided to the user by the application. The gateway is authenticated with the management service using the gateway credentials.

Disclosed are various examples for Internet of Things (IoT) device discovery and configuration. In some embodiments, a gateway receives a specified IoT protocol, and instructions for the gateway device to broadcast an IoT device discovery message. The gateway broadcasts the IoT device discovery beacon message, and IoT devices provide unique IoT device identifiers in response. A list of IoT devices is transmitted to the management service. The gateway device receives and implements a command to allow communications with the IoT devices.

Disclosed are various examples for threat detection and security for edge devices in communication with Internet-of-Things (IoT) devices. In one example, a profile is associated with a virtual machine of a gateway device. The profile includes an expected behavior for the virtual machine. The virtual machine is executed by a hypervisor of the gateway device. An actual behavior for the virtual machine is determined. A remedial action is performed. The remedial action is based on an anomaly between the expected behavior and the actual behavior.

Systems and methods are provided for remotely managing proxy devices through a gateway device. An example method can include establishing electronic communication between the gateway device and a remotely located management server. The management server can transmit a management agent to the gateway device. The management agent can be software that is configured to receive and carry out commands provided by the management server. The management server can also transmit a plugin to the gateway device. The plugin can be configured to translate a first command, received from the management server, into a second command that is capable of being carried out by the proxy device. The method can also include transmitting the first command, including an executable instruction, from the management server to the gateway device. The first command can instruct the gateway device to cause the proxy device to perform an action.

Controlling proxy devices through a managed gateway

Disclosed are various examples for gateway onboarding for IoT device management. In one embodiment, activation of a gateway is initiated by transmission of a request to activate the gateway to a network address. The request to activate the gateway includes a gateway identifier that uniquely identifies the gateway. A gateway enrollment agent is received. Enrollment of the gateway with the management service is performed using the gateway enrollment agent. The enrollment includes a transmission of a request to enroll the gateway to a management service address and an installation of an enrollment policy received from the management service. The gateway enrollment agent is updated to a gateway management agent that includes an ability to install at least one IoT device management product.

Disclosed are various examples for generating an Internet-of-Things (IoT) system topology. A user interface includes a graphical representation of components. A relationship between the plurality of components is determined based on user-defined connections between the components. IoT topology code is generated. The IoT topology code includes the relationship between the plurality of components and properties for individual ones of the components. The IoT topology code is converted to executable gateway instructions that enable a gateway device to communicate with an IoT device. The gateway instructions are transmitted to the gateway device.

Internet of Things system topology generation

Disclosed are various examples for Internet of Things (IoT) device discovery and configuration. In some embodiments, an IoT template is generated based on IoT capabilities for an IoT type. An IoT device discovery command is transmitted from a management service to a gateway enrolled with the management service. The IoT device discovery command includes the IoT template and instructions for the respective gateway to transmit an IoT device discovery message using the IoT protocol. A list of IoT devices is received from the gateway. The list of IoT devices corresponds to the IoT protocol and the IoT type. An enrollment of an IoT device is performed. The enrollment includes transmitting an IoT device enrollment command that instructs the respective gateway to permit communication with the IoT device.

Disclosed are various examples of utilizing blockchain for tracking and auditing of systems and processes that involve Internet-of-Things (IoT) devices. In one example, an IoT event definition is installed on a gateway. The IoT event definition includes a threshold value associated with an asset type. The gateway receives sensor data from an IoT device associated with the asset type. The gateway determines that the IoT device triggered an IoT event based on the sensor data and the IoT event definition. The sensor data indicates that the IoT device triggered the IoT event based on the threshold value. The gateway transmits, to a management service, a request to record an IoT event to a blockchain. The request includes the sensor data. A block that includes the sensor data is recorded to the blockchain.

Growing community of inventors

Atlanta, GA, United States of America

Ravishankar Chamarajnager