Back to results
US 10,374,869 B2Granted
Containerized architecture to manage internet-connected devices
AssigneeMobile Iron, Inc.
InventorSandeep Jain
Life of this patent
Estimating the term…
Abstract
A containerized architecture to secure and manage Internet-connected devices, such as “Internet of Things” devices, is disclosed. In various embodiments, one or more containerized applications are run, e.g., on an Internet of Things gateway, subject to management by the management server. At least one of the containerized applications is a management agent configured to participate, subject to control of the management server, in management of one or more other of said containerized applications.
Claims19
A system, comprising:
- a communication interface;
- and
- a processor coupled to the communication interface and configured to:
- communicate via the communication interface with a management server;
- install one or more containerized applications on an Internet of Things (IoT) gateway, at least one of said containerized applications comprising a management agent, wherein one or more of said containerized applications other than said management agent each comprises a sensor driver application;
- and
- run the one or more containerized applications subject to management by the management server, wherein the management agent is configured to participate, subject to control of the management server, in management of one or more other of said containerized applications including by:
- communicating via a security proxy with one or more associated backend services remote from the management server based at least in part on security posture data received from the management server indicating whether the gateway is compliant with a security policy, and
- configuring at least one of the sensor driver applications to implement the security posture data by permitting or denying access to an associated sensor, including by designating one or more specific backend applications as being permitted to communicate with one or more specific sensors, wherein at least one of the one or more specific backend applications is configured to:
- gather sensor data locally at the IoT gateway, and
- in response to the sensor data meeting a threshold, send the sensor data to the associated backend services via the security proxy.
8 more elements
A method, comprising:
- communicating via a communication interface with a management server;
- installing one or more containerized applications on an Internet of Things (IoT) gateway, at least one of said containerized applications comprising a management agent, wherein one or more of said containerized applications other than said management agent each comprises a sensor driver application;
- and
- running the one or more containerized applications subject to management by the management server, wherein the management agent is configured to participate, subject to control of the management server, in management of one or more other of said containerized applications including by:
- communicating via a security proxy with one or more associated backend services remote from the management server based at least in part on security posture data received from the management server indicating whether the gateway is compliant with a security policy, and
- configuring at least one of the sensor driver applications to implement the security posture data by permitting or denying access to an associated sensor, including by designating one or more specific backend applications as being permitted to communicate with one or more specific sensors, wherein at least one of the one or more specific backend applications is configured to:
- gather sensor data locally at the IoT gateway, and
- in response to the sensor data meeting a threshold, send the sensor data to the associated backend services via the security proxy.
5 more elements
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- communicating via a communication interface with a management server;
- installing one or more containerized applications on an Internet of Things (IoT) gateway, at least one of said containerized applications comprising a management agent, wherein one or more of said containerized applications other than said management agent each comprises a sensor driver application;
- and
- running the one or more containerized applications subject to management by the management server, wherein the management agent is configured to participate, subject to control of the management server, in management of one or more other of said containerized applications including by:
- communicating via a security proxy with one or more associated backend services remote from the management server based at least in part on security posture data received from the management server indicating whether the gateway is compliant with a security policy, and
- configuring at least one of the sensor driver applications to implement the security posture data by permitting or denying access to an associated sensor, including by designating one or more specific backend applications as being permitted to communicate with one or more specific sensors, wherein at least one of the one or more specific backend applications is configured to:
- gather sensor data locally at the IoT gateway, and
- in response to the sensor data meeting a threshold, send the sensor data to the associated backend services via the security proxy.
5 more elements
Dependencies are inferred from the claim text.