Secure gateway onboarding via mobile devices for internet of things device management
AssigneeVMware, Inc.
InventorsMeenakshi Vohra, Glen McCready, Greg Bollella
Life of this patent
Estimating the term…
Abstract
Disclosed are various examples for enrollment of gateways using a client device. In one example, a request is transmitted from a client device to a management service. The request comprises the gateway identifier. Gateway credentials are relayed through the client device from the management service to the gateway device. The gateway credentials are unexposed to users of the client device.
Claims20
A system, comprising:
- at least one computing device comprising at least one processor;
- and
- a data store comprising instructions, wherein the instructions, when executed by the at least one processor, cause the at least one computing device to at least:
- capture, by an onboarding application executed by a client device, an image of a gateway device, wherein the image of the gateway device is analyzed to identify a gateway identifier that uniquely identifies the gateway device;
- transmit, by the onboarding application, from the client device to a management service, a request for gateway credentials, wherein the request comprises the gateway identifier;
- relay, by the onboarding application executed by the client device, the gateway credentials from the management service to the gateway device, wherein the onboarding application relays the gateway credentials unexposed to users of the client device;
- and
- delete, by the onboarding application, the gateway credentials from the client device upon detection of a predetermined event that triggers the onboarding application to delete the gateway credentials, the predetermined event comprising receiving, from the management service, a confirmation that the gateway device has checked in with the management service using the gateway credentials relayed to the gateway device by the onboarding application.
A non-transitory computer-readable medium comprising executable instructions, wherein the instructions, when executed by at least one processor, cause at least one computing device to at least:
- capture, by an onboarding application executed by a client device, an image of a gateway device, wherein the image of the gateway device is analyzed to identify a gateway identifier that uniquely identifies the gateway device;
- transmit, by the onboarding application, from the client device to a management service, a request for gateway credentials, wherein the request comprises the gateway identifier;
- relay, by the onboarding application executed by the client device, the gateway credentials from the management service to the gateway device, wherein the onboarding application relays the gateway credentials unexposed to users of the client device;
- and
- delete, by the onboarding application, the gateway credentials from the client device upon detection of a predetermined event that triggers the onboarding application to delete the gateway credentials, the predetermined event comprising receiving, from the management service, a confirmation that the gateway device has checked in with the management service using the gateway credentials relayed to the gateway device by the onboarding application.
A method implemented using a client device, the method comprising:
- capturing, by an onboarding application executed by a client device, an image of a gateway device, wherein the image of the gateway device is analyzed to identify a gateway identifier that uniquely identifies the gateway device;
- transmitting, by the onboarding application, from the client device to a management service, a request for gateway credentials, wherein the request comprises the gateway identifier;
- and
- relaying, by the onboarding application executed by the client device, the gateway credentials from the management service to the gateway device, wherein the gateway credentials are securely relayed unexposed to users of the client device;
- and
- deleting, by the onboarding application, the gateway credentials from the client device upon detection of a predetermined event that triggers the onboarding application to delete the gateway credentials, the predetermined event comprising receiving, from the management service, a confirmation that the gateway device has checked in with the management service using the gateway credentials relayed to the gateway device by the onboarding application.
Dependencies are inferred from the claim text.