Back to results
US 9,774,604 B2Granted
Private cloud control
AssigneeZingBox, Ltd.
InventorsXu Zou, Jianlin Zeng, Mei Wang
Life of this patent
Estimating the term…
Abstract
Management of IoT devices through a private cloud. An IoT device is coupled to a gateway. A request from the IoT device to connect to a private cloud, wherein the private cloud is used to manage IoT devices, is received at a private cloud control center agent. An identification of the IoT device is determined. The IoT device is onboarded, using the identification, for management through the private cloud. A device profile of the IoT device is generated. The flow of data to and from the IoT device is regulated through application of IoT rules of an IoT firewall according to the device profile of the IoT device.
Claims17
A method comprising:
- coupling an IoT device to a gateway;
- receiving, at a private cloud control center agent, a request from the IoT device to connect to a private cloud, wherein the private cloud is used to manage IoT device;
- determining an identification of the IoT device;
- propagating the identification of the IoT device to other instances of the private cloud control center agent for authentication and management of the IoT device;
- placing, by the private cloud control center agent, the IoT device into an unproven device zone after the identification of the IoT device, a scope of the IoT device's communications while in the unproven device zone dependent on the identification of the IoT device;
- determining if the IoT device conforms to an IoT firewall based on the identification of the IoT device;
- onboarding the IoT device for management of the IoT device through the private cloud, using the identification, if it is determined the IoT device conforms to the IoT firewall based on the identification of the IoT device;
- generating a device profile of the IoT device;
- and
- regulating the flow of data to and from the IoT device through application of IoT rules of the IoT firewall according to the device profile of the IoT device by either removing or rewriting headers of HTTP packets sent from the IoT device to a destination to remove one of a combination of a device type, an operating system version, and a firm ware version of the IoT device from the HTTP packets according to the IoT rules of the IoT firewall and the IoT device profile.
7 more elements
A system comprising:
- a gateway coupled to an IoT device;
- a private cloud control center agent configured to receive a request from the IoT device to connect to a private cloud, wherein the private cloud is used to manage IoT device;
- a device identification determination engine configured to:
- determine an identification of the IoT device;
- and
- propagate the identification of the IoT device to other instances of the private cloud control center agent for authentication and management of the IoT device;
- an onboarding and authentication engine implemented at the private cloud control center agent and configured to:
- place the IoT device into an unproven device zone after the identification of the IoT device, a scope of the IoT device's communications while in the unproven device zone dependent on the identification of the IoT device;
- determine if the IoT device conforms to an IoT firewall based on the identification of the IoT device;
- and
- onboard the IoT device for management of the IoT device through the private cloud using the identification of the IoT device, if it is determined the IoT device conforms to the IoT firewall based on the identification of the IoT device;
- an IoT device profiling engine configured to generate a device profile of the IoT device;
- and
- a data flow management engine configured to regulate the flow of data to and from the IoT device through application of IoT rules of the IoT firewall according to the device profile of the IoT device by either removing or rewriting headers of HTTP packets sent from the IoT device to a destination to remove one of a combination of a device type, an operating system version, and a firm ware version of the IoT device from the HTTP packets according to the IoT rules of the IoT firewall and the IoT device profile.
11 more elements
A system comprising:
- means for coupling an IoT device to a gateway;
- means for receiving a request from the IoT device to connect to a private cloud, wherein the private cloud is used to manage IoT device;
- means for determining an identification of the IoT device;
- means for propagating the identification of the IoT device to other instances of the private cloud control center agent for authentication and management of the IoT device;
- means for placing the IoT device into an unproven device zone after the identification of the IoT device, a scope of the IoT device's communications while in the unproven device zone dependent on the identification of the IoT device;
- means for determining if the IoT device conforms to an IoT firewall based on the identification of the IoT device;
- means for onboarding the IoT device for management of the IoT device through the private cloud, using the identification, if it is determined the IoT device conforms to the IoT firewall based on the identification of the IoT device;
- means for generating a device profile of the IoT device;
- and
- means for regulating the flow of data to and from the IoT device through application of IoT rules of the IoT firewall according to the device profile of the IoT device by either removing or rewriting headers of HTTP packets sent from the IoT device to a destination to remove one of a combination of a device type, an operating system version, and a firm ware version of the IoT device from the HTTP packets according to the IoT rules of the IoT firewall and the IoT device profile.
7 more elements
Dependencies are inferred from the claim text.