Managing devices through secondary communication channels

Patent metadata

Field	Value
Publication number	US-10979280-B2
Application number	US-201514864884-A
Country	US
Kind code	B2
Filing date	Sep 25, 2015
Priority date	Aug 12, 2015
Publication date	Apr 13, 2021
Grant date	Apr 13, 2021

Abstract

Disclosed are examples of managing devices through secondary communication channels. In some examples, a management component detects an impediment with a data communication channel for a device. The data communication channel can be a primary communication channel through which the device communicates with a management service. The management component detects an event associated with the device to report to the management service. The management component generates a message specifying the event, and the management component transmits the message to the management service through the secondary communication channel.

First claim

Therefore, the following is claimed:

1. A method, comprising:
detecting an impediment with a data communication channel for a client device of a particular enterprise, wherein the data communication channel is a primary communication channel through which the client device communicates with a management service;
detecting an event comprising a violation of a compliance rule associated with the client device to report to the management service;
detecting availability of a peer device based at least in part on receiving, from the peer device, a beacon response message comprising an indication that the peer device is available to relay communications between the client device and the management service;
transmitting, through a peer-to-peer communication channel between the client device and the peer device, an event message specifying the violation of the compliance rule, wherein the peer device relays the event message from the client device to the management service;
receiving, through the peer-to-peer communication channel between the client device and the peer device, a command to perform a device management action comprising erasing data from the client device based at least in part on the violation of the compliance rule, wherein the peer device relays the command from the management service to the client device; and
performing the device management action specified by the command.

2. The method of claim 1 , further comprising:
broadcasting, by the client device, a beacon message comprising an indication that the client device is unable to communicate with the management service.

3. The method of claim 2 , wherein the command comprises a timestamp and an expiration time for the command to perform the device management action.

4. The method of claim 3 , further comprising determining whether a time of validity for the command has expired based at least in part on the timestamp and the expiration time for the command.

5. The method of claim 1 , wherein the event message is encrypted based on a communication key received from the peer device.

6. The method of claim 5 , wherein the communication key is received in response to an authentication message transmitted by the client device to the peer device through the peer-to-peer communication channel.

7. The method of claim 6 , wherein the authentication message comprises an HMAC signature, and the HMAC signature is validated by at least one of: the peer device, and the management service.

8. A non-transitory computer-readable medium embodying a plurality of computer instructions executable by a computing device, wherein the plurality of computer instructions, upon execution, cause the computing device to at least:
detect an impediment with a data communication channel for a client device associated with a particular enterprise, wherein the data communication channel is a primary communication channel through which the client device communicates with a management service;
detect an event comprising a violation of a compliance rule associated with the client device to report to the management service;
detect availability of a peer device based at least in part on receiving, from the peer device, a beacon response message comprising an indication that the peer device is available to relay communications between the client device and the management service;
transmit, through a peer-to-peer communication channel between the client device and the peer device, an event message specifying the violation of the compliance rule, wherein the peer device relays the event message from the client device to the management service;
receive, through the peer-to-peer communication channel between the client device and the peer device, a command to perform a device management action comprising erasing data from the client device based at least in part on the violation of the compliance rule, wherein the peer device relays the command from the management service to the client device; and
perform the device management action specified by the command.

9. The non-transitory computer-readable medium of claim 8 , wherein the plurality of computer instructions, upon execution, further cause the computing device to at least:
broadcast, by the client device, a beacon message comprising an indication that the client device is unable to communicate with the management service.

10. The non-transitory computer-readable medium of claim 9 , wherein the command comprises a timestamp and an expiration time for the command to perform the device management action.

11. The non-transitory computer-readable medium of claim 10 , wherein the plurality of computer instructions further cause the computing device to at least determine whether a time of validity for the command has expired based at least in part on the timestamp and the expiration time for the command.

12. The non-transitory computer-readable medium of claim 8 , wherein the event message is encrypted based on a communication key received from the peer device.

13. The non-transitory computer-readable medium of claim 12 , wherein the communication key is received in response to an authentication message transmitted by the client device to the peer device through the peer-to-peer communication channel.

14. The non-transitory computer-readable medium of claim 13 , wherein the authentication message comprises an HMAC signature, and the HMAC signature is validated by at least one of: the peer device, and the management service.

15. A system, comprising:
a computing device;
a plurality of computer instructions executable by the computing device, wherein the computer instructions, upon execution, cause the computing device to at least:
detect an impediment with a data communication channel for a client device associated with a particular enterprise, wherein the data communication channel is a primary communication through which the client device communicates with a management service;
detect an event comprising a violation of a compliance rule associated with the client device to report to the management service;
detect availability of a peer device based at least in part on receiving, from the peer device, a beacon response message comprising an indication that the peer device is available to relay communications between the client device and the management service;
transmit, through the peer-to-peer communication channel between the client device and the peer device, a command to perform a device management action comprising erasing data from the client device based at least in part on the violation of the compliance rule, wherein the peer device relays the command from the management service to the client device;
receive, through the peer-to-peer communication channel between the client device and the peer device, a command to perform a device management action comprising erasing data from the client device based at least in part on the violation of the compliance rule, wherein the peer device relays the command from the management service to the client device; and
perform the device management action specified by the command.

16. The system of claim 15 , wherein the plurality of computer instructions, upon execution, further cause the computing device to at least:
broadcast, by the client device, a beacon message comprising an indication that the client device is unable to communicate with the management service.

17. The system of claim 16 , wherein the command comprises a timestamp and an expiration time for the command to perform the device management action.

18. The sy

Assignees

• Airwatch Llc

Inventors

• Kavatage Mahesh
• Paramashivaiah Niranjan
• Aluvala Suman
• Rangain Pavan Rajkumar
• Panchapakesan Ramani

Classifications

• H04L45/22

  Alternate routing · CPC title

• H04L41/04 Primary

  Network management architectures or arrangements · CPC title

• H04L41/344

  Out-of-band transfers · CPC title

• H04L51/046

  Interoperability with other network applications or services · CPC title

• H04L69/14

  Multichannel or multilink protocols · CPC title