Distributed Auto Discovery Service for UEM Enrollment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current global discovery methods for device enrollment in Unified Endpoint Management (UEM) systems rely on a central server, leading to increased computing resource costs and enrollment delays, especially during large-scale device enrollment, and are vulnerable to server failures.
Innovation Solution
A distributed auto discovery service where unenrolled user devices on a local network send discovery requests to enrolled devices, which respond with the necessary enrollment server URL and tenant ID, allowing the unenrolled device to complete enrollment without relying on a central server, and subsequently take on discovery responsibilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a central discovery server is used to provide enrollment information, then all clients can access the service, but computing resource costs increase and the system becomes vulnerable to server failures
Solution Approach 1:
The patent segments the centralized discovery server function into distributed discovery agents deployed on individual enrolled devices. Each agent handles discovery requests locally, eliminating the need for a continuously running central server while maintaining service availability through distributed redundancy
Solution Approach 2:
The patent implements self-service by enabling enrolled devices to autonomously respond to discovery requests from unenrolled devices. The discovery agents on enrolled devices automatically provide enrollment information without requiring central server intervention, reducing overall system resource consumption
2Productivity
If a central discovery server handles all enrollment requests, then centralized control is maintained, but enrollment delays occur during large-scale device enrollment
Solution Approach 1:
The patent divides the centralized enrollment processing function into distributed discovery agents on multiple enrolled devices. This segmentation enables parallel processing of discovery requests, allowing multiple unenrolled devices to receive enrollment information simultaneously, thereby increasing throughput and reducing delays
Solution Approach 2:
The patent transitions from a single-point (central server) discovery architecture to a multi-point (distributed agents) architecture. This dimensional change from centralized to distributed discovery enables concurrent enrollment operations across multiple devices without creating backlogs
3Reliability
If a central discovery server is used, then discovery service is provided, but the system fails completely if the server goes down
Solution Approach 1:
The patent segments the discovery service function across multiple enrolled devices rather than relying on a single central server. This segmentation creates redundancy where if one discovery agent is unavailable, other agents continue to provide discovery services, ensuring service continuity
Solution Approach 2:
The patent introduces discovery agents as intermediary components on enrolled devices that mediate between unenrolled devices and the enrollment server. These agents eliminate the single point of failure by distributing the intermediary function across multiple devices
Data Source
AI summary
Methods and systems are described for a distributed auto discovery service for device enrollment. In an example, a user device enrolling in a Unified Endpoint Management (“UEM”) system can receive an email address. The enrolling user device can identify, on a local network that the enrolling user device is connected to, other user devices that are already enrolled with the UEM system. The unenrolled user device can send a discovery request to the enrolled user devices that includes the domain of the email address. One or more of the enrolled user devices can respond with a tenant identifier associated with the domain and a Uniform Resource Locator for a server that the unenrolled user device can contact to complete enrollment. The unenrolled user device can contact the server and complete enrollment using the email address and tenant identifier.