On-Premise Gateway Provisioning for Offline Smart Device Setup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart devices cannot be securely provisioned without a reliable Internet connection, posing challenges in on-premise locations with intermittent or nonexistent connectivity.
Innovation Solution
A system and method for offline device provisioning that utilizes an on-premise gateway system to connect with an off-premise device provisioning service, enabling devices to be provisioned within an on-premise network even when disconnected from the Internet, by using discovery processes and local identity brokering systems to authenticate and register devices with on-premise and off-premise solutions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If smart devices connect to a remote DPS via the Internet for provisioning, then secure provisioning is achieved, but provisioning cannot be performed at locations with intermittent or nonexistent Internet connection
Solution Approach 1:
The system segments the provisioning function into two parts: the device provisioning service system that manages provisioning records, and the gateway system that provides local provisioning capability. This segmentation allows the gateway to operate independently without requiring continuous Internet connection to the DPS, thus resolving the contradiction between reliable provisioning and location flexibility.
Solution Approach 2:
The gateway system acts as an intermediary between smart devices and the remote DPS. It receives and stores provisioning records from the DPS, then uses these stored records to provision devices locally even when disconnected from the Internet. This intermediary role enables provisioning in locations without Internet access while maintaining security through the DPS architecture.
2Ease of operation
If the gateway system stores provisioning records locally, then offline provisioning is enabled, but security requirements must be maintained without Internet verification
Solution Approach 1:
The gateway system performs preliminary actions by obtaining and storing device provisioning service system records (DPSS records) before offline provisioning occurs. These pre-stored records contain the necessary authentication and configuration information, allowing the gateway to securely provision devices offline without requiring real-time Internet verification, thus maintaining security while enabling offline operation.
Data Source
AI summary
Provisioning an on-premise device within an on-premise communications network includes connecting, via a network connection, an on-premise gateway system in the on-premise communications network with an off-premise device provisioning service system in an off-premise communications network. The network connection is disconnected between the on-premise communications network and the off-premise communications network. A discovery request response is received from the on-premise device via the on-premise communications network, while the network connection is disconnected. A provisioning request from the on-premise device is received at the on-premise device provisioning service of the on-premise gateway system via the on-premise communications network, while the network connection is disconnected. An on-premise device provisioning service of the on-premise gateway system provisions the on-premise device based on provisioning records, while the network connection is disconnected.