MDM Certificate Distribution via Enterprise Gateway Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Third-party operated services on third-party controlled computing devices provide unauthorized access to sensitive customer information, compromising security.
Innovation Solution
A client device provides a public encryption key to a third-party managed service, which relays it to a data repository operated by the client's owner, encrypting sensitive data with this key before transmission to protect it from interception.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If third-party operated services are used to manage enterprise devices, then service accessibility and ease of operation are improved, but security and confidentiality of sensitive information deteriorate due to unauthorized access
Solution Approach 1:
The patent introduces an enterprise gateway as an intermediary component that sits between the third-party managed service and the enterprise data repository. This gateway acts as a security mediator that allows the third-party service to function while preventing unauthorized access to sensitive data. The gateway intercepts requests, validates them, and controls data flow, thus enabling service accessibility while blocking harmful unauthorized access attempts.
2Adaptability or versatility
If sensitive data is transmitted through third-party services, then service functionality is improved, but data security and confidentiality deteriorate during transit
Solution Approach 1:
The patent implements preliminary action by establishing security protocols and encryption mechanisms before data transmission occurs. The enterprise gateway pre-configures secure communication channels, validates data formats, and sets up authentication protocols in advance. This preliminary security setup ensures that when sensitive data is transmitted through the third-party service, it is already protected, thus maintaining both service functionality and data security during transit.
3Ease of operation
If third-party controlled computing devices are used, then device accessibility and ease of operation are improved, but security control and data protection deteriorate
Solution Approach 1:
The patent applies segmentation by dividing the system into distinct functional components with different security levels. The third-party managed service handles general device management operations, while the enterprise gateway segment handles sensitive data access control. This segmentation allows third-party devices to remain accessible and easy to operate for routine tasks, while security control is maintained through the dedicated gateway component that segments and controls access to sensitive enterprise data.
Data Source
AI summary
Disclosed are various embodiments for securely distributing certificates or encryption keys. A management service can receive an enrollment request from a client device. The management service can then send a key request to a certificate provider, the key request comprising a user identifier. The management service can also send a skeleton payload to an enterprise gateway. In response, the management service can receive an encrypted profile from the enterprise gateway, the encrypted profile comprising the skeleton payload with an encryption key inserted by the enterprise gateway into the skeleton payload. Finally, the management service can send the encrypted profile to the client device.