Peer Update Relay for Offline Managed Device Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In enterprise environments, devices enrolled in management services may go offline for extended periods, missing critical updates and compromising security and compliance due to lack of network access.
Innovation Solution
Implementing a peer-to-peer (P2P) updating mechanism using management agents on online and offline devices to facilitate the transfer of updates and policies via localized communication channels like Bluetooth or Wi-Fi direct, forming a Secure P2P Enrolled Device (SPED) network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices are enrolled in management services with centralized update distribution, then update management and security policy enforcement are improved, but offline devices cannot receive updates timely leading to security compromises
Solution Approach 1:
The patent introduces peer devices as intermediaries to transfer updates to offline devices. When a device goes offline, other enrolled devices in the enterprise network act as mediators to receive and forward updates to the offline device when it reconnects, ensuring timely update delivery without relying solely on centralized management service connectivity.
Solution Approach 2:
The patent implements preliminary actions by having devices pre-cache update information and maintain update readiness states before going offline. Devices prepare update reception capabilities in advance, and the system pre-establishes peer relationships so that when offline devices reconnect, updates can be immediately delivered without delay.
2Adaptability or versatility
If devices operate offline for extended periods to maintain connectivity independence, then device autonomy and mobility are improved, but critical security updates and policy changes cannot be delivered
Solution Approach 1:
The patent implements feedback mechanisms where offline devices periodically check in with the management service or peer devices to report their offline status and update needs. The system tracks which updates are pending for each offline device and provides feedback to both the device and peer devices, ensuring that security policy information is not lost and is delivered as soon as the device reconnects.
Solution Approach 2:
The patent makes enrolled devices multi-functional by enabling them to serve both as managed endpoints and as update distribution peers. Devices can simultaneously maintain their autonomous offline operation while also functioning as update relay nodes for other offline devices, combining device autonomy with collective update delivery capability.
3Stability of the object's composition
If centralized management service distributes updates to all devices, then update consistency across enterprise devices is improved, but network dependency increases and offline devices miss updates
Solution Approach 1:
The patent segments the centralized update distribution system into distributed peer-to-peer update transfers. Instead of a single centralized path from management service to each device, the update distribution is segmented across multiple peer devices in the enterprise network, allowing updates to reach offline devices through alternative routes while maintaining update consistency.
Solution Approach 2:
The patent implements a nested update distribution architecture where the centralized management service nests within a peer-to-peer update delivery network. The management service initiates updates to available devices, which then nest within a broader peer distribution layer that propagates updates to offline devices, creating a multi-layered distribution system that reduces network infrastructure dependency.
Data Source
AI summary
The present disclosure relates to peer-to-peer (P2P) updating of offline client devices by an online client devices. Client devices can be enrolled with a management service as managed devices. If a device lacks the ability to contact the management service, an online client device that is in communication with the offline client device can deliver updates to software, policies, or other data.