Virtual Endpoint Management for Unmanageable Enterprise Devices

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing network management systems struggle to manage endpoint devices that are unwilling or unable to host management software, posing a security risk and management challenge due to their unmanageable nature.

Innovation Solution

Implementing management agents that virtualize or act as proxies for unmanageable endpoints, using techniques such as web API agents, downstream connectors, and API connectors with security/inventory tools to gather and normalize data from these devices, forming virtual linear chains to mimic participation in the management protocol.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If management software is installed on endpoint devices, then network management control is improved, but device compatibility and ease of deployment deteriorate due to inability to install software on certain devices

Engineering Contradiction:

Improvenetwork management controlVSAvoiddevice compatibility

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent introduces a linear chain interface as an intermediary component that enables management communication without requiring software installation on endpoint devices. The linear chain interface acts as a mediator between the management service and endpoints, allowing unmanageable devices to be incorporated into the management framework through protocol translation and message forwarding mechanisms.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates virtual representations of unmanageable endpoints through the linear chain interface, which copies and simulates the behavior of managed endpoints. This allows the management service to interact with virtual copies of unmanageable devices using standard management protocols, effectively extending management capability without direct software installation.

Inventive Principle:

Principle #26Copying

2Reliability

If all endpoint devices are managed through centralized management service, then network security is improved, but system complexity increases due to protocol compatibility requirements

Engineering Contradiction:

Improvenetwork securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the management architecture into distinct components: the management service, the linear chain interface, and endpoint devices. This segmentation allows each component to operate independently with well-defined interfaces, reducing overall system complexity while maintaining centralized security management. The linear chain interface specifically handles protocol translation to manage complexity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The linear chain interface serves multiple functions simultaneously: it acts as a protocol translator, a message router, a virtual endpoint simulator, and a security boundary. This multi-functionality reduces the need for separate specialized components, thereby managing system complexity while achieving comprehensive security management.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Measurement precision

If management protocol is enforced on all devices, then management precision is improved, but ease of deployment deteriorates due to unmanageable device exclusion

Engineering Contradiction:

Improvemanagement precisionVSAvoidease of deployment

Core Design Contradiction:

Measurement precisionVSEase of manufacture

Solution Approach 1:

Instead of requiring endpoints to initiate management communications (traditional approach), the patent inverts the approach by having the linear chain interface actively poll and query unmanageable endpoints. This inversion allows the management service to enforce protocols on devices that would otherwise be unable to participate, improving management precision while maintaining ease of deployment.

Inventive Principle:

Principle #13The other way round (Inversion)

Data Source

PatentUS12445475B1Managing unmanageable devices on an enterprise network

Publication Date: 2025.10.14 TANIUM

AI summary

Systems, methods, and machine-readable media are described for managing unmanageable devices in an enterprise network. In particular, techniques are described for allowing normally unmanageable endpoint devices to be managed by a management service. An agent establishes a connection with a management service in accordance with a management protocol. The agent collects endpoint data associated with a plurality of unmanageable endpoint devices and generates a virtual representation of each unmanageable endpoint device using a corresponding portion of the endpoint data. The agent performs transactions with the management service using each virtual representation to represent a corresponding unmanageable endpoint device participating in the management protocol.