Methods and systems for provisioning and managing internet-of-thing devices over a network

Abstract

Methods for provisioning and managing Internet-of-Things (IoT) devices over a network using device based tunneled nodes are provided. In one aspect, a method includes receiving, by a first network device in a network, data originated from an Internet-of-Things (IoT) device; identifying a device type of the IoT device by analyzing data packets of the received data; obtaining, by the first network device, a device profile for the IoT device, wherein the device profile is used for provisioning the IoT device to access the network; and provisioning the IoT device using the device profile, wherein the provisioning includes at least one of (1) identifying a tunneling attribute in the device profile; and (2) identifying a constrained application protocol (CoAP) parameter in the device profile, wherein the CoAP parameter is used to zero touch provision one or more device attributes of the IoT device. Systems and machine-readable media are also provided.

What is claimed is: 
     
         1 . A computer-implemented method comprising:
 receiving, by a first network device in a network, data originated from an Internet-of-Things (IoT) device;   identifying a device type of the IoT device by analyzing data packets of the received data;   obtaining, by the first network device, a device profile for the IoT device, the device profile being used for provisioning the IoT device to access the network; and   provisioning the IoT device using the device profile, wherein the provisioning comprises at least one of: (1) identifying a tunneling attribute in the device profile, wherein the tunneling attribute is used to create a tunnel between the first network device and a second network device for transmitting the data received from the IoT device, or (2) identifying a constrained application protocol (CoAP) parameter in the device profile, wherein the CoAP parameter is used to zero touch provision one or more device attributes of the IoT device.   
     
     
         2 . The computer-implemented method of  claim 1 , further comprising:
 transmitting, by the first network device to the second network device, a request to create the tunnel between the first network device and the second network device for transmitting the data from the IoT device;   receiving, by the first network device from the second network device, a confirmation that the tunnel between the first network device and the second network device for transmitting the data from the IoT device has been created; and   transmitting the data received from the IoT device from the first network device to the second network device using the tunnel.   
     
     
         3 . The method of  claim 1 , wherein the first network device comprises a network switch and the second network device is a network controller, the network switch deployed at an edge segment of the network. 
     
     
         4 . The method of  claim 1 , wherein obtaining the device profile comprises retrieving the device profile from storage in a memory of the first network device. 
     
     
         5 . The method of  claim 1 , wherein obtaining the device profile comprises downloading the device profile from a device profile database of a central management server via a secure networking protocol. 
     
     
         6 . The method of  claim 5 , wherein downloading the device profile comprises transmitting a REpresentational State Transfer (REST) query to the central management server via the secure networking protocol. 
     
     
         7 . The method  claim 6 , wherein the secure networking protocol is a Hypertext Transfer Protocol Secure (HTTPS) protocol. 
     
     
         8 . The method of  claim 1 , wherein provisioning the IoT device using the device profile comprises configuring the IoT device to communicate over the network via the first network device and the second network device. 
     
     
         9 . The method of  claim 1 , wherein the tunneling attribute comprises a device-tunneled-redirect instruction for creating the tunnel between the first network device and the second network device. 
     
     
         10 . A system comprising:
 a memory comprising instructions; and   one or more processors configured to execute the instructions to:
 receive, by a network switch in a network, data originated from an Internet-of-Things (IoT) device; 
 identify a type of the IoT device by analyzing data packets of the received data; 
 obtain, by the network switch, a device profile for the IoT device, the device profile being used for provisioning the IoT device to access the network; and 
 provision the IoT device using the device profile, wherein provisioning the IoT device comprises at least one of: (1) identifying a tunneling attribute in the device profile, wherein the tunneling attribute is used to create a tunnel between the network switch and a network controller for transmitting the data received from the IoT device, or (2) identifying a constrained application protocol (CoAP) parameter in the device profile, wherein the CoAP parameter is used to zero touch provision one or more device attributes of the IoT device. 
   
     
     
         11 . The system of  claim 10 , wherein the one or more processors are further configured to execute instructions, which when executed, cause the one or more processors to:
 transmit, by the network switch to the network controller, a request to create the tunnel between the network switch and the network controller for transmitting the data from the IoT device;   receive, by the network switch from the network controller, a confirmation that the tunnel between the network switch and the network controller for transmitting the data from the IoT device has been created; and   transmit the data received from the IoT device from the network switch to the network controller using the tunnel.   
     
     
         12 . The system of  claim 10 , wherein the instruction to obtain the device profile comprises retrieve the device profile from storage in a memory of the network switch. 
     
     
         13 . The system of  claim 10 , wherein the instruction to obtain the device profile comprises download the device profile from a device profile database of a central management server via a secure networking protocol. 
     
     
         14 . The system of  claim 13 , wherein the instruction to download the device profile comprises transmit a REpresentational State Transfer (REST) query to the central management server via the secure networking protocol. 
     
     
         15 . The system of  claim 10 , wherein the instruction to provision the IoT device using the device profile comprises configure the IoT device to communicate over the network via the network switch and the network controller. 
     
     
         16 . The system of  claim 10 , wherein the instruction to identify the tunneling attribute comprises add, by the network switch, the tunneling attribute to the device profile. 
     
     
         17 . The system of  claim 10 , wherein the tunneling attribute comprises a device-tunneled-redirect instruction for creating the tunnel between the network switch and the network controller. 
     
     
         18 . A non-transitory machine-readable storage medium, comprising:
 receiving, by a network switch in a network, data originated from an Internet-of-Things (IoT) device;   identifying a type of the IoT device by analyzing data packets of the received data;   obtaining, by the network switch, a device profile for the IoT device, the device profile being used for provisioning the IoT device to access the network;   provisioning the IoT device using the device profile, wherein provisioning the IoT device comprises at least one of: (1) identifying a tunneling attribute in the device profile, wherein the tunneling attribute is used to create a tunnel between the network switch and a network controller for transmitting the data received from the IoT device, or (2) identifying a constrained application protocol (CoAP) parameter in the device profile, wherein the CoAP parameter is used to zero touch provision one or more device attributes of the IoT device;   transmitting, by the network switch to the network controller, a request to create the tunnel between the network switch and the network controller for transmitting the data from the IoT device; and   receiving, by the network switch from the network controller, a confirmation that the tunnel between the network switch and the network controller for transmitting the data from the IoT device has been created; and   transmitting the data received from the IoT device from the network switch to the network controller using the tunnel.   
     
     
         19 . The non-transitory machine-readable storage medium of  claim 18 , wherein the obtaining the device profile comprises retrieving the device profile from storage in a memory of the network switch. 
     
     
         20 . The non-transitory machine-readable storage medium of  claim 18 , wherein the obtaining the device profile comprises downloading the device profile from a device profile database of a central management server via a secure networking protocol.