Securely accessing IoT devices

Secure device access (SDA) lets you grant people outside of your organization permissions to access specific devices securely even when the devices are unable to connect to the cloud to authenticate the access request.

Device Management enables SDA by generating a token that specifies which devices the token holder can access and which operations they can perform. The device authenticates the token using a pre-shared secret and allows the token holder to perform the activities specified in the token until the token expires.

SDA lets you grant different groups of users different levels of access to a device. For example:

• Authorized service engineers might have read and configuration access to a heating, ventilation and air conditioning (HVAC) system so they can and maintain the system.
• Original equipment manufacturer (OEM) engineers might have write access so they can perform a firmware upgrade, which the service technician cannot perform.

To use SDA:

• Add SDA to your Android and IoT device applications.
• Define authorized users and operations for the IoT device in Device Management Portal.