MDM and Enterprise Device Management: From Mobile to IoT

MQTT Communication Architecture

┌─────────────┐       MQTT        ┌──────────────┐
│  Web Portal  │ ──────────────▶  │ MQTT Broker   │
│ (Dashboard)  │ ◀──────────────  │ (Mosquitto)   │
└─────────────┘                   └──────┬───────┘
                                         │
                    ┌────────────────┬────┴────────────┐
                    ▼                ▼                  ▼
              ┌──────────┐   ┌──────────┐       ┌──────────┐
              │ Device 1  │   │ Device 2  │  ...  │ Device N  │
              │ (Android) │   │ (Android) │       │ (Android) │
              └──────────┘   └──────────┘       └──────────┘

Why MQTT over REST?

Real-World Use Cases

HVAC/AC Control (Our primary use case)

Scenario: Office building with 50 AC units
  
  Traditional:
    - Each AC has its own remote
    - No centralized control
    - Energy waste (AC running in empty rooms)
    - No scheduling
  
  With HK AIR:
    - Android devices connected to AC IR blasters
    - Central dashboard controls all units
    - Schedule-based automation
    - Temperature monitoring
    - Energy consumption analytics
    - Zones and groups

Digital Signage

Scenario: Retail chain with 200 digital displays
  
  - Push content updates remotely
  - Schedule different content by time/day
  - Monitor display health
  - Reboot unresponsive devices
  - Kiosk mode prevents tampering

Fleet Management

Scenario: Delivery company with 100 driver tablets
  
  - Lock devices to delivery app
  - Push route updates
  - Track GPS location
  - Restrict personal app usage
  - Remote wipe if device is lost

Building an MDM Agent

// Android Device Admin Receiver
class DeviceAdminReceiver : android.app.admin.DeviceAdminReceiver() {
    
    override fun onEnabled(context: Context, intent: Intent) {
        // Device admin enabled
        val dpm = context.getSystemService(DevicePolicyManager::class.java)
        
        // Set password requirements
        dpm.setPasswordMinimumLength(componentName, 6)
        
        // Disable camera
        dpm.setCameraDisabled(componentName, true)
        
        // Lock to kiosk app
        dpm.setLockTaskPackages(
            componentName,
            arrayOf("com.example.kioskapp")
        )
    }
    
    override fun onDisabled(context: Context, intent: Intent) {
        // Admin privileges removed
    }
}

Enrollment Methods

Device Owner enrollment:
  
  1. NFC Bump        → Tap enrollment device to new device during setup
  2. QR Code         → Scan QR during initial device setup
  3. Google Zero-Touch → Cloud-based automatic enrollment
  4. Samsung KME      → Samsung-specific bulk enrollment
  5. ADB Command      → Developer enrollment for testing
  
  adb shell dpm set-device-owner com.example.mdm/.DeviceAdminReceiver

Security Considerations

MDM Security Layers:
  
  1. TLS 1.3 for all communication
  2. MQTT over TLS (MQTTS port 8883)
  3. Certificate pinning on device
  4. Device attestation (verify genuine hardware)
  5. Encrypted local storage
  6. Tamper detection (root/bootloader)
  7. Compliance checks (policy enforcement)
  8. Audit logging (who did what, when)

HK AIR IoT Controls Platform

Our complete HK AIR IoT device management solution ($149) includes:

The Future: IoT + AI

Emerging patterns (2026):
  
  Predictive maintenance → AI detects device anomalies before failure
  Smart scheduling      → ML optimizes AC/heating based on usage patterns
  Voice control         → "Hey Google, set all office ACs to 24°C"
  Edge computing        → Process data on-device, reduce cloud dependency
  Digital twins         → Virtual replicas for simulation and testing

Related reads:

• HK AIR IoT Controls Showcase — product deep dive
• HK Relay SMS Gateway — another Android platform
• Edge Computing — IoT and edge trends
• Authentication Guide — securing device communication

Follow on LinkedIn for IoT and enterprise development insights.

From mobile phones to IoT devices. HK AIR IoT Controls — enterprise device management, $149.