US20080028051A1 - Network device configuration - Google Patents

Network device configuration Download PDF

Info

Publication number
US20080028051A1
US20080028051A1 US11/866,540 US86654007A US2008028051A1 US 20080028051 A1 US20080028051 A1 US 20080028051A1 US 86654007 A US86654007 A US 86654007A US 2008028051 A1 US2008028051 A1 US 2008028051A1
Authority
US
United States
Prior art keywords
network device
configuration data
configuration
authority
remote
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US11/866,540
Inventor
Christopher Massam
Dennis Monks
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Yellowtuna Holdings Ltd
Original Assignee
Yellowtuna Holdings Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Yellowtuna Holdings Ltd filed Critical Yellowtuna Holdings Ltd
Priority to US11/866,540 priority Critical patent/US20080028051A1/en
Publication of US20080028051A1 publication Critical patent/US20080028051A1/en
Priority to US13/421,435 priority patent/US8443064B2/en
Abandoned legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/085Retrieval of network configuration; Tracking network configuration history
    • H04L41/0853Retrieval of network configuration; Tracking network configuration history by actively collecting configuration information or by backing up configuration information
    • H04L41/0856Retrieval of network configuration; Tracking network configuration history by actively collecting configuration information or by backing up configuration information by backing up or archiving configuration information
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/2854Wide area networks, e.g. public data networks
    • H04L12/2856Access arrangements, e.g. Internet access
    • H04L12/2869Operational details of access network equipments
    • H04L12/2898Subscriber equipments
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/0803Configuration setting
    • H04L41/0806Configuration setting for initial configuration or provisioning, e.g. plug-and-play
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0209Architectural arrangements, e.g. perimeter networks or demilitarized zones
    • H04L63/0218Distributed architectures, e.g. distributed firewalls
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/34Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40Network security protocols
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/30Definitions, standards or architectural aspects of layered protocol stacks
    • H04L69/32Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
    • H04L69/322Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
    • H04L69/329Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the application layer [OSI layer 7]

Definitions

  • This invention relates to connecting to the internet via a data connection which connection is remotely configurable as to access permissions.
  • the connection may be via a modem or via a direct network connection.
  • Connection of network devices to a network typically require the attendance of a person on site to carry out the initial configuration of the device.
  • connection of a users business to the internet for access by internal parties may be by ADSL (Asymmetric Digital Subscriber Line) or some other connection protocol.
  • ADSL Asymmetric Digital Subscriber Line
  • Such a connection is typically via an ADSL modem and may include a router to route incoming data packets and a firewall to stop attempts to intrude into the users data.
  • the configuration of the router and firewall is done on site and will need to be changed on site to cater for variations over time in the users business. This involves a smaller user in expense as it requires specialized IT personnel to come on site to carry out the configuration.
  • Connections for higher volume users also typically include routers and firewalls connected via a plurality of modems for internet access.
  • routers and firewalls connected via a plurality of modems for internet access.
  • modems for internet access.
  • these are mainly configured on site by the users skilled personnel. It is known, once the initial configuration is carried out, that the device may be remotely connected to via the network and final configuration carried out.
  • such a network device will include an operating system of some sort which will be accessible by using an external name and password. Once the correct name and password is entered the remote user may modify the device settings, including settings for any router and firewall. This provides security problems, since it is possible for someone with knowledge of the name and password to alter the modem settings without authority.
  • the invention may broadly be said to consist in a network device having operating software but no configuration data allowing it to carry out its intended purpose which network device is remotely programmable with configuration data as a whole but which network device or operating software has no facility to allow any incremental change of configuration data.
  • the device configuration data is held in random access memory (RAM) and is lost when no network device supply voltage is present.
  • RAM random access memory
  • the device software contains a routine which on initialization attempts to contact a remote verification authority to authorize retrieval of configuration data from a configuration authority.
  • the device software contains only the routine for contacting the remote verification authority and receiving data from the remote configuration authority.
  • the contact with the remote verification authority is subject to encryption.
  • the device initially contains an input filter which will only receive configuration data from a specified remote configuration authority address.
  • the device is a router which is integral with a modem.
  • the modem is an asymmetric digital subscriber line (ADSL) modem.
  • ADSL digital subscriber line
  • the invention may be said to lie in the method of configuring a network device which loses its configuration data on power loss comprising providing a network device without user configuration data, providing within the network device a routine which securely contacts a remote verification authority, and downloading from a remote configuration authority authorized by the remote verification authority the entire configuration data.
  • the network device is a router.
  • the router is part of an ADSL modem.
  • the network device is capable of being configured only by remote download of the complete configuration data.
  • the network device routine which contacts the remote verification authority carries out any information transfer using secure encryption.
  • the secure encryption uses a public key encryption method.
  • the private key for the network device is provided by a device temporarily connected to the network device.
  • the temporarily connected device is a USB memory device.
  • the configuration data is also lost from the network device on any intrusion attempt.
  • the invention may be said to consist in a method of providing communication between two network devices of unknown network address wherein each device is required to download its configuration parameters from a server at a known network address each time the device is initialized, the devices allocated network addresses are stored at server, the server may be queried for the allocated network addresses of the two network devices, and wherein communications can be initiated between the two network addresses from this data.
  • the two network devices are routers.
  • the routers form part of ADSL modems.
  • the invention may also broadly be said to consist in the parts, elements and features referred to or indicated in the specification of the application, individually or collectively, and any or all combinations of any two or more of the parts, elements or features, and where specific integers are mentioned herein which have known equivalents, such equivalents are incorporated herein as if they were individually set forth.
  • FIG. 1 shows a block diagram of one form of network device.
  • FIG. 2 shows a flow diagram of the initial mediation procedure which downloads to the network device.
  • the diagram shows a network device consisting of an ADSL connection via a modem 101 to a firewall 102 and router 103 which distributes the data to devices such as PC's 104.
  • the modem acts to convert packets from the firewall router into a form suitable for carrying information over the internet.
  • the firewall 102 acts to restrict what information packets may be transferred into the users system and the router 103 acts to distribute packets to an internal user in accordance with the packet address.
  • firewall and router may be combined into a single item of equipment with the configuration data held in a common internal location.
  • the modem or firewall or router, has configuration information, which is internally held, but this information is not capable of being changed by any routine or subroutine held in the modem.
  • the only way in which this information can be altered is to download an updated configuration from a remote authority.
  • the only remote authority which the modem recognizes are ones which are hard coded into the internal software, and the only action the modem can take as regards configuration is to contact the remote authority in a secure manner. This action can occur either at power on or if an intrusion is detected, or it can be triggered by a specific remote query.
  • the modem may have instructions in read only memory (ROM) which instruct it to call an address such as 203.17.209.32 upon initial power on, but to otherwise provide no routing of incoming or outgoing data packets.
  • ROM read only memory
  • the modem may have instructions in read only memory (ROM) which instruct it to call an address such as 203.17.209.32 upon initial power on, but to otherwise provide no routing of incoming or outgoing data packets.
  • ROM read only memory
  • a secure connection between the modem and the address is set up, preferably by the exchange of encrypted passwords through a secure sockets layer (SSL) and the modems' required configuration is downloaded from a configuration server. This provides the routing configuration required and leaves the modem in a secure state.
  • SSL secure sockets layer
  • the configuration may include any connection data and passwords for connecting the modem to an internet service provider (ISP), and the modem may automatically carry out the connection once configured.
  • ISP internet service provider
  • the authentication for the modem may be provided by a removable key, for instance a USB key.
  • the modem initialization software is intended to be re-triggered, resulting in a complete download of the required configuration.
  • FIG. 2 shows how the equipment on powering on at 201 searches for an internet connection at, and on detecting one sends a particular data stream to the remote verification authority at 202,203 which detects the identity of the calling equipment, and from this can look up the customers identity, the equipments current state, and its desired state as required by the customer.
  • the remote authority then connects a configuration server and initiates the procedure to securely update the equipment at 204 with the desired configuration changes and with the software required to carry out the desired functions.
  • the remote configuration authority can then continue to receive operation reports from the equipment at scheduled intervals.
  • the modem, firewall and router are normally provided as a single equipment item which may also include a hub or switch.
  • This item is installed on the users premises, provided with a connection to the internet and powered up. On detecting the internet connection the equipment identifies itself to the remote verification authority, the only action it is capable of taking.
  • the remote authority will detect the identification of the calling equipment and validate this against a database of equipment whose setups are stored. If the equipment ID is found the remote authority may then, in secure mode, connect the calling equipment to a configuration service and download to the equipment such configuration details and software as will allow it to perform the desired router/firewall functions.
  • the equipment configuration template is held by the remote authority, who may either make changes in it or allow the user to make changes in it via secure internet access.
  • Such changes may be downloaded to the equipment in the same manner as the initial configuration data, though in most instances the remote authority will send a code to the equipment which forces it to reload the configuration.
  • the firewall and router may maintain the normal statistics of packets passed, addresses sent to or received from, intrusion attempts etc. and may, either on prompting or on schedule, send these details to the configuration authority for storage and possible analysis.
  • the firewall or router may be set up to pass information through desired ports and may be set to configure these ports on call.
  • a client requires a VPN connection between two locations which do not have a specific allocated IP address (as for instance a small office served by an ADSL without a fixed address) the client requests the VPN connection from the remote authority, which will have stored the network address of any modem of the inventive type.
  • the remote authority then notifies the network devices of the required connection and the devices then create the VPN connection.
  • a VPN connection can be established between two modems which did not initially know each others addresses.
  • the invention is applicable to the guaranteeing of the configuration of a network device, to prevent the compromising of data passing through that device, or the extraction of data in an unintended manner by that device.
  • At least the preferred form of the invention provides an item of equipment which can be remotely configured for network device set up purposes.

Abstract

A network device initially has no configuration data and is permitted only to query a known network address. From this address a server verifies the connection and authorizes another server to download to the network device the necessary configuration to carry out its purpose. This configuration may not be amended and is not retained on power loss. Any updates are carried out by a complete reload of configuration data.

Description

    CROSS REFERENCE TO RELATED APPLICATION
  • This application is a continuation of U.S. application Ser. No. 10/540,328, filed on Jun. 21, 2005.
  • BACKGROUND OF THE INVENTION
  • 1. Field of the Invention
  • Technical Field This invention relates to connecting to the internet via a data connection which connection is remotely configurable as to access permissions. The connection may be via a modem or via a direct network connection.
  • 2. Description of the Related Art
  • Connection of network devices to a network typically require the attendance of a person on site to carry out the initial configuration of the device. For example, connection of a users business to the internet for access by internal parties may be by ADSL (Asymmetric Digital Subscriber Line) or some other connection protocol.
  • Such a connection is typically via an ADSL modem and may include a router to route incoming data packets and a firewall to stop attempts to intrude into the users data.
  • Typically the configuration of the router and firewall is done on site and will need to be changed on site to cater for variations over time in the users business. This involves a smaller user in expense as it requires specialized IT personnel to come on site to carry out the configuration.
  • Connections for higher volume users also typically include routers and firewalls connected via a plurality of modems for internet access. Currently these are mainly configured on site by the users skilled personnel. It is known, once the initial configuration is carried out, that the device may be remotely connected to via the network and final configuration carried out.
  • Typically such a network device will include an operating system of some sort which will be accessible by using an external name and password. Once the correct name and password is entered the remote user may modify the device settings, including settings for any router and firewall. This provides security problems, since it is possible for someone with knowledge of the name and password to alter the modem settings without authority.
  • It is therefore an object of the present invention to provide a network device which does not require any on site attendance for configuration of the network device but which is secure or which will at least provide the public with a useful choice.
  • It is known to provide remotely configured routers to avoid attendance on site, for instance U.S. Pat. No. 6,012,088 shows one such router, however such routers may provide a security problem in that if access is gained to them from one of the networks the router configuration can be changed, and may be changed in such a manner as to compromise security.
  • It is therefore an object of the present invention to provide an internet connection which does not require on site attendance for configuration of router or firewall but which does provide complete security of the configuration or which will at least provide the public with a useful choice.
  • SUMMARY OF THE INVENTION
  • Accordingly, the invention may broadly be said to consist in a network device having operating software but no configuration data allowing it to carry out its intended purpose which network device is remotely programmable with configuration data as a whole but which network device or operating software has no facility to allow any incremental change of configuration data.
  • Preferably the device configuration data is held in random access memory (RAM) and is lost when no network device supply voltage is present.
  • Preferably the device software contains a routine which on initialization attempts to contact a remote verification authority to authorize retrieval of configuration data from a configuration authority.
  • Preferably the device software contains only the routine for contacting the remote verification authority and receiving data from the remote configuration authority.
  • Preferably the contact with the remote verification authority is subject to encryption.
  • Preferably the device initially contains an input filter which will only receive configuration data from a specified remote configuration authority address.
  • Preferably the device is a router which is integral with a modem.
  • Preferably the modem is an asymmetric digital subscriber line (ADSL) modem.
  • Alternatively the invention may be said to lie in the method of configuring a network device which loses its configuration data on power loss comprising providing a network device without user configuration data, providing within the network device a routine which securely contacts a remote verification authority, and downloading from a remote configuration authority authorized by the remote verification authority the entire configuration data.
  • Preferably the network device is a router.
  • Preferably the router is part of an ADSL modem.
  • Preferably the network device is capable of being configured only by remote download of the complete configuration data.
  • Preferably the network device routine which contacts the remote verification authority carries out any information transfer using secure encryption.
  • Preferably the secure encryption uses a public key encryption method.
  • Preferably the private key for the network device is provided by a device temporarily connected to the network device.
  • Preferably the temporarily connected device is a USB memory device.
  • Preferably the configuration data is also lost from the network device on any intrusion attempt.
  • Alternatively the invention may be said to consist in a method of providing communication between two network devices of unknown network address wherein each device is required to download its configuration parameters from a server at a known network address each time the device is initialized, the devices allocated network addresses are stored at server, the server may be queried for the allocated network addresses of the two network devices, and wherein communications can be initiated between the two network addresses from this data.
  • Preferably the two network devices are routers.
  • Preferably the routers form part of ADSL modems.
  • The invention may also broadly be said to consist in the parts, elements and features referred to or indicated in the specification of the application, individually or collectively, and any or all combinations of any two or more of the parts, elements or features, and where specific integers are mentioned herein which have known equivalents, such equivalents are incorporated herein as if they were individually set forth.
  • BRIEF DESCRIPTION OF DRAWINGS
  • One preferred form of the invention will now be described with reference to the accompanying drawings in which,
  • FIG. 1 shows a block diagram of one form of network device.
  • FIG. 2 shows a flow diagram of the initial mediation procedure which downloads to the network device.
  • DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
  • With reference to FIG. 1, the diagram shows a network device consisting of an ADSL connection via a modem 101 to a firewall 102 and router 103 which distributes the data to devices such as PC's 104. The modem acts to convert packets from the firewall router into a form suitable for carrying information over the internet. The firewall 102 acts to restrict what information packets may be transferred into the users system and the router 103 acts to distribute packets to an internal user in accordance with the packet address.
  • In practice the modem, firewall and router may be combined into a single item of equipment with the configuration data held in a common internal location.
  • According to the current invention the modem, or firewall or router, has configuration information, which is internally held, but this information is not capable of being changed by any routine or subroutine held in the modem. The only way in which this information can be altered is to download an updated configuration from a remote authority. The only remote authority which the modem recognizes are ones which are hard coded into the internal software, and the only action the modem can take as regards configuration is to contact the remote authority in a secure manner. This action can occur either at power on or if an intrusion is detected, or it can be triggered by a specific remote query.
  • Thus the modem may have instructions in read only memory (ROM) which instruct it to call an address such as 203.17.209.32 upon initial power on, but to otherwise provide no routing of incoming or outgoing data packets. Once the designated address is called and a verification established for the network device from a verification service a secure connection between the modem and the address is set up, preferably by the exchange of encrypted passwords through a secure sockets layer (SSL) and the modems' required configuration is downloaded from a configuration server. This provides the routing configuration required and leaves the modem in a secure state.
  • The configuration may include any connection data and passwords for connecting the modem to an internet service provider (ISP), and the modem may automatically carry out the connection once configured.
  • Where the connection between the modem and the server is such that it does not support full public key encryption the authentication for the modem may be provided by a removable key, for instance a USB key.
  • Should an attempt be made to configure or reconfigure the modem without using the correct encryption from the correct address the modem initialization software is intended to be re-triggered, resulting in a complete download of the required configuration.
  • FIG. 2 shows how the equipment on powering on at 201 searches for an internet connection at, and on detecting one sends a particular data stream to the remote verification authority at 202,203 which detects the identity of the calling equipment, and from this can look up the customers identity, the equipments current state, and its desired state as required by the customer. The remote authority then connects a configuration server and initiates the procedure to securely update the equipment at 204 with the desired configuration changes and with the software required to carry out the desired functions. The remote configuration authority can then continue to receive operation reports from the equipment at scheduled intervals.
  • In accordance with the present invention the modem, firewall and router are normally provided as a single equipment item which may also include a hub or switch. This item is installed on the users premises, provided with a connection to the internet and powered up. On detecting the internet connection the equipment identifies itself to the remote verification authority, the only action it is capable of taking.
  • The remote authority will detect the identification of the calling equipment and validate this against a database of equipment whose setups are stored. If the equipment ID is found the remote authority may then, in secure mode, connect the calling equipment to a configuration service and download to the equipment such configuration details and software as will allow it to perform the desired router/firewall functions.
  • Preferably the equipment configuration template is held by the remote authority, who may either make changes in it or allow the user to make changes in it via secure internet access. Such changes may be downloaded to the equipment in the same manner as the initial configuration data, though in most instances the remote authority will send a code to the equipment which forces it to reload the configuration.
  • The firewall and router may maintain the normal statistics of packets passed, addresses sent to or received from, intrusion attempts etc. and may, either on prompting or on schedule, send these details to the configuration authority for storage and possible analysis.
  • The firewall or router may be set up to pass information through desired ports and may be set to configure these ports on call. Thus if a client requires a VPN connection between two locations which do not have a specific allocated IP address (as for instance a small office served by an ADSL without a fixed address) the client requests the VPN connection from the remote authority, which will have stored the network address of any modem of the inventive type. The remote authority then notifies the network devices of the required connection and the devices then create the VPN connection. Thus a VPN connection can be established between two modems which did not initially know each others addresses.
  • While the invention is described in relation to an ADSL modem the invention is equally as applicable to the configuration of a PC, a router of any type, a mobile phone or PDA or other similar equipment.
  • INDUSTRIAL APPLICABILITY
  • The invention is applicable to the guaranteeing of the configuration of a network device, to prevent the compromising of data passing through that device, or the extraction of data in an unintended manner by that device.
  • Thus it can be seen that at least the preferred form of the invention provides an item of equipment which can be remotely configured for network device set up purposes.

Claims (18)

1. A network device, comprising:
operating software but no configuration data allowing it to carry out its intended purpose, the network device being remotely programmable with configuration data as a whole but which network device or operating software has no facility to allow any incremental change of configuration data.
2. The network device as claimed in claim 1, wherein the device configuration data is held in random access memory (RAM) and is lost when no network device supply voltage is present.
3. The network device as claimed in claim 1, wherein the device operating software contains a routine which on initialization attempts to contact a remote verification authority to authorize retrieval of configuration data from a configuration authority.
4. The network device as claimed in claim 3, wherein the device software contains only the routine for contacting the remote verification authority and receiving data from the remote configuration authority.
5. The network device as claimed in claim 3, wherein the contact with the remote verification authority is subject to encryption.
6. The network device as claimed in claim 2, wherein the device initially contains an input filter which will only receive configuration data from a specified remote configuration authority address.
7. The network device as claimed in claim 1, wherein the device is a router which is integral with a modem.
8. The network device as claimed in claim 7, wherein the modem is an asymmetric digital subscriber line (ADSL) modem.
9. A method of configuring a network device which loses its configuration data on power loss, comprising:
providing a network device without user configuration data, providing within the network device a routine which securely contacts a remote verification authority; and
downloading from a remote configuration authority authorized by the remote verification authority the entire configuration data.
10. The method as claimed in claim 9, wherein the network device is a router.
11. The method as claimed in claim 10, wherein the router is part of an ADSL modem.
12. The method as claimed in claim 9, wherein the network device is capable of being configured only by remote download of the complete configuration data.
13. The method as claimed in claim 9, wherein the network device router which contacts the remote verification authority carries out any information transfer using secure encryption.
14. The method as claimed in claim 13, wherein the secure encryption employs a public key encryption method.
15. The method as claimed in claim 14, wherein the private key for the network device is provided by a device temporarily connected to the network device.
16. The method as claimed in claim 15, wherein the temporarily connected device is a USB memory device.
17. The method as claimed in claim 13, wherein the secure encryption employs an encryption method utilizing both a private key and a public key.
18. The method as claimed in claim 9, wherein the configuration data is also lost from the network device on any intrusion attempt.
US11/866,540 2002-12-24 2007-10-03 Network device configuration Abandoned US20080028051A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US11/866,540 US20080028051A1 (en) 2002-12-24 2007-10-03 Network device configuration
US13/421,435 US8443064B2 (en) 2002-12-24 2012-03-15 Method for network device configuration

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
NZ523378 2002-12-24
NZ523378A NZ523378A (en) 2002-12-24 2002-12-24 Network device without configuration data and a method of configuring the network device from a remote verification authority
US10/540,328 US8171143B2 (en) 2002-12-24 2003-12-01 Network device configuration
US11/866,540 US20080028051A1 (en) 2002-12-24 2007-10-03 Network device configuration

Related Parent Applications (3)

Application Number Title Priority Date Filing Date
PCT/NZ2003/000265 Continuation WO2004059508A1 (en) 2002-12-24 2003-12-01 Network device configuration
US10/540,328 Continuation US8171143B2 (en) 2002-12-24 2003-12-01 Network device configuration
US10540328 Continuation 2003-12-01

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US13/421,435 Division US8443064B2 (en) 2002-12-24 2012-03-15 Method for network device configuration

Publications (1)

Publication Number Publication Date
US20080028051A1 true US20080028051A1 (en) 2008-01-31

Family

ID=32678115

Family Applications (3)

Application Number Title Priority Date Filing Date
US10/540,328 Active 2026-06-21 US8171143B2 (en) 2002-12-24 2003-12-01 Network device configuration
US11/866,540 Abandoned US20080028051A1 (en) 2002-12-24 2007-10-03 Network device configuration
US13/421,435 Expired - Lifetime US8443064B2 (en) 2002-12-24 2012-03-15 Method for network device configuration

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US10/540,328 Active 2026-06-21 US8171143B2 (en) 2002-12-24 2003-12-01 Network device configuration

Family Applications After (1)

Application Number Title Priority Date Filing Date
US13/421,435 Expired - Lifetime US8443064B2 (en) 2002-12-24 2012-03-15 Method for network device configuration

Country Status (6)

Country Link
US (3) US8171143B2 (en)
EP (1) EP1576488B1 (en)
CN (3) CN1732455A (en)
AU (1) AU2003288813A1 (en)
NZ (1) NZ523378A (en)
WO (1) WO2004059508A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100191841A1 (en) * 2004-07-26 2010-07-29 Shimon Edelhaus Communication Device for Obtaining an Application Image or Configuration from a Service Provider

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7752329B1 (en) * 2002-10-31 2010-07-06 Aol Inc. Migrating configuration information based on user identity information
US7876775B2 (en) * 2004-02-12 2011-01-25 At&T Intellectual Property I, L.P. Connection management for data networks
US7626944B1 (en) * 2004-03-31 2009-12-01 Packeteer, Inc. Methods, apparatuses and systems facilitating remote, automated deployment of network devices
JP4995589B2 (en) * 2007-02-14 2012-08-08 株式会社日立製作所 Information processing system
WO2010002381A1 (en) * 2008-06-30 2010-01-07 Hewlett-Packard Development Company, L.P. Automatic firewall configuration
JP5898834B2 (en) * 2010-05-24 2016-04-06 ヤマハ株式会社 Information processing system
CN101917397B (en) * 2010-07-05 2013-02-27 清华大学 Inter-domain alternately-used signature generator and spare signature generator switching method
CN102164360B (en) * 2011-04-20 2013-11-06 瑞斯康达科技发展股份有限公司 Method and system for configuring and loading network equipment
US9235382B2 (en) * 2013-09-20 2016-01-12 Microsoft Technology Licensing, Llc Input filters and filter-driven input processing
US9450910B2 (en) * 2014-02-06 2016-09-20 Lenovo Enterprise Solutions (Singapore) Pte. Ltd. Network address allocation
CN104092603B (en) * 2014-07-21 2017-06-13 新华三技术有限公司 A kind of gateway device and its control method
US10924480B2 (en) * 2018-02-28 2021-02-16 Cisco Technology, Inc. Extended trust for onboarding
GB201904224D0 (en) * 2019-03-27 2019-05-08 Sec Dep For Foreign And Commonwealth Affairs A network filter
CN114466262A (en) * 2022-02-24 2022-05-10 深圳市吉祥腾达科技有限公司 Rapid configuration method and system for optical modem equipment

Citations (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5297192A (en) * 1990-09-28 1994-03-22 At&T Bell Laboratories Method and apparatus for remotely programming a mobile data telephone set
US5838907A (en) * 1996-02-20 1998-11-17 Compaq Computer Corporation Configuration manager for network devices and an associated method for providing configuration information thereto
US5974547A (en) * 1998-03-20 1999-10-26 3Com Corporation Technique for reliable network booting of an operating system to a client computer
US6012088A (en) * 1996-12-10 2000-01-04 International Business Machines Corporation Automatic configuration for internet access device
US6029196A (en) * 1997-06-18 2000-02-22 Netscape Communications Corporation Automatic client configuration system
US6073172A (en) * 1997-07-14 2000-06-06 Freegate Corporation Initializing and reconfiguring a secure network interface
US6170061B1 (en) * 1998-02-04 2001-01-02 3Com Corporation Method and system for secure cable modem registration
US20010001866A1 (en) * 1998-10-19 2001-05-24 Dan Kikinis Method and apparatus for configuration of an internet appliance
US6275942B1 (en) * 1998-05-20 2001-08-14 Network Associates, Inc. System, method and computer program product for automatic response to computer system misuse using active response modules
US6286038B1 (en) * 1998-08-03 2001-09-04 Nortel Networks Limited Method and apparatus for remotely configuring a network device
US6385648B1 (en) * 1998-11-02 2002-05-07 Nortel Networks Limited Method for initializing a box on a data communications network
US20020161868A1 (en) * 2001-04-27 2002-10-31 International Business Machines Corporation Method and system for fault-tolerant remote boot in the presence of boot server overload/failure with self-throttling boot servers
US20020174246A1 (en) * 2000-09-13 2002-11-21 Amos Tanay Centralized system for routing signals over an internet protocol network
US20020184512A1 (en) * 2001-05-31 2002-12-05 Cardoso Augusto C. Method and apparatus for supporting remote configuration to facilitate subscriber management
US20030028625A1 (en) * 2001-07-31 2003-02-06 Raghunandan Sanjeev Method of dynamically configuring access to services
US20030039244A1 (en) * 2001-08-14 2003-02-27 Owens Craig Braswell System and method for provisioning broadband service in a PPPoE network using a random username
US20030039268A1 (en) * 2001-08-14 2003-02-27 Chong Lester J. System and method for provisioning broadband service in a PPPoE network using a list of stored domain names
US20030177385A1 (en) * 2002-03-15 2003-09-18 Price James H. Reverse authentication key exchange
US6636505B1 (en) * 1999-05-28 2003-10-21 3Com Corporation Method for service provisioning a broadband modem
US20040105444A1 (en) * 2002-11-15 2004-06-03 Korotin Dmitry O. Auto-configuration of broadband service for one of a plurality of network communication protocols
US6757723B1 (en) * 1999-04-19 2004-06-29 Cisco Technology, Inc. Methods and apparatus for remote configuration of an appliance on a network
US6854009B1 (en) * 1999-12-22 2005-02-08 Tacit Networks, Inc. Networked computer system
US7043537B1 (en) * 1997-09-05 2006-05-09 Cisco Technology, Inc System and method for remote device management
US7099338B1 (en) * 1999-02-27 2006-08-29 3Com Corporation System and method for insuring dynamic host configuration protocol operation by a host connected to a data network
US7111054B2 (en) * 2000-08-28 2006-09-19 2Wire, Inc. Customer premises equipment autoconfiguration
US7127049B2 (en) * 2001-11-14 2006-10-24 Ciena Corporation System and method for enhancing the activation of DSL service
US7313384B1 (en) * 2002-10-31 2007-12-25 Aol Llc, A Delaware Limited Liability Company Configuring wireless devices
US7313606B2 (en) * 2001-11-27 2007-12-25 The Directv Group, Inc. System and method for automatic configuration of a bi-directional IP communication device

Family Cites Families (29)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US711054A (en) * 1901-12-14 1902-10-14 Louis G Kregel Apparatus for making sides of coffins.
US5050213A (en) * 1986-10-14 1991-09-17 Electronic Publishing Resources, Inc. Database usage metering and protection system and method
US5826000A (en) * 1996-02-29 1998-10-20 Sun Microsystems, Inc. System and method for automatic configuration of home network computers
US5768271A (en) * 1996-04-12 1998-06-16 Alcatel Data Networks Inc. Virtual private network
US5790548A (en) * 1996-04-18 1998-08-04 Bell Atlantic Network Services, Inc. Universal access multimedia data network
CN1242896A (en) * 1996-07-25 2000-01-26 混合网络公司 High-speed internent access system
US6553404B2 (en) * 1997-08-08 2003-04-22 Prn Corporation Digital system
US6023464A (en) * 1997-12-23 2000-02-08 Mediaone Group, Inc. Auto-provisioning of user equipment
US6509913B2 (en) * 1998-04-30 2003-01-21 Openwave Systems Inc. Configurable man-machine interface
US6697360B1 (en) 1998-09-02 2004-02-24 Cisco Technology, Inc. Method and apparatus for auto-configuring layer three intermediate computer network devices
US6195689B1 (en) * 1999-05-05 2001-02-27 Mediaone Group, Inc. Headend provisioning agent
US6366563B1 (en) * 1999-12-22 2002-04-02 Mci Worldcom, Inc. Method, computer program product, and apparatus for collecting service level agreement statistics in a communication network
US6912567B1 (en) * 1999-12-27 2005-06-28 International Business Machines Corp. Broadband multi-service proxy server system and method of operation for internet services of user's choice
US7085854B2 (en) 2000-04-12 2006-08-01 Corente, Inc. Methods and systems for enabling communication between a processor and a network operations center
AU2001261837A1 (en) 2000-05-10 2001-11-20 Digital:Convergence Corporation Automatic configuration of equipment and software
US20030061323A1 (en) * 2000-06-13 2003-03-27 East Kenneth H. Hierarchical system and method for centralized management of thin clients
WO2002015517A2 (en) * 2000-08-16 2002-02-21 Microchip Technology Incorporated Remote configuration of network node via controller area network messages
US6873628B1 (en) 2000-12-27 2005-03-29 Bellsouth Intellectual Property Corporation Asynchronous digital subscriber line (ADSL) resource planning
GB2372675A (en) 2001-01-12 2002-08-28 Ubinetics Ltd Downloading software for a wireless communications device which is controlled by a host computer
CA2337292A1 (en) * 2001-02-15 2002-08-15 Linmor Technologies Inc. Dynamically adaptive network element telemetry system
FI20010596A0 (en) * 2001-03-22 2001-03-22 Ssh Comm Security Oyj Security system for a data communication network
EP1374049B1 (en) 2001-03-26 2016-11-23 Accenture Global Services Limited Broadband communications
US6687245B2 (en) * 2001-04-03 2004-02-03 Voxpath Networks, Inc. System and method for performing IP telephony
US6970920B2 (en) * 2001-04-11 2005-11-29 International Business Machines Corporation Methods, systems and computer program products for communicating with unconfigured network devices on remote networks
US7240106B2 (en) * 2001-04-25 2007-07-03 Hewlett-Packard Development Company, L.P. System and method for remote discovery and configuration of a network device
US7062274B2 (en) * 2001-06-21 2006-06-13 Microsoft Corporation Increasing the level of automation when establishing and managing network connections
US7046675B2 (en) 2001-10-23 2006-05-16 Intel Corporation Method and apparatus to configure a digital subscriber line device
KR100505283B1 (en) * 2001-10-31 2005-08-03 미쓰이 가가쿠 가부시키가이샤 Pellicle and method of manufacturing mask with pellicle
US7739359B1 (en) * 2002-09-12 2010-06-15 Cisco Technology, Inc. Methods and apparatus for secure cable modem provisioning

Patent Citations (29)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5297192A (en) * 1990-09-28 1994-03-22 At&T Bell Laboratories Method and apparatus for remotely programming a mobile data telephone set
US5838907A (en) * 1996-02-20 1998-11-17 Compaq Computer Corporation Configuration manager for network devices and an associated method for providing configuration information thereto
US6012088A (en) * 1996-12-10 2000-01-04 International Business Machines Corporation Automatic configuration for internet access device
US6029196A (en) * 1997-06-18 2000-02-22 Netscape Communications Corporation Automatic client configuration system
US6496858B1 (en) * 1997-07-14 2002-12-17 Tut Systems, Inc. Remote reconfiguration of a secure network interface
US6073172A (en) * 1997-07-14 2000-06-06 Freegate Corporation Initializing and reconfiguring a secure network interface
US7043537B1 (en) * 1997-09-05 2006-05-09 Cisco Technology, Inc System and method for remote device management
US6170061B1 (en) * 1998-02-04 2001-01-02 3Com Corporation Method and system for secure cable modem registration
US5974547A (en) * 1998-03-20 1999-10-26 3Com Corporation Technique for reliable network booting of an operating system to a client computer
US6275942B1 (en) * 1998-05-20 2001-08-14 Network Associates, Inc. System, method and computer program product for automatic response to computer system misuse using active response modules
US6286038B1 (en) * 1998-08-03 2001-09-04 Nortel Networks Limited Method and apparatus for remotely configuring a network device
US20010001866A1 (en) * 1998-10-19 2001-05-24 Dan Kikinis Method and apparatus for configuration of an internet appliance
US6385648B1 (en) * 1998-11-02 2002-05-07 Nortel Networks Limited Method for initializing a box on a data communications network
US7099338B1 (en) * 1999-02-27 2006-08-29 3Com Corporation System and method for insuring dynamic host configuration protocol operation by a host connected to a data network
US6757723B1 (en) * 1999-04-19 2004-06-29 Cisco Technology, Inc. Methods and apparatus for remote configuration of an appliance on a network
US6636505B1 (en) * 1999-05-28 2003-10-21 3Com Corporation Method for service provisioning a broadband modem
US6854009B1 (en) * 1999-12-22 2005-02-08 Tacit Networks, Inc. Networked computer system
US7111054B2 (en) * 2000-08-28 2006-09-19 2Wire, Inc. Customer premises equipment autoconfiguration
US20020174246A1 (en) * 2000-09-13 2002-11-21 Amos Tanay Centralized system for routing signals over an internet protocol network
US20020161868A1 (en) * 2001-04-27 2002-10-31 International Business Machines Corporation Method and system for fault-tolerant remote boot in the presence of boot server overload/failure with self-throttling boot servers
US20020184512A1 (en) * 2001-05-31 2002-12-05 Cardoso Augusto C. Method and apparatus for supporting remote configuration to facilitate subscriber management
US20030028625A1 (en) * 2001-07-31 2003-02-06 Raghunandan Sanjeev Method of dynamically configuring access to services
US20030039244A1 (en) * 2001-08-14 2003-02-27 Owens Craig Braswell System and method for provisioning broadband service in a PPPoE network using a random username
US20030039268A1 (en) * 2001-08-14 2003-02-27 Chong Lester J. System and method for provisioning broadband service in a PPPoE network using a list of stored domain names
US7127049B2 (en) * 2001-11-14 2006-10-24 Ciena Corporation System and method for enhancing the activation of DSL service
US7313606B2 (en) * 2001-11-27 2007-12-25 The Directv Group, Inc. System and method for automatic configuration of a bi-directional IP communication device
US20030177385A1 (en) * 2002-03-15 2003-09-18 Price James H. Reverse authentication key exchange
US7313384B1 (en) * 2002-10-31 2007-12-25 Aol Llc, A Delaware Limited Liability Company Configuring wireless devices
US20040105444A1 (en) * 2002-11-15 2004-06-03 Korotin Dmitry O. Auto-configuration of broadband service for one of a plurality of network communication protocols

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100191841A1 (en) * 2004-07-26 2010-07-29 Shimon Edelhaus Communication Device for Obtaining an Application Image or Configuration from a Service Provider
US8024436B2 (en) * 2004-07-26 2011-09-20 Belcan Holdings Ltd. Communication device for obtaining an application image or configuration from a service provider

Also Published As

Publication number Publication date
EP1576488A1 (en) 2005-09-21
CN101815075B (en) 2012-02-15
US8171143B2 (en) 2012-05-01
AU2003288813A1 (en) 2004-07-22
NZ523378A (en) 2005-02-25
EP1576488B1 (en) 2013-04-03
US20060168238A1 (en) 2006-07-27
CN101662501A (en) 2010-03-03
US20120173683A1 (en) 2012-07-05
WO2004059508A1 (en) 2004-07-15
CN1732455A (en) 2006-02-08
CN101815075A (en) 2010-08-25
EP1576488A4 (en) 2010-01-13
US8443064B2 (en) 2013-05-14

Similar Documents

Publication Publication Date Title
US8443064B2 (en) Method for network device configuration
US8561139B2 (en) Method and appartus for network security using a router based authentication
US7496950B2 (en) Secure remote management appliance
US7640581B1 (en) Method and system for providing secure, centralized access to remote elements
US7133511B2 (en) Telephony security system
EP1484892B1 (en) Method and system for lawful interception of packet switched network services
US7809126B2 (en) Proxy server for internet telephony
US9356835B2 (en) System to configure and manage routers through wireless communication
US20060031936A1 (en) Encryption security in a network system
EP1134955A1 (en) Enterprise network management using directory containing network addresses of users and devices providing access lists to routers and servers
US20020075844A1 (en) Integrating public and private network resources for optimized broadband wireless access and method
US8150013B2 (en) Telephony security system
CN101682656A (en) Method and apparatus for protecting the routing of data packets
EP2547051A1 (en) Confidential communication method using vpn, a system and program for the same, and memory media for program therefor
CN100591068C (en) Method of transmitting 802.1X audit message via bridging device
WO2004082237A1 (en) Forced encryption for wireless local area networks
US20150074775A1 (en) System and Method To Enhance Personal Server Security Using Personal Server Owner's Location Data
WO2006009470A1 (en) Network device configuration
NZ534284A (en) Network device without configuration data and a method of configuring the network device from a remote verification authority upon start-up via an embedded wireless messaging device
AU2237000A (en) Enterprise network management using directory containing network addresses of users and devices providing access lists to routers and servers
TELECOMMUNICATIONSAND Wireless LAN Security
Kröll Secure Isdn Data Communication Connectivity as a Cost-Efficient Component

Legal Events

Date Code Title Description
STCB Information on status: application discontinuation

Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION