# US 10,375,027 B2 · Provisioning using a generic configuration > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,027 B2 - Document ID: US10375027B2 - Status: Granted - Kind: B2 - Application number: 15/298,877 - Filed: 2016-10-20 - Published: 2017-06-15 - Granted: 2019-08-06 - Earliest claimed: 2011-04-15 - Assignees: Comcast Cable Communications, LLC - Applicants: Comcast Cable Communications, LLC - Inventors: Carl Klatsky; Chris Wendt; Manoj Chaudhari; Christopher Zarcone - Web page: https://patentgrep.com/patent/US10375027B2 ## CPC - H04L 63/0281: {Proxies} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/101: {Access control lists [ACL]} - H04L 65/1073: Registration or de-registration - H04L 2101/622: Layer-2 addresses, e.g. medium access control [MAC] addresses - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An apparatus, method, system and computer-readable medium are provided for provisioning a user equipment device (UED). The UED may be configured to receive a generic configuration and (dynamically) derive settings specific to the UED that would otherwise have been received in the configuration. The UED may execute one or more applications to derive the settings specific to the UED. A first application may enable the UED to dynamically learn a fully qualified domain name (FQDN) and IP address of a node. A second application may enable the UED to generate authentication credentials for the UED. A third application may enable the UED to determine a port or ports that arc authorized for service and a port or ports that are not authorized for service. A fourth application may enable the UED to determine a number associated with the UED. ## Claims ### Claim 1 A method comprising: generating, based at least in part on an identifier associated with a device and an identifier associated with a first communication port of the device, first authentication credentials; generating, based at least in part on the identifier associated with the device and an identifier associated with a second communication port of the device, second authentication credentials; transmitting, by the device to an authentication server, the first authentication credentials and the second authentication credentials; receiving, by the device, first information indicating that the first communication port is not authorized for use based at least in part on the first authentication credentials and second information indicating that the second communication port is authorized for use based at least in part on the second authentication credentials; and causing disablement, in response to the first information, of the first communication port. ### Claim 2 (depends on 1) The method of claim 1, further comprising enabling, by the device prior to generating the first authentication credentials and the second authentication credentials, the first communication port and the second communication port. ### Claim 3 (depends on 2) The method of claim 2, further comprising, after receiving the second information, maintaining enablement of the second communication port. ### Claim 4 (depends on 1) The method of claim 1, wherein causing disablement of the first communication port comprises at least one of: disabling a voltage on a communication line associated with the first communication port; suspending messaging associated with the first communication port; and generating a down state at an indicator for the first communication port. ### Claim 5 (depends on 1) The method of claim 1, wherein the first authentication credentials comprise a username formed at least in part from the identifier associated with the first communication port, and wherein the second authentication credentials comprise a username formed at least in part from the identifier associated with the second communication port. ### Claim 6 (depends on 5) The method of claim 5, further comprising receiving a key, and wherein the first authentication credentials further comprise a first password formed at least in part based on the key, and wherein the second authentication credentials further comprise a second password formed at least in part based on the key. ### Claim 7 (depends on 1) The method of claim 1, wherein the identifier associated with the device comprises at least one of: a Media Access Control (MAC) address associated with the device, a serial number associated with the device, or a date code associated with the device. ### Claim 8 (depends on 1) The method of claim 1, further comprising: receiving, by the device from a provisioning server, a domain name; transmitting, by the device to a domain name system server, a query based at least in part on the domain name; and receiving, by the device from the domain name system server, a second domain name and an internet protocol address of a node; and communicating with the node. ### Claim 9 (depends on 8) The method of claim 8, wherein the node comprises a Proxy Call Session Control Function (P-CSCF) node. ### Claim 10 A method comprising: generating, by a device, a plurality of authentication credentials, respectively, for a plurality of communication ports of the device, wherein each of the authentication credentials of the plurality of authentication credentials is based at least in part on both an identifier associated with the device and an identifier associated with the respective communication port of the plurality of communication ports; transmitting, by the device to an authentication server, the plurality of authentication credentials; receiving, by the device, information indicating at least one communication port, of the plurality of communication ports, that is not authorized for use based at least in part on the plurality of authentication credentials; and causing disablement of the indicated at least one communication port. ### Claim 11 (depends on 10) The method of claim 10, further comprising enabling, by the device prior to generating the plurality of authentication credentials, each communication port of the plurality of communication ports. ### Claim 12 (depends on 11) The method of claim 11, further comprising, after receiving information indicating at least a second communication port of the plurality of communication ports is authorized for use, maintaining enablement of the indicated at least a second communication port. ### Claim 13 (depends on 10) The method of claim 10, wherein causing disablement of the indicated at least one communication port comprises at least one of: disabling a voltage on a communication line associated with the at least one communication port; suspending messaging associated with the at least one communication port; and generating a down state at an indicator for the at least one communication port. ### Claim 14 (depends on 10) The method of claim 10, wherein each of the authentication credentials of the plurality of authentication credentials comprises a unique username formed at least in part from the identifier associated with the respective communication port of the plurality of communication ports. ### Claim 15 (depends on 14) The method of claim 14, further comprising receiving a key, and wherein each of the authentication credentials of the plurality of authentication credentials further comprises a unique password formed at least in part based on the key. ### Claim 16 (depends on 10) The method of claim 10, wherein the identifier associated with the device comprises at least one of: a Media Access Control (MAC) address associated with the device, a serial number associated with the device, or a date code associated with the device. ### Claim 17 A device comprising: a processor; and a memory storing computer executable instructions that, when executed by the processor, cause the device to: generate a plurality of authentication credentials, respectively, for a plurality of communication ports of the device, wherein each of the authentication credentials of the plurality of authentication credentials is based at least in part on both an identifier associated with the device and an identifier associated with the respective communication port of the plurality of communication ports; transmit, to an authentication server, the plurality of authentication credentials; receive information indicating at least one communication port, of the plurality of communication ports, that is not authorized for use based at least in part on the plurality of authentication credentials; and causing disablement of the indicated at least one communication port. ### Claim 18 (depends on 17) The device of claim 17, wherein the memory further stores computer executable instructions that, when executed by the processor, cause the device to enable, prior to generating the plurality of authentication credentials, each communication port of the plurality of communication ports. ### Claim 19 (depends on 18) The device of claim 18, wherein the memory further stores computer executable instructions that, when executed by the processor, cause the device, in response to information indicating at least a second communication port of the plurality of communication ports that is authorized for use, to maintain enablement of the indicated at least a second communication port. ### Claim 20 (depends on 17) The device of claim 17, wherein causing disablement of the indicated at least one communication port comprises at least one of: disabling a voltage on a communication line associated with the at least one communication port; suspending messaging associated with the at least one communication port; and generating a down state at an indicator for the at least one communication port.