Secure enabling and disabling points of entry on a device remotely or locally

A method of configuring a modem, comprising:

• receiving an encrypted authentication token from the modem, the encrypted authentication token having at least one password and being encrypted according to a public key, the encrypted authentication token further comprising a session key;
• transmitting the encrypted authentication token to an authentication server;
• receiving a decrypted authentication token from the authentication server;
• and
• configuring at least one modem interface at least in part using the decrypted authentication token, comprising:
• generating configuration data;
• encrypting the configuration data according to at least a portion of the decrypted authentication token;
• and
• transmitting the encrypted configuration data to the modem,
• wherein generating the configuration data comprises
• generating a bitmap, the bitmap having a plurality of values, each of the plurality of values enabling one of a plurality of modem interfaces;
• encrypting the configuration data at least in part according to at least a portion of the decrypted authentication token comprises:
• encrypting the bitmap according to at least a portion of a session key of the decrypted authentication token;
• and
• the modem decrypts the encrypted configuration data according to the at least a portion of the session key of the decrypted authentication token, and enables or disables the plurality of modem interfaces according to the plurality of values.

An apparatus for configuring a modem, comprising:

• a processor;
• a memory, communicatively coupled to the processor, the memory storing processor instructions comprising processor instructions for:
• receiving an encrypted authentication token from the modem, the encrypted authentication token having at least one password and being encrypted according to a public key, the encrypted authentication token further comprising a session key;
• transmitting the encrypted authentication token to authentication server;
• receiving a decrypted authentication token from the authentication server;
• and
• configuring at least one modem interface at least in part using the decrypted authentication token;
• wherein the processor instructions for configuring the at least one modem interface at least in part using the decrypted authentication token comprise processor instructions for:
• generating configuration data;
• encrypting the configuration data according to at least a portion of the decrypted authentication token;
• and
• transmitting the encrypted configuration data to the modem;
• and
• the processing instructions for generating the configuration data comprise processor instructions for:
• generating a bitmap, the bitmap having a plurality of values, each of the plurality of values enabling one of a plurality of modem interfaces;
• the processor instructions for encrypting the configuration data at least in part according to at least a portion of the decrypted authentication token comprise processor instructions for:
• encrypting the bitmap according to at least a portion of the session key of the decrypted authentication token;
• and
• the modem decrypts the encrypted configuration data according to the at least a portion of the session key of the decrypted authentication token, and enables or disables the plurality of modem interfaces according to the plurality of values.

A method of configuring a modem, comprising:

• receiving an encrypted authentication token from the modem, the encrypted authentication token having at least one password and being encrypted according to a public key;
• transmitting the encrypted authentication token to an authentication server;
• receiving a decrypted authentication token from the authentication server;
• and
• configuring at least one modem interface at least in part using the decrypted authentication token,
• wherein:
• the encrypted authentication token is received in a client of the service provider;
• the encrypted authentication token is encrypted according to a service provider public key;
• and
• the service provider public key is stored in secure storage of the modem;
• receiving a configuration file in the modem, the configuration file comprising:
• a second service provider public key;
• an authentication token validity period;
• and
• a maximum number of logins;
• determining if the second service provider public key of the received configuration file is different than the service provider public key stored in the secure storage;
• if the service provider public key of the received configuration file is different than the service provider public key stored in the secure storage:
• replace the service provider public key stored in the secure storage with the second service provider public key of the received configuration file;
• and
• generate a second authentication token, the second authentication token comprising:
• a second password;
• and
• a second session key, tag the second password, the second session key with a validity period, a maximum number of logins and an address of the modem;
• and
• encrypt the second authentication token with the second service provider public key.

A method of configuring a modem, comprising:

• receiving an encrypted authentication token from the modem, the encrypted authentication token having at least one password and being encrypted according to a public key;
• transmitting the encrypted authentication token to an authentication server;
• receiving a decrypted authentication token from the authentication server;
• and
• configuring at least one modem interface at least in part using the decrypted authentication token,
• wherein:
• the encrypted authentication token is received in a client of the service provider;
• the encrypted authentication token is encrypted according to a service provider public key;
• and
• the service provider public key is stored in secure storage of the modem;
• receiving a configuration file in the modem, the configuration file comprising:
• a second service provider public key;
• an authentication token validity period;
• and
• a maximum number of logins;
• determining if the received authentication token has expired;
• if the received authentication token has expired:
• generate a second authentication token, the second authentication token comprising:
• a second password;
• and
• a second session key;
• tag the second password, the second session key with a validity period, a maximum number of logins and an address of the modem;
• and
• encrypt the second authentication token with the second service provider public key.