Secure shell (SSH) server public key validation by a SSH client in a high volume device deployment

An apparatus for accessing a modem for use with a service provider, comprising:

• a processor;
• and
• a memory, communicatively coupled to the processor, the memory storing processor instructions comprising processor instructions for:
• receiving an encrypted authentication token from the modem, the encrypted authentication token comprising an authentication token including one of a hash of a secure shell (SSH) server public key and a SSH server public key, and being encrypted according to another public key;
• transmitting the encrypted authentication token to a central server;
• receiving the authentication token as decrypted from the central server;
• configuring modem interfaces at least in part using the decrypted authentication token, the modem interfaces including an interface with an SSH server;
• communicating with the modem according to the hash of the SSH server public key;
• wherein the authentication token comprises the hash of the SSH server public key;
• wherein the processor instructions for communicating with the modem according to the one of the hash of the SSH server public key and the SSH server public key comprises communicating with the modem according to the hash of the SSH server public key, comprising processor instructions for:
• receiving the SSH server public key from the modem;
• generating a second hash of the SSH server public key;
• comparing the hash of the SSH server public key to the hash of the second SSH server public key;
• and
• communicating with the modem according to a comparison between the hash of the SSH server public key and the second hash of the SSH server public key;
• wherein the authentication token comprises at least one password;
• wherein the processor instructions for communicating with the modem according to the hash of the SSH server public key further comprises instructions for logging in to the modem at least in part using the at least one password;
• wherein the authentication token further comprises a session key;
• wherein the processor instructions for communicating with the modem further comprises instructions for configuring modem interfaces at least in part using the authentication token, including processing instructions for:
• generating configuration data;
• and
• encrypting the configuration data according to at least a portion of the session key;
• wherein the processor instructions for generating the configuration data comprises:
• processor instructions for generating a bitmap, the bitmap having a plurality of values, each of the plurality of values enabling one of a plurality of modem interfaces;
• wherein the processor instructions for encrypting the configuration data at least in part according to at least a portion of the authentication token comprises:
• processor instructions for encrypting the bitmap according to at least a portion of the session key of the authentication token;
• and
• wherein the modem decrypts the encrypted configuration data according to the SSH server public key and at least a Portion of the session key of the authentication token, and enables or disables the plurality of modem interfaces according to the plurality of values.

An apparatus for accessing a modem for use with a service provider, comprising:

• a processor:
• a memory, communicatively coupled to the processor, the memory storing processor instructions comprising processor instructions for:
• receiving an encrypted authentication token from the modem, the encrypted authentication token comprising an authentication token including one of a hash of a secure shell server (SSH) public key and a SSH server public key, and being encrypted according to another public key;
• transmitting the encrypted authentication token to a central server;
• receiving the authentication token as decrypted from the central server;
• configuring modem interfaces at least in part using the decrypted authentication token, the modem interfaces including an interface with an SSH server;
• communicating with the modem according to the hash of the SSH server public key;
• wherein the authentication token comprises the hash of the SSH server public key;
• wherein the processor instructions for communicating with the modem according to the one of the hash of the SSH server public key and the SSH server public key comprises communicating with the modem according to the SSH server public key, comprising comprise processor instructions for:
• receiving the SSH server public key from the modem;
• generating a second hash of the SSH server public key;
• comparing the hash of the SSH server public key to the hash of the second SSH server public key;
• and
• communicating with the modem according to a comparison between the hash of the SSH server public key and the second hash of the SSH server public key;
• wherein the authentication token comprises at least one password;
• wherein the processor instructions for communicating with the modem according to the hash of the SSH server public key further comprises instructions for logging in to the modem at least in part using the at least one password;
• wherein the authentication token further comprises a session key;
• wherein the processor instructions for communicating with the modem further comprises instructions for configuring modem interfaces at least in part using the authentication token, including processing instructions for:
• generating configuration data;
• and
• encrypting the configuration data according to at least a portion of the session key;
• wherein the processor instructions for generating the configuration data comprises:
• processor instructions for generating a bitmap, the bitmap having a plurality of values, each of the plurality of values enabling one of a plurality of modem interfaces;
• wherein the processor instructions for encrypting the configuration data at least in part according to at least a portion of the authentication token comprise:
• processor instructions for encrypting the bitmap according to at least a portion of the session key of the authentication token;
• and
• wherein the modem decrypts the encrypted configuration data according to at least the portion of the session key of the authentication token, and enables or disables the plurality of modem interfaces according to the plurality of values.