Network device authentication
AssigneeCisco Technology, Inc.
InventorsShreyas Udayashankar Heranjal, Linus Ryan Aranha
Life of this patent
Estimating the term…
Abstract
A method of authenticating a network device may include receiving an authentication message from a third party server, the authentication message identifying a network device. The method may also include receiving a zero touch provisioning request comprising a certificate from the network device. The method may additionally include, determining the network device is associated with a third party that manages the third party server based on the certificate. The method may include transmitting a redirect message comprising a root certificate chain indicating that the network device is to send the zero touch provisioning request to the third party server.
Claims20
A method to authenticate a network device, the method comprising:
- receiving an authentication message from a third party server, the authentication message identifying the network device;
- receiving, at an original equipment manufacturer (OEM) server from the network device, a zero touch provisioning (ZTP) request comprising a certificate from the network device, the certificate including an organizational name;
- determining the organizational name included in the certificate matches an OEM name of the OEM server;
- transmitting, by the OEM server in response to the determining, an organization status request to a network management device;
- receiving an organization status response indicating that the network device is associated with a third party that manages the third party server;
- and
- transmitting, in response to the receiving, a redirect message comprising a root certificate chain indicating that the network device is to send the ZTP request to the third party server.
A system, comprising:
- a network device;
- and
- an original equipment manufacturer (OEM) server, the OEM server being programmed to perform operations comprising:
- receive an authentication message from a third party server, the authentication message identifying the network device;
- receive, from the network device, a zero touch provisioning (ZTP) request comprising a certificate from the network device, the certificate including an organizational name;
- determine the organizational name included in the certificate matches the OEM name of the OEM server;
- transmit, in response to the determining, an organization status request to a network management device;
- receive an organization status response indicating that the network device is associated with the third party that manages a third party server;
- and
- transmit, in response to the receiving, a redirect message comprising a root certificate chain indicating that the network device is to send the ZTP request to the third party server.
A non-transitory computer-readable medium that includes computer-readable instructions stored thereon that are executable by a processor to perform or control performance of operations comprising:
- receive an authentication message from a third party server, the authentication message identifying a network device;
- receive, from the network device, a zero touch provisioning (ZTP) request comprising a certificate from the network device, the certificate including an organizational name;
- determine the organizational name included in the certificate matches an original equipment manufacturer (OEM) name of the OEM server;
- transmit, in response to the determining, an organization status request to a network management device;
- receive an organization status response indicating that the network device is associated with the third party that manages a third party server;
- and
- transmit, in response to the receiving, a redirect message comprising a root certificate chain indicating that the network device is to send the ZTP request to the third party server.
Dependencies are inferred from the claim text.