# US 12,602,482 B2 · Systems and methods for updating a network appliance > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,602,482 B2 - Document ID: US12602482B2 - Status: Granted - Kind: B2 - Application number: 18/382,723 - Filed: 2023-10-23 - Published: 2025-02-20 - Granted: 2026-04-14 - Earliest claimed: 2023-08-16 - Assignees: Sophos Limited - Applicants: Sophos Limited - Inventors: Dipak Kr Das; Avni Bhupendrakumar Wala; Kartikeya - Web page: https://patentgrep.com/patent/US12602482B2 ## CPC - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods for updating a network appliance. The method includes receiving an update request from a network appliance, wherein the update request includes at least one self-signed certificate; executing an authentication procedure to authenticate the network appliance; providing the network appliance with at least one updated certificate associated with a controller device; enabling communication between the appliance and a controller device; and providing to the appliance a network resource location indicator of a firmware repository including an updated firmware version to allow the appliance to obtain the updated firmware version. ## Claims ### Claim 1 A method for updating a network appliance, the method comprising: receiving an update request from the network appliance, wherein the update request includes at least one self-signed certificate, wherein the update request is received from the network appliance upon the network appliance booting up; executing an authentication procedure to authenticate the network appliance; providing the network appliance with at least one updated certificate associated with a controller device; enabling communication between the network appliance and the controller device; and providing to the network appliance a network resource location indicator of a firmware repository including an updated firmware version to allow the network appliance to obtain the updated firmware version. ### Claim 2 (depends on 1) The method of claim 1 wherein the network resource location indicator is a uniform resource locator (URL). ### Claim 3 (depends on 1) The method of claim 1 wherein the update request includes metadata associated with the appliance, and the provided network resource location indicator of the firmware repository is based on the metadata associated with the network appliance. ### Claim 4 (depends on 3) The method of claim 3 wherein the metadata includes a serial number of the network appliance, a model number of the network appliance, a type of firmware the appliance is using, the appliance's stock keeping unit (SKU). ### Claim 5 (depends on 1) The method of claim 1 further comprising generating a manifest file associated with the updated firmware version, wherein the manifest file includes data including a type of network appliance for which the updated firmware version is valid. ### Claim 6 (depends on 1) The method of claim 1 further comprising: validating the at least one updated certificate, and installing the at least one updated certificate on the network appliance. ### Claim 7 A system for updating a network appliance, the system comprising: an interface for at least receiving an update request from the network appliance, wherein the update request includes at least one self-signed certificate, and the update request is received from the network appliance upon the network appliance booting up; and one or more processors executing instructions stored on memory to: receive the update request from the network appliance; execute an authentication procedure to authenticate the network appliance; provide the network appliance with at least one updated certificate associated with a controller device; enable communication between the network appliance and the controller device; and provide to the network appliance a network resource location indicator of a firmware repository including an updated firmware version to allow the network appliance to obtain the updated firmware version. ### Claim 8 (depends on 7) The system of claim 7 wherein the network resource location indicator is a uniform resource locator (URL). ### Claim 9 (depends on 7) The system of claim 7 wherein the update request includes metadata associated with the network appliance, and the provided network resource location indicator of the firmware repository is based on the metadata associated with the network appliance. ### Claim 10 (depends on 9) The system of claim 9 wherein the metadata includes a serial number of the network appliance, a model number of the appliance, a type of firmware the network appliance is using, the network appliance's stock keeping unit (SKU). ### Claim 11 (depends on 7) The system of claim 7 wherein the one or more processors are further configured to generate a manifest file associated with the updated firmware version, wherein the manifest file includes data including a type of network appliance for which the updated firmware version is valid. ### Claim 12 (depends on 7) The system of claim 7 wherein the one or more processors are further configured to validate the at least one updated certificate and install the at least one updated certificate on the network appliance. ### Claim 13 A computer program product for updating a network appliance, the computer program product comprising computer executable code embodied in one or more non-transitory computer readable media that, when executing on one or more processors, performs steps of: receiving an update request from the network appliance, wherein the update request includes at least one self-signed certificate and the update request is received from the network appliance upon the network appliance booting up; executing an authentication procedure to authenticate the network appliance; providing the network appliance with at least one updated certificate associated with a controller device; enabling communication between the network appliance and the controller device; and providing to the network appliance a network resource location indicator of a firmware repository including an updated firmware version to allow the network appliance to obtain the updated firmware version. ### Claim 14 (depends on 13) The computer program product of claim 13 wherein the network resource location indicator is a uniform resource locator (URL). ### Claim 15 (depends on 13) The computer program product of claim 13 wherein the update request includes metadata associated with the network appliance, and the provided network resource location indicator of the firmware repository is based on the metadata associated with the network appliance. ### Claim 16 (depends on 15) The computer program product of claim 15 wherein the metadata includes a serial number of the network appliance, a model number of the network appliance, a type of firmware the appliance is using, the appliance's stock keeping unit (SKU). ### Claim 17 (depends on 13) The computer program product of claim 13 further comprising computer executable code embodied in one or more non-transitory computer readable media that, when executing on one or more processors, performs the step of generating a manifest file associated with the updated firmware version, wherein the manifest file includes data including a type of network appliance for which the updated firmware version is valid. ### Claim 18 (depends on 1) The method of claim 1 wherein the update request includes the network appliance's geographical location, and the updated firmware version is specific to the network appliance's geographical location. ### Claim 19 (depends on 1) The system of claim 1 wherein the update request includes the network appliance's geographical location, and the updated firmware version is specific to the network appliance's geographical location. ### Claim 20 (depends on 15) The computer program product of claim 15 wherein the update request includes the network appliance's geographical location, and the updated firmware version is specific to the network appliance's geographical location.