# US 2026/0099604 A1 · Online updating of an edge device operating in a secure computing environment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2026/0099604 A1 - Document ID: US20260099604A1 - Status: Published application - Kind: A1 - Application number: 19/415,574 - Filed: 2025-12-10 - Published: 2026-04-09 - Earliest claimed: 2023-01-31 - Assignees: Cisco Technology, Inc. - Applicants: Cisco Technology, Inc. - Inventors: William Huang; Joel Jacob; Neel Mehta; Anthony Ng; Rodrigo Paulo Quaresma; Warren Shum; Alan Sung; Jonathan Yeung - Web page: https://patentgrep.com/patent/US20260099604A1 ## CPC - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F 21/602: {Providing cryptographic facilities or services} - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Described herein is a technique to update an edge device deployed in a secure computing network. A repository connected to a public network stores build contents configured to update software installed on the edge device; the public network is inaccessible to devices within the secure computing environment. A second device connected to the public network acquires the build contents in a signed lockbox file. An edge device management service generates a lockbox file containing the build contents and a trusted signer outside the secure computing network signs the lockbox file. The second device connects to secure computing network and establishes communications with the edge device. The edge device verifies the signed lockbox file provided by the second device. Upon verification, the edge device extracts the contents of the signed lockbox file and updates the software installed on the edge device. Both offline and online updating approaches are described. ## Claims ### Claim 1 A method comprising: receiving, by an edge device in a secure computing network, update data from a second device indicating an updated configuration; signaling availability of the updated configuration from a first service to a second service on the edge device; triggering, by the second service responsive to an update request, an update process based on the updated configuration; retrieving a signed lockbox file from a repository in a public network separate from the secure computing network; validating the signed lockbox file and updating the edge device using update files extracted therefrom; and communicating a completion notification to the second device. ### Claim 2 (depends on 1) The method of claim 1, further comprising, prior to the receiving: querying the data repository, by the second device, to identify the updated configuration relative to a current configuration of the edge device; and obtaining the update data by the second device responsive to the querying. ### Claim 3 (depends on 1) The method of claim 1, wherein the update request is received from an automated service of the edge device without a user interaction. ### Claim 4 (depends on 1) The method of claim 1, further comprising: outputting, via a user interface of the edge device, a prompt to commence the update process; and receiving a user interaction responsive to the prompt, wherein the update request is generated responsive to the user interaction. ### Claim 5 (depends on 1) The method of claim 1, further comprising: directing, by the second device, outputting of a prompt via a user interface of a user device external to the secure computing network; and receiving a user interaction responsive to the prompt, wherein the update request is generated responsive to the user interaction. ### Claim 6 (depends on 1) The method of claim 1, wherein the signaling availability comprises updating a local settings data store on the edge device accessible to the second service. ### Claim 7 (depends on 1) The method of claim 1, wherein the triggering the update process comprises sending an instruction to an update manager service to retrieve the signed lockbox file. ### Claim 8 (depends on 1) The method of claim 1, further comprising: monitoring progress of the updating; and generating notifications causing a user interface to indicate the progress. ### Claim 9 (depends on 1) The method of claim 1, wherein the communicating the completion notification comprises: receiving, by the first service, a signal from an update manager service upon completion of the updating; and transmitting the completion notification from the first service to the second device. ### Claim 10 (depends on 1) The method of claim 1, wherein the updating the edge device further comprises: mounting the update files for access by an operating system of the edge device; and restarting the edge device to install the update files. ### Claim 11 An edge device comprising: a memory storing instructions; and a processor coupled to the memory that executes the instructions by performing the steps of: receiving, in a secure computing network, update data from a second device indicating an updated configuration; signaling availability of the updated configuration from a first service to a second service on the edge device; triggering, by the second service responsive to an update request, an update process based on the updated configuration; retrieving a signed lockbox file from a repository in a public network separate from the secure computing network; validating the signed lockbox file and updating the edge device using update files extracted therefrom; and communicating a completion notification to the second device. ### Claim 12 (depends on 11) The edge device of claim 11, wherein the processor executes the instructions by performing the steps further of: outputting, via a user interface, a prompt to commence the update process; and receiving a user interaction responsive to the prompt, wherein the update request is generated responsive to the user interaction. ### Claim 13 (depends on 11) The edge device of claim 11, wherein the signaling availability comprises updating a local settings data store on the edge device accessible to the second service. ### Claim 14 (depends on 11) The edge device of claim 11, wherein the triggering the update process comprises sending an instruction to an update manager service to retrieve the signed lockbox file. ### Claim 15 (depends on 11) The edge device of claim 11, wherein the updating the edge device further comprises: mounting the update files for access by an operating system of the edge device; and restarting the edge device to install the update files. ### Claim 16 One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause the one or more processors to perform the steps of: receiving, by an edge device in a secure computing network, update data from a second device indicating an updated configuration; signaling availability of the updated configuration from a first service to a second service on the edge device; triggering, by the second service responsive to an update request, an update process based on the updated configuration; retrieving a signed lockbox file from a repository in a public network separate from the secure computing network; validating the signed lockbox file and updating the edge device using update files extracted therefrom; and communicating a completion notification to the second device. ### Claim 17 (depends on 16) The one or more non-transitory computer-readable media of claim 16, wherein the instructions, when executed by the one or more processors, cause the one or more processors to perform the steps further of: outputting, via a user interface, a prompt to commence the update process; and receiving a user interaction responsive to the prompt, wherein the update request is generated responsive to the user interaction. ### Claim 18 (depends on 16) The one or more non-transitory computer-readable media of claim 16, wherein the signaling availability comprises updating a local settings data store on the edge device accessible to the second service. ### Claim 19 (depends on 16) The one or more non-transitory computer-readable media of claim 16, wherein the triggering the update process comprises sending an instruction to an update manager service to retrieve the signed lockbox file. ### Claim 20 (depends on 16) The one or more non-transitory computer-readable media of claim 16, wherein the updating the edge device further comprises: mounting the update files for access by an operating system of the edge device; and restarting the edge device to install the update files.