Method for securely distributing configuration information to a device
AssigneeARRIS Enterprises LLC
InventorAli Negahdar
Life of this patent
Estimating the term…
Abstract
An MTA certificate containing a public key is provided to a provisioning server, typically via an MIB. The provisioning server retrieves configuration information associated with the MTA. A symmetric session key is randomly generated and used to encrypt the configuration information. The public key is used to encrypt the symmetric key. The encrypted session key is combined with the encrypted configuration information into a composite file, and the composite file is distributed to the device that contains the MTA. The MTA device decrypts the session key using its private key that corresponds to the public key and the decrypted session key is used to decrypt the configuration information. The decrypted configuration information is used to complete initialization of the MTA device.
Claims21
A method for protecting the distribution of configuration information to an MTA device for use in a SIP-based network, comprising:
- providing a certificate associated with the MTA device to a provisioning server;
- generating a session key independent of the certificate associated with the MTA device;
- using the session key to encrypt configuration information, the configuration information being used to register the MTA device with a communications network;
- using information contained in the certificate to encrypt the session key;
- and
- transmitting the encrypted configuration information and the encrypted session key to the MTA device during a registration process to register the MTA device with the communications network using the configuration information.
A method for protecting the distribution of configuration information to an MTA device for use in a SIP-based network, comprising:
- providing a certificate associated with the MTA device to a provisioning server;
- generating a random session key;
- encrypting configuration information using the session key;
- encrypting the session key using a public key contained in the certificate;
- combining the encrypted session key and the encrypted configuration information into a composite configuration file;
- transmitting the composite configuration file to the MTA device;
- decrypting the encrypted session key using a private key corresponding to the public key contained in the certificate;
- and
- decrypting the configuration information using the session key.
A method for protecting the distribution of configuration information to an MTA device for use in a SIP-based network, comprising:
- generating a random session key;
- encrypting configuration information using the session key;
- encrypting the session key using information contained in a certificate that is associated with the MTA device;
- combining the encrypted session key and the encrypted configuration information into a composite configuration file;
- and
- transmitting the composite configuration file to the MTA device.
A method for protecting the distribution of configuration information to an MTA device for use in a SIP-based network, comprising:
- receiving a composite file at the MTA device, the composite file including an encrypted session key and encrypted configuration information;
- decrypting the encrypted session key using a private key securely contained in the MTA device;
- and
- decrypting the configuration information using the session key;
- using the configuration information to register with a communications network.
Dependencies are inferred from the claim text.