Back to results
US 9,178,857 B2Granted
System and method for secure configuration of network attached devices
AssigneeVerizon Patent and Licensing Inc.
InventorRaymond C. Counterman
Life of this patent
Estimating the term…
Abstract
A system and method for supplying, to a provider of the device, requirements for information to be stored on a device, obtaining device data for provisioning the device on a network, storing device configuration information on storage associated with the network, receiving a service request from a user of the device, detecting attachment of the device to the network, authenticating the device utilizing a device identifier and shared credentials to enable the device to be configured without storing a network address for configuration in the device, providing network information to the device, and providing configuration information to the device.
Claims23
A method, comprising:
- supplying, to a provider of a device, a first unique device identifier and shared credentials to be stored on a device, wherein the device lacks fixed network information to configure the device prior to initiating configuration;
- obtaining device data for provisioning the device on a network;
- receiving a service request from a user of the device;
- storing device configuration information and a second unique device identifier in storage associated with the network, wherein the device configuration information includes at least one of:
- configuration information based on the device data obtained and configuration information based on the service request received;
- detecting attachment of the device to the network at an authenticator device;
- in response to detecting attachment of the device to the network, authenticating the device by requesting the first unique device identifier from the device, receiving the first unique device identifier from the device, querying the storage associated with the network to verify the first unique device identifier matches the second unique identifier, requesting a first authentication response be computed on the device using the first unique device identifier and the shared credentials, receiving the first authentication response from the device, computing a second authentication response using the second unique device identifier and the shared credentials, and comparing the second authentication response with the first authentication response, wherein the device is authenticated if the first authentication response matches the second authentication response;
- in response to device authentication, providing over the network to the device a configuration server network address for configuring the device, wherein the network address provided is based on the service request received from the user;
- and
- providing the device configuration information to the device using the configuration server network address.
7 more elements
A system, comprising:
- one or more databases for storing a first unique device identifier, device configuration data, service network data and user service request data wherein the one or more databases are communicatively coupled to a network;
- and
- a network element communicatively coupled to the network wherein the network element is configured to:
- detect attachment of a device to the network, wherein the device lacks fixed network information to configure the device prior to initiating configuration;
- in response to detecting attachment of the device, authenticating the device by requesting
- a second unique device identifier from the device, receiving the second unique device identifier from the device, querying the one or more databases coupled to the network to verify the second unique device identifier matches a first unique identifier, requesting a first authentication response be computed on the device using the second unique device identifier and shared credentials stored on the device, receiving a first authentication response from the device, computing a second authentication response using the second unique device identifier and shared credentials stored in the one or more databases coupled to the network, and comparing the second authentication response with the first authentication response, wherein the device is authenticated if the first authentication response matches the second authentication response;
- provide over the network to the device a network address for configuring the device in response to authenticating the device, wherein the network address provided is based on a service request received from the user prior to detecting attachment of the device;
- and
- provide configuration information to the device using the network address for configuring the device.
6 more elements
Dependencies are inferred from the claim text.