Secure provisioning of network services
AssigneeBroadcom Corporation
InventorsSteven Philip Larky, Jean-Philippe Cornil
Life of this patent
Estimating the term…
Abstract
Provided are systems and methods for secure provisioning of consumer network services. For example, there is a broadband modem for secure provisioning of a network service, where the broadband modem includes a controller having an embedded memory. The controller is configured to enable an unmanaged interface of the broadband modem, to establish a subscription interface link over the enabled unmanaged interface, and to download, over the subscription interface link, a subscriber firmware enabling a managed interface corresponding to the network service. Power cycling the broadband modem erases the downloaded subscriber firmware and disables the managed interface.
Claims16
A device comprising:
- an embedded memory configured to store software;
- a flash memory configured to store configuration data, the flash memory being physically separate from the embedded memory;
- at least one processor circuit configured to:
- enable an unmanaged interface using the software stored in the embedded memory;
- establish a link over the enabled unmanaged interface;
- authenticate the link based at least in part on the configuration data stored in the flash memory;
- obtain, over the authenticated link, firmware for enabling a managed interface, wherein the device does not contain firmware for enabling the managed interface when powered on;
- and
- erase the obtained firmware upon a power cycle.
A method implemented by a controller of a device, the method comprising:
- enabling an unmanaged interface of the device using a software stored in an embedded memory;
- establishing a link over the enabled unmanaged interface using the software
- authenticating the link based at least in part on configuration data stored in a flash memory that is physically separate from the embedded memory;
- obtaining, over the authenticated link and responsive to authenticating the link, subscriber firmware for enabling a managed interface of the device, wherein the device does not include firmware for enabling the managed interface prior to the obtaining;
- and
- erasing the obtained subscriber firmware and disabling the managed interface upon a power cycle.
A computer program product comprising instructions stored in an embedded memory, the instructions comprising:
- instructions to enable an unmanaged interface of a device;
- instructions to establish a link over the enabled unmanaged interface;
- instructions to authenticate the link based at least in part on configuration data that is stored in a flash memory that is physically separate from the embedded memory;
- instructions to download, over the authenticated link and responsive to authenticating the link, firmware for enabling a managed interface of the device, wherein the device does not contain firmware for enabling the managed interface prior to the download;
- and
- instructions to erase the downloaded firmware and disable the managed interface upon a power cycle.
Dependencies are inferred from the claim text.