Configuring a secure network infrastructure device

• US 10,333,777 B2
• Filed: 08/06/2013
• Issued: 06/25/2019
• Est. Priority Date: 08/06/2013
• Status: Active Grant

• Current Assignee: Ciena Corporation
• Original Assignee: Ciena Corporation
• Inventors: Swinkels, Gerard Leo, Parker, Craig Warren
• Primary Examiner(s): Serrao, Ranodhi
• Assistant Examiner(s): Fiorillo, James N
• Application Number:
  US13/960,654
• Publication Number:
  US 20150043553A1
• Time in Patent Office: 2,149 Days
• Field of Search: 709220, 370254, 358 113, 358 115
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/24 using dedicated network management hardware
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

In an embodiment, a user equipment (UE), establishes a local connection (e.g., USB, Bluetooth, etc.) to a network infrastructure device (e.g., a network switch or router) that is not yet configured for operation on a communications network. The UE obtains, while connected to the network infrastructure device over the local connection, device-identifying information (e.g., a location of the UE, a pre-provisioned identifier for the network infrastructure device, etc.) by which the network infrastructure device can be distinguished from other network infrastructure devices of the same type. The UE loads a configuration installation file that is specially configured for the network infrastructure device based on the obtained device-identifying information. The UE executes the configuration installation file over the local connection to configure the network infrastructure device for operation on the communications network.

Claims

1. A method of configuring a network infrastructure device with a user equipment (UE), comprising:

prior to arrival at one of a plurality of locations each with an associated network infrastructure device comprising one of a network switch and router with security requiring on-site configuration, obtaining and pre-storing, at a central site which is different from the plurality of locations, a plurality of configuration installation files each for the associated network infrastructure device on the UE, wherein the plurality of configuration installation files are each associated with a respective one of a plurality of network infrastructure devices and located on a server at the central site, wherein the obtaining and pre-storing downloads the plurality of configuration installation files from the server to the UE for the plurality of network infrastructure devices with associated device-identifying information for each configuration installation file;

subsequent to arrival at a location, establishing a local connection to a network infrastructure device at the location that is not yet configured for operation on a communications network;

obtaining, while connected to the network infrastructure device over the local connection, device-identifying information by which the network infrastructure device can be distinguished from other network infrastructure devices either locally at the UE or remotely by the central site;

loading in memory of the network infrastructure device a configuration installation file that is specially configured for the network infrastructure device from the plurality of configuration installation files, based on a comparison between the obtained device-identifying information and the associated device-identifying information for each configuration installation file; and

causing execution of the configuration installation file over the local connection to automatically configure the network infrastructure device for operation on the communications network, wherein the network infrastructure device begins operation on the communications network after configuration by the configuration installation file, and subsequently, confirming proper functioning of the network infrastructure device,

wherein, prior to the establishing and until automatically configured, the network infrastructure device is in a non-configured state and not set-up for Internet access and the local connection is direct between the UE and the network infrastructure device.

2. The method of claim 1, wherein the loading includes:

transmitting a request for the configuration installation file to an external entity; and

receiving the configuration installation file from the external entity in response to the request.

3. The method of claim 2, wherein the transmitted request includes the device-identifying information to permit the external entity to identify the configuration installation file for delivery to the UE.

4. The method of claim 2, further comprising:

identifying the configuration installation file based on the device-identifying information, wherein the transmitted request includes an indication of the configuration installation file based on the identifying.

5. The method of claim 1, wherein the local connection is a wired connection.

6. The method of claim 5, wherein the wired connection is a Universal Serial Bus (USB) connection.

7. The method of claim 1, wherein the device-identifying information corresponds to a location of the UE that is determined by execution of a positioning procedure executed at the UE.

8. The method of claim 7, wherein the positioning procedure is a global positioning system (GPS) positioning procedure.

9. The method of claim 1, wherein the device-identifying information corresponds to a pre-provisioned identifier that is assigned to the network infrastructure device and is acquired by the UE over the local connection.

10. The method of claim 9, wherein the pre-provisioned identifier is a media access control (MAC) address, an Internet Protocol (IP) address, device code or a serial number.

11. The method of claim 1, wherein the local connection is a wireless connection.

12. The method of claim 1, wherein the configuration installation file is stored locally on the UE prior to the establishment of the local connection, and wherein the configuration installation file is identified based on the device-identifying information.

13. The method of claim 1, wherein the network infrastructure device corresponds to a network switch or router in a backbone or backhaul portion of the communications network.

14. The method of claim 1, wherein the UE is provisioned with a file management application that is configured to manage configuration installation files for configuring a plurality of network infrastructure devices.

15. A user equipment (UE) adapted to configure a network infrastructure device, comprising:

a processor configured to execute;

logic configured to obtain and pre-store, prior to arrival at one of a plurality of locations each with an associated network infrastructure device comprising one of a network switch and router with security requiring on-site configuration, at a central site which is different from the plurality of locations, a plurality of configuration installation files each for the associated network infrastructure device on the UE, wherein the plurality of configuration installation files are each associated with a respective one of a plurality of associated network infrastructure devices and located on a server at the central site, and wherein the obtain and pre-store downloads the plurality of configuration installation files from the server to the UE for the plurality of network infrastructure devices with associated device-identifying information for each configuration installation file;

logic configured to establish, subsequent to arrival at a location, a local connection to a network infrastructure device at the location that is not yet configured for operation on a communications network;

logic configured to obtain, while connected to the network infrastructure device over the local connection, device-identifying information by which the network infrastructure device can be distinguished from other network infrastructure devices either locally at the UE or remotely by the central site;

logic configured to load in memory of the network infrastructure device a configuration installation file that is specially configured for the network infrastructure device from the plurality of configuration installation files, based on a comparison between the obtained device-identifying information and the associated device-identifying information for each configuration installation file; and

logic configured to cause execution of the configuration installation file over the local connection to automatically configure the network infrastructure device for operation on the communications network, wherein the network infrastructure device begins operation on the communications network after configuration by the configuration installation file, and subsequently, confirming proper functioning of the network infrastructure device;

wherein, prior to establishment of the local connection and until automatically configuration, the network infrastructure device is in a non-configured state and not set-up for Internet access and the local connection is direct between the UE and the network infrastructure device.

16. The method of claim 15, wherein the device-identifying information corresponds to a location of the UE that is determined by execution of a positioning procedure executed at the UE.

17. The method of claim 15, wherein the device-identifying information corresponds to a pre-provisioned identifier that is assigned to the network infrastructure device and is acquired by the UE over the local connection.

18. The method of claim 15, wherein the network infrastructure device corresponds to a network switch or router in a backbone or backhaul portion of the communications network.

19. A non-transitory computer-readable medium comprising instructions, which, when executed by a user equipment (UE) adapted to configure a network infrastructure device, cause the UE to perform operations comprising:

prior to arrival at one of a plurality of locations each with an associated network infrastructure device comprising one of a network switch and router with security requiring on-site configuration, obtaining and pre-storing, at a central site which is different from the plurality of locations, a plurality of configuration installation files each for the associated network infrastructure device on the UE, wherein the plurality of configuration installation files are each associated with a respective one of a plurality of associated network infrastructure devices and located on a server at the central site, wherein the obtaining and pre-storing downloads the plurality of configuration installation files from the server to the UE for the plurality of network infrastructure devices with associated device-identifying information for each configuration installation file;

subsequent to arrival at a location, causing the UE to establish a local connection to a network infrastructure device at the location that is not yet configured for operation on a communications network;

causing the UE to obtain, while connected to the network infrastructure device over the local connection, device-identifying information by which the network infrastructure device can be distinguished from other network infrastructure devices either locally at the UE or remotely by the central site;

causing the UE to load in memory of the network infrastructure device a configuration installation file that is specially configured for the network infrastructure device from the plurality of configuration installation files, based on a comparison between the obtained device-identifying information and the associated device-identifying information for each configuration installation file; and

causing the UE to self-execute the configuration installation file over the local connection to automatically configure the network infrastructure device for operation on the communications network, wherein the network infrastructure device begins operation on the communications network after configuration by the configuration installation file, and subsequently, confirming proper functioning of the network infrastructure device by a technician,

wherein, prior to the establishing and until automatically configured, the network infrastructure device is in a non-configured state and not set-up for Internet access and the local connection is direct between the UE and the network infrastructure device.