NETWORK DEVICE CONFIGURATION

• US 20080028051A1
• Filed: 10/03/2007
• Published: 01/31/2008
• Est. Priority Date: 12/24/2002
• Status: Abandoned Application

• Current Assignee: Yellowtuna Holdings Limited
• Original Assignee: Yellowtuna Holdings Limited
• Inventors: Massam, Christopher, Monks, Dennis
• Application Number:
  US11/866,540
• Publication Number:
  US 20080028051A1
• Time in Patent Office: Days
• US Class Current: 709/221
• CPC Class Codes: H04L 12/2898 Subscriber equipments DSL modems H04M11/062; cable modems H04L12/2801
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A network device initially has no configuration data and is permitted only to query a known network address. From this address a server verifies the connection and authorizes another server to download to the network device the necessary configuration to carry out its purpose. This configuration may not be amended and is not retained on power loss. Any updates are carried out by a complete reload of configuration data.

Claims

1. A network device, comprising:

operating software but no configuration data allowing it to carry out its intended purpose, the network device being remotely programmable with configuration data as a whole but which network device or operating software has no facility to allow any incremental change of configuration data.

2. The network device as claimed in claim 1, wherein the device configuration data is held in random access memory (RAM) and is lost when no network device supply voltage is present.

3. The network device as claimed in claim 1, wherein the device operating software contains a routine which on initialization attempts to contact a remote verification authority to authorize retrieval of configuration data from a configuration authority.

4. The network device as claimed in claim 3, wherein the device software contains only the routine for contacting the remote verification authority and receiving data from the remote configuration authority.

5. The network device as claimed in claim 3, wherein the contact with the remote verification authority is subject to encryption.

6. The network device as claimed in claim 2, wherein the device initially contains an input filter which will only receive configuration data from a specified remote configuration authority address.

7. The network device as claimed in claim 1, wherein the device is a router which is integral with a modem.

8. The network device as claimed in claim 7, wherein the modem is an asymmetric digital subscriber line (ADSL) modem.

9. A method of configuring a network device which loses its configuration data on power loss, comprising:

providing a network device without user configuration data, providing within the network device a routine which securely contacts a remote verification authority; and

downloading from a remote configuration authority authorized by the remote verification authority the entire configuration data.

10. The method as claimed in claim 9, wherein the network device is a router.

11. The method as claimed in claim 10, wherein the router is part of an ADSL modem.

12. The method as claimed in claim 9, wherein the network device is capable of being configured only by remote download of the complete configuration data.

13. The method as claimed in claim 9, wherein the network device router which contacts the remote verification authority carries out any information transfer using secure encryption.

14. The method as claimed in claim 13, wherein the secure encryption employs a public key encryption method.

15. The method as claimed in claim 14, wherein the private key for the network device is provided by a device temporarily connected to the network device.

16. The method as claimed in claim 15, wherein the temporarily connected device is a USB memory device.

17. The method as claimed in claim 13, wherein the secure encryption employs an encryption method utilizing both a private key and a public key.

18. The method as claimed in claim 9, wherein the configuration data is also lost from the network device on any intrusion attempt.