SYSTEM AND METHOD FOR PROVIDING SECURITY BACKUP SERVICES TO A HOME NETWORK

• US 20100218242A1
• Filed: 05/04/2010
• Published: 08/26/2010
• Est. Priority Date: 04/25/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Baugher, Mark John
• Granted Patent: US 8,024,466 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2898 Subscriber equipments DSL modems H04M11/062; cable modems H04L12/2801
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/303 Terminal profiles

Abstract

Methods and systems of providing security backup services to a home network are described. In one embodiment, the gateway for a home network is registered with a service provider. A network device is enrolled with the home network, and periodically reenrolls. The device detects whether the gateway has been replaced between enrolling and reenrolling, and if it has been replaced, determines whether the new network gateway has been endorsed by the service provider.

Claims

1. A method of detecting a change in the structure of a network, comprising:

connecting a first co-registrar with a second co-registrar, said connecting comprising said first co-registrar validating a first credential identifying said second co-registrar, and said second co-registrar validating a second credential identifying said first co-registrar;

registering a device with said first co-registrar, said registering comprising exchanging secret information between said device and said co-registrar, said secret information uniquely identifying said device, said registering further comprising copying said first credential and said second credential to said device as a stored first credential and a stored second credential;

periodically transmitting a query from said device to said first co-registrar for said first credential and said second credential; and

comparing said first credential with said first stored credential, in order to detect a change in the identity of said second co-registrar.

2. The method of claim 1, further comprising:

if the identity of said second co-registrar has changed, determining whether said first co-registrar has validated said second credential.

3. The method of claim 1, further comprising:

comparing said second credential with said second stored credential, in order to detect the change in the identity of said first co-registrar.

4. The method of claim 3, further comprising:

if the identity of said first co-registrar has changed, determining whether said second co-registrar has validated said second credential.

5. The method of claim 3, further comprising:

receiving a transfer credential into said network device from a new first co-registrar, said transfer credential originating from a new second co-registrar, said transfer credential identifying said new second co-registrar and validated by said second co-registrar.

6. The method of claim 5, further comprising:

if the identity of both said first co-registrar and said second co-registrar have changed, determining whether said second co-registrar has validated said transfer credential.

7. The method of claim 1, wherein said secret data comprises a private key.