Provisioning Remote Access Points

• US 20140082060A1
• Filed: 11/19/2013
• Published: 03/20/2014
• Est. Priority Date: 06/03/2009
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Aruba Networks Incorporated (Hewlett-Packard Enterprise Company)
• Inventors: Mehta, Manish, Kshirsagar, Shekhar, PalChaudhuri, Santashil
• Granted Patent: US 9,509,746 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 88/085 Access point devices with remote components

Abstract

Provisioning remote access points for use in a telecommunication network. A remote access point contains identity information established during manufacturing; this identity information may be in the nature of a digital certificate. The identity information is stored in the remote access point, and may be stored in a Trusted Platform Module if present. When the remote access node is powered up in unprovisioned state, outside the manufacturing environment, it attempts to establish an internet connection via a first wired interface, and queries a user for information representing the TCP/IP address of its controller via a second wired interface. Once an internet connection is present, and a TCP/IP address has been provided, the remote access point attempts to connect to the controller at that address. Once a connection is established, controller and access point exchange and verify each other'"'"'s identities.

Claims

1. A non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, causes performance of operations comprising:

executing a web server on an access point;

receiving, by the access point from a client device, a request for a first web page;

responsive to receiving the request from the first web page;

providing, by the access point to the client device, a second web page from the web server executing on the access point;

wherein the second web page is different than the requested first web page;

receiving, by the access point from the client device, user input entered by a user into the second web page.

2. The medium of claim 1, wherein the user input comprises an address of a controller.

3. The medium of claim 1, wherein the user input is used to configure the access point.

4. The medium of claim 3, wherein the user input is used to configure the access point by the access point requesting configuration information from a device identified by the user input.

5. The medium of claim 1, wherein the request comprises a Uniform Resource Identifier (URI).

6. The medium of claim 1, wherein the user input comprises a Fully Qualified Domain Name (FQDN).

7. A method comprising:

executing a web server on an access point including a hardware processor;

receiving, by the access point from a client device, a request for a first web page;

responsive to receiving the request from the first web page;

providing, by the access point to the client device, a second web page from the web server executing on the access point;

wherein the second web page is different than the requested first web page;

receiving, by the access point from the client device, user input entered by a user into the second web page.

8. The method of claim 7, wherein the user input comprises an address of a controller.

9. The method of claim 7, wherein the user input is used to configure the access point.

10. The method of claim 9, wherein the user input is used to configure the access point by the access point requesting configuration information from a device identified by the user input.

11. The method of claim 7, wherein the request comprises a Uniform Resource Identifier (URI).

12. The method of claim 7, wherein the user input comprises a Fully Qualified Domain Name (FQDN).

13. An access point comprising:

at least one hardware processor;

the access point being configured to perform operations comprising;

executing a web server on the access point;

receiving, by the access point from a client device, a request for a first web page;

responsive to receiving the request from the first web page;

providing, by the access point to the client device, a second web page from the web server executing on the access point;

wherein the second web page is different than the requested first web page;

receiving, by the access point from the client device, user input entered by a user into the second web page.

14. The system of claim 13, wherein the user input comprises an address of a controller.

15. The system of claim 13, wherein the user input is used to configure the access point.

16. The system of claim 15, wherein the user input is used to configure the access point by the access point requesting configuration information from a device identified by the user input.

17. The system of claim 13, wherein the request comprises a Uniform Resource Identifier (URI).

18. The system of claim 13, wherein the user input comprises a Fully Qualified Domain Name (FQDN).