Initializing and reconfiguring a secure network interface

• US 6,073,172 A
• Filed: 07/14/1997
• Issued: 06/06/2000
• Est. Priority Date: 07/14/1997
• Status: Expired due to Term

• Current Assignee: ARRIS Enterprises LLC (CommScope Holding Company, Inc.)
• Original Assignee: FreeGate Corp (Motorola Solutions, Inc.)
• Inventors: Frailong, Jean-Marc, Tardo, Joseph John, Price, Charles A.
• Primary Examiner(s): Matar, Ahmad F.
• Assistant Examiner(s): Najjar, Saleh
• Application Number:
  US08/892,301
• Time in Patent Office: 1,058 Days
• Field of Search: 709/222, 709/227, 709/228
• US Class Current: 709/222
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

The present invention discloses a initializing and reconfiguring a network interface device connecting a client computer system to an external network. The network interface device is configured for the client system by automated procedures and protocols initiated from a remote server. Software programs within the network interface device provide transparent communication between the client computer system and services available on the external network. Similar software programs and a configuration database within the network interface device provide transparent communication between the client computer system and the remote server.

Claims

1. A method of initializing a network interface device coupled between a first network and a second network, said method comprising the steps of:

providing an on-line registration form for input of client identification and client configuration information;

storing said client identification and said client configuration information in a first database on a server computer coupled to said second network;

providing a registration key to a user of a client computer coupled to said first network;

receiving log-in information from said client computer on said server computer;

verifying authenticity of said log-in information;

transmitting a configuration file to said network interface device from said server computer upon verification of said log-in information; and

marking said registration key as a used registration key to prevent a subsequent use by a different network interface device.

2. The method of claim 1 wherein said on-line registration form is provided on a server computer coupled to a third network, said third network coupled to said second network.

3. The method of claim 1 further comprising the step of providing a method for said client computer to determine a network address of said client computer for initiation of communication between said client computer and said second network.

4. The method of claim 3 further comprising the steps of:

configuring said network interface device to determine whether an address provision service is available to said client network;

transmitting a broadcast advertisement message from said network interface device, said broadcast advertisement message specifying a network address to be assigned to said client computer;

transmitting from said network interface device, upon receipt of a broadcast return message from said client computer, a temporary network address to said client computer if said address provision service is not available; and

transmitting from said network interface device, upon receipt of a broadcast return message from said client computer, an assigned address to said client computer if said address provision service is available.

5. The method of claim 4 wherein said registration key is an alphanumeric data string which includes a first field which specifies the identity of said server computer and a second field which specifies the identity of said network interface device.

6. The method of claim 5 wherein said registration key further includes a third field which provides a cyclic redundancy check for said first and said second fields.

7. The method of claim 1 wherein said log-in information comprises a message which includes a first field storing said registration key and a second field storing a serial number associated with said network interface device.

8. The method of claim 7 wherein said step of verifying authenticity of said log-in information comprises the steps of:

comparing said registration key stored in said first field has been marked as being a used registration key; and

comparing said serial number stored in said second field with a corresponding entry in a second database.

9. The method of claim 1 wherein said step of transmitting a configuration file to said network interface device further comprises the steps of:

transmitting a configuration file name to said network interface device; and

transmitting said configuration file corresponding to said configuration file name upon receipt of a request from said network interface device.

10. The method of claim 9 wherein said configuration file comprises a file to be executed by said network interface device and said configuration file is transferred to said network interface device using a file transfer protocol.

11. The method of claim 10 wherein said configuration file is transferred from a file transfer protocol site computer on a fourth network coupled to said first network.

12. The method of claim 9 further comprising the step of encoding said configuration file and transferring said configuration file through a public key/private key encryption mechanism established between said server computer and said network interface device.

13. An article of manufacture embodying a program of instructions executable by a machine for initializing a network interface device coupled between a first network and a second network, the program of instructions including instructions for:

providing an on-line registration form for input of client identification and client configuration information;

storing said client identification and said client configuration information in a first database on a server computer coupled to said second network;

providing a registration key to a user of a client computer coupled to said first network;

receiving log-in information from said client computer on said server computer;

verifying authenticity of said log-in information;

transmitting a configuration file to said network interface device from said server computer upon verification of said log-in information; and

marking said registration key as a used registration key to prevent a subsequent use by a different network interface device.

14. An article of manufacture according to claim 13, wherein said program of instructions further includes instructions for:

providing a method for said client computer to determine a network address of said client computer for initiation of communication between said client computer and said second network;

configuring said network interface device to determine whether an address provision service is available to said client network;

transmitting a broadcast advertisement message from said network interface device, said broadcast advertisement message specifying a network address to be assigned to said client computer;

transmitting from said network interface device, upon receipt of a broadcast return message from said client computer, a temporary network address to said client computer if said address provision service is not available; and

transmitting from said network interface device, upon receipt of a broadcast return message from said client computer, an assigned address to said client computer if said address provision service is available.