Remote reconfiguration of a secure network interface

• US 6,496,858 B1
• Filed: 11/05/1999
• Issued: 12/17/2002
• Est. Priority Date: 07/14/1997
• Status: Expired due to Fees

• Current Assignee: Tut Systems, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Tut Systems, Inc. (Motorola Solutions, Inc.)
• Inventors: Frailong, Jean-Marc, Price, Charles A., Tardo, Joseph John
• Primary Examiner(s): Najjar, Saleh
• Application Number:
  US09/435,014
• Time in Patent Office: 1,138 Days
• Field of Search: 709/200, 709/201, 709/202, 709/203, 709/217, 709/219, 709/220, 709/221, 709/222, 712/15, 713/100, 713/201, 713/200, 713/202
• US Class Current: 709/221
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

The present invention discloses a initializing and reconfiguring a network interface device connecting a client computer system to an external network. The network interface device is configured for the client system by automated procedures and protocols initiated from a remote server. Software programs within the network interface device provide transparent communication between the client computer system and services available on the external network. Similar software programs and a configuration database within the network interface device provide transparent communication between the client computer system and the remote server.

Claims

1. A method of reconfiguring a network interface device coupled between a first network and a second network, said method comprising:

associating a first time window with a reconfiguration notification message;

initiating reconfiguration of the network interface device by a remote server; and

sending said reconfiguration notification message to said network interface device if said network interface device is eligible for reconfiguration, wherein said reconfiguration notification message is sent through a public key/private key encryption mechanism established between said remote server and said network interface device.

2. The method of claim 1 wherein said reconfiguration notification message contains replacement data parameters for modification of data entries stored in a database within said network interface device.

3. The method of claim 2 wherein:

upon receipt of said reconfiguration notification message and within the time specified by said first time window, said network interface device writes said replacement data parameters to corresponding data entry locations within said database.

4. The method of claim 3 further comprising:

determining, in said network interface device, whether the writing of said replacement data parameters was successful;

transmitting, from said network interface device, a first notification message to a server if reconfiguration was successful; and

transmitting, from said network interface device, a second notification message to said server if said reconfiguration was not successful.

5. The method of claim 2 wherein said reconfiguration notification message is transferred through a public key/private key encryption mechanism established between a server and said network interface device.

6. An article of manufacture embodying a program of instructions executable by a machine for reconfiguring a network interface device coupled between a first network and a second network, the program of instructions including instructions for:

associating a first time window with a reconfiguration notification message;

initiating reconfiguration of the network interface device by a remote server; and

sending said reconfiguration notification message to said network interface device if said network interface device is eligible for reconfiguration, wherein said reconfiguration notification message is sent through a public key/private key encryption mechanism established between said remote server and said network interface device.

7. An article of manufacture according to claim 6, wherein said program of instructions further includes instructions for:

programming said reconfiguration notification message with replacement data parameters for modification of data entries stored in a database within said network interface device;

writing said replacement data parameters to corresponding data entry locations within said database upon receipt of said reconfiguration notification message and within the time specified by said first time window.

8. The article of manufacture according to claim 7, wherein said program of instructions further includes instructions for:

determining, in said network interface device, whether the writing of said replacement data parameters was successful;

transmitting, from said network interface device, a first notification message to a server if reconfiguration was successful; and

transmitting, from said network interface device, a second notification message to said server if said reconfiguration was not successful.

9. A method of upgrading software on a network interface device coupled between a first network and a second network, the method comprising:

identifying a first time window and a second time window for an upgrade notification message;

determining whether the network interface device is a part of a virtual private network (VPN);

if the network interface device is the part of the VPN, sending the upgrade notification message to a headquarters branch of the VPN, wherein the upgrade notification message directs the headquarters branch to retrieve an upgrade package from a remote site specified in the notification message within the first time window and further directs each node within the VPN to upgrade software at any time within the second time window.

10. The method of claim 9 wherein the first time window specifies a time period for retrieving an upgrade package and the second time window specifies a time period for upgrade using the upgrade package.

11. The method of claim 9 further comprising:

determining that the network interface device is not a part of the virtual private network;

retrieving an upgrade package from a remote site specified in the notification message any time within the first time window; and

upgrading software on the network interface device using the upgrade package at any time within the second time window.

12. The method of claim 9 further comprising:

determining that all nodes of the VPN have accepted the upgrade;

retrieving an upgrade package from a remote site specified in the notification message any time within the first time window;

sending the upgrade package to each node within the VPN; and

performing the upgrade of the VPN at any time within the second time window.

13. A system comprising:

a first network;

a second network;

a network interface device coupled between the first network and the second network; and

a server coupled to the first network and the network interface device, the server configured to initiate reconfiguration of the network interface device and to provide reconfiguration information to the network interface device if the network interface device is eligible to receive the reconfiguration information, wherein said reconfiguration notification message is sent through a public key/private key encryption mechanism established between a remote server and said network interface device, the reconfiguration information being associated with a first time window.

14. The system of claim 13 wherein the reconfiguration information contains replacement data parameters for modification of data entries stored in a database within the network interface device.

15. The system of claim 14 wherein the network interface device writes the replacement data parameters to corresponding data entry locations within the database upon receipt of the reconfiguration information and within a time period specified by the first time window.

16. The system of claim 15 wherein the network interface device is configured to

determine whether the writing of said replacement data parameters was successful,

transmit a first notification message to the server if execution of a reconfiguration program was successful, and

transmit a second notification message to the server if execution of the reconfiguration program was not successful.

17. The system of claim 14 wherein the reconfiguration information is transferred through a public key/private key encryption mechanism established between the server and the network interface device.

18. A system comprising:

a first network;

a second network;

a network interface device coupled between the first network and the second network; and

a server coupled to the first network and the network interface device, the server configured to identify a first time window and a second time window for an upgrade notification message, to determine whether the network interface device is a part of a virtual private network (VPN) and, if the network interface device is the part of the VPN, to send the upgrade notification message to a headquarters branch of the VPN, wherein the upgrade notification message directs the headquarters branch to retrieve an upgrade package from a remote site specified in the upgrade notification message within the first time window and further directs each node within the VPN to upgrade software at any time within the second time window.

19. The method of claim 18 wherein the first time window specifies a time period for retrieving the upgrade package and the second time window specifies a time period for the upgrade using the upgrade package.

20. The system of claim 18 wherein the network interface device is configured to retrieve the upgrade package at a time period within the first time window and perform the upgrade using the upgrade package at a time period within the second time window, if the network interface device is not a part of a virtual private network (VPN).

21. The system of claim 18 further comprising a virtual private network (VPN) coupled to the server, the VPN comprising a headquarters branch and a plurality of nodes including the network interface device.

22. The system of claim 21 wherein the headquarters branch of the VPN is configured to receive the upgrade notification message from the server, notify the nodes of upgrade, and send an upgrade package to the nodes if all the nodes accept the upgrade.

23. An article of manufacture embodying a program of instructions executable by a machine for initializing a network interface device coupled between a first network and a second network, the program of instructions including instructions for:

associating a first time window and a second time window with an upgrade notification message; and

sending the upgrade notification message to the network interface device if the network interface device is eligible for an upgrade, wherein said reconfiguration notification message is sent through a public key/private key encryption mechanism established between a remote server and said network interface device.