System and method for secure and efficient universal port configuration

• US 6,553,489 B1
• Filed: 01/12/2000
• Issued: 04/22/2003
• Est. Priority Date: 01/12/2000
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Viriato, Luis A., Osler, Bruce P.
• Primary Examiner(s): BUTLER, DENNIS
• Application Number:
  US09/483,049
• Time in Patent Office: 1,196 Days
• Field of Search: 713/1, 713/2, 713/100, 709/220, 709/221, 709/222, 710/8, 710/10
• US Class Current: 713/1
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A system and method for providing secure and efficient configuration of port devices. The system identifies a user of the system and associates the identified user with a particular account group. Each account group is associated with one of a plurality of service templates maintained within each port device or group of port devices. Messages via a control or administration path are used to select the service template associated with the user. The selected service template is then used to configure the port device according the configuration parameters defined for the template according to the user'"'"'s account group. A separate data path is provided for communicating port data and providing port services once the port has been configured according to the service template. By separating the control path for administrative configuration from the data path for port services, the security of the configuration of the port devices is thereby significantly increased.

Claims

1. In a system having a network access server with an operating system executing therein, a universal port controller for providing port services comprising:

a) a service processing element executing within said universal port controller to provide at least one port service to a user of the network access server;

b) a plurality of service templates, each having universal port configuration information, said service templates residing within said universal port controller;

c) a data path carrying data information between said universal port controller and the network access server; and

d) a control path carrying administrative control information between said universal port controller and the network access server, said service templates selectable via said control path.

2. The universal port controller of claim 1, wherein said operating system is further configured to select one of said service templates via said control path according to account information for a user of the system.

3. The universal port controller of claim 2, wherein said service processing element is further configured to configure port services according to configuration information provided in said service template selected by said operating system.

4. The universal port controller of claim 1, where said data path is further configured to transmit non-restricted “

AT”

configuration commands.

5. The universal port controller of claim 1, where said control path is further configured to transmit non-restricted “

AT”

configuration commands.

6. In a system having a network access server coupled to at least one universal port controller, a method for configuring port services in said universal port controller comprising:

a) providing a data path between said network access server and said universal port controller;

b) providing a control path between said network access server and said universal port controller;

c) communicating restricted configuration commands via said control path; and

d) communicating user data via said data path.

7. The method of claim 6 further comprising communicating non-restricted configuration commands via said data path.

8. The method of claim 6 further comprising defining a plurality of service templates, each having port configuration parameters, said service templates residing within said universal port controller.

9. The method of claim 8 further comprising:

a) identifying a user accessing said network access server;

b) associating said user with one of said service templates; and

c) configuring port services for said user in said universal port controller according to said service template associated with said user.

10. The method of claim 9 wherein said identifying a user comprises identifying phone number dialed by said user.

11. The method of claim 10 wherein each said service template is associated with a service template index.

12. The method of claim 11 further comprising:

a) identifying a user accessing said network access server;

b) associating said user with a said service template index;

c) communicating, by an operating system, a message including said associated service template index to a service processing element;

d) ascertaining, by said service processing element, port configuration parameters from said service template index; and

e) configuring, by said service processing element, port services according to said port configuration parameters.

13. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for configuring port services in a system having a network access server coupled to at least one universal port controller, said method comprising:

a) providing a data path between said network access server and said universal port controller;

b) providing a control path between said network access server and said universal port controller;

c) communicating restricted configuration commands via said control path; and

d) communicating user data via said data path.

14. The program storage device of claim 13, said method further comprising communicating non-restricted “

AT”

configuration commands via said data path.

15. The program storage device of claim 13, said method further comprising defining a plurality of service templates, each having port configuration parameters, said service templates residing within said universal port controller.

16. The program storage device of claim 15, said method further comprising:

a) identifying a user accessing said network access server;

b) associating said user with one of said service templates; and

c) configuring port services for said user in said universal port controller according to said service template associated with said user.

17. The program storage device of claim 16, wherein said identifying a user comprises identifying phone number dialed by said user.

18. The program storage device of claim 15, wherein each said service template is associated with a service template index.

19. The program storage device of claim 18, said method further comprising:

a) identifying a user accessing said network access server;

b) associating said user with a said service template index;

c) communicating, by said operating system, a message including said associated service template index to said service processing element;

d) ascertaining, by said service processing element, port configuration parameters from said service template index; and

e) configuring, by said service processing element, port services according to said port configuration parameters.