Method for configuring a network element at a customer premise via a mobile data terminal

• US 7,188,161 B1
• Filed: 02/11/2003
• Issued: 03/06/2007
• Est. Priority Date: 02/11/2003
• Status: Expired due to Fees

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Ronen, Yzhak, O'Neil, Joseph Thomas
• Primary Examiner(s): Najjar; Saleh
• Assistant Examiner(s): ISMAIL, SHAWKI SAIF
• Application Number:
  US10/364,060
• Time in Patent Office: 1,484 Days
• Field of Search: 709220-225, 709217-219, 713/159, 713/186, 713168-171
• US Class Current: 709/220
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

An enhanced network element and method for configuring and deploying computer network elements is disclosed. A customer orders a network element from an equipment provider. Upon receipt of the unconfigured network element, a Trusted Configuration Device (TCD) is shipped from a network provider to the customer. The TCD transmits information to the NE that enables it to download a configuration file from a Provisioning Server (PS) via a secure channel.

Claims

1. A method comprising the steps of:

downloading a configuration file to a mobile data terminal from a provisioning server via a secure channel, the configuration file downloadable from the mobile data terminal to a network element, the network element being one of a router, switch, firewall, or gateway, the network element located at a customer premises, the configuration file adapted to configure the network element for operation, the configuration comprising a network topology, addresses, and security parameters,

said downloading of the configuration file responsive to;

a connection created between the network element and the mobile data terminal;

a web page requested by the mobile data terminal from the provisioning server;

a customer request, the customer authenticated to the provisioning server via the web page;

a second web page and an applet downloaded from the provisioning server after customer authentication;

a handshake is established between the network element and the applet;

a serial number received from the network element during the handshake;

a determination if the received serial number matches a serial number stored by the mobile data terminal; and

if a match occurred, a provisioning server network address/port and shared secret transmitted to the network element, the shared secret configured to create the secure channel, the shared secret computed by a random number generator.

2. The method of claim 1 wherein said connection between said network element and the mobile data terminal occurs via short-range wireless transceivers.

3. The method of claim 1 wherein said mobile data terminal is a cellular telephone.

4. The method of claim 1 wherein the mobile data terminal is a portable digital assistant.

5. The method of claim 1 wherein the mobile data terminal is a laptop computer.

6. The method of claim 1 wherein the mobile data terminal is a wearable computer.

7. The method of claim 1 wherein said applet communicates between the network element and the provisioning server.

8. The method of claim 1 wherein said mobile data terminal is capable of receiving biometric data.

9. The method of claim 8 wherein said biometric data includes retinal data.

10. The method of claim 8 wherein said biometric data includes fingerprint data.

11. The method of claim 8 wherein said biometric data includes speech data.

12. The method of claim 8 wherein said biometric data includes handwriting data.

13. The method of claim 1 further comprising the step of:

receiving a confirmation message from the network element that a configuration file has been downloaded from the provisioning server.