Systems and methods for automatically reconfiguring a network device

• US 7,409,709 B2
• Filed: 02/14/2005
• Issued: 08/05/2008
• Est. Priority Date: 02/14/2005
• Status: Active Grant

• Current Assignee: Anxebusiness Corporation (Open Text Corporation)
• Original Assignee: ETSEC, Inc. (Open Text Corporation)
• Inventors: Smith, Robert Douglas, Wobst, Olaf Alexander
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Lipman; Jacob
• Application Number:
  US11/057,862
• Publication Number:
  US 20060184998A1
• Time in Patent Office: 1,268 Days
• Field of Search: 726/15, 713/1, 713/2, 709/221, 709/209
• US Class Current: 726/15
• CPC Class Codes: H04L 12/4679 Arrangements for the registration or de-registration of VLAN attribute values, e.g. VLAN identifiers, port VLAN membership
• CPC Class Codes: H04L 41/0253 using browsers or web-pages for accessing management information
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Systems and methods are disclosed for automatically configuring, managing, and maintaining a network device or VPN using a public network such as the Internet. Initial configuration of a network device or VPN occurs upon a user entering minimal information via a simple HTML page. After receipt of this minimal information, the present invention automatically configures the network device or VPN without user intervention. Thereafter, a user may modify the network device or VPN configuration via an easy-to-use and easy-to-understand graphical user interface. Parameters are presented such that a user simply checks and unchecks boxes, or clicks on radio buttons, to configure network device parameters. Upon completion of the selection, the user clicks on save, and the configuration is automatically modified. In addition, upon a significant change to any network device, the changed network device automatically initiates reconfiguration of the network device or VPN with zero input from a user.

Claims

1. A method for automatically reconfiguring a network device, said method comprising the steps of:

initiating a user configuration process via an Internet portal, said user configuration process including the sub-steps of;

receiving user data input by a user at said Internet portal, said user data including at least one configuration parameter; and

concluding said user configuration process in a manner that prompts initiation of a network device configuration process; and

automatically initiating said network device configuration process upon completion of said user configuration process, said network configuration process including the sub-steps of;

transmitting said user data from said portal to at least one management device;

creating at least one configuration file at said management device;

automatically establishing a communication between said management device and said network device via a network connection of a network;

transmitting said configuration file from said management device to said network device via said network connection;

automatically reconfiguring said at least one configuration parameter of said network device via local processing of said configuration file; and

concluding said network configuration process.

2. A method according to claim 1,

wherein said portal includes at least one portal database;

wherein said management device includes at least one management device database; and

wherein a change to one of the group consisting of said portal databases and said management device databases is copied to at least one of the group consisting of said portal databases and said management device databases via database replication.

3. A method according to claim 1, wherein said transmission of said user data from said portal to said management device occurs via database replication.

4. A method according to claim 1,

wherein said portal is a web portal;

and

wherein said management device is a server.

5. A method according to claim 1, wherein said local processing of said configuration file includes the steps of:

decrypting said configuration file;

decoding said configuration file;

extracting configuration data from said configuration file; and

writing said configuration data to at least one storage location of said network device;

wherein at least one daemon executed by said network device retrieves and processes at least a portion of said configuration data contained in said storage location.

6. A method according to claim 1, wherein local processing of said configuration file includes the steps of:

extracting configuration data from said configuration file; and

writing said configuration data to at least one storage location of said network device;

wherein at least one daemon executed by said network device retrieves and processes at least a portion of said configuration data contained in said storage location.

7. A method according to claim 1, wherein a configuration transfer tool integral to said management device creates and transmits said configuration file to said network device.

8. A method according to claim 1, wherein said network is at least one of the group consisting of an Internet and a wide area network.

9. A method according to claim 1, wherein said network connection is at least one of the group consisting of a wireless connection, a cable connection, a digital subscriber line, and a telephone line.

10. A method according to claim 1, said method further comprising the steps of:

encoding said configuration file; and

encrypting said configuration file;

wherein said encoding and said encrypting occur prior to transmission of said configuration file via said network.

11. A method according to claim 1, wherein said network device is at least one of the group consisting of a broadband device, a router, a modem, a switch, and a wireless gateway.

12. A method according to claim 1, wherein said user data includes a customer identifier, a password, and at least one of the group consisting of virtual private network data, network data, wide area network data, browsing data, electronic mail data, encryption data, spam data, virus protection data, security data, and filtering data.

13. A method according to claim 1, wherein said configuration parameter is at least one of the group consisting of a virtual private network parameter, a network parameter, a wide area network parameter, a browsing parameter, an electronic mail parameter, an encryption parameter, a spam parameter, a virus protection parameter, a security parameter, and a filtering parameter.

14. A method according to claim 1, wherein said receiving said user data input by said user at said portal includes the sub-steps of:

displaying at least one data input screen to said user via at least one of the group consisting of a network browser and an Internet browser; and

receiving said user data input by said user into said at least one data input screen at said portal via at least one of the group consisting of said network connection and an Internet connection;

wherein at least one of said data input screens prompts said user to perform at least one of the group consisting of selecting said user data from a predefined list of said user data and entering said user data in predefined user data fields.

15. A method according to claim 14, wherein at least one of said data input screens is provided by said portal.

16. A method according to claim 14, wherein at least one of said data input screens prompts said user to select a first of at least two preference screens.

17. A method according to claim 16, wherein at least one of said preference screens include at least one of the group consisting of virtual private network preferences, network preferences, wide area network preferences, browsing preferences, electronic mail preferences, encryption preferences, spam preferences, virus protection preferences, security preferences, and filtering preferences.

18. A method according to claim 1, wherein said user data is input by said user via a user interface coupled to said network device.

19. A method according to claim 18, wherein said user interface is at least one of the group consisting of a personal computer, a personal data assistant, and a network-equipped appliance.

20. A method according to claim 18, wherein said coupling of said user interface to said network device is at least one of the group consisting of a cable, an Ethernet cable, a wireless connection, a local area network, a wide area network, and an Internet connection.

21. A method according to claim 1, said method further comprising the step of:

authenticating a communication channel prior to said establishing of said communication between said management device and said network device.

22. A method according to claim 21, wherein said authenticating is performed using at least one of the group consisting of IP security, secure sockets layer, passwords, digital certificates, smart cards, biometrics, and dynamic biometrics.