Method and system for remotely provisioning and/or configuring a device

• US 8,098,160 B2
• Filed: 05/01/2008
• Issued: 01/17/2012
• Est. Priority Date: 01/22/2007
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Howarth, Arthur G., Wetterwald, Patrick, Miriyala, Prasad, Thubert, Pascal, Ribiere, Vincent Jean, Saville, Roland, Prasad, Chandroadya
• Primary Examiner(s): Wu, Daniel
• Assistant Examiner(s): Tang, Son M
• Application Number:
  US12/113,348
• Publication Number:
  US 20080204199A1
• Time in Patent Office: 1,356 Days
• Field of Search: 340/10.5, 340/10.1, 340/10.51, 340/572.2, 340/5.8, 455/410, 455/551, 455/552.1
• US Class Current: 340/572.1
• CPC Class Codes: G08B 13/2417 having a radio frequency identification chip
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0883 Semiautomatic configuration, e.g. proposals from system
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and system for remotely configuring and/or provisioning a device that is nonoperational is provided. The device may be, in general, any electronic device that includes at least one setting (“device setting”) that can be programmatically or otherwise established or adjusted to configure and/or provision the device for its operation. The method includes detecting, via a radio frequency identification (“RFID”) tag, a state of a device that is communicatively coupled to the RFID tag; and providing the device setting via the RFID tag when the state signifies that the device is nonoperational.

Claims

1. A method comprising:

detecting, via a radio frequency identification (“

RFID”

) tag, a state of a device that is communicatively coupled to the RFID tag;

determining, via information provided by the RFID tag, that the state of the device signifies that the device or a portion thereof is powered off; and

as a result of determining that the state of the device signifies that the device or a portion thereof is powered off, providing a setting for the device via the RFID tag,

wherein the RFID tag, using programming code stored in memory within the RFID tag, prevents setting the setting for the device unless the device or a portion thereof is powered off as indicated by the state of the device detected and determined by the RFID tag.

2. The method of claim 1, wherein the device is adapted to use the setting during operation.

3. The method of claim 1, wherein detecting a state of a device comprises:

establishing a first communication with the radio frequency identification (“

RFID”

) tag;

establishing a second communication with the device; and

interrogating the device to obtain the state.

4. The method of claim 3, wherein establishing a second communication comprises:

establishing the second communication with a memory communicatively coupled to the RFID tag, and wherein interrogating the device comprises;

interrogating the memory to obtain the state.

5. The method of claim 3, wherein establishing a first communication with the radio frequency identification (“

RFID”

) tag comprises;

providing, in accordance with a given security policy, a credential to authenticate a provider of the setting.

6. The method of claim 5, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein providing a credential comprises:

providing the credential in accordance with the first level of security when the state signifies that the device or a portion thereof is powered off.

7. The method of claim 6, wherein providing a credential further comprises:

providing the credential in accordance with the second level of security when the state signifies that the device is operational.

8. The method of claim 3, wherein establishing a second communication with the device comprises:

obtaining access to the device in accordance with a given security policy.

9. The method of claim 8, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein obtaining access to the device comprises:

obtaining access to the device in accordance with the first level of security when the state signifies that the device or a portion thereof is powered off.

10. The method of claim 9, wherein the device includes an interface, wherein detecting a state of a device comprises:

detecting when the interface is inactive, and wherein obtaining access to the device comprises;

obtaining access to the device in accordance with the second level of security when the state signifies that the interface is inactive.

11. A method comprising:

detecting, at a radio frequency identification (“

RFID”

) tag, a state of a device that is communicatively coupled to the RFID tag;

determining, via information provided by the RFID tag, that the state of the device signifies that the device or a portion thereof is powered off; and

as a result of determining that the state of the device signifies that the device or a portion thereof is powered off providing a setting for the device via the RFID tag,

wherein the RFID tag, using programming code stored in memory within the RFID tag, prevents setting the setting for the device unless the device or a portion thereof is powered off as indicated by the state of the device detected and determined by the RFID tag.

12. The method of claim 11, wherein the device is adapted to use the setting during operation.

13. The method of claim 11, wherein detecting a state of a device comprises:

establishing a communication with the with the device; and

interrogating the device to obtain the state.

14. The method of claim 13, wherein establishing a communication comprises:

establishing the communication with a memory communicatively coupled to the RFID tag, and wherein interrogating the device comprises;

interrogating the memory to obtain the state.

15. The method of claim 13, further comprising:

obtaining at the radio frequency identification (“

RFID”

) tag, in accordance with a given security policy, a credential to authenticate a provider of the setting.

16. The method of claim 15, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein obtaining a credential comprises:

obtaining the credential in accordance with the first level of security when the state signifies that the device or a portion thereof is powered off.

17. The method of claim 16, wherein obtaining a credential further comprises:

obtaining the credential in accordance with the second level of security when the state signifies that the device is operational.

18. The method of claim 13, wherein establishing a communication with the device comprises:

obtaining access to the device in accordance with a given security policy.

19. The method of claim 18, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein obtaining access to the device comprises:

obtaining access to the device in accordance with the first level of security when the state signifies that the device or a portion thereof is powered off.

20. The method of claim 19, wherein the device includes an interface, wherein detecting a state of a device comprises:

detecting when the interface is inactive, and wherein obtaining access to the device comprises;

obtaining access to the device in accordance with the second level of security when the state signifies that the interface is inactive.

21. A system comprising:

a first device disposed remotely from a radio frequency identification (“

RFID”

) tag that is disposed proximate to and is communicatively coupled to a second device, wherein;

the first device is adapted to (i) detect, via the RFID tag, a state of the second device and (ii) as a result of determining that the state of the device signifies that the second device or a portion thereof is powered off, provide a setting for the second device via the RFID tag,

wherein the RFID tag, using programming code stored in memory within the RFID tag, is configured to prevent setting the setting for the second device unless the second device or a portion thereof is powered off as indicated by the state of the second device detected and determined by the RFID tag.

22. The system of claim 21, wherein the second device is adapted to use the setting during operation.

23. The system of claim 21, wherein the first device is further adapted to (i) establish a first communication with the radio frequency identification (“

RFID”

) tag, (ii) cause the RFID tag to establish a second communication with the second device, and (iii) interrogate the second device to obtain the state.

24. The system of claim 23, wherein the RFID tag is adapted to establish a second communication with the second device.

25. The system of claim 24, further comprising:

a memory disposed proximate to and communicatively coupled to the radio frequency identification (“

RFID”

) tag, wherein the first device is further adapted to (i) cause the RFID tag to establish the second communication with the memory and (ii) interrogate the memory to obtain the state.

26. The system of claim 21, wherein the first device is further adapted to provide, in accordance with a given security policy, a credential to authenticate a provider of the setting.

27. The system of claim 26, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein the first device is adapted to provide the credential in accordance with the first level of security when the state signifies that the second device or a portion thereof is powered off.

28. The system of claim 27, wherein the first device is further adapted to provide the credential in accordance with the second level of security when the state signifies that the second device is operational.

29. The system of claim 21, wherein the radio frequency identification (“

RFID”

) tag is adapted to provide the first device with access to the second device in accordance with a given security policy.

30. The system of claim 29, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein the radio frequency identification (“

RFID”

) tag is adapted to provide the first device with access to the second device in accordance with the first level of security when the state signifies that the second device or a portion thereof is powered off.

31. The system of claim 30, wherein the second device includes an interface, and wherein the radio frequency identification (“

RFID”

) tag is adapted to provide the first device with access to the second device in accordance with the second level of security when the state signifies that the interface is inactive.

32. A method comprising:

receiving, at a first device from a source of electromagnetic energy via a wireless medium, an emission of energy for powering the first device, wherein the first device is adapted to excite a radio frequency identification (“

RFID”

) tag, and wherein the first device has stored thereon a setting for transfer to a second device that is communicatively coupled to the RFID tag;

exciting the RFID tag responsive to receiving the emission of energy;

detecting, via the RFID tag, a state of the second device;

determining, via information provided by the RFID tag, that the state of the second device signifies that the second device or a portion thereof is powered off; and

as a result of determining that the state of the second device signifies that the second device or a portion thereof is powered off, providing the setting for the second device via the RFID tag,

wherein the RFID tag, using programming code stored in memory within the RFID tag, prevents setting the setting for the second device unless the second device or a portion thereof is powered off as indicated by the state of the second device detected and determined by the RFID tag.

33. The method of claim 32, wherein the second device is adapted to use the setting during operation.

34. The method of claim 32, wherein detecting a state of a second device comprises:

establishing a first communication between the first device and the radio frequency identification (“

RFID”

) tag;

establishing a second communication with the second device; and

interrogating the second device to obtain the state.

35. The method of claim 34, wherein establishing a second communication comprises:

establishing the second communication with a memory communicatively coupled to the RFID tag, and wherein interrogating the second device comprises;

interrogating the memory to obtain the state.

36. The method of claim 34, wherein establishing a first communication between the first device and the radio frequency identification (“

RFID”

) tag comprises;

providing, in accordance with a given security policy, a credential to authenticate the first device.

37. The method of claim 36, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein providing a credential comprises:

providing the credential in accordance with the first level of security when the state signifies that the second device or a portion thereof is powered off.

38. The method of claim 37, wherein providing a credential further comprises:

providing the credential in accordance with the second level of security when the state signifies that the second device is operational.

39. The method of claim 34, wherein establishing a second communication comprises:

obtaining access to the second device in accordance with a given security policy.

40. The method of claim 39, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein obtaining access to the device comprises:

obtaining access to the device in accordance with the first level of security when the state signifies that the second device or a portion thereof is powered off.

41. The method of claim 40, wherein the second device includes an interface, wherein detecting a state of a device comprises:

detecting when the interface is inactive, and wherein obtaining access to the device comprises;

obtaining access to the second device in accordance with the second level of security when the state signifies that the interface is inactive.

42. The method of claim 32, further comprising:

receiving, from the source of electromagnetic energy via a wireless medium, a second emission of energy for powering the first device and for providing the setting to the first device for storage thereon.

43. A system comprising:

a source of electromagnetic energy for providing, via a wireless medium, an emission of energy for powering a first device that is proximate to a radio frequency identification (“

RFID”

) tag that is disposed proximate to and is communicatively coupled to a second device, wherein the first device has stored thereon a setting for transfer to the second device, and wherein the first device is adapted to (i) excite the RFID tag responsive to reception of the emission of energy, (ii) detect, via the RFID tag, a state of the second device and (iii) as a result of determining that the state of the second device signifies that the second device or a portion thereof is powered off, provide the setting for the second device via the RFID tag,

wherein the RFID tag, using programming code stored in memory within the RFID tag, is configured to prevent setting the setting for the second device unless the second device or a portion thereof is powered off as indicated by the state of the second device detected and determined by the RFID tag.

44. The system of claim 43, wherein the second device is adapted to use the setting during operation.

45. The system of claim 43, wherein the first device is further adapted to (i) establish a first communication with the radio frequency identification (“

RFID”

) tag, (ii) cause the RFID tag to establish a second communication with the second device, and (iii) interrogate the second device to obtain the state.

46. The system of claim 45, further comprising:

a memory disposed proximate to and communicatively coupled to the radio frequency identification (“

RFID”

) tag, wherein the first device is further adapted to (i) cause the RFID tag to establish the second communication with the memory and (ii) interrogate the memory to obtain the state.

47. The system of claim 45, wherein the first device is further adapted to provide, in accordance with a given security policy, a credential to authenticate the first device.

48. The system of claim 47, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein the first device is adapted to provide the credential in accordance with the first level of security when the state signifies that the second device or a portion thereof is powered off.

49. The system of claim 48, wherein the first device is further adapted to provide the credential in accordance with the second level of security when the state signifies that the second device is operational.

50. The system of claim 45, wherein the radio frequency identification (“

RFID”

) tag is adapted to provide the first device with access to the second device in accordance with a given security policy.

51. The system of claim 50, wherein the given security policy defines first and second levels of security, wherein the first level of security is less secure than the second level of security, and wherein the radio frequency identification (“

RFID”

) tag is adapted to provide the first device with access to the second device in accordance with the first level of security when the state signifies that the second device or a portion thereof is powered off.

52. The system of claim 51, wherein the second device includes an interface, and wherein the radio frequency identification (“

RFID”

) tag is adapted to provide the first device with access to the second device in accordance with the second level of security when the state signifies that the interface is inactive.

53. The system of claim 43, wherein the RFID tag is adapted to establish a second communication with the second device.