Location-aware configuration

• US 8,560,645 B2
• Filed: 01/26/2010
• Issued: 10/15/2013
• Est. Priority Date: 01/27/2009
• Status: Active Grant

• Current Assignee: WatchGuard Technologies Incorporated (Gladiator Corporation)
• Original Assignee: WatchGuard Technologies Incorporated (Gladiator Corporation)
• Inventors: Linden, Thomas, Stults, George, Reams, Gerry, Cattin, Gerard
• Primary Examiner(s): Dalencourt, Yves
• Application Number:
  US12/694,022
• Publication Number:
  US 20100191837A1
• Time in Patent Office: 1,358 Days
• Field of Search: 709/220
• US Class Current: 709/220
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/344 Out-of-band transfers

Abstract

A networking device may operate according to a first configuration profile adapted to cause the device to conform to restrictions applicable within a plurality of different locations. The networking device may obtain a second, location-aware configuration profile, which may include restrictions applicable to the location where the device is deployed. The second, location-aware configuration profile may be provided by a location-aware configuration service responsive to a request from the device. The service may determine a location of the device from the request. The service may identify restrictions applicable within the region the device is located.

Claims

1. A method, comprising:

receiving a request from a networking device for a location-aware configuration profile for the networking device, wherein the networking device is configured to provide networking services to a plurality of client devices in accordance with a first configuration profile configured the networking device to provide the networking services to the plurality client devices in conformance with restrictions of a plurality of different jurisdictions;

determining a location of the networking device using the request;

identifying a restriction that relates to the networking services provided by the networking device to each of the client devices based upon the determined location of the networking device;

generating a location-aware configuration profile for the networking device that is configured to cause the networking device to provide the networking services to each of the plurality of client devices in conformance with the identified restriction; and

providing the location-aware configuration profile to the networking device.

2. The method of claim 1, wherein the networking device is a wireless networking device.

3. The method of claim 1, wherein the restriction relates to a frequency used by the networking device.

4. The method of claim 1, wherein the restriction relates to a channel used by the networking device.

5. The method of claim 1, wherein the restriction relates to a transmission power of the networking device.

6. The method of claim 1, wherein the restriction relates to a transmission mode of the networking device.

7. The method of claim 1, wherein the restriction relates to encryption algorithms used by the networking device with the plurality of client devices.

8. The method of claim 1, wherein the request is associated with an Internet Protocol (IP) address, and wherein the location of the networking device is determined using the IP address.

9. The method of claim 1, wherein the restriction is configured to cause the networking device to comply with a restriction imposed by a country in which the networking device is located.

10. The method of claim 1, wherein the restriction is configured to cause the networking device to comply with a restriction imposed by the country in which the device was manufactured.

11. The method of claim 1, wherein the restriction is configured to cause the networking device to comply with a restriction imposed by an international authority on networking devices operating in the location.

12. The method of claim 1, further comprising determining a globalization parameter based on the location, wherein the location-aware configuration profile includes the globalization parameter.

13. The method of claim 12, wherein the globalization parameter relates to a language used by the networking device.

14. The method of claim 12, wherein the globalization parameter relates to an input layout used by the networking device.

15. The method of claim 1, further comprising determining a privacy restriction based upon the location, wherein the privacy restriction pertains to the service provided to the plurality of client devices.

16. The method of claim 15, wherein the privacy restriction is configured the networking device to perform one of user monitoring and user logging of the plurality of client devices.

17. The method of claim 1, further comprising storing a record of the location of the network device when permitted by a user of the device.

18. A location-aware configuration service, comprising:

a communications interface to receive a request from a networking device for a location-aware configuration profile, wherein the networking device is configured to provide networking services to two or more client devices in a default configuration configured the networking device to provide the networking services to the two or more client devices in accordance with restrictions of a plurality of different jurisdictions; and

a non-transitory computer-readable storage medium comprising a location-aware data store, the location-aware data store comprising configuration profile data configured the networking device to provide the networking services to each of the two or more client devices in conformance with a plurality of different restrictions, each restriction being associated with a respective jurisdiction;

wherein the location-aware configuration service is configured to determine a location of the networking device using the request, to identify configuration profile data from the location-aware data store based upon the location of the networking device, to generate a location-aware configuration profile for the networking device that is configured to cause the networking device to provide the networking services to each of the two or more client devices in conformance with a selected restriction of the identified configuration profile data, and to transmit the configuration profile to the networking device using the communications interface.

19. The location-aware configuration service of claim 18, wherein the location-aware configuration service is configured to determine the location of the networking device using an Internet Protocol (IP) address associated with the request.

20. The location-aware configuration service of claim 18, wherein the networking device comprises a wireless transmitter, and wherein the selected restriction relates to a frequency used by the networking device.

21. The location-aware configuration service of claim 18, wherein the networking device comprises a wireless transmitter, and wherein the selected restriction relates to transmission power of the networking device.

22. The location-aware configuration service of claim 18, wherein the network device comprises a wireless transmitter, and wherein the selected restriction relates to transmission modes of the networking device.

23. The location-aware configuration service of claim 18, wherein the restriction is configured to cause the networking device to comply with a restriction imposed by an authority having jurisdiction over the location of the networking device.

24. The location-aware configuration service of claim 18, wherein the restriction is configured to cause the networking device to comply with a restriction imposed by an authority having jurisdiction over a provider of the networking device.

25. The location-aware configuration service of claim 18, wherein the location-aware configuration profile includes a globalization parameter selected using the location of the networking device.

26. The location-aware configuration service of claim 18, wherein the globalization parameter relates to a language used by the networking device.

27. The location-aware configuration service of claim 18, wherein the location-aware configuration service is configured to store a record of the request comprising an identifier of the networking device and the location of the networking device.

28. A non-transitory computer-readable storage medium comprising instructions configured to cause a computing device to perform a method, comprising:

receiving a request from a networking device for a location-aware configuration profile for the networking device, wherein the networking device is configured to provide networking services to a plurality of client devices in accordance with a first configuration profile configured the networking device to provide the networking services to the client devices in conformance with restrictions of a plurality of different jurisdictions;

determining a location of the networking device using the request;

identifying a restriction that relates to the networking services provided by the networking device to each of the client devices based upon the determined location of the networking device;

generating a location-aware configuration profile for the networking device that is configured to cause the networking device to provide the networking services to each of the plurality of client devices in conformance with the identified restriction; and

providing the location-aware configuration profile to the networking device.

29. The non-transitory computer-readable storage medium of claim 28, wherein the restriction relates to an encryption feature of the networking device.

30. The non-transitory computer-readable storage medium of claim 28, wherein the device is a wireless networking device, and wherein the restriction relates to a transmission power of the networking device.

31. The non-transitory computer-readable storage medium of claim 28, wherein the device is a wireless networking device, and wherein the restriction defines which channels may be used by the networking device.

32. The non-transitory computer-readable storage medium of claim 28, wherein the request is associated with an Internet Protocol (IP) address, and wherein the location of the networking device is determined using the IP address.

33. The non-transitory computer-readable storage medium of claim 28, wherein the restriction is configured to cause the networking device to comply with a restriction imposed by the country in which the networking device is located.

34. The non-transitory computer-readable storage medium of claim 28, wherein the restriction is configured to cause the networking device to comply with a restriction imposed by the country in which the networking device was manufactured.

35. The non-transitory computer-readable storage medium of claim 28, wherein the restriction is configured to cause the networking device to comply with a restriction imposed by an international authority to networking devices operating in the determined location.

36. The non-transitory computer-readable storage medium of claim 28, further comprising determining a globalization parameter based on the location, wherein the location-aware configuration profile includes the globalization parameter.

37. The non-transitory computer-readable storage medium of claim 34, wherein the globalization parameter relates to a language used by the networking device.

38. The non-transitory computer-readable storage medium of claim 35, wherein the globalization parameter relates to an input layout used by the networking device.

39. The non-transitory computer-readable storage medium of claim 28, further comprising:

determining a privacy setting based upon the location, wherein the privacy setting pertains to the service provided to the one or more client devices.

40. A method for operating a networking device deployed at a location, comprising:

providing networking services to a plurality of client devices according to a first configuration profile, the first configuration profile configured to cause the networking device to provide the networking services to each of the plurality of client devices in conformance with restrictions of a plurality of different jurisdictions;

transmitting a request for a location-aware configuration profile for the networking device on a network;

receiving a second, location-aware configuration profile responsive to the request; and

providing the networking services to the plurality of client devices in conformance with the second, location-aware configuration profile, wherein the second, location-aware configuration profile is configured to cause the networking device to provide the networking services to each of the plurality of client devices in conformance with restrictions of a single jurisdiction.

41. The method of claim 40, wherein the request comprises an identifier of the networking device.

42. The method of claim 40, further comprising:

authenticating the second location-aware configuration profile wherein the networking device is operated using the second location-aware configuration profile when the second location-aware configuration profile is authenticated.

43. The method of claim 42, furthering comprising authenticating the second location-aware configuration profile using a digital signature of the second location-aware configuration profile.

44. The method of claim 40, wherein the second location-aware configuration profile determines a user interface language of the networking device.

45. The method of claim 40, wherein the second location-aware configuration profile is configured to cause the networking device to conform to a restriction imposed by an authority having jurisdiction over networking devices operating in a particular location.

46. The method of claim 45, wherein the second location-aware configuration profile is configured to cause the networking device to conform to a restriction imposed by an authority having jurisdiction over a provider of the networking device.