Configuring networks in client computing devices

• US 8,655,993 B1
• Filed: 10/07/2011
• Issued: 02/18/2014
• Est. Priority Date: 10/07/2011
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Mixter, Kenneth Edward
• Primary Examiner(s): Cheema, Umar
• Application Number:
  US13/269,528
• Time in Patent Office: 865 Days
• Field of Search: 709220-223, 726/2, 726/3, 726/5, 713/161, 713/170, 713/176
• US Class Current: 709/221
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Systems and methods for configuring network settings in a client computing device are provided. In some aspects, a method includes receiving a network configuration file including network settings for connecting to one or more networks and a signature. The method also includes authenticating the network configuration file based on the signature. The method also includes updating a network configuration of the client computing device with the network settings from the authenticated network configuration file.

Claims

1. A computer-implemented method for configuring network settings in a client computing device, the method comprising:

receiving a network configuration file comprising network settings for connecting to one or more networks and a signature, wherein the network settings comprise first settings for a first network for generating a first configuration for the first network, wherein, within the network configuration file, the first network is identified by a first network identifier;

authenticating the network configuration file based on the signature; and

updating a network configuration of the client computing device for the first network identified by the first network identifier with the network settings from the authenticated network configuration file, wherein the network configuration file does not include instructions regarding updating the network configuration of the client computing device, wherein at least a portion of the network configuration of the client computing device is stored within a secure network configuration storage module, and wherein the secure network configuration storage module is incapable of being modified or incapable of being copied by an end-user of the client computing device and is updatable with the network settings from the authenticated network configuration file.

2. The method of claim 1, wherein the network configuration file comprises a new network configuration for the one or more networks.

3. The method of claim 1, wherein the network configuration file comprises a change to the network configuration of the client computing device for the at least one of the one or more networks.

4. The method of claim 1, wherein the network configuration file comprises an indication that a network configuration of the client computing device for the at least one of the one or more networks is to be deleted.

5. The method of claim 1, wherein the network configuration file comprises a unique identifier identifying at least one of the one or more networks.

6. The method of claim 1, further comprising determining that the network configuration file is available.

7. The method of claim 6, wherein determining that the network configuration file is available comprises:

sending a request for the network configuration file; and

receiving a response that the network configuration file is available.

8. The method of claim 7, wherein the request for the network configuration file is sent upon detecting a new network.

9. The method of claim 7, wherein the request for the network configuration file is sent upon determining that no request for the network configuration file has been sent within a time period.

10. The method of claim 1, wherein the network configuration file comprises a certificate for connecting to at least one of the one or more networks.

11. The method of claim 1, wherein the network configuration file is associated with a virtual private network (VPN), wherein the network configuration of the client computing device comprises an identifier for a VPN type or an identifier for a VPN host.

12. The method of claim 1, wherein the network configuration file is associated with a WiFi network, wherein the network configuration of the client computing device comprises one or more of a service set identifier (SSID), a network password, an autoconnect setting, a security setting or an extensible authentication protocol (EAP) object.

13. A non-transitory computer-readable medium for configuring network settings in a client computing device, the computer-readable medium comprising instructions that, when executed by a computer, cause the computer to:

receive a network configuration file comprising network settings for connecting to a network, wherein the network settings comprise first settings for a first network for generating a first configuration for the first network, wherein, within the network configuration file, the first network is identified by a first network identifier;

authenticate the network configuration file; and

update a network configuration of the computer for the first network identified by the first network identifier with the network settings from the authenticated network configuration file, wherein the network configuration file does not include instructions regarding updating the network configuration of the client computing device, wherein at least a portion of the network configuration of the client computing device is stored within a secure network configuration storage module, and wherein the secure network configuration storage module is incapable of being modified or incapable of being copied by an end-user of the client computing device and is updatable with the network settings from the authenticated network configuration file.

14. A computer-implemented method for providing network settings to a client computing device, the method comprising:

receiving at least one identifier associated with at least one client computing device and network settings for connecting to one or more networks, wherein the network settings comprise first settings for a first network for generating a first configuration for the first network;

generating a network configuration file comprising the network settings and a signature for authenticating the network configuration file, wherein, within the network configuration file, the first network is identified by a first network identifier; and

transmitting the network configuration file to the at least one client computing device, wherein the network configuration file does not include instructions regarding updating a network configuration of the at least one client computing device, wherein at least a portion of the network configuration of the at least one client computing device is stored within a secure network configuration storage module of the at least one client computing device, and wherein the secure network configuration storage module is incapable of being modified or incapable of being copied by an end-user of the at least one client computing device and is updatable with the network settings from the authenticated network configuration file.

15. The method of claim 14, wherein transmitting the network configuration file to the at least one client computing device comprises pushing the network configuration file to the at least one client computing device.

16. The method of claim 14, wherein the at least one identifier is associated with an end-user, wherein the end-user is associated with the at least one client computing device.

17. A system comprising:

a receiver configured to receive a network configuration file comprising network settings for connecting to one or more networks, wherein the network settings comprise first settings for a first network for generating a first configuration for the first network, wherein, within the network configuration file, the first network is identified by a first network identifier;

a signature verification engine configured to authenticate the network configuration file based on a signature associated with the network configuration file; and

a network configuration update engine configured to update a network configuration of a computer for the one or more networks with the network settings from the authenticated network configuration file, wherein the network configuration file does not include instructions regarding updating the network configuration of the computer, wherein at least a portion of the network configuration of the computer is stored within a secure network configuration storage module, and wherein the secure network configuration storage module is incapable of being modified or incapable of being copied by an end-user of the computer and is updatable with the network settings from the authenticated network configuration file.

18. The system of claim 17, wherein one or more of the signature verification engine or the network configuration update engine is implemented in software.