Cloud-based firmware distribution service

• US 9,015,694 B2
• Filed: 03/14/2013
• Issued: 04/21/2015
• Est. Priority Date: 10/31/2012
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Aruba Networks Incorporated (Hewlett-Packard Enterprise Company)
• Inventors: Gray, Gordon Paul, Burke, Anthony, Munro, David, Liu, Yan, Crovo, Derek
• Primary Examiner(s): Rampuria, Satish
• Application Number:
  US13/829,173
• Publication Number:
  US 20140123124A1
• Time in Patent Office: 768 Days
• Field of Search: 717168-178
• US Class Current: 717/170
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories

Abstract

According to one embodiment of the invention, a method for altering stored firmware within a network device comprises receiving, by a first network device, information to download firmware. This information is provided from the first network device to at least a second network device, which is communicatively coupled to the first network device. The information enables the second network device to access a second version of firmware different than a first version of firmware installed on the second network device.

Claims

1. A method comprising:

sending, by a first network device, information regarding a first version of firmware installed on the first network device to one or more servers,

receiving, by the first network device, information to download firmware from the one or more servers, the information to download firmware including one or more uniform resource locators (URLs) providing access to a second version of the firmware for loading on the first network device, the second version of the firmware being different from the first version of firmware installed on the first network device; and

in response to receiving the information to download firmware by the first network device that is operating as a virtual control device for a second network device,

downloading, by the first network device, the second version of the firmware that is different than the first version of the firmware installed on the first network device,

providing, by the first network device, the downloaded second version of the firmware to the second network device when the second network device is a same device type as the first network device, and

providing, by the first network device, the information to download firmware to the second network device when the second network device is a different device type than the first network device, the information to download firmware enabling the second network device to access a second version of firmware for the different device type than the first network device directly from the one or more servers.

2. The method of claim 1, wherein the one or more URLs providing access to one or more firmware images including a firmware image of the second version of the firmware, each URL corresponds to a firmware image associated with a different type of network device.

3. The method of claim 1, wherein prior to receiving the information to download firmware, the method further comprises

in response to a triggering event, posting a message including information that identifies the first firmware version loaded on the first network device and information that identifies the first network device;

responding to a challenge initiated by the one or more servers to authenticate the first network device.

4. The method of claim 3, wherein the triggering event comprises a change in responsibility for the first network device, the change in responsibility includes (i) assigning of the first network device as the virtual control device or (ii) the second network device joining as one or more subordinate network devices to which the first network device forwards firmware updates received from the one or more servers.

5. The method of claim 3, wherein triggering event comprises a time-based event in which a predetermined amount of time has elapsed from an update of the first version of the firmware by the first network device.

6. The method of claim 1, wherein the second version of the firmware is either (i) an earlier version than the first version of the firmware installed on the second network device or (ii) a more recent version than the first version of the firmware installed on the second network device.

7. The method of claim 1, wherein prior to receiving the information to download the firmware, the method further comprising:

transmitting keying material identifying the second version of the firmware installed on the second network device to the one or more servers providing a cloud-based service.

8. The method of claim 1, wherein prior to receiving the information to download the firmware, the method further comprising:

detecting, by the first network device, the second network device recently joining a cluster of network devices controlled by the first network device, each network device of the cluster supporting the second version of the firmware and the second network device installed with the first version of the firmware;

transmitting, by the first network device, keying material identifying the second version of the firmware to the one or more servers providing a cloud-based service;

receiving, by the first network device, the information to download the second version of the firmware.

9. The method of claim 8, wherein the first network device further transmitting to the one or more servers providing the cloud-based service one or more of (i) a serial number for the first network device, (ii) a media access control (MAC) address for the first network device, and (iii) a part number.

11. The method of claim 1, wherein the one or more URLs associated with the information to download firmware comprises information to identify one or more storage locations for accessing a firmware image of the second version of the firmware.

10. A network device comprising:

a processor; and

a memory coupled to the processor, the memory including firmware update logic that, when executed by the processor, causes the network device to perform one or more operations that comprise;

sending information regarding a first version of firmware installed on the network device to an external source,

receiving information to download firmware from the external source, the information to download firmware including one or more uniform resource locators (URLs) providing access to a second version of the firmware for loading on the network device, the second version of the firmware being different from the first version of firmware installed on the network device, and

in response to receiving the information to download firmware by the network device operating as a virtual control device for a second network device,

downloading the second version of the firmware that is different from the first version of the firmware installed on the network device,

providing the downloaded second version of the firmware to the second network device when the second network device is a same device type as the network device, and

providing the information to download firmware to the second network device when the second network device is a different device type than the network device, the information to download firmware enabling the second network device to access a second version of firmware for the different device type than the network device directly from the one or more servers.

12. The system of claim 10, wherein the device type is an Access Point.

13. The network device of claim 10, wherein the one or more URLs providing access to one or more firmware images including a firmware image of the second version of the firmware, each URL corresponds to a firmware image associated with a different type of network device.

14. The network device of claim 10, wherein the firmware update logic further perform operations comprising:

prior to receiving the information to download the firmware, in response to a triggering event, posting a message including information that identifies the first firmware version loaded on the network device and information that identifies the network device; and

responding to a challenge initiated by the one or more servers to authenticate the network device.

15. The network device of claim 14, wherein the triggering event comprises either (1) a time-based event in which a predetermined amount of time has elapsed from loading of the first version of the firmware on the network device.

16. The network device of claim 10, wherein the second version of the firmware is an earlier version than the first version of the firmware installed on the second network device.

17. The network device of claim 14, wherein the-triggering event comprises a change in responsibility for the network device, the change in responsibility includes (i) assigning of the network device as the virtual control device or (ii) the second network device joining as one or more subordinate network devices to which the network device forwards firmware updates received from the one or more servers.

18. The network device of claim 10, wherein the firmware update logic, when executed by the processor, causes the network device to perform one or more operations further comprising:

prior to receiving the information to download the firmware, transmitting keying material identifying the second version of the firmware installed on the second network device to the one or more servers providing a cloud-based service.

19. The network device of claim 10, wherein the firmware update logic, when executed by the processor, causes the network device to perform one or more operations further comprising:

prior to receiving the information to download the firmware, detecting the second network device recently joining a cluster of network devices controlled by the network device, each network device of the cluster of network devices supporting the second version of the firmware and the second network device installed with the first version of the firmware;

transmitting keying material identifying the second version of the firmware to the one or more servers providing a cloud-based service; and

receiving the information to download the second version of the firmware.

20. The network device of claim 19, wherein the firmware update logic, when executed by the processor, causes the network device to perform one or more operations further comprising:

transmitting to the one or more servers providing the cloud-based service one or more of (i) a serial number for the network device, (ii) a media access control (MAC) address for the network device, and (iii) a part number.

21. The network of claim 10, wherein the one or more URLs associated with the information to download firmware comprises information to identify one or more storage locations for accessing a firmware image of the second version of the firmware.

22. A system comprising:

one or more servers that provide a cloud-based firmware distribution service by receiving a request for firmware and providing information to enable retrieval of a particular version of firmware for at least multiple types of network; and

a first network device communicatively coupled to the one or more servers and operating as a virtual control device for a second network device, the first network device comprises a processor, a memory, and a communication interface that collectively operate to (i) send information regarding a first version of firmware installed on the first network device to the one or more servers, (ii) receive information to download firmware including one or more uniform resource locators (URLs) providing access to a second version of the firmware, and (iii) responsive to receiving the information, (a) downloading the second version of the firmware that is different from the first version of the firmware installed on the first network device, (b) providing the downloaded second version of the firmware to the second network device when the second network device is a same device type as the first network device, and (c) providing the information to at least the second network device when the second network device is a different device type than the first network device, the information enabling the second network device to access a second version of the firmware for the different device type directly from the one or more servers.

23. The system of claim 22, wherein the one or more URLs providing access to one or more firmware images, each URL corresponds to a firmware image associated with at least a different type of network device.

24. The system of claim 22, wherein the one or more URLs associated with the information to download firmware are received by the first network device and comprise information to identify one or more storage locations for accessing a firmware image of the second version of the firmware.