Automatic provisioning of authentication credentials

• US 9,077,544 B2
• Filed: 09/15/2009
• Issued: 07/07/2015
• Est. Priority Date: 09/15/2009
• Status: Expired due to Fees

• Current Assignee: Welch Allyn Incorporated
• Original Assignee: Welch Allyn Incorporated
• Inventors: Baker, Steven D., Petersen, Eric G.
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US12/560,304
• Publication Number:
  US 20110067092A1
• Time in Patent Office: 2,121 Days
• Field of Search: 726/6, 726/26, 726/5, 713/156, 713/171, 709/220
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Methods and systems of automatically provisioning authentication credentials on a plurality of network devices. The method may include determining a process for provisioning the authentication credentials for the plurality of devices. The process may include steps of gaining access to a network device, entering a command to reach a network service interface associated to the network device, indicating a location of the authentication credentials, and initiating installation of the authentication credentials. The method may also include providing a computer program to follow the process. The computer program may be a script that is automatically executed without a user intervention. The method may further include developing a list of the plurality of devices that need to be provisioned, associating the list of the plurality of devices to the computer program, executing the computer program for each device, and outputting whether each of the plurality of network devices has a successful authentication credential update.

Claims

1. A method of automatically provisioning authentication credentials on a plurality of network devices, comprising:

automatically obtaining a list of network devices that need to be provisioned with authentication credentials allowing the network devices to attach to a network, one or more of the network devices being medical devices configured to measure physiological data associated with a patient,

wherein one or more of the authentication credentials are authentication certificates or pre-shared keys;

identifying one or more classes of network devices from the list of network devices that need to be provisioned with authentication credentials;

mapping each identified class of network device to a script or subroutine of a computer program; and

executing the script or subroutine for each mapped class of network device to automatically provision the authentication credentials for the plurality of network devices to allow the network devices to attach to and access resources on the network,

wherein each network device that is provisioned for an identified class of network devices is provisioned by executing a same script or subroutine that is mapped to the identified class of network device, and

wherein the script or subroutine for a network device of the identified class of network devices includes;

automating authentication to access the network device by performing a query involving a mapping of an Internet Protocol address to a Media Access Control address; and

uploading at least one of the authentication certificates to the network device upon authentication.

2. The method of claim 1, wherein the computer program is automatically executed without user intervention.

3. The method of claim 1, further comprising steps of:

gaining access to a network device;

entering a command to reach a network service interface associated to the network device;

indicating a location of the authentication credentials; and

initiating installation of the authentication credentials.

4. The method of claim 1, wherein applying the computer program includes:

associating the plurality of network devices to the computer program through a database or data file; and

executing the computer program for each device.

5. The method of claim 1, further comprising outputting to a display, report, database, or data file whether the plurality of network devices have a successful authentication credential update or not.

6. The method of claim 1, wherein the plurality of network devices include multiple different types of network devices.

7. The method of claim 6, wherein provisioning authentication credentials includes provisioning authentication credentials on the multiple different types of network devices having different authentication credentials.

8. The method of claim 1, wherein the plurality of network devices are wireless network devices.