Secure network deployment

• US 9,264,422 B2
• Filed: 04/08/2014
• Issued: 02/16/2016
• Est. Priority Date: 08/18/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Nedeltchev, Plamen, Bell, Robert T., Pritikin, Max
• Primary Examiner(s): Henderson, Esther B
• Application Number:
  US14/248,065
• Publication Number:
  US 20140223530A1
• Time in Patent Office: 679 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 67/303 Terminal profiles

Abstract

In one embodiment, a Manufacturer Installed Certificate (MIC) and a personal identification number are sent to a call controller to request a configuration profile. When the configuration file is received, the IP phone is provisioned according to the configuration profile.

Claims

1. An apparatus comprising:

a non-volatile memory containing a manufacturer installed certificate that includes an address for the apparatus and a model number for the apparatus; and

logic encoded in one or more tangible media for execution and when executed operable to;

generate a message including a unique identification number;

digitally sign message using the manufacturer installed certificate that contains the address for the apparatus;

receive a configuration profile for the apparatus in response to the message, the configuration profile containing a locally significant certificate; and

configure the apparatus with the configuration profile.

2. The apparatus of claim 1 wherein the logic is further operable to automatically request the unique identification number in response to the apparatus being connected to a packet switched network.

3. The apparatus of claim 1 wherein the logic is further operable to create an XML signature using a private key corresponding to a public key located in the manufacturer installed certificate.

11. The apparatus of claim 1, wherein the model number is for an internet protocol (IP) phone.

4. A method comprising:

generating a message including a unique identification number based in part on a model number of an internet protocol (IP) phone;

signing digitally the message using the manufacturer installed certificate that contains the address for the IP phone;

receiving a configuration profile for the IP phone in response to the unique identification number matching the configuration profile, the configuration profile containing a locally significant certificate; and

configuring the IP phone with the configuration profile.

5. The method of claim 4, further comprising:

automatically requesting the unique identification number in response to the IP phone being connected to a packet switched network.

6. The method of claim 4, further comprising:

creating an XML signature using a private key corresponding to a public key located in the manufacturer installed certificate.

7. A method comprising:

storing a manufacturer installed unique value containing a local address;

generating a message including a user-entered unique identifier;

attaching the manufacturer installed unique value containing the local address to the generated message;

receiving a configuration profile for the IP phone; and

configuring the apparatus with the configuration profile,

wherein the manufacturer installed unique value contains a model number for the IP phone.

8. The method of claim 7, wherein the manufacturer installed unique value contains a field identifying a manufacturer of the IP phone.

9. The method of claim 7, wherein the manufacturer installed unique value contains an algorithm field that identifies an algorithm for validating the manufacturer installed unique value.

10. The method of claim 7, wherein the manufacturer installed unique value includes a valid form field.