Location-aware configuration

• US 9,444,682 B2
• Filed: 10/14/2013
• Issued: 09/13/2016
• Est. Priority Date: 01/27/2009
• Status: Active Grant

• Current Assignee: WatchGuard Technologies Incorporated (Gladiator Corporation)
• Original Assignee: WatchGuard Technologies Incorporated (Gladiator Corporation)
• Inventors: Linden, Thomas, Stults, George, Reams, Gerry, Cattin, Gerard
• Primary Examiner(s): Dalencourt, Yves
• Application Number:
  US14/053,485
• Publication Number:
  US 20140059188A1
• Time in Patent Office: 1,065 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/344 Out-of-band transfers

Abstract

A networking device may operate according to a first configuration profile adapted to cause the device to conform to restrictions applicable within a plurality of different locations. The networking device may obtain a second, location-aware configuration profile, which may include restrictions applicable to the location where the device is deployed. The second, location-aware configuration profile may be provided by a location-aware configuration service responsive to a request from the device. The service may determine a location of the device from the request. The service may identify restrictions applicable within the region the device is located.

Claims

1. A method, comprising:

configuring a networking device to provide networking services to a plurality of client devices in accordance with a first profile, wherein the first profile is configured to cause the networking device to provide the networking services to the plurality of client devices in conformance with restrictions of a plurality of different jurisdictions;

receiving a second, location-specific profile from a configuration service via a network, wherein the second, location-specific profile is configured to cause the networking device to provide the networking services to the plurality of client devices in conformance with restrictions of one of the plurality of different jurisdictions; and

providing networking services to the plurality of client devices in accordance with the second, location-specific profile.

2. The method of claim 1, further comprising transmitting a request for the second, location-specific profile to the configuration service via the network, wherein the configuration service is configured to determine a deployment location of the networking device based on the transmitted request.

3. The method of claim 2, further comprising accessing a preconfigured addressing information of the configuration service stored on a non-volatile storage medium of the networking device.

4. The method of claim 2, further comprising authenticating the second, location-specific profile by use of a credential stored on a non-volatile storage medium of the networking device.

5. The method of claim 2, wherein the configuration service is configured to identify a jurisdiction corresponding to the deployment location of the networking device.

6. The method of claim 1, wherein the networking device is a wireless networking device, and wherein a restriction of the second, location-aware profile pertains to one or more of a frequency used by the networking device, a channel used by the networking device, a transmission power of the networking device, and a transmission mode of the networking device.

7. The method of claim 1, wherein a restriction of the second, location-specific profile pertains to an encryption algorithm used by the networking device.

8. The method of claim 1, wherein a restriction of the second, location-specific profile corresponds to a restriction imposed by a country in which the networking device is deployed.

9. The method of claim 1, wherein a restriction of the second, location-specific profile pertains to a privacy restriction pertaining to information gathered by the networking device relating to the plurality of client devices.

10. The method of claim 1, wherein a restriction of the second, location-specific profile pertains to logging user activity on the networking device.

11. The method of claim 1, wherein a restriction of the second, location-specific profile pertains to reporting user activity performed on the networking device.

12. The method of claim 1, wherein a restriction of the second, location-specific profile pertains to monitoring user activity on the networking device.

13. A non-transitory computer-readable storage medium comprising executable instructions configured to cause a computing device to perform operations, comprising:

providing networking services to two or more client devices in conformance with restrictions of a plurality of different jurisdictions;

receiving a location-specific profile from a configuration service through a network, wherein the location-specific profile is configured to cause a networking device to provide the networking services to the client devices in conformance with restrictions corresponding to a selected one of the plurality of different jurisdictions; and

providing networking services to the client devices in accordance with the location-specific profile and in conformance with the restrictions corresponding to the selected jurisdiction by use of the networking device.

14. The non-transitory computer-readable storage medium of claim 13, the operations further comprising transmitting a request for the location-specific profile by use of the network.

15. The non-transitory computer-readable storage medium of claim 14, the operations further comprising accessing an address of the configuration service stored in a storage medium.

16. The non-transitory computer-readable storage medium of claim 13, the operations further comprising authenticating the location-specific profile by use of a credential stored on a storage medium of the networking device.

17. The non-transitory computer-readable storage medium of claim 13, wherein the configuration service is configured to determine a deployment location of the networking device based on the transmitted request.

18. The non-transitory computer-readable storage medium of claim 13, wherein the networking device is a wireless networking device, and wherein a restriction corresponding to the selected jurisdiction relates to one or more of a frequency used by the networking device, a channel used by the networking device, a transmission power of the networking device, and a transmission mode of the networking device.

19. The non-transitory computer-readable storage medium of claim 13, wherein a restriction corresponding to the selected jurisdiction relates to one or more of an encryption algorithm used by the networking device and a privacy setting of the networking device.

20. The non-transitory computer-readable storage medium of claim 13, wherein a restriction corresponding to the selected jurisdiction comprises a directive pertaining to logging user activity on the networking device.

21. The non-transitory computer-readable storage medium of claim 13, wherein a restriction corresponding to the selected jurisdiction comprises a directive pertaining to reporting user activity on the networking device.

22. The non-transitory computer-readable storage medium of claim 13, wherein a restriction corresponding to the selected jurisdiction comprises a directive pertaining to monitoring user activity on the networking device.

23. The non-transitory computer-readable storage medium of claim 13, wherein a restriction corresponding to the selected jurisdiction pertains to information gathered by the networking device relating to the plurality of client devices.

24. The non-transitory computer-readable storage medium of claim 13, wherein a restriction corresponding to the selected jurisdiction comprises a restriction imposed by one of a country in which the networking device is deployed, and an international authority.

25. An apparatus, comprising:

a networking device comprising an interface to a network; and

a storage medium of the networking device configured to store a first profile, wherein the networking device is configured to provide networking services to one or more client devices in accordance with the first profile, and wherein the first profile is configured to cause the networking device to provide the networking services to the client devices in conformance with restrictions of a plurality of different jurisdictions,

wherein the networking device is configured to receive a second, location-aware profile via the network, wherein the second, location-aware profile is configured to cause the networking device to provide the networking services to the client devices in conformance with restrictions of a particular jurisdiction, and

wherein the networking device is configured to provide networking services to the client devices in accordance with the second, location-aware profile and in conformance with the restrictions of the particular jurisdiction.

26. The apparatus of claim 25, wherein the networking device is configured to transmit a request for the second, location-aware profile to a configuration server by use of the network.

27. The apparatus of claim 26, wherein the networking device comprises a computer-readable storage medium configured to store information pertaining to the configuration server, and wherein the networking device is configured to transmit the request using the stored information.

28. The apparatus of claim 27, wherein the networking device is configured to authenticate the second, location-aware profile by use of the stored information pertaining to the configuration server.

29. The apparatus of claim 25, wherein a restriction of the particular jurisdiction corresponds to one or more of a transmission frequency of the networking device, a transmission channel of the networking device, a transmission power of the networking device, and an encryption algorithm used by the networking device.

30. The apparatus of claim 25, wherein the second, location-aware profile comprises a language parameter for the networking device, and wherein the networking device is configured to provide information to a user in accordance with the language parameter.

31. The apparatus of claim 25, wherein a restriction of the particular jurisdiction comprises a restriction that relates to logging user activity on the networking device.

32. The apparatus of claim 25, wherein a restriction of the particular jurisdiction comprises a restriction that relates to reporting user activity on the networking device.

33. The apparatus of claim 25, wherein a restriction of the particular jurisdiction comprises a restriction that relates to monitoring user activity on the networking device.

34. The apparatus of claim 25, wherein the networking device is configured to receive an updated location-aware profile corresponding to updated restrictions of the particular jurisdiction, and wherein the networking device is configured to provide networking services to the client devices in conformance with the updated restrictions.

35. A system, comprising:

a networking device configured to provide networking services to a plurality of users at a deployment location in accordance with a first set of restrictions, wherein the first set of restrictions correspond to restrictions of two or more different jurisdictions,

wherein the networking device is configured to receive a location-specific configuration from a configuration service in response to a request transmitted to the configuration service by the networking device, wherein the location-specific configuration is configured to cause the networking device to provide networking services in accordance with a second, different set of restrictions corresponding to restrictions of a selected one of the two or more different jurisdictions, and

wherein the networking device is configured to provide networking services to the plurality of users at the deployment location in accordance with the second, different set of restrictions corresponding to the selected jurisdiction.

36. The system of claim 35, wherein the networking device is configured to authenticate the second, location-specific profile.

37. The system of claim 35, wherein the networking device comprises a non-transitory storage medium comprising stored information pertaining to the configuration service, and wherein the networking device is configured to transmit the request by use of the stored information.

38. The system of claim 37, wherein the stored information pertaining to the configuration service comprises a network address of the configuration service.

39. The system of claim 37, wherein the stored information pertaining to the configuration service comprises a certificate of the configuration service.

40. The system of claim 37, wherein the networking device is configured to authenticate the second, location-specific profile by use of the stored information pertaining to the configuration service.

41. The system of claim 35, wherein the networking device is configured to receive an updated location-specific profile from the configuration service, the updated location-specific profile comprising a third, different set of restrictions corresponding to the selected jurisdiction, and wherein the networking device is configured to provide networking services to the plurality of users at the deployment location in accordance with the third, different set of restrictions.

42. The system of claim 35, wherein the second, different set of restrictions includes a restriction pertaining to logging user activity on the networking device.

43. The system of claim 35, wherein the second, different set of restrictions includes a restriction pertaining to reporting user activity on the networking device.

44. The system of claim 35, wherein the second, different set of restrictions includes a restriction pertaining to monitoring user activity on the networking device.