Policy distribution point for setting up network-based services
View Patent ↗A “policy distribution point” (PDP) allows service drivers to be installed remotely and automatically without rebooting the PDP or otherwise interrupting existing network-based services. The exposure of sensitive configuration data to non-secure networks is minimized by placing PDPs close to the devices to be configured. Service drivers on the PDP can be reused to configure multiple devices of the same type. The PDP receives an “activation” and uses a service driver on the PDP to translate the activation into “device-specific instructions.” The device-specific instructions are sent to a device and configure the device to set up the network-based service. One or more PDPs can be used to configure both computing device and networking devices to provide a single service.
1. A method comprising:
(a) adding a service driver to a policy distribution point;
(b) receiving an activation;
(c) translating the activation into device-specific instructions using the added service driver, wherein the device is a networking device;
(d) sending the device-specific instructions to said device, the device-specific instructions configuring the device to set up a network-based service;
(e) adding a second service driver to the policy distribution point;
(f) receiving a second activation;
(g) translating the second activation into second device-specific instructions using the second service driver; and,
(h) sending the second device-specific instructions to a computing device, wherein both the networking device and the computing device are configured to set up the network-based service.
2. The method of claim 1 , wherein the activation is translated by the added service driver from XML into the device-specific instructions.
3. The method of claim 1 , wherein the activation includes both a first configuration parameter related to a network-based service and a second configuration parameter related to a user.
4. The method of claim 3 , wherein the first configuration parameter is taken from the group consisting of: a quality of service, an access mechanism, a device IP address, a device location, a physical port, a connection speed and a required bandwidth.
5. The method of claim 3 , wherein the second configuration parameter is taken from the group consisting of: a username, a password and an IP address of a computer used by the user.
6. The method of claim 1 , wherein the device-specific instructions are sent from the policy distribution point to the device without passing over the internet.
7. The method of claim 1 , wherein the policy distribution point contains an existing service driver, the method further comprising:
(d) sending the device-specific instructions to a first device, the device-specific instructions configuring the first device to set up a network-based service;
(e) using the existing service driver to translate a second activation into second device-specific instructions; and
(f) sending the second device-specific instructions to a second device, the second device-specific instructions configuring the second device to set up the network-based service, wherein both the first device and the second device are used to provide the network-based service to the user.
8. The method of claim 1 , wherein the policy distribution point has a predefined interface for service drivers, the predefined interface facilitating installation of the added service driver into the policy distribution point at run time while the policy distribution point is running.
9. The method of claim 8 , wherein the policy distribution point is not a monolithic policy distribution point, but rather is a modular policy distribution point comprising a service driver infrastructure portion and one or more service drivers.
10. A computer-readable medium having computer-executable instructions for performing steps comprising:
(a) adding a service driver to a policy distribution point;
(b) receiving an activation;
(c) translating the activation into device-specific instructions using the added service driver, wherein the device is a networking device;
(d) sending the device-specific instructions to said device, the device-specific instructions configuring the device to set up a network-based service;
(e) adding a second service driver to the policy distribution point;
(f) receiving a second activation;
(g) translating the second activation into second device-specific instructions using the second service driver; and,
(h) sending the second device-specific instructions to a computing device, wherein both the networking device and the computing device are configured to set up the network-based service.
11. The computer-readable medium of claim 10 , wherein the activation is translated by the added service driver from XML into the device-specific instructions.
12. The computer-readable medium of claim 10 , wherein the policy distribution point has a predefined interface for service drivers, the predefined interface facilitating installation of the added service driver into the policy distribution point while the policy distribution point is running.
13. A system for setting up a network-based service, the system comprising:
a device;
a policy distribution point including a service driver, the service driver being adapted for communication with the device;
a core server that generates an activation associated with the network-based service, the activation being sent from the core server to the service driver, the activation being translated by the service driver into instructions that are sent from the policy distribution point to the device, the instructions configuring the device to set up the network-based service,
a second device: and,
a second policy distribution point including a second service driver, wherein the core server generates a second activation associated with the network-based service, the second activation being sent from the core server to the second policy distribution point, the second service driver translating the second activation into second device-specific instructions, the second device-specific instructions being sent from the second policy distribution point to the second device such that the second device is configured to set up the network-based service.
14. The system of claim 13 , wherein the instructions are device-specific instructions, and wherein the activation is translated by the service driver from XML into the device-specific instructions.
15. The system of claim 13 , wherein the policy distribution point includes a service driver infrastructure, wherein the activation passes from the core server through the service driver infrastructure to the service driver.
16. The system of claim 13 , wherein the core server sends the service driver to the policy distribution point, the service driver being installed on the policy distribution point at run time without rebooting the policy distribution point.
17. The method of claim 1 , wherein the device-specific instructions are machine readable.
18. The method of claim 1 , wherein the device-specific instructions are written in Lightweight Directory Access Protocol (LDAP).
19. The system of claim 13 , wherein the instructions are sent over HTTP encrypted with SSL to the device.
20. The system of claim 13 , wherein the instructions that are sent from the policy distribution point to the device are not exposed to non-secure networks.