IP Library Granted Patent US 10,558,469
Granted Patent B2
US 10,558,469 · App. 15/439,249 · Granted Feb 11, 2020

Using public key infrastructure for automatic device configuration

Inventor: Kent A. Watsen (Leesburg, VA)
Assignee: Juniper Networks, Inc.
G06F9/44505H04L9/3247H04L9/3268H04L41/0803H04L41/0886H04L63/0823H04L63/12H04L63/123H04L63/126
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,558,469
App. No.
15/439,249
Granted
Feb 11, 2020
Kind
B2
Abstract

A device may receive a digital voucher, a customer certificate, and configuration information for automatically configuring the device. The digital voucher may include a first customer identifier that identifies a customer associated with the device and a device identifier that identifies the device. The customer certificate may include a second customer identifier that identifies the customer and a customer public key associated with the customer. The configuration information may include information that identifies a configuration for automatically configuring the device. The device may validate at least one of the digital voucher, the customer certificate, or the configuration information. The device may configure the device, using the configuration, based on validating at least one of the digital voucher, the customer certificate, or the configuration information.

Claims (57)

1. A device, comprising:

a memory; and

one or more processors to:

receive a certificate signing request associated with a customer requesting automatic device configuration;

generate, based on receiving the certificate signing request, a customer certificate;

provide the customer certificate to a customer device;

receive, from the customer device, order information for an order for an auto-configuration device to be configured using the automatic device configuration;

generate, based on receiving the order information, a digital voucher to be used for validation during the automatic device configuration,

the digital voucher being associated with the auto-configuration device; and

provide the digital voucher to the customer device.

2. The device of claim 1 , where the certificate signing request includes a customer identifier and a customer public key.

3. The device of claim 1 , where the one or more processors, when generating the customer certificate, are to:

generate the customer certificate using a private key associated with a provider.

4. The device of claim 1 , where the customer certificate includes:

a customer identifier,

a customer public key, and

a digital signature generated using a provider public key.

5. The device of claim 1 , where the digital voucher is a digital certificate signed using a provider public key.

6. The device of claim 1 , where the digital voucher includes a device identifier that identifies the auto-configuration device.

7. The device of claim 1 , where the digital voucher is used to at least one of:

determine a customer identifier associated with the auto-configuration device,

improve security of the automatic device configuration, or

reduce errors in the automatic device configuration.

8. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by one or more processors, cause the one or more processors to:

receive a certificate signing request associated with a customer requesting automatic device configuration;

generate, based on receiving the certificate signing request, a customer certificate;

provide the customer certificate to a customer device;

receive, from the customer device, order information for an order for an auto-configuration device to be configured using the automatic device configuration;

generate, based on receiving the order information, a digital voucher to be used for validation during the automatic device configuration,

the digital voucher being associated with the auto-configuration device; and

provide the digital voucher to the customer device.

9. The non-transitory computer-readable medium of claim 8 , where the one or more instructions, that cause the one or more processors to generate the digital voucher, cause the one or more processors to:

generate the digital voucher using a customer identifier and a device identifier that identifies the auto-configuration device.

10. The non-transitory computer-readable medium of claim 8 , where the order information includes a customer identifier that identifies a customer that ordered the auto-configuration device.

11. The non-transitory computer-readable medium of claim 8 , where the digital voucher includes a customer identifier and a device identifier, and

where the digital voucher is signed using a provider private key.

12. The non-transitory computer-readable medium of claim 11 , where the device identifier identifies the auto-configuration device.

13. The non-transitory computer-readable medium of claim 8 , where a time delay exists between when the order information is received and when the digital voucher is generated.

14. The non-transitory computer-readable medium of claim 8 , where the one or more instructions, that cause the one or more processors to receive the order information, cause the one or more processors to:

receive multiple orders for auto-configuration devices; and

where the one or more instructions, that cause the one or more processors to generate the digital voucher to be used for validation during the automatic device configuration, are to:

generate a separate digital voucher corresponding to each auto-configuration device.

15. A method, comprising:

receiving, by a device, a certificate signing request associated with a customer requesting automatic device configuration;

generating, by the device and based on receiving the certificate signing request, a customer certificate;

providing, by the device, the customer certificate to a customer device;

receiving, by the device and from the customer device, order information for an order for an auto-configuration device to be configured using the automatic device configuration;

generating, by the device and based on receiving the order information, a digital voucher to be used for validation during the automatic device configuration,

the digital voucher being associated with the auto-configuration device; and

providing, by the device, the digital voucher to the customer device.

16. The method of claim 15 , where generating the digital voucher comprises:

generating the digital voucher for multiple auto-configuration devices.

17. The method of claim 16 , where the digital voucher includes a customer identifier and multiple device identifiers.

18. The method of claim 17 , where a device identifier of the multiple device identifiers corresponds to the auto-configuration device.

19. The method of claim 15 , where a customer identifier in the customer certificate is compared to a customer identifier in the digital voucher.

20. The method of claim 15 , where the customer certificate is used for validation during the automatic device configuration.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 24, 2017
From: WATSEN, KENT A
To: JUNIPER NETWORKS, INC.
Reel/Frame 041369/0362 →
Continuity (2)
Continuation 14626382 · Feb 19, 2015
Related Publication 20170168859A1 · Jun 15, 2017