Secure transfer of registered network access devices
The disclosed embodiments include a method performed by a cloud system for changing a registration of a network access device. The method includes initiating a change of a registration of a network access device. The registration is stored at a cloud system and indicates ownership of the network access device by a first user. The method further includes receiving an authorization from the first user to dissociate the ownership of the network access device by the first user, and receiving an indication of a physical reset occurring locally at the network access device. The physical reset allows the first user to dissociate the ownership of the network access device. The method further includes, upon receiving both the authorization by the first user and the indication of the physical reset, releasing the ownership by the first user of the network access device at the cloud system.
1. A method performed by a cloud system for transferring exclusive control for a user to manage a network access device, the method comprising:
receiving a request from a second user device to transfer exclusive control to manage a network access device from a first user device to the second user device;
sending, to the first user device, a communication requesting authorization to dissociate exclusive control to manage the network access device by the first user device;
granting, to the second user device, exclusive control to manage the network access device, wherein the network access device is restricted to being managed by only one user device at any point in time; and
sending, to the network access device, a communication indicating that the exclusive control by the first user device is released and causing configuration of the network access device to restrict exclusive control to the second user device.
2. The method of claim 1 further comprising:
transferring ownership of the network access device from a first user of the first user device to a second user of the second user device; and
registering ownership to the second user at the cloud system.
3. The method of claim 1 , wherein transferring ownership of the network access device between any two users requires both an authorization by a prior owner and physically resetting the network access device.
4. The method of claim 1 , further comprising:
receiving login credentials of a first user of the first user device to access an account that belongs to the first user and includes a registration of the network access device; and
receiving the authorization from the first user to dissociate ownership of the network access device as registered in the account.
5. The method of claim 1 further comprising:
sending a notification of a change in a registration of the network access device to reflect the second user.
6. The method of claim 1 , further comprising, prior to granting exclusive access to the second user device:
receiving an indication of a physical reset of the network access device.
7. The method of claim 6 further comprising:
determining that at least one of the authorization or the indication of the physical reset is invalid; and
causing the network access device to restore a current setting or a current configuration of the network access device to a prior setting or a prior configuration captured a point in time before occurrence of the physical reset.
8. The method of claim 7 further comprising:
restoring registration of the network access device at the cloud system.
9. The method of claim 6 , wherein the physical reset of the network access device is an unsecured, unrestricted, and user-agnostic function.
10. The method of claim 6 , wherein the physical reset includes actuation of a hardware actuator on the network access device.
11. The method of claim 1 , wherein the network access device is any of a router, a switch, a modem, or an access point.
12. The method of claim 1 further comprising, prior to granting exclusive control to the second user device:
receiving a communication indicating that the second user device has a certificate that permits the second user device to have exclusive control to manage the network access device.
13. The method of claim 1 , wherein the first user device is a smartphone and the exclusive control is effected by a mobile application installed on the smartphone.
14. The method of claim 1 , wherein the second user device is effected to manage the network access device over a local area network.
15. The method of claim 1 , wherein the second user device is enabled to manage the network access device over short-range wireless connection.
16. The method of claim 1 further comprising:
receiving a request to change the exclusive control to manage the network access device;
releasing the exclusive control by the second user device such that the second user device is incapable of managing the network access device; and
sending, to the network access device, a communication indicating the release of exclusive control by the second user device, the communication causing the network access device to release the exclusive control by the second user device.
17. The method of claim 1 , wherein the first user device and the second user device both belong to a common user.
18. The method of claim 1 , wherein the first user device belongs to a first user and the second user device belongs to a second user different from the first user.
19. The method of claim 1 , wherein a mobile application on the first user device permits a user to manually designate the first user device or the second user device as a primary user device that has exclusive control to manage the network access device.
20. The method of claim 1 , wherein the network access device is a first network access device, and the cloud system stores a configuration of a plurality of setting of the first network access device, the method further comprising:
receiving a communication indicating that a second network access device is requesting a configuration to join a network that includes the first network access device;
sending, to the second network access device, information about the configuration of the first network access device; and
causing the second network access device to adopt at least a portion of the configuration of the first network access device.
21. At least one computer-readable storage medium, excluding transitory signals and carrying instructions, which, when executed by at least one processor, cause a system to:
receive a request from a second user device to transfer exclusive control to manage a network access device from a first user device to the second user device;
send, to the first user device, a communication requesting authorization to dissociate exclusive control to manage the network access device by the first user device;
grant, to the second user device, exclusive control to manage the network access device, wherein the network access device is restricted to being managed by only one user device at any point in time; and
send, to the network access device, a communication indicating that the exclusive control by the first user device is released and causing configuration of the network access device to restrict exclusive control to the second user device.
22. The at least one computer-readable storage medium of claim 21 , wherein transferring exclusive control of the network access device to another device requires both authorization by a prior owner and physically resetting the network access device.
23. The at least one computer-readable storage medium of claim 21 , wherein the system is further caused to:
determine that at least one of an authorization or an indication of a physical reset at the network access device is invalid; and
restore the network access device to a prior setting for exclusive control.
24. A system comprising:
at least one hardware processor; and
at least one non-transitory memory storing instructions, which, when executed by the at least one hardware processor, cause the system to:
receive a request from a second user device to transfer exclusive control to manage a network access device from a first user device to the second user device;
send, to the first user device, a communication requesting authorization to dissociate exclusive control to manage the network access device by the first user device;
grant, to the second user device, exclusive control to manage the network access device, wherein the network access device is restricted to being managed by only one user device at any point in time; and
send, to the network access device, a communication indicating that the exclusive control by the first user device is released and causing configuration of the network access device to restrict exclusive control to the second user device.
25. The system of claim 24 , wherein transferring exclusive control of the network access device to another device requires both authorization by a prior owner and physically resetting the network access device.