IP Library › Granted Patent US 12,034,717
Granted Patent B2
US 12,034,717 · App. 17/570,731 · Granted Jul 9, 2024

Systems and methods for firmware password management

Inventors: Rocco Demasi (Nanuet, NY); Jason M. Iannelli (Township of Washington, NJ); Ronald L. Bland (Woodstock, GA); Michael McGuinness (Hilliard, OH); Lori L Crimmins (Holly, MI); Michael L. Bowman (London, OH); Daniel J. Pfennig (Brockport, NY); Kevin R. Garrison (Wesley Chapel, FL)
Assignee: Verizon Patent and Licensing Inc.
H04L63/0846G06F21/572H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,034,717
App. No.
17/570,731
Granted
Jul 9, 2024
Kind
B2
Abstract

One or more computing devices, systems, and/or methods for managing a firmware password of a User Equipment (UE) are provided. In an example, the UE determines that a first firmware password variable is indicative of a firmware password of a firmware of the UE. The UE transmits the first firmware password variable to a first computer for storage in a first dataset. The UE generates a password. The UE sets a second firmware password variable, in a second dataset stored on the UE, to the password. The UE transmits the second firmware password variable including the password to the first computer for storage in the first dataset. The UE sets the firmware password of the firmware of the UE to the second firmware password variable including the password.

Claims (80)

1. A method for performing firmware password rotation, the method comprising:

determining, by a User Equipment (UE), that a first firmware password variable is indicative of a firmware password of a firmware of the UE by:

analyzing a first dataset stored on the UE to determine whether the first firmware password variable is stored in the first dataset;

if an indication of the first firmware password variable is stored in the first dataset, determining the first firmware password variable based upon the indication; and

if the first firmware password variable is not stored in the first dataset, determining the first firmware password variable based upon an indication of the first firmware password variable stored in a second dataset stored on a password management computer;

if the first firmware password variable was determined based upon the indication stored in the first dataset, transmitting, by the UE, the first firmware password variable to a first computer for storage in the second dataset stored on the password management computer;

generating, by the UE, a password;

setting, by the UE, a second firmware password variable, in the first dataset stored on the UE, to be indicative of the password;

transmitting, by the UE, the second firmware password variable comprising the password to the first computer for storage in the second dataset stored on the password management computer; and

setting, by the UE, the firmware password of the firmware of the UE to the second firmware password variable comprising the password.

2. The method of claim 1 , further comprising:

in response to the firmware password being successfully set to the second firmware password variable comprising the password:

setting, by the UE, the first firmware password variable to the second firmware password variable in the first dataset; and

transmitting, by the UE, the first firmware password variable to the first computer for storage in the second dataset.

3. The method of claim 1 , wherein:

at least one of determining that the first firmware password variable is the firmware password, transmitting the first firmware password variable to the first computer, generating the password, setting the second firmware password variable to the password in the first dataset, transmitting the second firmware password variable comprising the password to the first computer for storage in the second dataset, or setting the firmware password of the firmware of the UE to the second firmware password variable comprising the password is performed in response to an event, wherein the event comprises a determination that a current time is the same as or after a firmware password rotation time, wherein the firmware password rotation time is based upon an access time associated with a second UE being provided with access to the firmware password.

4. The method of claim 1 , wherein:

setting the firmware password to the second firmware password variable is performed based upon at least one of a manufacturer of the UE or a model of the UE.

5. The method of claim 1 , wherein:

when the first firmware password variable is stored in the first dataset, the first firmware password variable is determined based upon the indication.

6. The method of claim 1 , wherein:

when the first firmware password variable is not stored in the first dataset, the first firmware password variable is determined based upon the indication of the first firmware password variable stored in the second dataset.

7. The method of claim 1 , further comprising:

prior to transmitting the first firmware password variable to the first computer:

determining, by the UE, that the first firmware password variable is at least one of not available or is not the firmware password of the firmware of the UE;

determining, by the UE, that the second firmware password variable is the firmware password of the firmware of the UE; and

in response to the determination that the second firmware password variable is the firmware password of the firmware of the UE, setting, by the UE, the first firmware password variable, in the first dataset stored on the UE, to the second firmware password variable, wherein the determination that the first firmware password variable is indicative of the firmware password of the firmware of the UE corresponds to the determination that the second firmware password variable is the firmware password of the firmware of the UE.

8. The method of claim 1 , further comprising:

prior to transmitting the first firmware password variable to the first computer:

determining, by the UE, that at least one of:

the first firmware password variable is at least one of not available or is not the firmware password of the firmware of the UE; or

the second firmware password variable is at least one of not available or is not the firmware password of the firmware of the UE;

determining, by the UE, that a default firmware password is the firmware password of the firmware of the UE; and

in response to the determination that the default firmware password is the firmware password of the firmware of the UE, setting the first firmware password variable, in the first dataset stored on the UE, to a value indicative of the default firmware password, wherein the determination that the first firmware password variable is indicative of the firmware password of the firmware of the UE corresponds to the determination that the default firmware password is the firmware password of the firmware of the UE.

9. The method of claim 1 , wherein:

the password management computer communicates with the first computer.

10. The method of claim 1 , wherein:

the password is generated to be a random password.

11. A device configured to perform firmware password rotation, the device comprising:

a processor configured to:

determine that a first firmware password variable is indicative of a firmware password of a firmware of a User Equipment (UE) by:

analyzing a first dataset stored on the UE to determine whether the first firmware password variable is stored in the first dataset;

if an indication of the first firmware password variable is stored in the first dataset, determining the first firmware password variable based upon the indication; and

if the first firmware password variable is not stored in the first dataset, determining the first firmware password variable based upon an indication of the first firmware password variable stored in a second dataset stored on a password management computer;

if the first firmware password variable was determined based upon the indication stored in the first dataset, transmit the first firmware password variable to a first computer for storage in the second dataset stored on the password management computer;

generate a password;

set a second firmware password variable, in the first dataset stored on the UE, to be indicative of the password;

transmit the second firmware password variable comprising the password to the first computer for storage in the second dataset stored on the password management computer; and

set the firmware password of the firmware of the UE to the second firmware password variable comprising the password.

12. The device of claim 11 , wherein:

the password management computer communicates with the first computer.

13. The device of claim 11 , wherein:

the password is generated to be a random password.

14. A non-transitory computer-readable medium storing instructions that when executed facilitate performance of operations for performing firmware password rotation, the operations comprising:

determining, by a User Equipment (UE), that a first firmware password variable is indicative of a firmware password of a firmware of the UE by:

analyzing a first dataset stored on the UE to determine whether the first firmware password variable is stored in the first dataset;

if an indication of the first firmware password variable is stored in the first dataset, determining the first firmware password variable based upon the indication; and

if the first firmware password variable is not stored in the first dataset, determining the first firmware password variable based upon an indication of the first firmware password variable stored in a second dataset stored on a pas sword management computer;

if the first firmware password variable was determined based upon the indication stored in the first dataset, transmitting, by the UE, the first firmware password variable to a first computer for storage in the second dataset stored on the password management computer;

generating, by the UE, a password;

setting, by the UE, a second firmware password variable, in the first dataset stored on the UE, to be indicative of the password;

transmitting, by the UE, the second firmware password variable comprising the password to the first computer for storage in the second dataset stored on the password management computer; and

setting, by the UE, the firmware password of the firmware of the UE to the second firmware password variable comprising the password.

15. The non-transitory computer-readable medium of claim 14 , the operations further comprising:

in response to the firmware password being successfully set to the second firmware password variable comprising the password:

setting, by the UE, the first firmware password variable to the second firmware password variable in the first dataset; and

transmitting, by the UE, the first firmware password variable to the first computer for storage in the second dataset.

16. The non-transitory computer-readable medium of claim 14 , wherein:

at least one of determining that the first firmware password variable is the firmware password, transmitting the first firmware password variable to the first computer, generating the password, setting the second firmware password variable to the password in the first dataset, transmitting the second firmware password variable comprising the password to the first computer for storage in the second dataset, or setting the firmware password of the firmware of the UE to the second firmware password variable comprising the password is performed in response to an event, wherein the event comprises a determination that a current time is the same as or after a firmware password rotation time, wherein the firmware password rotation time is based upon an access time associated with a second UE being provided with access to the firmware password.

17. The non-transitory computer-readable medium of claim 14 , wherein:

setting the firmware password to the second firmware password variable is performed based upon at least one of a manufacturer of the UE or a model of the UE.

18. The non-transitory computer-readable medium of claim 14 , wherein:

when the first firmware password variable is stored in the first dataset, the first firmware password variable is determined based upon the indication.

19. The non-transitory computer-readable medium of claim 14 , wherein:

when the first firmware password variable is not stored in the first dataset, the first firmware password variable is determined based upon the indication of the first firmware password variable stored in the second dataset.

20. The non-transitory computer-readable medium of claim 14 , the operations further comprising:

prior to transmitting the first firmware password variable to the first computer:

determining, by the UE, that the first firmware password variable is at least one of not available or is not the firmware password of the firmware of the UE;

determining, by the UE, that the second firmware password variable is the firmware password of the firmware of the UE; and

in response to the determination that the second firmware password variable is the firmware password of the firmware of the UE, setting, by the UE, the first firmware password variable, in the first dataset stored on the UE, to the second firmware password variable, wherein the determination that the first firmware password variable is indicative of the firmware password of the firmware of the UE corresponds to the determination that the second firmware password variable is the firmware password of the firmware of the UE.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 10, 2022
From: DEMASI, ROCCO; IANNELLI, JASON M.; BLAND, RONALD L.; MCGUINNESS, MICHAEL; CRIMMINS, LORI L.; BOWMAN, MICHAEL L.; PFENNIG, DANIEL J.; GARRISON, KEVIN R.
To: VERIZON PATENT AND LICENSING INC.
Reel/Frame 058587/0803 →
Continuity (1)
Related Publication 20230224296A1 · Jul 13, 2023