Module and associated method for TR-069 object management
The present invention relates to a security module for use in management of a TR-069 Object Model of a device. The Object Model comprises a plurality of parameters for selection by a view selector module based on credentials and for defining thereby an object model view associated to the device. The security module comprises means for associating the object model view to a security policy and means for configuring the security attributes of the security policy on an intermediate network entity.
1. A security module for use in management of a TR-069 Object Model of a device, the security module comprising:
a means for associating an object model view of the device to a security policy; and
a means for configuring security attributes of the security policy on an intermediate network entity of an end user such that at least partial management of the device switches from a TR-069 management agent to the intermediate network entity, the security attributes including an encrypt and decrypt key unique to the device, the TR-069 management agent of the device including a first view selector module configured to select a plurality of parameters based on credentials, the device including a second view selector module configured to select the object model view using the plurality of parameters, the plurality of parameters defining the object model view associated with the device.
2. The security module for use in management of a TR-069 Object Model of a device according to claim 1 , wherein said means for associating is installed on a Remote Management Server.
3. The security module for use in management of TR-069 Object Model of a device according to claim 1 , wherein said security module uses a Transport Layer Security/Secure Sockets Layer protocol for configuring said security attributes on said intermediate network entity.
4. The security module for use in management of a TR-069 Object Model of a device according to claim 1 , wherein said security module further comprises an instruction means for communicating with said device and with said intermediate network entity using an encryption protocol which is based upon said configured security attributes and allows said intermediate network entity to control said associated object model view of said device.
5. The security module for use in management of a TR-069 Object Model of a device of claim 4 , wherein said encryption protocol is implemented by a Simple Object Access Protocol with a body part comprising encrypted TR-069 Object Model messages and a header part comprising an unencrypted reference to said security policy.
6. The security module for use in management of TR-069 Object Model of a device according to claim 1 , wherein said intermediate network entity is implemented by a Residential Gateway.
7. The security module for use in management of a TR-069 Object Model of a device according to claim 1 , wherein said device is a customer premises equipment.
8. The security module for use in management of TR-069 Object Model of a device according to claim 1 , wherein said module is integrated into a TR069 Management Protocol.
9. A security method for use in management of a TR-069 Object Model of a device, the method comprising:
associating an object model view of the device to a security policy;
configuring security attributes of said security policy on an intermediate network entity of an end user such that at least partial management of the device switches from a TR-069 management agent to the intermediate network entity, the security attributes including an encrypt and decrypt key unique to the device;
selecting, by a first view selector module, a plurality of parameters based on credentials, the plurality of parameters defining the object model view associated to the device; and
selecting, by a second view selector module, the object model view using the plurality of parameters.