Communication device for implementing trusted relationships in a software defined network

1. A software defined network (SDN) controller, the SDN controller comprising:

a communications interface configured to communicate with a plurality of SDN network devices;

a memory;

a processor operatively coupled to the memory, wherein the processor is configured to execute instructions stored on the memory to cause the processor to:

detect a new device associated with the SDN based on receipt of an initial certificate indicating that the new device is in a factory configured state;

receive a user approval to commission the new device;

establish a first SDN controller trusted credential;

transmit a first device trusted credential based on the first SDN controller credential to the new device;

issue programming instructions to the new device authenticated using the first SDN controller trusted credential; and

remove the initial certificate from the new device upon receiving the user approval to commission the new device onto the SDN to require a factory reset to recommission the new device to a different SDN controller.

2. The SDN controller of claim 1 , wherein the first SDN controller trusted credential comprises a Public Key Infrastructure (PKI) certificate.

3. The SDN controller of claim 2 , wherein the first device trusted credential comprises a public key of the PKI certificate.

4. The SDN controller of claim 1 , wherein the processor is configured to create a communication certificate configured to encrypt communications transmitted by the new device.

5. The SDN controller of claim 1 , wherein the processor is configured to:

establish a second SDN controller trusted credential; and

transmit a second device trusted credential based on the second SDN controller credential to the new device.

6. The SDN controller of claim 5 , wherein the processor is further configured to:

determine that the first SDN controller trusted credential is compromised;

revoke the first device trusted credential; and

establish a second device trusted credential based on the second SDN controller credential.

7. The SDN controller of claim 1 , wherein the processor is configured to prevent commissioning of the new device until the user approval is received.

8. The SDN controller of claim 1 , wherein the processor is configured to execute instructions stored on the memory to cause the processor to provide routing instructions to enable the new device to communicate with other devices on the SDN.

9. The SDN controller of claim 1 , wherein the processor is configured to execute instructions stored on the memory to cause the processor to modify the programming instructions over time based on conditions of the SDN.

10. The SDN controller of claim 1 , wherein the processor is configured to execute instructions stored on the memory to cause the processor to reroute communication flow around a physical link by communicating new communication flows to the new device.

11. A method for implementing a trusted relationship in a software defined network (SDN), comprising:

establishing a first SDN controller trusted credential;

detecting a new device associated with the SDN based on receipt of an initial certificate indicating that the new device is in a factory configured state;

receiving user approval to commission the new device;

transmitting a first device trusted credential based on the first SDN controller credential to the new device;

issuing programming instructions to the new device, the programming instructions comprising authentication information based on the first SDN controller trusted credential; and

removing the initial certificate from the new device upon receiving the user approval to commission the new device onto the SDN to require a factory reset to recommission the new device to a different SDN controller.

12. The method of claim 11 , wherein the first trusted credential comprises a Public Key Infrastructure (PKI) certificate.

13. The method of claim 12 , wherein the trusted credential comprises a public key of the PKI certificate.

14. The method of claim 11 , further comprising:

creating a communication certificate for use by the new device;

encrypting communications transmitted by the new device using the communication certificate.

15. The method of claim 11 , further comprising:

establishing a second SDN controller trusted credential; and

transmitting a second device trusted credential based on the second SDN controller credential to the new device.

16. The method of claim 15 , further comprising:

determining that the first SDN controller trusted credential is compromised;

revoking the first device programming credential; and

establishing a second device programming credential based on the second trusted credential.

17. The method of claim 16 , further comprising:

continuing communication among a plurality of devices in the SDN following revoking the first device programming credential.

18. The method of claim 11 , comprising providing routing instructions to enable the new device to communicate with other devices on the SDN.

19. The method of claim 11 , comprising modifying the programming instructions over time based on conditions of the SDN.

20. The method of claim 11 , comprising rerouting communication flow around a physical link by communicating new communication flows to the new device.