Method for revising terminal configuration, network side management unit, terminal and system

Abstract

The invention discloses a method for restricting configuration modification and software upgrade of terminal equipment, which is applied to a network side management unit and terminal equipment, including: the management unit acquires terminal identification information; the management unit automatically generates a password according to the identification information , the password is calculated and generated according to the encryption algorithm and the identification information; the management unit initiates a login request to the terminal device, and sends the password to the terminal device; the terminal device receives the login request and the password; the terminal device calculates and verifies the correctness of the password, and if the verification is passed, the terminal device grants the login user the authority to modify the configuration and upgrade the software of the terminal device. The invention also discloses a system for realizing the method of the invention. The present invention can effectively restrict configuration modification and software upgrade of terminal equipment, and improve security; it can be used to prevent equipment from switching networks, reduce loss of operator assets, simplify operator terminal configuration and upgrade, and facilitate network expansion and transformation .

Description

technical field [0001] The invention relates to the technology of terminal equipment configuration, in particular to a method and a communication system for restricting configuration modification and software upgrade of terminal equipment. Background technique [0002] At present, many access or application terminals, such as DSL modems, home gateways, set-top boxes, etc., are given away by operators for free when allocating numbers. Operators hope that equipment suppliers can provide a method to prevent users from taking their own donated equipment. to use in other carrier networks. In fact, the network architecture of each operator is different. The equipment used by operator A cannot be directly used in the network of operator B. It is necessary to modify the configuration of the terminal equipment or upgrade the software of the equipment to be used in the new operator. used in the network. [0003] There are two main ways to reset: [0004] 1) If all related configura...

AI Technical Summary

Problems solved by technology

Users can modify some of their own settings, such as PPP0E passwords, etc., which can restrict users at this level from having the authority to modify configurations and upgrade software; administrator-level accounts are for maintenance personnel. For the same device, the account and The passwords are the same, maintenance personnel can log in to the device for necessary maintenance or upgrade, but because the same device account and password are the same, so there is no confidentiality, other operators can obtain the account if they have the same device and password

Even if the operator customizes the account number and password, there is still the possibility of leakage due to the resignation of the maintenance personnel

However, setting an independent password for each device makes it difficult to maintain and is not feasible

[0008] There is another existing solution: write the operator’s information in the non-modifiable area of ​​FLASH, and the upgraded version cannot be changed, but this method is too rigid, and the equipment cannot be used if some information of the operator is changed, unless it is returned to the factory. Rewriting FLASH, the actual operation is more inconvenient

Images