Centralized initialization method and system, electronic device, readable medium, program product

Abstract

The present disclosure provides a device centralized initialization method, a device centralized initialization system, an electronic device, a computer readable medium and a computer program product. The device centralized initialization method comprises: pre-storing identification information of a plurality of devices to be initialized and initialization configuration files respectively corresponding to each of the plurality of devices; receiving access requests of the plurality of devices through a wireless access node array, and establishing a secure communication tunnel with each device based on identity authentication; for each device, determining the initialization configuration file of the device according to its identification information, and downloading the initialization configuration file to the device through the corresponding secure communication tunnel; receiving initialization state information fed back by the plurality of devices. The present disclosure realizes efficient, secure and automatic centralized initialization of multiple devices in a wireless network environment, and significantly improves the efficiency and consistency of device deployment.

Description

Technical Field

[0001] This disclosure relates to the field of communication network and equipment management technology, and in particular to a centralized device initialization method, a centralized device initialization system, an electronic device, a computer-readable medium, and a computer program product. Background Technology

[0002] With the continuous development of SD-WAN and IoT technologies, the number of devices requiring deployment in networks is rapidly increasing. How to efficiently deploy these devices has become a critical issue of utmost concern for operations and maintenance personnel. Currently, common deployment methods include URL-based deployment and USB flash drive deployment. These methods have been widely used in practice and, compared to traditional manual configuration methods, have improved deployment efficiency to some extent. However, these methods still have significant limitations: they rely on individual physical connections or on-site technical personnel operation, resulting in low efficiency, high costs, and a high risk of errors. Summary of the Invention

[0003] This disclosure provides a centralized device initialization method, a centralized device initialization system, an electronic device, a computer-readable medium, and a computer program product.

[0004] In a first aspect, embodiments of this disclosure provide a centralized device initialization method, comprising: pre-storing identification information of a plurality of devices to be initialized and initialization configuration files corresponding to each of the plurality of devices; receiving access requests from the plurality of devices through a wireless access node array, and establishing secure communication tunnels with each device based on identity authentication; for each device, determining the initialization configuration file of the device according to its identification information, and distributing the initialization configuration file to the device through the corresponding secure communication tunnel; and receiving initialization status information fed back by the plurality of devices.

[0005] In some embodiments, pre-storing identification information of a plurality of devices to be initialized and an initialization configuration file corresponding to each of the plurality of devices includes: for each device to be initialized: obtaining at least one of the device's Media Access Control Address (MAC address) and Serial Number as identification information; associating the identification information with the initialization configuration file corresponding to the device; and storing the identification information and the corresponding initialization configuration file.

[0006] In some embodiments, pre-storing identification information of a plurality of devices to be initialized and an initialization configuration file corresponding to each of the plurality of devices includes: for each device to be initialized: obtaining at least one of the device's media access control address and serial number as identification information; generating a corresponding initialization configuration file based on the identification information and a preset initialization configuration template; and storing the identification information and the initialization configuration file.

[0007] In some embodiments, receiving access requests from the plurality of devices via a wireless access node array and establishing secure communication tunnels with each device based on authentication includes: configuring a dedicated initialized access identifier; controlling the wireless access node array supporting a multi-device high-concurrency access protocol to broadcast the access identifier; responding to access requests initiated by the plurality of devices based on the access identifier and performing two-way authentication based on their respective device-specific encrypted certificates; and after successful authentication, establishing secure communication tunnels with each device based on the temporary IP addresses obtained by each device.

[0008] In some embodiments, configuring a dedicated initialized access identifier and controlling the wireless access node array to broadcast the identifier includes: configuring a dedicated initialized service set identifier for the wireless access node array in the wireless access node array composed of wireless access point arrays; and controlling the wireless access point array to broadcast the service set identifier.

[0009] In some embodiments, receiving initialization status information from the plurality of devices includes receiving at least one of initialization success information and initialization failure information from each device, wherein the initialization success information includes a device-specific activation credential generated by the device.

[0010] In some embodiments, the method further includes: upon receiving initialization failure information, classifying initialization failures into transmission-related failures and non-transmission-related failures based on the cause of the failure; for transmission-related failures, performing automatic retransmission or breakpoint resumption of the initialization configuration file; for non-transmission-related failures, generating a statistical list of devices that failed initialization and prompting manual intervention.

[0011] Secondly, embodiments of this disclosure provide a centralized device initialization system, comprising: at least one wireless access node configured to broadcast a dedicated access identifier for initialization and support concurrent access by multiple devices; multiple devices to be initialized, each device configured to access the wireless access node through the access identifier, establish a secure communication tunnel based on identity authentication and a centralized management platform, and receive an initialization configuration file matching its identification information through the tunnel; a centralized management platform configured to store the identification information of the multiple devices to be initialized and the initialization configuration file corresponding to each device; distribute the initialization configuration file corresponding to each device to the corresponding device through the secure communication tunnel; and receive initialization status information fed back by the devices.

[0012] In some embodiments, the wireless access node is a wireless access point array that supports a multi-device high-concurrency access protocol, including IEEE 802.11ax.

[0013] Thirdly, embodiments of this disclosure provide an electronic device, including: one or more processors; and a memory storing one or more programs thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the centralized device initialization method described in the first aspect of this disclosure.

[0014] Fourthly, embodiments of this disclosure provide a computer-readable medium having a computer program stored thereon, which, when executed by a processor, implements the centralized device initialization method described in the first aspect of this disclosure.

[0015] Fifthly, embodiments of this disclosure provide a computer program product, including a computer program or instructions, which, when executed by a processor, implement the centralized device initialization method described in the first aspect of this disclosure.

[0016] This disclosure provides a centralized device initialization method and system based on a wireless network, enabling concurrent access by multiple devices, automatic configuration distribution, and initialization status feedback, effectively improving device deployment efficiency. By configuring a dedicated initialization network and a secure communication tunnel, the security and configuration consistency of data transmission are ensured. A centralized management platform unifies the management of configuration and authentication processes, significantly reducing manual intervention costs and operational complexity. Compared to traditional methods, this solution can improve the initialization efficiency of large-scale devices by at least an order of magnitude. Attached Figure Description

[0017] Figure 1 This is a flowchart of a centralized device initialization method according to an embodiment of this disclosure;

[0018] Figure 2This is a wireless local area network topology diagram of a device centralized initialization system according to an embodiment of this disclosure;

[0019] Figure 3 This is a timing diagram of the batch initialization process of the CPE device according to an embodiment of this disclosure;

[0020] Figure 4 This is a flowchart illustrating how the centralized management platform of this disclosure centrally manages initialization files;

[0021] Figure 5 This is a schematic diagram of the composition of an electronic device according to an embodiment of the present disclosure;

[0022] Figure 6 This is a block diagram of a centralized device initialization server according to an embodiment of the present disclosure. Detailed Implementation

[0023] To enable those skilled in the art to better understand the technical solutions of this disclosure, the technical solutions of this disclosure will be described in detail below with reference to the accompanying drawings.

[0024] Exemplary embodiments will be described more fully below with reference to the accompanying drawings; however, these exemplary embodiments may be embodied in different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will enable those skilled in the art to fully understand the scope of this disclosure.

[0025] Where there is no conflict, the various embodiments of this disclosure and the features thereof in the embodiments may be combined with each other.

[0026] As used herein, the term “and / or” includes any and all combinations of one or more related enumerated entries.

[0027] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit this disclosure. As used herein, the singular forms “a” and “the” are also intended to include the plural forms unless the context clearly indicates otherwise. It will also be understood that when the terms “comprising” and / or “made of” are used in this specification, the presence of the stated feature, integral, step, operation, element, and / or component is specified, but the presence or addition of one or more other features, integrals, steps, operations, elements, components, and / or groups thereof is not excluded.

[0028] Unless otherwise specified, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and this disclosure, and will not be interpreted as having an idealized or overly formal meaning, unless expressly so defined herein.

[0029] Unless otherwise specified in this disclosure, the following technical terms shall be interpreted as follows:

[0030] CPE (Customer Premises Equipment) refers to terminal network equipment deployed on the user's side, usually provided by the service provider.

[0031] IPSec (Internet Protocol Security) is a secure communication protocol that operates at the network layer. It supports encryption and authentication of IP packets and is used to build secure tunnel connections between end-to-end or gateways.

[0032] A Wireless Local Area Network (WLAN) is a local wireless communication network based on the IEEE 802.11 series of standards, which allows devices to access the network within a limited range (usually <100m) via radio waves.

[0033] SSID (Service Set Identifier) ​​is a unique string used to identify a specific WLAN network.

[0034] WPA3-Enterprise is the enterprise version of the third-generation wireless security protocol developed by the Wi-Fi Alliance, providing enterprise-grade certification based on a 192-bit encryption suite (Wi-Fi Alliance WPA3). TM Specification v1.0).

[0035] ECDSA (Elliptic Curve Digital Signature Algorithm) is a digital signature algorithm based on elliptic curve cryptography (NIST FIPS 186-5 standard).

[0036] TFTP (Trivial File Transfer Protocol) is a simplified file transfer protocol (RFC 1350) that uses UDP port 69 for small file transfers.

[0037] DHCP (Dynamic Host Configuration Protocol) is a network protocol used to dynamically allocate IP addresses, gateways, DNS, and other information in IP networks.

[0038] This disclosure proposes a new device deployment scheme that utilizes the WiFi network in a data center to centrally initialize multiple network terminal devices, thereby enabling rapid batch deployment of devices, significantly improving efficiency, reducing costs, and minimizing human error.

[0039] In the following description, CPE devices are used as a representative of network terminal devices. It should be understood that network terminal devices may include, but are not limited to, network communication devices with wireless access capabilities and remote initialization capabilities, such as CPE devices, SD-WAN gateway devices, edge computing nodes, and industrial IoT terminals. This disclosure is not limited to any specific device type.

[0040] Specifically, the initialization process of CPE devices mainly faces the following technical challenges:

[0041] 1) Strong dependence on physical access: Existing solutions generally rely on wired connections to connect each CPE device to the configuration terminal one by one for initialization, resulting in low deployment efficiency and cumbersome operation;

[0042] 2) Geographical limitations: CPE devices need to be manually configured by technicians on-site, resulting in high labor and time costs, which is especially evident in large-scale deployment scenarios;

[0043] 3) Risk of version and configuration inconsistency: Traditional distributed configuration methods may lead to software version differences and configuration inconsistencies between devices due to inconsistent operations or human oversight, which may affect system stability and subsequent operation and maintenance management;

[0044] 4) Security risks exist: During on-site debugging and configuration, there is a risk of configuration data being leaked, especially when network access parameters or authentication information are involved, the security issues are more prominent.

[0045] This disclosure proposes a centralized device initialization method based on wireless local area networks (WLANs), aiming to solve the technical problems existing in the online process of network terminal devices, such as heavy reliance on manual processes, low configuration efficiency, poor security, and insufficient consistency. This method deploys a high-density wireless network access environment (such as WiFi) in the data center, combined with a device pre-authentication mechanism and an automated configuration distribution system, to achieve automated, batch, and secure initialization of multiple WiFi-enabled network terminal devices. This effectively reduces deployment manpower costs, improves online efficiency, and enhances the consistency and controllability of system configuration.

[0046] The centralized initialization scheme based on wireless local area network disclosed herein mainly includes:

[0047] 1) Pre-configured wireless access node array: Configure a high-density wireless access point (AP) cluster that supports multiple SSIDs in the data center or deployment site;

[0048] 2) Automated authentication module: Implements a pre-authentication mechanism based on the device's serial number;

[0049] 3) Configuration distribution system: Build a configuration distribution engine that supports concurrent connection transmission.

[0050] Figure 1 This is a flowchart of a centralized device initialization method according to an embodiment of the present disclosure.

[0051] Firstly, referring to Figure 1 This disclosure provides a centralized device initialization method, including:

[0052] S11. Pre-store the identification information of multiple devices to be initialized and the initialization configuration file corresponding to each of the multiple devices;

[0053] S12. Receive access requests from the multiple devices through the wireless access node array, and establish secure communication tunnels with each device based on identity authentication;

[0054] S13. For each device, determine the initialization configuration file of the device according to its identification information, and send the initialization configuration file to the device through the corresponding secure communication tunnel;

[0055] S14. Receive initialization status information fed back by the multiple devices.

[0056] In some embodiments, identification information of a plurality of devices to be initialized and an initialization configuration file corresponding to each of the plurality of devices are pre-stored, including:

[0057] For each device to be initialized:

[0058] Obtain at least one of the device's Media Access Control Address (MAC address) and Serial Number as identification information;

[0059] The identification information is associated with the initialization configuration file corresponding to the device.

[0060] Store the identification information and the corresponding initialization configuration file.

[0061] In some embodiments, identification information of a plurality of devices to be initialized and an initialization configuration file corresponding to each of the plurality of devices are pre-stored, including:

[0062] For each device to be initialized:

[0063] Obtain at least one of the device's media access control address and serial number as identification information;

[0064] Generate a corresponding initialization configuration file based on the identification information and the preset initialization configuration template;

[0065] Store the identification information and the initialization configuration file.

[0066] In this embodiment, the centralized management platform (such as a DC server) has the capability to centrally manage device initialization configuration files. To achieve centralized device initialization based on a wireless access environment, relevant configurations are first performed on the centralized management platform, including: pre-entering the identification information (such as MAC address, serial number, etc.) of the device to be initialized into the centralized management platform, which can support device identification based on a single or combined identifier; pre-generating and storing a corresponding initialization configuration file for each device to be initialized in the centralized management platform, and establishing a binding relationship between the configuration file and the device's identification information for subsequent configuration distribution; the initialization configuration file refers to a standardized configuration file pre-created in the centralized management platform for the device online initialization process, facilitating automated deployment and remote operation and maintenance. This configuration file can be generated through a configuration template or directly preset and stored in a configuration file library.

[0067] In this embodiment, the centralized management platform may not directly store one-to-one configuration files for all devices, but instead only stores preset initialization configuration templates based on parameters such as device type. After a device completes authentication and establishes a communication tunnel, the platform matches the corresponding initialization configuration template according to the device identification information (such as type, model, MAC address, etc.), dynamically generates the initialization configuration file for that device, and then transmits it to the target device through a secure communication tunnel.

[0068] In some embodiments, receiving access requests from the plurality of devices via a wireless access node array and establishing secure communication tunnels with each device based on authentication includes:

[0069] Configure a dedicated, initialized access identifier;

[0070] The control unit broadcasts the access identifier to a wireless access node array that supports high-concurrency access protocols for multiple devices.

[0071] In response to access requests initiated by the multiple devices based on the access identifier, two-way authentication is performed based on each device's unique encrypted certificate;

[0072] After successful identity authentication, a secure communication tunnel is established between each device based on the temporary IP address obtained by each device.

[0073] In some embodiments, configuring a dedicated initialized access identifier and controlling the wireless access node array to broadcast the identifier includes:

[0074] Configure a dedicated, initialized service set identifier for the wireless access point array, which is composed of wireless access point arrays.

[0075] Control the wireless access point array to broadcast the service set identifier.

[0076] In the embodiments of this disclosure, the multi-device high-concurrency access protocol includes, but is not limited to: IEEE 802.11ax (Wi-Fi 6) and its evolved versions; other wireless communication protocols that can achieve equivalent high-concurrency performance.

[0077] In some embodiments, the wireless access node array is composed of a wireless access point array; the access identifier is the SSID of the Wi-Fi network, and the SSID is used for logical isolation of the device initializing the network.

[0078] In the embodiments of this disclosure, to support centralized initial deployment of multiple devices, the system constructs a high-density wireless access environment in a computer room or field environment. This environment preferably consists of an array of wireless access nodes based on WiFi technology, such as a wireless access point cluster (AP array) supporting the IEEE 802.11ax (WiFi 6) protocol, to meet the needs of high-concurrency device access and stable configuration transmission. Depending on specific deployment requirements, this access environment can also be expanded to support wireless access infrastructure composed of other wireless communication protocols to adapt to different access densities, communication bandwidths, and network control requirements in different scenarios.

[0079] To achieve logical isolation between the device initialization network and the service network, a dedicated access identifier is configured in the wireless access environment for initialization. In a WiFi scenario, this identifier is a Service Set Identifier (SSID), which the platform binds to a logically isolated Virtual Local Area Network (VLAN). In non-WiFi networks, the access identifier can be replaced by a network identification mechanism supported by the target protocol. The access identifier is used to guide the device to access the initialization network and establish a secure communication link with the centralized management platform, ensuring data security and deployment consistency during the initialization phase.

[0080] After the device connects to the network and initializes, it will perform two-way authentication with the centralized management platform based on digital certificates to establish a trusted communication relationship. The authentication preferably uses the WPA3-Enterprise framework, combined with the EAP-TLS protocol to complete two-way verification of the device-side certificate and the platform-side certificate, ensuring the authenticity of both parties' identities and the confidentiality of the communication process. The centralized management platform pre-generates a device-specific encrypted certificate for each device, preferably using ECDSA (Elliptic Curve Digital Signature Algorithm) to generate a certificate bound to device identification information (such as MAC address and serial number), and completes the binding of the certificate and device identification information during the initialization preparation phase. After completing two-way authentication, a secure communication tunnel based on the IPSec protocol is established. Alternatively, TLS, SSL VPN, or other secure communication protocols with authentication and encryption capabilities can be used; the specific choice can be flexibly determined based on actual deployment and product support.

[0081] The platform can centrally configure and distribute dedicated initialization SSIDs to the wireless access node array, enabling unified access management of initialization devices. The physical deployment of the relevant wireless access nodes can be completed by maintenance personnel, while network parameters such as SSID configuration and broadcast control can be remotely and uniformly set by the platform. After the device accesses the network by scanning the initialization SSID and completes authentication, the platform retrieves the corresponding initialization configuration file from the configuration file library based on its identification information and distributes the configuration file to the target device through an established secure communication tunnel. This configuration file contains standardized initialization configuration data preset by the platform, corresponding one-to-one with the device identification information to ensure parameter consistency and deployment correctness.

[0082] Those skilled in the art should understand that the protocol standards, authentication methods, communication encryption mechanisms, and network identification forms of the wireless access environment can be flexibly configured according to actual applications. Any wireless access node array that has authentication capabilities and supports the establishment of independent secure communication links can be adapted to the centralized initialization scheme disclosed herein.

[0083] In some embodiments, receiving initialization status information from the plurality of devices includes:

[0084] Receive at least one of the initialization success message and initialization failure message from each device.

[0085] The initialization success information includes a device-specific activation certificate generated by the device.

[0086] In some embodiments, the method further includes:

[0087] When receiving initialization failure information, the failure is classified into transmission failure and non-transmission failure according to the reason for the initialization failure;

[0088] For transmission failures, execute automatic retransmission or resume interrupted transmission based on the initialization configuration file.

[0089] For non-transmission type failures, generate a statistical list of devices that failed initialization and prompt for manual intervention.

[0090] In some embodiments, transport failures include interruption of the initialization configuration file transport and timeout.

[0091] In some embodiments, the method further includes:

[0092] After all devices have been initialized, an initialization result statistics report is generated, including a list of successfully initialized devices and a list of failed devices and their corresponding reasons for failure.

[0093] In this embodiment, after the device accesses the initialization network via a wireless access node array and completes two-way authentication based on a dedicated encrypted certificate, the centralized management platform sends the bound initialization configuration file to it through an established secure communication tunnel. After successfully receiving and applying the configuration file, the device generates a unique activation credential and reports it to the centralized management platform to indicate that the device has completed initialization and can be included in subsequent unified management, such as for configuration changes. Throughout the initialization process, the centralized management platform tracks the initialization status of each device in real time and classifies and statistically analyzes the initialization results, including the following processing mechanisms:

[0094] 1. Failure Classification and Automatic Handling:

[0095] If the device reports an initialization failure, the platform will classify and handle the issue according to the type of failure.

[0096] For transmission failures (such as unstable wireless channel, transmission interruption, timeout, etc.), the platform supports automatic retry and breakpoint resumption mechanisms.

[0097] For non-transmission-related failures (such as configuration import errors, format mismatches, authentication failures, etc.), the platform will add the device to the anomaly list and prompt manual intervention.

[0098] 2. Generation of statistical lists and reports:

[0099] The platform categorizes all failed devices according to the reasons for failure and generates a statistical list of failed devices. After the initialization process of all devices is completed, the platform automatically generates an initialization status statistical report that includes a list of successful devices, a list of failed devices, and the corresponding failure type.

[0100] This mechanism achieves a shift from passive, reactive configuration to proactive, batch deployment through centralized and intelligent management of initialization configuration files and device status. It significantly improves operational efficiency and system deployment consistency, and enhances the initialization efficiency of large-scale device deployment by at least an order of magnitude while ensuring security.

[0101] Figure 2 This is a wireless local area network topology diagram of a device centralized initialization system according to an embodiment of this disclosure.

[0102] Secondly, referring to Figure 2 This disclosure provides a centralized device initialization system, including:

[0103] At least one wireless access node is configured to broadcast a dedicated access identifier for initialization and support concurrent access from multiple devices;

[0104] Multiple devices to be initialized, each device is configured to access the wireless access node through the access identifier, establish a secure communication tunnel based on the identity authentication and centralized management platform, and receive an initialization configuration file that matches its identifier information through the tunnel;

[0105] The centralized management platform is configured to store the identification information of multiple devices to be initialized and the initialization configuration file corresponding to each device; to send the initialization configuration file corresponding to each device to the corresponding device through the secure communication tunnel; and to receive the initialization status information fed back by the device.

[0106] In the embodiments disclosed herein, such as Figure 2 As shown, this embodiment provides a centralized device initialization system based on a wireless local area network, the topology of which includes:

[0107] The wireless access node array (wireless AP array) consists of multiple wireless APs supporting the IEEE 802.11ax protocol, deployed in a dedicated initialization environment; it is configured with independent SSIDs to achieve logical isolation between the initialization network and the service network; and it provides high-density, high-concurrency wireless access capabilities.

[0108] The device to be initialized (CPE) includes multiple devices with WiFi access capabilities (such as CPE-1 to CPE-N); it accesses the network by scanning the initialization SSID and supports the following functions: automatically detecting the local initialization status; completing two-way authentication based on the WPA3-Enterprise protocol; and establishing IPSec secure tunnel communication.

[0109] The centralized management platform (DC server), deployed in a data center or on-site portable terminal, undertakes the core control responsibilities of the system initialization process. The DC server integrates the following functions: DHCP service, responsible for dynamically assigning temporary IP addresses to connected devices; Certificate Authority (CA), used to generate a device-specific digital certificate for each device, enabling certificate-based two-way authentication; configuration / version repository, used to store parameter configuration templates and operating system / firmware version files required for device initialization, supporting automatic matching and distribution based on device type or serial number; and configuration distribution engine, responsible for distributing initialization configuration files to target devices, supporting breakpoint resumption and automatic retries on failure.

[0110] The wireless communication link represents the wireless interaction path between the device and the platform. The device connects to the wireless access node array via WiFi, and the latter forwards data to the centralized management platform to perform operations such as device access, authentication, configuration file distribution, and initialization completion status reporting.

[0111] Figure 3 This is a timing diagram of the batch initialization process of the CPE device according to an embodiment of this disclosure.

[0112] like Figure 3 As shown, this process involves a DC server, CPE equipment (CPE-n), and wireless access points (APs), and its initialization process includes the following steps:

[0113] 1. Initialize wireless network identification and access

[0114] After powering on, the DC server automatically scans the SSID of the target initialization network and completes its own access to the initialization network.

[0115] After powering on, the CPE device (such as CPE-n) automatically scans and initializes the SSID and connects to the initial network.

[0116] 2. Identity Authentication and Wireless Networking

[0117] The WPA3-Enterprise authentication framework (or other digital certificate-based protocols) is used to complete two-way authentication between the CPE, AP, and DC server, establishing a trusted wireless network connection.

[0118] 3. Obtaining a temporary IP address

[0119] The CPE obtains a temporary IP address from the wireless AP via DHCP for subsequent communication.

[0120] 4. Establish a secure communication tunnel

[0121] The CPE establishes an encrypted tunnel with the DC server based on a temporary IP address. Preferably, the tunnel is a secure communication channel established based on the IPSec protocol; alternatively, other security protocols that support data encryption and authentication, such as TLS and SSL VPN, may also be used.

[0122] 5. Configuration file download and loading

[0123] The CPE downloads the initialization configuration file from the DC server via a secure tunnel. This configuration file is generated by the centralized management platform based on device identification information (such as MAC address and serial number) from a configuration template library and is used for device initialization. After downloading, the device automatically loads the configuration file and applies the initialization parameters.

[0124] 6. Activation certificate generation

[0125] The CPE generates a device-specific activation certificate, which serves as the verification basis for the completion of initialization and subsequent management.

[0126] 7. Initialization completion report and confirmation

[0127] The CPE device sends an initialization completion notification to the DC server;

[0128] Upon receiving the notification, the platform records the initialization status and confirms that the device has completed the online process. The device can then access the business network or perform further configuration.

[0129] Figure 4 This is a flowchart illustrating how the centralized management platform (DC server) of this disclosure centrally manages initialization files.

[0130] like Figure 4 As shown, this process is the core step after the device accesses the platform through the wireless network, completes two-way authentication, and establishes a secure communication channel. It mainly involves the search, transmission, loading, and status feedback management of the initialization configuration file.

[0131] Includes the following steps:

[0132] 1. Initialization status detection and request initiation

[0133] The CPE device first checks its own initialization status locally. If the status is determined to be "uninitialized," it sends an initialization configuration file request to the DC server through a secure communication channel. The request message carries a unique device identifier (such as the device serial number), which is used by the platform to identify the device and locate the corresponding initialization configuration file.

[0134] 2. Configuration file matching and preparation

[0135] After receiving the request, the DC server parses the device identification information (such as the serial number) in the message and matches it with the initialization configuration file bound to that identifier in the pre-stored configuration file library. This configuration file is a standardized parameter template pre-stored by the platform during the initialization preparation phase.

[0136] 3. Configuration file transfer

[0137] The DC server transmits the initialization configuration file to the target CPE device through an established secure communication tunnel. During transmission, the platform supports encrypted transmission and resume interrupted transmission to ensure the integrity and reliability of file transfer.

[0138] 4. File reception and configuration loading

[0139] After receiving the initialization configuration file, the CPE device performs a file loading operation. Upon successful configuration loading, the device updates its local status to "initialized" and generates a device-specific activation credential for identification in subsequent platform management.

[0140] 5. Status reporting and recording

[0141] The CPE device will report the initialization completion status and the generated activation certificate to the DC server;

[0142] After receiving device status feedback, the platform updates the device's initialization status record and archives it into the system initialization status database.

[0143] In this embodiment of the disclosure, the DC server, as a centralized management platform, achieves efficient device initialization management through the following mechanism:

[0144] 1. Centralized configuration management

[0145] Maintain a unified configuration resource library; perform precise configuration matching and distribution based on the device's unique identifier (such as serial number).

[0146] 2. Intelligent status monitoring

[0147] Record initialization status (success / failure) in real time; automatically classify failure reasons (transmission interruption, configuration verification error, etc.); support both automatic retry and manual intervention modes.

[0148] 3. Automated operation and maintenance processing

[0149] For different failure types, corresponding actions are triggered: automatic resume from interruption if transmission fails; generate error report and alarm for configuration error.

[0150] Output statistical reports (including success rate, failure classification, etc.).

[0151] Figure 5This is a schematic diagram of the composition of an electronic device according to an embodiment of the present disclosure.

[0152] Thirdly, referring to Figure 5 This disclosure provides an electronic device, which includes:

[0153] One or more processors 501;

[0154] The memory 502 stores one or more programs, which, when executed by one or more processors, cause the one or more processors to implement the centralized device initialization method described in the first aspect of the present disclosure.

[0155] One or more I / O interfaces 503 are connected between the processor and the memory and configured to enable information exchange between the processor and the memory.

[0156] Among them, processor 501 is a device with data processing capabilities, including but not limited to central processing unit (CPU); memory 502 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory (FLASH); I / O interface (read-write interface) 503 is connected between processor 501 and memory 502, and can realize information interaction between processor 501 and memory 502, including but not limited to data bus (Bus).

[0157] In some embodiments, the processor 501, memory 502, and I / O interface 503 are interconnected via bus 504, and thus connected to other components of the computing device.

[0158] Fourthly, embodiments of this disclosure provide a computer-readable medium having a computer program stored thereon, which, when executed by a processor, implements the centralized device initialization method described in the first aspect of embodiments of this disclosure.

[0159] Fifthly, embodiments of this disclosure provide a computer program product, including a computer program or instructions, which, when executed by a processor, implement the centralized device initialization method described in the first aspect of this disclosure.

[0160] Figure 6 This is a block diagram of a centralized device initialization server according to an embodiment of the present disclosure.

[0161] Sixthly, refer to Figure 6 This disclosure provides a centralized device initialization server, comprising:

[0162] Configuration and version repository 601, configured to pre-store the identification information of multiple devices to be initialized and the initialization configuration file corresponding to each of the multiple devices;

[0163] The access management module 602 is configured to receive access requests from the multiple devices through a wireless access node array, and establish secure communication tunnels with each device based on identity authentication.

[0164] The configuration distribution module 603 is configured to determine the initialization configuration file of each device based on its identification information, and distribute the initialization configuration file to the device through the corresponding secure communication tunnel.

[0165] The status management module 604 is configured to receive initialization status information fed back by the multiple devices, and to classify, process and statistically output the information.

[0166] In some embodiments, the configuration and version repository 601 includes:

[0167] The first identification information acquisition submodule is configured to acquire at least one of the media access control address and serial number of each device to be initialized as identification information.

[0168] Configure the association submodule to associate the identification information with the initialization configuration file corresponding to the device;

[0169] The first storage management submodule is configured to store the identification information and the corresponding initialization configuration file.

[0170] In some embodiments, the configuration and version repository 601 includes:

[0171] The second identification information acquisition submodule is configured to acquire at least one of the media access control address and serial number of each device to be initialized as identification information.

[0172] The configuration file generation submodule is configured to generate a corresponding initialization configuration file based on the identification information and the preset initialization configuration template;

[0173] The second storage management submodule is configured to store the identification information and the initialization configuration file.

[0174] In some embodiments, the access management module 602 includes:

[0175] The identifier configuration submodule is configured to configure a dedicated, initialized access identifier.

[0176] The broadcast control submodule is configured to control a wireless access node array that supports a multi-device high-concurrency access protocol to broadcast the access identifier;

[0177] The identity authentication submodule is configured to respond to access requests initiated by the multiple devices based on the access identifier and perform two-way identity authentication based on their respective device-specific encryption certificates;

[0178] The tunnel establishment submodule is configured to establish secure communication tunnels with each device based on the temporary IP addresses obtained by each device after successful identity authentication.

[0179] In some embodiments, the identifier configuration submodule further includes:

[0180] The SSID configuration unit is configured to configure a dedicated initialized Service Set Identifier (SSID) for the wireless access point array in the wireless access node array composed of wireless access point arrays.

[0181] The broadcast control submodule further includes:

[0182] The SSID broadcast control unit is configured to control the wireless access point array to broadcast the service set identifier.

[0183] In some embodiments, the state management module 604 includes:

[0184] The status information receiving submodule is configured to receive at least one of the initialization success information and initialization failure information fed back by each device;

[0185] The initialization success information includes a device-specific activation certificate generated by the device.

[0186] In some embodiments, the device centralized initialization apparatus further includes:

[0187] The failure type classification module is configured to classify initialization failure information into transmission failures and non-transmission failures based on the reason for the initialization failure when it is received.

[0188] The transmission failure handling module is configured to automatically retransmit or resume interrupted transmission for transmission failures.

[0189] The anomaly alarm module is configured to generate a statistical list of devices that failed initialization and a manual intervention prompt for non-transmission type failures.

[0190] To enable those skilled in the art to more clearly understand the technical solutions provided by the embodiments of this disclosure, the centralized device initialization method provided by the embodiments of this disclosure will be described in detail below through specific embodiments:

[0191] Example 1

[0192] This embodiment applies to the batch initialization of SD-WAN edge devices (CPE) in enterprise data centers. The specific process is as follows:

[0193] Environmental preparation:

[0194] Deploy a wireless AP array supporting IEEE 802.11ax in the computer room, configure a dedicated SSID and bind it to an independent VLAN to isolate and initialize network and service traffic; deploy the centralized management platform (DC server) in a portable server, integrating functions such as DHCP service, certificate authority (CA), configuration template library, and security protocol support.

[0195] Initialization process:

[0196] 1) Multiple SD-WAN CPE devices (supporting WiFi) automatically scan and initialize SSID after power-on, and connect to the wireless network environment;

[0197] 2) The device uses the WPA3-Enterprise EAP-TLS protocol, pre-installed certificates, and the management platform to complete two-way authentication; a temporary IP address is allocated, and a communication link is established;

[0198] 3) Each device establishes an encrypted tunnel with the DC server via the IPSec protocol, and the platform matches the device serial numbers and sends out a preset initialization configuration file;

[0199] 4) The device receives and loads the configuration, completes initialization, generates a unique activation certificate, and reports it.

[0200] 5) The platform records the initialization completion status and incorporates the device into a unified operation and maintenance management platform.

[0201] Error handling: Automatic retry (maximum 3 times) when transmission fails; trigger alarm and record to operation and maintenance work order system when configuration verification fails.

[0202] This disclosure aims to simplify the equipment management and deployment work for operations and maintenance personnel, and is particularly suitable for automated deployment scenarios of large-scale CPE devices. It involves the following technical features:

[0203] A device initialization method based on a wireless network includes: achieving concurrent authentication, configuration file distribution, and deployment status verification of multiple CPE devices through a pre-established wireless network environment, thereby realizing an efficient, unified, and automated device online process.

[0204] The key technical point of this disclosure is: providing a centralized initialization method for network terminal devices based on a wireless network, including automatic access of multiple devices with wireless access capabilities through a pre-deployed array of wireless access nodes, two-way authentication based on device identifiers, concurrent distribution and automatic application of initialization configuration files, and feeding back the status results to a centralized management platform after initialization, thereby achieving zero-contact deployment and closed-loop status management of batch devices. Preferably, the authentication method is based on device certificates, and the configuration file is dynamically generated by the centralized management platform according to a preset template.

[0205] The device initialization method disclosed herein can bring the following beneficial effects:

[0206] 1) Significantly Improved Deployment Efficiency: This specification supports simultaneous initial configuration of more than 200 CPE devices. Actual testing shows that compared to the traditional method of configuring each device individually, overall deployment efficiency is improved by more than 5 times, significantly reducing maintenance time.

[0207] 2) Enhance system security: Adopting the "Zero-Touch Provisioning" (ZTP) technology principle, the system eliminates manual intervention through automated processes, reducing the security risk of configuration leakage or errors caused by human operation, and improving the overall stability and security of the system.

[0208] It will be understood by those skilled in the art that all or some of the steps, systems, or apparatuses disclosed above, and their functional modules / units, can be implemented as software, firmware, hardware, or suitable combinations thereof. In hardware implementations, the division between functional modules / units mentioned above does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed collaboratively by several physical components. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit (ASIC). Such software may be distributed on a computer-readable medium, which may include computer storage media (or non-transitory media) and communication media (or transient media). As is known to those skilled in the art, the term computer storage media includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridges, magnetic tape, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and can be accessed by a computer. Furthermore, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and may include any information delivery medium.

[0209] Example embodiments have been disclosed herein, and while specific terminology has been used, it is for illustrative purposes only and should be construed as such, and is not intended to be limiting. In some instances, it will be apparent to those skilled in the art that features, characteristics, and / or elements described in connection with particular embodiments may be used alone, or in combination with features, characteristics, and / or elements described in connection with other embodiments, unless otherwise expressly indicated. Therefore, those skilled in the art will understand that various changes in form and detail may be made without departing from the scope of this disclosure as set forth by the appended claims.

Claims

1. A centralized device initialization method, comprising: The identification information of multiple devices to be initialized and the initialization configuration file corresponding to each of the multiple devices are pre-stored. The system receives access requests from the multiple devices via a wireless access node array and establishes secure communication tunnels with each device based on identity authentication. For each device, the initialization configuration file of the device is determined according to its identification information, and the initialization configuration file is sent to the device through the corresponding secure communication tunnel; Receive initialization status information from the multiple devices. This includes receiving access requests from the multiple devices via a wireless access node array and establishing secure communication tunnels with each device based on identity authentication, including: Configure a dedicated, initialized access identifier; The control unit broadcasts the access identifier to a wireless access node array that supports high-concurrency access protocols for multiple devices. In response to access requests initiated by the multiple devices based on the access identifier, two-way authentication is performed based on each device's unique encrypted certificate; After successful identity authentication, a secure communication tunnel is established between each device based on the temporary IP address obtained by each device.

2. The centralized device initialization method according to claim 1, wherein, The system pre-stores identification information of multiple devices to be initialized and initialization configuration files corresponding to each of the multiple devices, including: For each device to be initialized: Obtain at least one of the device's media access control address and serial number as identification information; The identification information is associated with the initialization configuration file corresponding to the device. Store the identification information and the corresponding initialization configuration file.

3. The centralized device initialization method according to claim 1, wherein, The system pre-stores identification information of multiple devices to be initialized and initialization configuration files corresponding to each of the multiple devices, including: For each device to be initialized: Obtain at least one of the device's media access control address and serial number as identification information; Generate a corresponding initialization configuration file based on the identification information and the preset initialization configuration template; Store the identification information and the initialization configuration file.

4. The centralized device initialization method according to claim 1, wherein, Configure a dedicated, initialized access identifier and control the wireless access node array to broadcast the identifier, including: Configure a dedicated, initialized service set identifier for the wireless access point array, which is composed of wireless access point arrays. Control the wireless access point array to broadcast the service set identifier.

5. The centralized device initialization method according to claim 4, wherein, Receive initialization status information fed back by the multiple devices, including: Receive at least one of the initialization success message and initialization failure message from each device. The initialization success information includes a device-specific activation certificate generated by the device.

6. The centralized device initialization method according to claim 5, wherein, The method further includes: When receiving initialization failure information, the failure is classified into transmission failure and non-transmission failure according to the reason for the initialization failure; For transmission failures, execute automatic retransmission or resume interrupted transmission based on the initialization configuration file. For non-transmission type failures, generate a statistical list of devices that failed initialization and prompt for manual intervention.

7. A centralized device initialization system, comprising: At least one wireless access node is configured to broadcast a dedicated access identifier for initialization and support concurrent access from multiple devices; Multiple devices to be initialized, each device is configured to access the wireless access node through the access identifier, perform two-way authentication based on its own device-specific encryption certificate, and after successful authentication, establish a secure communication tunnel with the centralized management platform based on the temporary IP address obtained by the device, and receive an initialization configuration file matching its identification information through the tunnel; The centralized management platform is configured to store the identification information of multiple devices to be initialized and the initialization configuration file corresponding to each device; The initialization configuration file corresponding to each device is sent to the corresponding device through the secure communication tunnel; It also receives initialization status information from the device.

8. The centralized device initialization system according to claim 7, wherein, The wireless access node is a wireless access point array that supports high-concurrency access protocols for multiple devices, including IEEE 802.11ax.

9. An electronic device, comprising: One or more processors; A memory having stored one or more programs that, when executed by one or more processors, cause the one or more processors to implement the centralized device initialization method according to any one of claims 1 to 6.

10. A computer-readable medium having a computer program stored thereon, the computer program, when executed by a processor, implementing the device centralized initialization method according to any one of claims 1 to 6.

11. A computer program product comprising a computer program or instructions that, when executed by a processor, implement the centralized device initialization method according to any one of claims 1 to 6.

Images