Device Configuration Templates for Network Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current network security device configuration methods are cumbersome and error-prone, especially for large networks with hundreds of devices, as they require manual entry of thousands of lines of data through command line interfaces.

Innovation Solution

A system utilizing device templates with prioritized parameter values stored in memory, allowing a processor to configure devices efficiently by referencing and merging configuration information from multiple templates, including generic and specific data for different types of devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Manufacturing precision

If manual configuration entry is used for each security device, then configuration accuracy can be maintained, but the time and effort required increases significantly for large networks

Engineering Contradiction:
Improveconfiguration accuracyVSAvoidconfiguration time
Core Design Contradiction:
Manufacturing precisionVSLoss of time

Solution Approach 1:

The patent uses templates as reusable copies of configuration data that can be applied to multiple devices. Instead of manually entering configuration lines for each device, operators create a template once and copy it to numerous devices, dramatically reducing configuration time while maintaining accuracy through the template structure

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent implements preliminary action by pre-configuring templates with default parameter values and configuration structures before device deployment. This allows configuration data to be prepared in advance and automatically applied when devices are added to the network, eliminating the need for manual entry at deployment time

Inventive Principle:
Principle #10Preliminary action

2Adaptability or versatility

If separate configuration is performed for each security device, then device-specific customization is achieved, but operational complexity increases for network operators

Engineering Contradiction:
Improvedevice customizationVSAvoidoperator workload
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent creates universal templates that can serve multiple device types and purposes. A single template can be applied across different security devices with similar configuration requirements, reducing operator workload while still allowing device-specific customization through template parameters and overrides

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent segments configuration data into hierarchical templates with different levels of specificity. Generic configurations are separated from device-specific parameters, allowing operators to work with high-level templates while maintaining the ability to customize individual device settings when needed

Inventive Principle:
Principle #1Segmentation

3Stability of the object's composition

If configuration data is stored in templates, then configuration consistency across devices is improved, but template management complexity increases

Engineering Contradiction:
Improveconfiguration consistencyVSAvoidtemplate management complexity
Core Design Contradiction:
Stability of the object's compositionVSDevice complexity

Solution Approach 1:

The patent introduces a template management system that acts as an intermediary between configuration data and devices. This intermediary handles template storage, retrieval, and application automatically, reducing the perceived complexity for operators while ensuring consistent configuration application across all devices

Inventive Principle:
Principle #24Intermediary (Mediator)

4Productivity

If centralized template management is implemented, then deployment costs are reduced, but system complexity increases

Engineering Contradiction:
Improvedeployment efficiencyVSAvoidsystem architecture complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent merges template management functionality into the existing network management infrastructure. By combining template storage, processing, and device configuration into an integrated system, the patent achieves centralized management benefits while minimizing the addition of separate complex subsystems

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS7603445B1Managing and changing device settings
Publication Date: 2009.10.13 JUNIPER NETWORKS INC
  • US7603445B1 patent drawing
  • US7603445B1 patent drawing
  • US7603445B1 patent drawing

AI summary

A system facilitates the configuring of a set of devices. The system stores templates, where each template includes configuration data that applies to one or more of the devices. The system configures the devices based on the configuration data in the templates.