Automated Device Provisioning via OCR Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The manual identification and registration of network devices for multi-tenant services are time-consuming and prone to errors, especially when dealing with large numbers of devices, and can lead to the distribution of counterfeit devices, as they rely on visual inspection of printed serial numbers.

Innovation Solution

Implementing a system where network devices automatically connect to a multi-tenant cloud-based service upon purchase, using a unique identification number stored in the device's memory to authenticate and associate the device with its corresponding tenant, enabling seamless and secure distribution of tailored network services, including software and configuration updates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If manual identification and registration of network devices is used, then device setup can be performed with simple printed serial numbers, but the process becomes time-consuming and error-prone when dealing with large numbers of devices

Engineering Contradiction:
Improvedevice setup simplicityVSAvoiddevice registration speed
Core Design Contradiction:
Ease of manufactureVSProductivity

Solution Approach 1:

The patent replaces manual visual inspection and manual data entry (mechanical processes) with automated optical scanning and electronic data processing. The system uses an imager to capture serial numbers and an OCR engine to automatically convert images to text, eliminating the need for manual reading and typing of device identifiers.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system enables devices to self-register by automatically capturing and processing their own serial numbers through the imager and OCR engine, without requiring human intervention for each device. The automated workflow allows devices to be registered independently and in parallel, significantly improving throughput.

Inventive Principle:
Principle #25Self-service

2Ease of manufacture

If printed serial numbers are used for device identification, then device manufacturing remains simple, but the identification can be readily duplicated and shared with counterfeit devices

Engineering Contradiction:
Improvedevice manufacturing simplicityVSAvoiddevice authentication security
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent replaces reliance on physical printed serial numbers (which can be copied) with electronic image capture and digital processing. By using an imager to capture the serial number and processing it through OCR with validation against a database, the system creates a digital verification layer that prevents counterfeit devices from being authenticated.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system implements a feedback mechanism where captured serial numbers are validated against a database of legitimate device identifiers. The OCR engine compares the captured text with expected formats and queries a database to verify authenticity, providing immediate feedback on whether the device is genuine or counterfeit.

Inventive Principle:
Principle #23Feedback

3Device complexity

If manual reading and dissemination of device identification is performed, then no specialized scanning equipment is needed, but the process requires onsite technicians and becomes inconvenient for large numbers of devices

Engineering Contradiction:
Improvesystem equipment requirementsVSAvoiddevice registration convenience
Core Design Contradiction:
Device complexityVSEase of operation

Solution Approach 1:

The patent replaces manual reading and dissemination processes with automated imaging and electronic data processing. The imager captures serial numbers, the OCR engine converts images to text, and the system automatically disseminates device identifiers to the manufacturer or service provider, eliminating the need for manual transcription and physical presence of technicians.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system introduces an intermediary automated processing layer between the physical device and the service provider. The imager and OCR engine act as intermediaries that bridge the gap between physical device identifiers and digital record-keeping, enabling remote and automated device registration without requiring direct human intervention at each device location.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Ease of manufacture

If visual inspection of printed identification is used, then device setup can be performed without electronic scanning equipment, but the process is time-consuming and inefficient for large-scale device deployment

Engineering Contradiction:
Improvesetup process simplicityVSAvoiddevice registration time
Core Design Contradiction:
Ease of manufactureVSLoss of time

Solution Approach 1:

The patent replaces time-consuming manual visual inspection with rapid electronic imaging and automated OCR processing. The imager captures serial numbers in seconds, and the OCR engine automatically converts the images to text and validates them against a database, reducing device registration time from minutes per device to seconds per device.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system performs preliminary actions by pre-configuring the imager and OCR engine to automatically capture and process serial numbers as devices are introduced to the network. The validation against the database is performed in advance before device activation, preventing delays during device deployment and enabling parallel processing of multiple devices.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11632438B2Device provisioning in a multi-tenant service
Publication Date: 2023.04.18 ARISTA NETWORKS INC
  • US11632438B2 patent drawing
  • US11632438B2 patent drawing
  • US11632438B2 patent drawing

AI summary

A method for distributing network services for a network device through a multi-tenant network service. An identification parameter is associated with the device and is stored in a database by an orders management system after the device is ordered. The method includes establishing a network connection between a network device and a multi-tenant network service and, in response to establishing the network connection, obtaining device-associated identification parameter from the network device. The identification parameter is used to query the database for at least one record associated with the network device identifying a tenant of the multi-tenant network service in which the tenant corresponds to the device. The service maps the network device to the identified tenant of the multi-tenant network service and distributes network services based upon the mapping of the network device to the identified tenant.