Dynamic Network Device Configuration via Provisioning Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Devices connected to managed networks often contain fixed network information, which can lead to unauthorized access and are inflexible, limiting their ability to connect to various networks and provide services, especially when network resources like configuration servers need to change for security or reliability reasons.
Innovation Solution
A secure configuration system that includes an authentication and authorization server, a configuration server, a provisioning server, and a DHCP server, using protocols like EAP, RADIUS, and DHCP to dynamically configure and authenticate devices, reducing the need for fixed network information and enhancing flexibility and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If fixed network information is provided in devices, then device configuration is simplified, but security and flexibility are compromised
Solution Approach 1:
The patent implements dynamic configuration by replacing fixed network information with dynamic provisioning. The system uses a provisioning server that receives device identifiers and provides dynamically generated configuration parameters including URLs, IP addresses, and other network settings. This allows the network to adapt configuration information based on security requirements, device type, and network conditions, thereby maintaining ease of operation while improving security and flexibility.
2Ease of operation
If fixed network information is provided in devices, then device configuration is simplified, but adaptability to network changes is reduced
Solution Approach 1:
The system replaces static configuration with dynamic provisioning where the provisioning server generates configuration parameters on-demand. The server receives device identifiers and returns dynamically generated URLs, IP addresses, and configuration settings that are appropriate for the current network state. This enables the same device to connect to different networks and receive appropriate configuration without manual intervention, significantly improving adaptability while maintaining ease of operation.
Solution Approach 2:
The provisioning server acts as an intermediary between devices and the network configuration system. Instead of devices containing hard-coded network information, the provisioning server mediates by receiving device identifiers and generating appropriate configuration parameters. This intermediary approach allows flexible adaptation to different networks and conditions while keeping device configuration simple, as devices only need to provide their identifier and receive configuration from the server.
3Ease of operation
If fixed configuration servers are used, then device setup is straightforward, but network security and reliability changes are difficult to implement
Solution Approach 1:
The system implements dynamic configuration provisioning where the provisioning server generates configuration parameters on-demand based on current network security requirements. Instead of using fixed configuration servers with hard-coded settings, the system dynamically creates URLs, IP addresses, and other configuration data tailored to each device and network condition. This enables straightforward device setup while allowing network security and reliability changes to be implemented easily by updating server policies without affecting individual devices.
Data Source
AI summary
A system and method for supplying, to a provider of the device, requirements for information to be stored on a device, obtaining device data for provisioning the device on a network, storing device configuration information on storage associated with the network, receiving a service request from a user of the device, detecting attachment of the device to the network, authenticating the device utilizing a device identifier and shared credentials to enable the device to be configured without storing a network address for configuration in the device, providing network information to the device, and providing configuration information to the device.