Network Device Authentication via Dual-Link Identifier Extraction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for configuring CPE devices for ADSL over ISDN are inefficient, as they require manual intervention, are costly, or rely on imperfect logistical execution, failing to ensure proper device authentication and configuration at customer premises without user intervention, especially for large-scale deployments.

Innovation Solution

A method that uses ADSL as primary signaling technology and ISDN as secondary signaling technology to obtain a unique link identifier through caller ID, allowing authentication and configuration of CPE devices without user intervention, ensuring secure and accurate deployment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual configuration by service technician is used, then device authentication and configuration accuracy is improved, but deployment cost and time consumption increases significantly

Engineering Contradiction:
Improveconfiguration accuracyVSAvoiddeployment time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The CPE device automatically performs configuration by reading its own serial number, generating configuration files, and uploading them to the OAM server without requiring service technician intervention. This self-service mechanism eliminates manual configuration while maintaining accuracy through automated verification processes.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The device serial number is pre-configured in the CPE device during manufacturing, enabling automatic identification and configuration before deployment. The OAM server pre-generates configuration files based on the serial number, so when the device is deployed, configuration is immediately available without manual intervention.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If service technician deployment is used, then device authentication reliability is improved, but deployment cost increases

Engineering Contradiction:
Improveauthentication reliabilityVSAvoiddeployment cost
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The CPE device automatically authenticates itself by providing its pre-configured serial number to the OAM server, which verifies the serial number against its database and provides the appropriate configuration file. This eliminates the need for service technician intervention while maintaining authentication reliability through automated verification.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The OAM server provides feedback by verifying the device serial number and returning the appropriate configuration file only if verification succeeds. This feedback mechanism ensures authentication reliability while eliminating the need for expensive manual deployment.

Inventive Principle:
Principle #23Feedback

3Reliability

If pre-configured devices with individual configurations are used, then device-specific authentication is improved, but logistics complexity and risk of mismatch increases

Engineering Contradiction:
Improvedevice authenticationVSAvoidlogistics complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the device identification (serial number) from the physical device and uses it as a key to retrieve the appropriate configuration file from the OAM server database. This separates the configuration management from physical logistics, allowing any device to be configured automatically based on its serial number without complex tracking of which configuration belongs to which physical device.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The OAM server database stores configuration files for multiple device types and configurations, and the system can automatically provide the correct configuration for any device that presents its serial number. This universal approach eliminates the need for device-specific manual configuration management while maintaining authentication reliability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS7873164B1Method and apparatus for configuring network devices
Publication Date: 2011.01.18 CISCO TECHNOLOGY INC
  • US7873164B1 patent drawing
  • US7873164B1 patent drawing
  • US7873164B1 patent drawing

AI summary

A method for authenticating a network device includes determining that a network link that uses a primary signaling technology and a secondary signaling technology is coupled to the network device; obtaining, using the secondary signaling technology, a unique link identifier that is associated with the network link using the secondary signaling technology; establishing the unique link identifier as a unique device identifier; and authenticating the network device to a service provider by communicating the unique device identifier to the service provider over the network link using the primary signaling technology. In one approach, the primary signaling technology is ADSL and the secondary signaling technology is ISDN. The unique link identifier may be an ISDN telephone number for an ISDN line which is obtained using caller ID techniques.