Networking Device Credential Reset via Authorization Engine

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing networking devices face challenges in resetting credential information, especially when the administrator password is unavailable, leading to difficulties such as network downtime and complex recovery processes.

Innovation Solution

The implementation of a credential information reset authorization engine within an Information Handling System (IHS) that receives reset requests, generates alerts, validates administrator credentials, and authorizes resets without requiring network connectivity or extensive configuration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional password reset methods (reinstalling OS or using backdoor mechanisms) are used, then the user password can be reset, but network downtime occurs and device complexity increases

Engineering Contradiction:

Improvepassword reset capabilityVSAvoidnetwork downtime

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-configuring the networking device with a registered identifier and storing credential reset authorization data in advance. When a password reset is needed, the system uses these pre-prepared elements to enable rapid authentication without requiring OS reinstallation or complex backdoor procedures, thereby eliminating network downtime.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system introduces an intermediary credential information reset authorization engine that mediates between the networking device and the authentication process. This intermediary component handles the complex verification of registered identifiers and credential reset authorization data, simplifying the password reset operation for users while preventing downtime.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If backdoor mechanisms are used to reset passwords, then credential reset is possible without reconfiguration, but device complexity and preparation requirements increase

Engineering Contradiction:

Improvecredential reset processVSAvoidreset mechanism complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The networking device performs self-service by automatically generating and using its own registered identifier for authentication. The device can independently verify credential reset requests using its pre-configured registered identifier and stored authorization data, eliminating the need for complex external backdoor mechanisms or manual intervention, thereby reducing device complexity.

Inventive Principle:

Principle #25Self-service

3Reliability

If Internet connectivity is restricted for security reasons, then network security is improved, but remote password reset capability is lost

Engineering Contradiction:

Improvenetwork securityVSAvoidremote credential reset

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system transitions from Internet-based remote reset to a local dimension solution by using pre-configured registered identifiers and stored authorization data within the private network. This dimensional shift allows password resets to occur locally without requiring Internet connectivity, maintaining security while enabling remote reset capability through alternative means.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

4Ease of operation

If user secrets are stored in the networking device for password reset, then reset authorization is enabled, but storage burden increases for large datacenters

Engineering Contradiction:

Improvepassword reset authorizationVSAvoidstorage requirements

Core Design Contradiction:

Ease of operationVSQuantity of substance

Solution Approach 1:

Instead of storing extensive user secrets for all users, the system applies local quality by storing only essential credential reset authorization data and registered identifiers directly in the networking device. This selective local storage provides sufficient reset authorization capability while minimizing storage burden in large datacenter environments.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS12212557B2Networking device credential information reset system

Publication Date: 2025.01.28 DELL PROD LP

AI summary

A networking device credential information reset system includes credential information reset authorization devices coupled to a networking device. At least one of the credential information reset authorization devices receives a networking device credential information reset request from the networking device and, in response, generates a networking device credential information reset alert and provides it for display on an administrator device. Following the networking device credential information reset alert being provided for display on the administrator device, a first credential information reset authorization device receives first credential information for the first credential information reset authorization device from the administrator device, validates the first credential information and, in response, provides a credential information reset authorization to the networking device that is configured to cause the networking device to reset second credential information for the networking device.