Zero Touch Mobile Router Configuration via Encrypted SMS

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current mobile router deployment methods require manual configuration and initial setup, which can be time-consuming and prone to errors, and lack secure, efficient ways to deliver configuration data without relying on wired interfaces.

Innovation Solution

The implementation of zero touch deployment techniques using a cellular wide area network (WWAN) interface, where encrypted bootstrap configuration information is sent via SMS to a mobile router's SIM card, allowing the device to self-configure by decrypting the information and establishing communication with a remote server for further configuration data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Manufacturing precision

If manual configuration is used for mobile router deployment, then configuration accuracy can be ensured, but deployment time increases and productivity decreases

Engineering Contradiction:

Improveconfiguration accuracyVSAvoiddeployment speed

Core Design Contradiction:

Manufacturing precisionVSProductivity

Solution Approach 1:

Configuration data is pre-prepared and encrypted before device deployment. The bootstrap configuration information including encryption keys is created in advance and stored securely, allowing automated decryption and application during zero-touch deployment without manual intervention

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The mobile router performs self-configuration by automatically decrypting the pre-prepared configuration data using keys stored on its SIM card, and autonomously applies the configuration settings without requiring manual input from technicians, thereby achieving both accuracy and speed

Inventive Principle:

Principle #25Self-service

2Productivity

If pre-staged configuration data is transmitted without encryption, then deployment efficiency improves, but security is compromised

Engineering Contradiction:

Improvedeployment efficiencyVSAvoidconfiguration security

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

Configuration data is encrypted in advance using symmetric encryption algorithms before being transmitted to or stored on the device. The encryption keys are pre-loaded on the SIM card, enabling secure automated decryption during deployment without compromising security

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The SIM card acts as a secure intermediary that stores both the encrypted configuration data and the decryption keys. This intermediary layer ensures that configuration data remains protected throughout transmission and storage, while enabling automated access when needed

Inventive Principle:

Principle #24Intermediary (Mediator)

3Stability of the object's composition

If wired interfaces are used for configuration data delivery, then connection stability is ensured, but deployment flexibility and speed decrease

Engineering Contradiction:

Improveconnection stabilityVSAvoiddeployment speed

Core Design Contradiction:

Stability of the object's compositionVSProductivity

Solution Approach 1:

The patent replaces mechanical wired connections with wireless communication channels (such as SMS or data messages) for transmitting configuration data. This substitution maintains connection reliability through protocol-level error handling while eliminating the need for physical connectivity during deployment

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

4Loss of time

If automated self-configuration is implemented, then deployment time is reduced, but security risks from unauthorized configuration increase

Engineering Contradiction:

Improvedeployment timeVSAvoidunauthorized configuration access

Core Design Contradiction:

Loss of timeVSObject-affected harmful factors

Solution Approach 1:

Authentication credentials and encryption keys are pre-configured on the SIM card before deployment. The device automatically verifies its identity and decrypts configuration data using these pre-provisioned credentials, ensuring that only authorized devices can perform self-configuration

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The SIM card serves as a secure intermediary that controls access to configuration data through cryptographic authentication. It verifies device identity and manages key distribution, preventing unauthorized access while enabling automated configuration for authenticated devices

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10108435B2Short message service security for zero touch deployments

Publication Date: 2018.10.23 CISCO TECHNOLOGY INC

AI summary

Presented herein are techniques for enabling the zero touch deployment of devices having an integrated wireless wide area network (WWAN) interface. In one example, a method includes initializing a device with a WWAN interface such that the device attaches to a WWAN, receiving, via the WWAN interface of the device, a data message that includes encrypted bootstrap configuration information, obtaining a key stored in a subscriber identification module (SIM) card of the WWAN interface, decrypting the encrypted bootstrap configuration information using the key, establishing communication with a remote server using the bootstrap configuration information and obtaining configuration data from the remote server, and performing self-configuration of the device using the configuration data.