Automatic provisioning of authentication credentials

Patent metadata

Field	Value
Publication number	US-9077544-B2
Application number	US-56030409-A
Country	US
Kind code	B2
Filing date	Sep 15, 2009
Priority date	Sep 15, 2009
Publication date	Jul 7, 2015
Grant date	Jul 7, 2015

Abstract

Methods and systems of automatically provisioning authentication credentials on a plurality of network devices. The method may include determining a process for provisioning the authentication credentials for the plurality of devices. The process may include steps of gaining access to a network device, entering a command to reach a network service interface associated to the network device, indicating a location of the authentication credentials, and initiating installation of the authentication credentials. The method may also include providing a computer program to follow the process. The computer program may be a script that is automatically executed without a user intervention. The method may further include developing a list of the plurality of devices that need to be provisioned, associating the list of the plurality of devices to the computer program, executing the computer program for each device, and outputting whether each of the plurality of network devices has a successful authentication credential update.

First claim

We claim:

1. A method of automatically provisioning authentication credentials on a plurality of network devices, comprising:
automatically obtaining a list of network devices that need to be provisioned with authentication credentials allowing the network devices to attach to a network, one or more of the network devices being medical devices configured to measure physiological data associated with a patient,
wherein one or more of the authentication credentials are authentication certificates or pre-shared keys;
identifying one or more classes of network devices from the list of network devices that need to be provisioned with authentication credentials;
mapping each identified class of network device to a script or subroutine of a computer program; and
executing the script or subroutine for each mapped class of network device to automatically provision the authentication credentials for the plurality of network devices to allow the network devices to attach to and access resources on the network,
wherein each network device that is provisioned for an identified class of network devices is provisioned by executing a same script or subroutine that is mapped to the identified class of network device, and
wherein the script or subroutine for a network device of the identified class of network devices includes:
automating authentication to access the network device by performing a query involving a mapping of an Internet Protocol address to a Media Access Control address; and
uploading at least one of the authentication certificates to the network device upon authentication.

2. The method of claim 1 , wherein the computer program is automatically executed without user intervention.

3. The method of claim 1 , further comprising steps of:
gaining access to a network device;
entering a command to reach a network service interface associated to the network device;
indicating a location of the authentication credentials; and
initiating installation of the authentication credentials.

4. The method of claim 1 , wherein applying the computer program includes:
associating the plurality of network devices to the computer program through a database or data file; and
executing the computer program for each device.

5. The method of claim 1 , further comprising outputting to a display, report, database, or data file whether the plurality of network devices have a successful authentication credential update or not.

6. The method of claim 1 , wherein the plurality of network devices include multiple different types of network devices.

7. The method of claim 6 , wherein provisioning authentication credentials includes provisioning authentication credentials on the multiple different types of network devices having different authentication credentials.

8. The method of claim 1 , wherein the plurality of network devices are wireless network devices.

Assignees

• Baker Steven D
• Petersen Eric G
• Welch Allyn Inc

Inventors

• Baker Steven D
• Petersen Eric G

Classifications

• H04L2209/80

  Wireless · CPC title

• H04L9/3263 Primary

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• G06F21/31

  User authentication · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/0846

  using time-dependent-passwords, e.g. periodically changing passwords · CPC title