Network device configuration

Abstract

A network device initially has no configuration data and is permitted only to query a known network address. From this address a server verifies the connection and authorizes another server to download to the network device the necessary configuration to carry out its purpose. This configuration may not be amended and is not retained on power loss. Any updates are carried out by a complete reload of configuration data.

1 . A network device, comprising: 
 operating software but no configuration data allowing it to carry out its intended purpose, the network device being remotely programmable with configuration data as a whole but which network device or operating software has no facility to allow any incremental change of configuration data.    
     
     
         2 . The network device as claimed in  claim 1 , wherein the device configuration data is held in random access memory (RAM) and is lost when no network device supply voltage is present.  
     
     
         3 . The network device as claimed in  claim 1 , wherein the device operating software contains a routine which on initialization attempts to contact a remote verification authority to authorize retrieval of configuration data from a configuration authority.  
     
     
         4 . The network device as claimed in  claim 3 , wherein the device software contains only the routine for contacting the remote verification authority and receiving data from the remote configuration authority.  
     
     
         5 . The network device as claimed in  claim 3 , wherein the contact with the remote verification authority is subject to encryption.  
     
     
         6 . The network device as claimed in  claim 2 , wherein the device initially contains an input filter which will only receive configuration data from a specified remote configuration authority address.  
     
     
         7 . The network device as claimed in  claim 1 , wherein the device is a router which is integral with a modem.  
     
     
         8 . The network device as claimed in  claim 7 , wherein the modem is an asymmetric digital subscriber line (ADSL) modem.  
     
     
         9 . A method of configuring a network device which loses its configuration data on power loss, comprising: 
 providing a network device without user configuration data, providing within the network device a routine which securely contacts a remote verification authority; and    downloading from a remote configuration authority authorized by the remote verification authority the entire configuration data.    
     
     
         10 . The method as claimed in  claim 9 , wherein the network device is a router.  
     
     
         11 . The method as claimed in  claim 10 , wherein the router is part of an ADSL modem.  
     
     
         12 . The method as claimed in  claim 9 , wherein the network device is capable of being configured only by remote download of the complete configuration data.  
     
     
         13 . The method as claimed in  claim 9 , wherein the network device router which contacts the remote verification authority carries out any information transfer using secure encryption.  
     
     
         14 . The method as claimed in  claim 13 , wherein the secure encryption employs a public key encryption method.  
     
     
         15 . The method as claimed in  claim 14 , wherein the private key for the network device is provided by a device temporarily connected to the network device.  
     
     
         16 . The method as claimed in  claim 15 , wherein the temporarily connected device is a USB memory device.  
     
     
         17 . The method as claimed in  claim 13 , wherein the secure encryption employs an encryption method utilizing both a private key and a public key.  
     
     
         18 . The method as claimed in  claim 9 , wherein the configuration data is also lost from the network device on any intrusion attempt.