Detailed Description
Exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the invention are shown in the drawings, it should be understood that the invention can be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art.
Fig. 1 is a schematic structural diagram illustrating a management system of a client terminal device according to an embodiment of the present invention, where as shown in fig. 1, the management system of the client terminal device includes: a Customer Premises Equipment (CPE)10, a customer premises equipment management server 20 and a customer premises equipment controller 30. The user terminal device 10 is located in an intranet, in which Fast Reverse Proxy (frp) client software is installed, and information such as a domain name, an externally mapped port, and the like of a pre-configured frp server, and information of a software Defined border (SDP) controller are configured. The user terminal equipment management server 20 and the user terminal equipment controller 30 are located in the public network, and the user terminal equipment management server 20 is installed with frp server software for pre-configuring information of the SDP controller. Control channels are provided between the user terminal equipment 10 and the user terminal equipment controller 30, and between the user terminal equipment controller 30 and the user terminal equipment management server 20 for transmitting control signals, and control channels and data channels are provided between the user terminal equipment 10 and the user terminal equipment management server 20 for transmitting control signals and data information, respectively.
The architecture of a software Defined border (SDP) consists of two parts: an SDP host and an SDP controller. The SDP host may initiate or accept a connection, managed through interaction of control channels with the SDP controller. Within software-defined boundaries, greater scalability can be achieved with control plane and data plane separation. The SDP controller can authenticate and authorize, the SDP host can be connected to the SDP controller to perform identity authentication, and obtain the list information of the service host from the SDP controller, and the SDP accepts the communication between the host and the SDP host, and communicates with the SDP controller to obtain the service policy.
frp is open-source intranet penetration software, can realize network connection of Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) of an intranet and an extranet, and can be mapped to an internal service port of a frp client through an extranet port of a frp server, so that services such as an internal Secure Shell (SSH) and a web can be provided for external access. The embodiment of the invention combines the SDP characteristic and the CPE according to the requirement that the SDP needs to penetrate the intranet, thereby improving the safety of the CPE on the external mapping port.
In the embodiment of the present invention, the user terminal equipment (CPE)10, the user terminal equipment management server 20, and the user terminal equipment controller 30 may include a mobile terminal such as a mobile phone, a tablet pc, a notebook pc, a palm pc, a Personal Digital Assistant (PDA), a Portable Media Player (PMP), a navigation device, a wearable device, a smart band, a pedometer, and a fixed terminal such as a Personal computer.
In the embodiment of the present invention, the user terminal device 10 transmits its serial number and a Media Access Control (MAC) address, i.e. a physical address, of an ethernet network card to the user terminal device controller 30 for authentication. When the user terminal device 10 passes the authentication, the user terminal device controller 30 connects the character strings of the current timestamp, the serial number of the CPE 10, and the network card MAC address when the authentication passes, performs hash operation on the connected character strings by using a BKDRHash method, performs remainder operation on the first number and the preset number obtained after the hash operation, and uses the second number obtained after the remainder operation as the port number of an external mapping port of the CPE 10, where the external mapping port is a port of the CPE 10 for external mapping network (WEB) service. Connecting character strings of several items of information, namely the current timestamp, the serial number of the CPE 10 and the MAC address of the network card when the authentication passes, performing MD5 encoding on the connected character strings, and using the MD5 encoding as tokens (tokens) of the CPE and the CPE management server. The user terminal device controller 30 returns the port number and token of the outward mapping port of the CPE 10 to the frp client of the CPE 10; and recording the port number and token of the external mapping port. The CPE 10 fails authentication and the customer premises equipment controller 30 will return an error message to the CPE 10.
The CPE 10 requests connection to the user terminal equipment management server 20, and transmits the token and the port number of the outward mapping port to the user terminal equipment management server 20. After receiving the request, the user terminal device management server 20 transmits the token to the user terminal device controller 30 for authentication. After the token is verified by the user terminal device controller 30, the security policy rule matched with the token is returned to the user terminal device management server 20, and if the token is verified unsuccessfully, the verification is returned to be failed, and the connection is disconnected.
After receiving the token verification passing response from the user terminal device controller 30, the user terminal device management server 20 receives the security policy matched with the token, first determines whether the public network outlet ip of the CPE 10, i.e., the outward mapping port, meets the security policy, and if not, disconnects the connection with the CPE 10. If the security policy is met, a security tunnel is established with the CPE 10, and a mapping port of the ue management server 20 is associated with an external mapping port of the CPE 10, thereby implementing intranet penetration.
The user accesses the mapping port of the user terminal device management server 20, connects to the CPE 10 to be managed through the browser, and views or modifies the configuration of the CPE 10, thereby implementing management of the CPE 10 on the intranet. When the connection network between the CPE 10 and the ue management server 20 is disconnected, the foregoing steps need to be repeated to obtain a new external mapping port of the CPE 10, and the security of the external mapping port is ensured by using the dynamic external mapping port, so that the security of the CPE 10 device management is improved.
Fig. 2 is a flowchart illustrating a method for managing a client terminal device according to an embodiment of the present invention, which is applied to the user terminal device controller 30. As shown in fig. 2, the management method of the client terminal device includes:
step S11: and authenticating the user terminal equipment according to the serial number and the physical address of the user terminal equipment.
After the authentication of the user terminal device is passed, the subsequent step S12 is executed. And if the authentication of the user terminal equipment is not passed, returning a CPE error message to the user terminal equipment.
Step S12: and when the user terminal equipment passes the authentication, acquiring the port number and the token of the outward mapping port of the user terminal equipment according to the current timestamp, the sequence number and the physical address, and sending the port number and the token to the user terminal equipment.
When the user terminal equipment passes the authentication, connecting the current timestamp, the serial number and the character string of the physical address when passing the authentication; and acquiring the port number and the token of the outward mapping port of the user terminal equipment according to the connected character string. Specifically, a hash algorithm is applied to the connected character string to obtain a first number; performing a remainder operation on the first number and a preset number to obtain a second number, wherein the second number is a port number of the outward mapping port of the user terminal equipment; and coding the connected character strings to obtain the tokens of the user terminal equipment and the user terminal equipment management server.
In the embodiment of the invention, a BKDRHAsh method is used for carrying out Hash operation according to the connected character string, and a first number obtained after the Hash operation and a preset number are subjected to remainder operation; and the second number obtained after the remainder is used as the port number of the outward mapping port of the user terminal equipment. The external mapping port of the user terminal device is a port of the external mapping WEB service of the user terminal device. The hash operation method of the embodiment of the invention is not limited to the BKDRHash method, and can be other hash operation methods; similarly, the preset number may be a number set by the user according to needs, such as 10086, and is not limited herein. And performing MD5 encoding on the connected character strings, and using MD5 encoding as tokens (tokens) of the user terminal equipment and the user terminal equipment management server. In other embodiments of the present invention, other codes may be performed on the connected character strings, and the present invention is not limited herein.
And after the port number and the token of the external mapping port of the user terminal equipment are obtained, the port number and the token of the external mapping port are sent to the user terminal equipment, and the port number and the token of the external mapping port are recorded.
Step S13: and receiving the token which is transmitted by the user terminal equipment management server and acquired from the user terminal equipment, and verifying the token.
And the user terminal equipment receives the port number and the token of the external mapping port and then sends the port number and the token to the user terminal equipment management server to request to establish connection with the user terminal equipment management server. In step S13, a token transmitted from the user terminal device by the user terminal device management server is received and verified.
Step S14: and when the token passes the verification, returning a security policy matched with the token to the user terminal equipment management server so as to establish association between a mapping port of the user terminal equipment management server and the external mapping port of the user terminal equipment according to the security policy.
And when the token is verified, returning the security policy matched with the token to the user terminal equipment management server. When the external service port of the user terminal equipment conforms to the security policy, the user terminal equipment management server establishes association between the mapping port of the user terminal equipment management server and the external mapping port of the user terminal equipment, so that intranet penetration is realized, further, the management of the user terminal equipment can be realized, and the management security of CPE equipment is improved. And the user terminal equipment management server disconnects the connection with the user terminal equipment when the external service port of the user terminal equipment does not conform to the security policy.
In the embodiment of the invention, when the token is not verified, a result of verification failure is returned, and the connection with the user terminal equipment management server is disconnected.
When the connection network between the user terminal equipment management server and the user terminal equipment is disconnected, the steps S11-S14 need to be repeated, a new external mapping port of the user terminal equipment is dynamically obtained, the security of the external mapping port of the user terminal equipment is guaranteed, and the security policy is dynamically loaded through the dynamic external mapping port, so that the security of the CPE equipment management is improved.
The management method of the client terminal equipment of the embodiment of the invention comprises the following steps; authenticating the user terminal equipment according to the serial number and the physical address of the user terminal equipment; when the user terminal equipment passes the authentication, acquiring a port number and a token of an external mapping port of the user terminal equipment according to the current timestamp, the sequence number and the physical address, and sending the port number and the token to the user terminal equipment; receiving and verifying the token which is transmitted by a user terminal equipment management server and acquired from the user terminal equipment; and when the token passes the verification, returning a security policy matched with the token to the user terminal equipment management server to establish association between the mapping port of the user terminal equipment management server and the external mapping port of the user terminal equipment according to the security policy, and dynamically loading the security policy through a dynamic service port to improve the security of CPE equipment management.
Fig. 3 is a flowchart illustrating a method for managing a client terminal device according to an embodiment of the present invention, which is applied to the user terminal device management server 20. As shown in fig. 3, the management method of the client terminal device includes:
step S21: the method comprises the steps of obtaining a connection establishment request sent by user terminal equipment, wherein the connection establishment request comprises a port number and a token of an external mapping port of the user terminal equipment.
Before step S21, the client terminal device sends the serial number and the physical address to the user terminal device controller, and the user terminal device controller authenticates the user terminal device and generates a port number and a token of the outward mapping port of the user terminal device when the authentication is passed. In step S21, a connection establishment request including the port number of the outward mapping port and the token, which is sent by the client terminal device, is received.
Step S22: responding to the connection establishment request, and sending the token to the user terminal equipment controller for verification.
And sending the token to the user terminal equipment controller, and verifying the received token through the user terminal equipment controller.
Step S23: and acquiring the security policy which is returned by the user terminal equipment controller and matched with the token.
When the token passes the verification, the user terminal equipment controller returns the security policy matching the token. And when the token fails to be verified, the user terminal equipment controller returns a verification failure result and disconnects the connection.
Step S24: and establishing association between the mapping port and the external mapping port of the user terminal equipment according to the security policy.
In step S24, determining whether the outward mapping port of the user terminal device conforms to the security policy; if the mapping port accords with the security policy, establishing association between the mapping port and the external mapping port of the user terminal equipment; and if the security policy is not met, disconnecting the connection with the user terminal equipment.
After the mapping port is associated with the external mapping port of the user terminal equipment, the user terminal equipment needing to be managed can be connected through the mapping port; and checking or modifying the configuration of the user terminal equipment through the mapping port, thereby realizing the management of the user terminal equipment of the intranet. When the connection network with the user terminal equipment is disconnected, the steps S21-S24 need to be repeated, the new outward mapping port of the user terminal equipment is used, the security of the outward mapping port of the user terminal equipment is guaranteed, and the security policy is dynamically loaded through the dynamic outward mapping port, so that the security of the management of the CPE equipment is improved.
The management method of the client terminal equipment of the embodiment of the invention comprises the following steps; acquiring a connection establishment request sent by user terminal equipment, wherein the connection establishment request comprises a port number and a token of an external mapping port of the user terminal equipment; responding to the connection establishment request, and sending the token to a user terminal equipment controller for verification; acquiring a security policy which is returned by the user terminal equipment controller and matched with the token; and establishing association between the security policy mapping port and the outward mapping port of the user terminal equipment, and dynamically loading a security policy through a dynamic service port to improve the security of CPE equipment management.
Fig. 4 is a schematic diagram showing a configuration of a management apparatus of a client terminal device according to an embodiment of the present invention, which is applied to the user terminal device controller 30 in fig. 1. As shown in fig. 4, the management apparatus of the client terminal device includes: authentication unit 41, token generation unit 42, token verification unit 43, and policy matching unit 44.
The authentication unit 41 is configured to authenticate the user terminal device according to a serial number and a physical address of the user terminal device; the token generating unit 42 is configured to, when the user terminal device passes authentication, obtain a port number and a token of an external mapping port of the user terminal device according to the current timestamp, the sequence number, and the physical address, and send the port number and the token to the user terminal device; the token verifying unit 43 is configured to receive and verify the token acquired from the user terminal device and transmitted by the user terminal device management server; the policy matching unit 44 is configured to, when the token passes the verification, return a security policy matched with the token to the ue management server, so as to establish an association between a mapping port of the ue management server and the external mapping port of the ue according to the security policy.
In an alternative manner, the token generation unit 52 is configured to: connecting the current timestamp, the serial number and the character string of the physical address; and acquiring the port number and the token of the outward mapping port of the user terminal equipment according to the connected character string.
In an alternative manner, the token generation unit 52 is configured to: applying a Hash algorithm to the connected character strings to obtain a first number; performing a remainder operation on the first number and a preset number to obtain a second number, wherein the second number is a port number of the outward mapping port of the user terminal equipment; and coding the connected character strings to obtain the tokens of the user terminal equipment and the user terminal equipment management server.
The embodiment of the invention authenticates the user terminal equipment according to the serial number and the physical address of the user terminal equipment; when the user terminal equipment passes the authentication, acquiring a port number and a token of an external mapping port of the user terminal equipment according to the current timestamp, the sequence number and the physical address, and sending the port number and the token to the user terminal equipment; receiving and verifying the token which is transmitted by a user terminal equipment management server and acquired from the user terminal equipment; and when the token passes the verification, returning a security policy matched with the token to the user terminal equipment management server to establish association between the mapping port of the user terminal equipment management server and the external mapping port of the user terminal equipment according to the security policy, and dynamically loading the security policy through a dynamic service port to improve the security of CPE equipment management.
Fig. 5 is a schematic structural diagram illustrating a management apparatus of a client terminal device according to an embodiment of the present invention, which is applied to the user terminal device management server 20 in fig. 1. As shown in fig. 5, the management apparatus of the client terminal device includes: a request acquisition unit 51, a request response unit 52, a policy acquisition unit 53, and an association establishing unit 54.
The request obtaining unit 51 is configured to obtain a connection establishment request sent by a user terminal device, where the connection establishment request includes a port number and a token of an external mapping port of the user terminal device; the request response unit 52 is configured to respond to the connection establishment request and send the token to the user terminal device controller for verification; the policy obtaining unit 53 is configured to obtain a security policy that is returned by the user terminal device controller and matches the token; the association establishing unit 54 is configured to establish an association between a mapping port and the external mapping port of the ue according to the security policy.
In an alternative manner, the association establishing unit 54 is configured to: judging whether the external mapping port of the user terminal equipment conforms to the security policy; if the mapping port accords with the security policy, establishing association between the mapping port and the external mapping port of the user terminal equipment; and if the security policy is not met, disconnecting the connection with the user terminal equipment.
In an optional manner, the management apparatus of the client terminal device further includes a device management unit, and the device management unit 55 is further configured to: connecting the user terminal equipment needing to be managed through the mapping port; and viewing or modifying the configuration of the user terminal equipment through the mapping port.
The method comprises the steps that a connection establishment request sent by user terminal equipment is obtained, wherein the connection establishment request comprises a port number and a token of an external mapping port of the user terminal equipment; responding to the connection establishment request, and sending the token to a user terminal equipment controller for verification; acquiring a security policy which is returned by the user terminal equipment controller and matched with the token; and establishing association between the security policy mapping port and the outward mapping port of the user terminal equipment, and dynamically loading a security policy through a dynamic service port to improve the security of CPE equipment management.
An embodiment of the present invention provides a non-volatile computer storage medium, where the computer storage medium stores at least one executable instruction, and the computer executable instruction may execute the management method of the client terminal device in any method embodiment described above.
The executable instructions may be specifically configured to cause the processor to:
authenticating the user terminal equipment according to the serial number and the physical address of the user terminal equipment;
when the user terminal equipment passes the authentication, acquiring a port number and a token of an external mapping port of the user terminal equipment according to the current timestamp, the sequence number and the physical address, and sending the port number and the token to the user terminal equipment;
receiving and verifying the token which is transmitted by a user terminal equipment management server and acquired from the user terminal equipment;
and when the token passes the verification, returning a security policy matched with the token to the user terminal equipment management server so as to establish association between a mapping port of the user terminal equipment management server and the external mapping port of the user terminal equipment according to the security policy.
In an alternative, the executable instructions cause the processor to:
connecting the current timestamp, the serial number and the character string of the physical address;
and acquiring the port number and the token of the outward mapping port of the user terminal equipment according to the connected character string.
In an alternative, the executable instructions cause the processor to:
applying a Hash algorithm to the connected character strings to obtain a first number;
performing a remainder operation on the first number and a preset number to obtain a second number, wherein the second number is a port number of the outward mapping port of the user terminal equipment;
and coding the connected character strings to obtain the tokens of the user terminal equipment and the user terminal equipment management server.
The management method of the client terminal equipment of the embodiment of the invention comprises the following steps; authenticating the user terminal equipment according to the serial number and the physical address of the user terminal equipment; when the user terminal equipment passes the authentication, acquiring a port number and a token of an external mapping port of the user terminal equipment according to the current timestamp, the sequence number and the physical address, and sending the port number and the token to the user terminal equipment; receiving and verifying the token which is transmitted by a user terminal equipment management server and acquired from the user terminal equipment; and when the token passes the verification, returning a security policy matched with the token to the user terminal equipment management server to establish association between the mapping port of the user terminal equipment management server and the external mapping port of the user terminal equipment according to the security policy, and dynamically loading the security policy through a dynamic service port to improve the security of CPE equipment management.
An embodiment of the present invention provides another non-volatile computer storage medium, where the computer storage medium stores at least one executable instruction, and the computer executable instruction may execute the management method of the client terminal device in any method embodiment described above.
The executable instructions may be specifically configured to cause the processor to:
acquiring a connection establishment request sent by user terminal equipment, wherein the connection establishment request comprises a port number and a token of an external mapping port of the user terminal equipment;
responding to the connection establishment request, and sending the token to a user terminal equipment controller for verification;
acquiring a security policy which is returned by the user terminal equipment controller and matched with the token;
and establishing association between the mapping port and the external mapping port of the user terminal equipment according to the security policy.
In an alternative, the executable instructions cause the processor to:
judging whether the external mapping port of the user terminal equipment conforms to the security policy;
if the mapping port accords with the security policy, establishing association between the mapping port and the external mapping port of the user terminal equipment;
and if the security policy is not met, disconnecting the connection with the user terminal equipment.
In an alternative, the executable instructions cause the processor to:
connecting the user terminal equipment needing to be managed through the mapping port;
and viewing or modifying the configuration of the user terminal equipment through the mapping port.
The method comprises the steps that a connection establishment request sent by user terminal equipment is obtained, wherein the connection establishment request comprises a port number and a token of an external mapping port of the user terminal equipment; responding to the connection establishment request, and sending the token to a user terminal equipment controller for verification; acquiring a security policy which is returned by the user terminal equipment controller and matched with the token; and establishing association between the security policy mapping port and the outward mapping port of the user terminal equipment, and dynamically loading a security policy through a dynamic service port to improve the security of CPE equipment management.
Fig. 6 is a schematic structural diagram of a computing device according to an embodiment of the present invention, and a specific embodiment of the present invention does not limit a specific implementation of the device.
As shown in fig. 6, the computing device may include: a processor (processor)602, a communication Interface 604, a memory 606, and a communication bus 608.
Wherein: the processor 602, communication interface 604, and memory 606 communicate with one another via a communication bus 608. A communication interface 604 for communicating with network elements of other devices, such as clients or other servers. The processor 602 is configured to execute the program 610, and may specifically perform relevant steps in the management method embodiment of the client terminal device.
In particular, program 610 may include program code comprising computer operating instructions.
The processor 602 may be a central processing unit CPU or an application Specific Integrated circuit asic or one or more Integrated circuits configured to implement embodiments of the present invention. The device includes one or more processors, which may be the same type of processor, such as one or more CPUs; or may be different types of processors such as one or more CPUs and one or more ASICs.
And a memory 606 for storing a program 610. Memory 606 may comprise high-speed RAM memory, and may also include non-volatile memory (non-volatile memory), such as at least one disk memory.
The program 610 may specifically be configured to cause the processor 602 to perform the following operations:
authenticating the user terminal equipment according to the serial number and the physical address of the user terminal equipment;
when the user terminal equipment passes the authentication, acquiring a port number and a token of an external mapping port of the user terminal equipment according to the current timestamp, the sequence number and the physical address, and sending the port number and the token to the user terminal equipment;
receiving and verifying the token which is transmitted by a user terminal equipment management server and acquired from the user terminal equipment;
and when the token passes the verification, returning a security policy matched with the token to the user terminal equipment management server so as to establish association between a mapping port of the user terminal equipment management server and the external mapping port of the user terminal equipment according to the security policy.
In an alternative, the program 610 causes the processor to:
connecting the current timestamp, the serial number and the character string of the physical address;
and acquiring the port number and the token of the outward mapping port of the user terminal equipment according to the connected character string.
In an alternative, the program 610 causes the processor to:
applying a Hash algorithm to the connected character strings to obtain a first number;
performing a remainder operation on the first number and a preset number to obtain a second number, wherein the second number is a port number of the outward mapping port of the user terminal equipment;
and coding the connected character strings to obtain the tokens of the user terminal equipment and the user terminal equipment management server.
The embodiment of the invention authenticates the user terminal equipment according to the serial number and the physical address of the user terminal equipment; when the user terminal equipment passes the authentication, acquiring a port number and a token of an external mapping port of the user terminal equipment according to the current timestamp, the sequence number and the physical address, and sending the port number and the token to the user terminal equipment; receiving and verifying the token which is transmitted by a user terminal equipment management server and acquired from the user terminal equipment; and when the token passes the verification, returning a security policy matched with the token to the user terminal equipment management server to establish association between the mapping port of the user terminal equipment management server and the external mapping port of the user terminal equipment according to the security policy, and dynamically loading the security policy through a dynamic service port to improve the security of CPE equipment management.
Fig. 7 is a schematic structural diagram of another computing device according to an embodiment of the present invention, and the specific embodiment of the present invention does not limit the specific implementation of the device.
As shown in fig. 7, the computing device may include: a processor (processor)702, a Communications Interface 704, a memory 706, and a communication bus 708.
Wherein: the processor 702, communication interface 704, and memory 706 communicate with each other via a communication bus 708. A communication interface 704 for communicating with network elements of other devices, such as clients or other servers. The processor 702 is configured to execute the program 710, and may specifically execute relevant steps in the management method embodiment of the client terminal device.
In particular, the program 710 may include program code that includes computer operating instructions.
The processor 702 may be a central processing unit CPU, or an Application Specific Integrated Circuit (ASIC), or one or more Integrated circuits configured to implement an embodiment of the present invention. The device includes one or more processors, which may be the same type of processor, such as one or more CPUs; or may be different types of processors such as one or more CPUs and one or more ASICs.
The memory 706 stores a program 710. The memory 706 may comprise high-speed RAM memory, and may also include non-volatile memory (non-volatile memory), such as at least one disk memory.
The program 710 may specifically be used to cause the processor 702 to perform the following operations:
acquiring a connection establishment request sent by user terminal equipment, wherein the connection establishment request comprises a port number and a token of an external mapping port of the user terminal equipment;
responding to the connection establishment request, and sending the token to a user terminal equipment controller for verification;
acquiring a security policy which is returned by the user terminal equipment controller and matched with the token;
and establishing association between the mapping port and the external mapping port of the user terminal equipment according to the security policy.
In an alternative, the program 710 causes the processor to:
judging whether the external mapping port of the user terminal equipment conforms to the security policy;
if the mapping port accords with the security policy, establishing association between the mapping port and the external mapping port of the user terminal equipment;
and if the security policy is not met, disconnecting the connection with the user terminal equipment.
In an alternative, the program 710 causes the processor to:
connecting the user terminal equipment needing to be managed through the mapping port;
and viewing or modifying the configuration of the user terminal equipment through the mapping port.
The method comprises the steps that a connection establishment request sent by user terminal equipment is obtained, wherein the connection establishment request comprises a port number and a token of an external mapping port of the user terminal equipment; responding to the connection establishment request, and sending the token to a user terminal equipment controller for verification; acquiring a security policy which is returned by the user terminal equipment controller and matched with the token; and establishing association between the security policy mapping port and the outward mapping port of the user terminal equipment, and dynamically loading a security policy through a dynamic service port to improve the security of CPE equipment management.
The algorithms or displays presented herein are not inherently related to any particular computer, virtual system, or other apparatus. Various general purpose systems may also be used with the teachings herein. The required structure for constructing such a system will be apparent from the description above. In addition, embodiments of the present invention are not directed to any particular programming language. It is appreciated that a variety of programming languages may be used to implement the teachings of the present invention as described herein, and any descriptions of specific languages are provided above to disclose the best mode of the invention.
In the description provided herein, numerous specific details are set forth. It is understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.
Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, various features of the embodiments of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the invention and aiding in the understanding of one or more of the various inventive aspects. However, the disclosed method should not be interpreted as reflecting an intention that: that the invention as claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the detailed description are hereby expressly incorporated into this detailed description, with each claim standing on its own as a separate embodiment of this invention.
Furthermore, those skilled in the art will appreciate that while some embodiments herein include some features included in other embodiments, rather than other features, combinations of features of different embodiments are meant to be within the scope of the invention and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.
It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention may be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by one and the same item of hardware. The usage of the words first, second and third, etcetera do not indicate any ordering. These words may be interpreted as names. The steps in the above embodiments should not be construed as limiting the order of execution unless specified otherwise.