Patent ID: 7757276
Filing Date: 2010-07-13
Classification: G06F,H04L

Abstract:
1. A method, comprising the computer-implemented steps of: receiving trust information defining one or more trusted signatories; receiving, in association with a particular configuration directive, security information defining a number of required signatures and required principals; receiving configuration information comprising a hostname, one or more configuration directives for a host network element associated with the hostname, and two or more digital signatures of the hostname and the one or more configuration directives; wherein the configuration information includes the particular configuration directive; wherein the two or more digital signatures comprise a first digital signature of a first portion of the one or more configuration directives by a first user, and a second digital signature of a second portion of the one or more configuration directives by a second user; receiving signature group data representing a collective authority and comprising a first identifier that identifies the first user responsible for the first portion of the one or more configuration directives and a second identifier that identifies the second user responsible for the second portion of the one or more configuration directives; wherein the configuration information specifies that the first portion and the second portion of the one or more configuration directives are to be applied to the host network element at the same time; attempting to verify the two or more digital signatures based on the trust information, the signature group data, and the security information; verifying that the two or more digital signatures are valid and that two or more principals respectively associated with the two or more digital signatures have the collective authority to perform the one or more configuration directives on the host network element; applying the one or more configuration directives to the host network element only when the two or more digital signatures are verified successfully; wherein applying the one or more configuration directives comprises applying the particular configuration directive only when the configuration information has the number of required signatures by the required principals; wherein the steps of the method are performed by the host network element.