Computing device with a separate processor provided with management functionality through a separate interface with the interface bus

• US 10,120,572 B2
• Filed: 03/22/2016
• Issued: 11/06/2018
• Est. Priority Date: 10/23/2007
• Status: Active Grant

• Current Assignee: Keicy Chung
• Original Assignee: Keicy Chung
• Inventors: Chung, Keicy
• Primary Examiner(s): Chery, Mardochee
• Application Number:
  US15/077,411
• Publication Number:
  US 20160371006A1
• Time in Patent Office: 959 Days
• Field of Search: 711 2
• CPC Class Codes: G06F 12/0866 for peripheral storage systems, e.g. disk cache
• CPC Class Codes: G06F 2212/154 Networked environment
• CPC Class Codes: G06F 2212/174 Telecommunications system
• CPC Class Codes: G06F 2212/2146 being detachable, e.g.. USB memory
• CPC Class Codes: G06F 2212/264 Remote server
• CPC Class Codes: G06F 2212/3042 being part of a memory device, e.g. cache DRAM
• CPC Class Codes: G06F 2212/305 being part of a memory device, e.g. cache DRAM
• CPC Class Codes: G06F 2212/463 File
• CPC Class Codes: G06F 3/0604 Improving or facilitating administration, e.g. storage management
• CPC Class Codes: G06F 3/061 Improving I/O performance
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/0643 Management of files
• CPC Class Codes: G06F 3/0655 Vertical data movement, i.e. input-output transfer; data movement between one or more hosts and one or more storage devices
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/0667 at data level, e.g. file, record or object virtualisation
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G11B 2220/211 Discs having both read-only and rewritable or recordable areas containing application data; Partial ROM media
• CPC Class Codes: H04L 47/82 Miscellaneous aspects
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 67/1097 : for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/56 : Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/59 : Providing operational support to end devices by off-loading in the network or by emulation, e.g. when they are unavailable

Abstract

A computing device includes a first processor; a second processor; a network interface communicably coupling the first and second processors to a network; an interface bus communicably coupling the first processor to the second processor; a first interface communicably coupling the second processor to the interface bus; a second interface communicably coupling the second processor to the interface bus, the second interface being separate from the first interface, wherein the second interface is configured to provide the second processor with management functionality over one or more hardware components of the computing device; and storage means communicably coupled to the second processor, wherein the second processor regulates access of the first processor to the storage means.

Claims

1. A computing device comprising:

a computer processor;

a system management processor;

a network interface communicably coupling the computer and system management processors to a network;

an interface bus communicably coupling the computer processor to the system management processor and to one or more hardware components of the computing device;

a CPU interface communicably coupling the system management processor to the interface bus, wherein the CPU interface is configured to provide the system management processor with communication functionality to the computer processor;

a system management interface communicably coupling the system management processor to the interface bus separately from the CPU interface, wherein the system management interface is configured to provide the system management processor with management functionality over the one or more hardware components of the computing device, and the system management processor is configured to control the one or more hardware components using the management functionality, said control being independent of an operating system running on the computer processor; and

storage means communicably coupled to the system management processor, wherein the system management processor regulates access of the computer processor to the storage means.

2. The computing device of claim 1, wherein the storage means comprises random access media.

3. The computing device of claim 1, wherein the system management processor is configured to give the computer processor:

read-only access to a first storage section of the storage means, and

read-write access to a second storage section of the storage means, the second storage section being separately contiguous from the first storage section.

4. The computing device of claim 1, wherein the system management processor is configured to deny the computer processor access to the storage means.

5. The computing device of claim 1, further comprising a removable media storage component communicably connected to the system management processor.

6. The computing device of claim 5, wherein the system management processor regulates access of the computer processor to the removable media storage component.

7. The computing device of claim 1, further comprising an encryption module communicably coupled to the system management processor, the system management processor being configured to utilize the encryption module for at least one of:

encrypt network communications through the network interface; and

encrypt files stored on the storage means.

8. The computing device of claim 7, wherein the system management processor is configured to obtain an encryption key through the network from a predetermined server, the encryption key being utilized to perform encryption with the encryption module.

9. The computing device of claim 1, wherein the system management processor is configured to regulate all files stored on the storage means.

10. The computing device of claim 9, wherein the system management processor is configured to communicate with a predetermined server over the network and to remove one or more stored files from the storage means in accordance with a delete instruction received from the predetermined server.

11. The computing device of claim 9, wherein the system management processor is configured to regulate all files stored on the storage means in accordance with pre-established rules.

12. The computing device of claim 11, wherein the system management processor is configured to communicate with a predetermined server over the network, and the system management processor is configured to manage the pre-established rules in accordance with commands received from the predetermined server.

13. The computing device of claim 1, wherein the system management processor is configured to regulate all network traffic passing through the network interface to and from the computing device.

14. The computing device of claim 13, wherein the system management processor is configured to regulate all network traffic passing through the network interface to and from the computing device in accordance with pre-established rules.

15. The computing device of claim 14, wherein the system management processor is configured to communicate with a predetermined server over the network, and the system management processor is configured to manage the pre-established rules in accordance with commands received from the predetermined server.

16. The computing device of claim 1, wherein the system management processor is configured to control the one or more hardware components in accordance with pre-established rules.

17. The computing device of claim 16, wherein the system management processor is configured to communicate with a predetermined server over the network, and the system management processor is configured to manage the pre-established rules in accordance with commands received from the predetermined server.

18. The computing device of claim 1, wherein the one or more hardware components comprises the computer processor.

19. The computing device of claim 1, wherein the computing device is a telephone.

20. A computing device comprising:

a computer processor;

a management module comprising;

a management processor;

a first network interface communicably coupling the management processor to a network;

a computer interface communicably coupling the management processor to the computer processor;

a one or more component management interfaces communicably coupling the management processor to one or more hardware components of the computing device, the one or more component management interfaces being separate from the computer interface, wherein the one or more component management interfaces are configured to provide the management processor with management functionality over the one or more hardware components; and

,

storage means communicably coupled to the computer processor and the management processor, wherein the management processor regulates access of the computer processor to the storage means.

21. The computing device of claim 20, further comprising a second network interface communicably coupling the computer processor to a network.

22. The computing device of claim 21, wherein the management processor is configured to control the second network interface in accordance with pre-established rules.

23. The computing device of claim 22, wherein the management processor is configured to communicate with a predetermined server over the network, and the management processor is configured to manage the pre-established rules in accordance with commands received from the predetermined server.

24. The computing device of claim 20, wherein the computing device is a telephone.