SECURITY AND REPORT GENERATION SYSTEM FOR NETWORKED MULTIMEDIA WORKSTATIONS

• US 20030191833A1
• Filed: 02/11/1998
• Published: 10/09/2003
• Est. Priority Date: 05/10/1996
• Status: Abandoned Application

• Current Assignee: Michael Victor Stein, Paul Richard Wenker
• Original Assignee: Michael Victor Stein, Paul Richard Wenker
• Inventors: STEIN, MICHAEL VICTOR, WENKER, PAUL RICHARD
• Application Number:
  US09/021,841
• Publication Number:
  US 20030191833A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method for providing security in a networked multimedia computing system is provided wherein an administrative workstation is challenged by a network workstation when the administrative workstation is attempting to manipulate or query the network workstation. The administrative workstation responds in an automatic fashion to supply a series of logically acceptable password candidates to the challenging workstation in an attempt to validate itself to the challenging network workstation without interrupting a user. If none of the series of passwords is successful, an administrator, or user, operating the administrative workstation is prompted to manually enter a password. The system allows for an administrative workstation to automatically and transparently validate itself to a challenging network workstation, in most situations, without requiring input from the administrator. Another aspect of the invention involves a system for generating reports concerning user-selected hardware and software attributes for one or more network workstations.

Claims

1. In a networked computer system having at least one master workstation and a plurality of network workstations, a method for validating the master workstation to a network workstation in response to a denial of access by the network workstation, comprising the steps of:

storing a plurality of candidate passwords at the master workstation; and

automatically transmitting the candidate passwords to the network workstation in succession until one of said passwords is accepted at the network workstation.

2. The method claimed in claim 1 wherein the candidate passwords include a password entered for a network workstation when the network workstation was connected to the network.

3. The method claimed in claim 1 wherein the candidate passwords include a null password.

4. The method claimed in claim 1 wherein the candidate passwords include an administrator'"'"'s password.

5. The method claimed in claim 1 further comprising the step of:

prompting an administrator to enter a password in the event that none of the candidate passwords is successful in validating the master workstation to the network workstation.

6. The method claimed in claim 5 further comprising the step of:

adding the password entered by the administrator to the plurality of candidate passwords.

7. The method claimed in claim 1 wherein the step of sending passwords is performed in a fashion that is transparent to a user operating the master workstation.

8. The method claimed in claim 1 wherein the denial of access is a result of the network workstation determining that the master workstation is suspect.

9. The method claimed in claim 8 wherein the master workstation is determined to be suspect because a predetermined amount of time elapsed between receipt of consecutive master workstation request messages at the network workstation.

10. The method claimed in claim 8 wherein the master workstation is determined to be suspect because a task associated with a master workstation request message requires a predetermined level of administrative access.

11. In a networked computer system, a method for providing security in a network workstation, comprising the steps of:

monitoring request messages from a master workstation;

determining whether the master workstation is suspect;

issuing a validation challenge to the master workstation in response to a request message if the master workstation is found to be suspect; and

assessing the validity of each password in a series of password candidates automatically sent by the master workstation to the network workstation in response to the challenge.

12. The method claimed in claim 11 wherein the determination of whether the master workstation is suspect includes assessing whether a predetermined period of time has elapsed between receipt of status request messages.

13. The method claimed in claim 11 wherein the determination of whether the master workstation is suspect includes assessing whether a performance of a task within a request message received by the network workstation requires a predetermined level of administrative access.

14. In a networked computer system, a method for validating a master workstation, the method comprising the steps of:

sending a request message from the master workstation to a network workstation;

determining, within the network workstation, whether a the master workstation requires validation before a task associated with the request message is carried out;

issuing a challenge to the master workstation if the master workstation is determined to require validation; and

automatically sending a series of password candidates from the master workstation to the network workstation in response to the challenge.

15. The method claimed in claim 14 wherein the series of password candidates includes a password entered for a network workstation when the network workstation was connected to the network.

16. The method claimed in claim 14 wherein the series of password candidates includes a null password.

17. The method claimed in claim 14 wherein the series of password candidates includes an administrator'"'"'s password.

18. The method claimed in claim 14 further comprising the step of:

prompting an administrator to enter a password in the event that none of the series of passwords is successful in validating the master workstation to the network workstation.

19. The method claimed in claim 18 further comprising the step of:

adding the password entered by the administrator to the series of password candidates.

20. The method claimed in claim 14 wherein the determination of whether the master workstation requires validation includes assessing whether a predetermined period of time has elapsed between receipt of status request messages.

21. The method claimed in claim 14 wherein the determination of whether the master workstation requires validation includes assessing whether a performance of a task within a request message received by the network workstation requires a predetermined level of administrative access.

22. In a networked computer system, a method for validating a master workstation, the method comprising the steps of:

issuing a challenge message to the master workstation when the network workstation wants to send a request message to the master workstation;

automatically sending a series of one or more password candidates from the master workstation to the network workstation in response to the challenge message; and

determining, within the network workstation, whether any of the series of password candidates are valid.

23. In a networked computer system having at least one master workstation and a multiplicity of network workstations, a method for maintaining an active link between the master workstation and the network workstations, comprising the steps of:

broadcasting a request message from the master workstation to a network workstation;

receiving the request message in the network workstation;

determining whether a predetermined amount of time has elapsed since a previous status request message was received;

sending a challenge message to the master workstation in response to the status request if the predetermined period amount of time has elapsed;

responding to the challenge message by automatically returning a stored password maintained in the master workstation which stored password is particular to the network workstation issuing the challenge message;

responding to the challenge message by automatically returning a null password if the stored password is not accepted;

responding to the challenge message by automatically returning an administrative password associated with the master workstation if the null password is not accepted; and

prompting a user operating the master workstation to enter a password if the administrative password associated is not accepted.

24. A system for providing security in a network workstation, the system comprising:

means for monitoring request messages from a master workstation;

means for determining whether a the master workstation is suspect;

means for issuing a validation challenge to the master workstation in response to a status request message if the master workstation is found to be suspect; and

means for monitoring a series of password candidates automatically sent by the master workstation to the network workstation in response to the validation challenge.

25. An article of manufacture for use in a network workstation comprising a computer usable medium having computer readable program code means for causing the network workstation to:

monitor request messages from a master workstation;

determine whether a the master workstation is suspect;

issue a validation challenge to the master workstation in response to a status request message if the master workstation is found to be suspect; and

monitoring a series of password candidates automatically sent by the master workstation to the network workstation in response to the validation challenge.

26. In a network computer system, a system for generating system information reports comprising:

means for generating a system information request message in a master workstation which system information request message includes an identity of at least one network workstation and an identity of at least one hardware characteristic;

means for transmitting the system information request message to the at least network workstation;

means for gathering information concerning the at least one hardware characteristic in the at least one network workstation;

means for generating a system information response message in the network workstation which system information response message includes the gathered information;

means for transmitting the system information response message to the master workstation; and

means for generating a report setting out the gathered information for the at least one hardware characteristic on the at least one network workstation.

27. In a network computer system, a method for generating system information reports comprising:

generating a system information request message in a master workstation which system information request message includes an identity of at least one network workstation and an identity of at least one hardware characteristic;

transmitting the system information request message to the at least network workstation;

gathering information concerning the at least one hardware characteristic in the at least one network workstation;

generating a system information response message in the network workstation which system information response message includes the gathered information;

transmitting the system information response message to the master workstation; and

generating a report setting out the gathered information for the at least one hardware characteristic on the at least one network workstation.

28. A system information report comprising:

a document generated by a master workstation, which document sets out information concerning at least one hardware characteristic for a network workstation;

wherein the system information report is generated by sending a system information report request message to the network workstation whereby the network workstation gathers information concerning the at least one hardware characteristic and sends the information back to the master workstation in a system information report response message for compilation into the system information report.

29. In a network computer system, a system for generating software version reports comprising:

means for generating a software version request message in a master workstation which software version request message includes an identity of at least one network workstation and an identity of at least one application;

means for transmitting the software version request message to the at least network workstation;

means for gathering information concerning the at least one application in the at least one network workstation;

means for generating a software version response message in the network workstation which software version response message includes the gathered information;

means for transmitting the software version response message to the master workstation; and

means for generating a report setting out the gathered information for the at least one application on the at least one network workstation.

30. In a network computer system, a method for generating software version reports comprising:

generating a software version request message in a master workstation which software version request message includes an identity of at least one network workstation and an identity of at least one application;

transmitting the software version request message to the at least network workstation;

gathering information concerning the at least one application in the at least one network workstation;

generating a software version response message in the network workstation which software version response message includes the gathered information;

transmitting the software version response message to the master workstation; and

generating a report setting out the gathered information for the at least one application on the at least one network workstation.

31. A software version report comprising:

a document generated by a master workstation, which document sets out information concerning at least one software application contained within a network workstation;

wherein the report is generated by sending a software version report request message to the network workstation whereby the network workstation gathers information concerning the software application and sends the information back to the master workstation in a software version report response message for compilation into the software version report.

32. In a network computer system, a system for generating software difference reports comprising:

means for generating a software difference request message in a master workstation which software difference request message includes an identity of at least one network workstation and an identity of at least one application;

means for transmitting the software difference request message to the at least one network workstation;

means for gathering information concerning the at least one application in the at least one network workstation;

means for generating a software difference response message in the at least one network workstation which software difference response message includes the gathered information;

means for transmitting the software difference response message to the master workstation;

means for comparing the gathered information in the response message to information concerning a version of the at least one application contained within the master workstation; and

means for generating a report setting out the differences between the at least one application on the at least one network workstation and the version of the at least one application contained within the master workstation.

33. The system for generating software difference reports claimed in claim 32 wherein:

the comparing means is located in the at least one network workstation, and

the means for transmitting the software difference response message to the master workstation transmits a result generated by the comparing means.

34. In a network computer system, a method for generating a software difference report comprising the steps of:

generating a software difference request message in a master workstation which software difference request message includes an identity of at least one network workstation and an identity of at least one application;

transmitting the software difference request message to the at least network workstation;

gathering information concerning the at least one application in the at least one network workstation;

generating a software difference response message in the at least one network workstation which software difference response message includes the gathered information;

transmitting the software difference response message to the master workstation;

comparing the gathered information in the response message to information concerning a version of the at least one application contained within the master workstation; and

generating a report setting out the differences between the at least one application on the at least one network workstation and the version of the at least one application contained within the master workstation.

35. The method for generating a software difference report claimed in claim 34 wherein:

the software difference request message generated in the master workstation contains software application version information for the at least one application on the master workstation, and wherein

the comparison between the at least one application on the master workstation and the at least one application on the at least one network workstation is performed in the network workstation, and wherein

the comparison results are sent back to the master workstation in the software difference report response message.

36. A software difference report comprising:

a comparison setting out the differences between a version of a software application contained within a network workstation and a version of the software application contained within a master workstation;

wherein the report is generated by sending a software difference report request message to the network workstation whereby the network workstation gathers information concerning its version of the software application and sends the information back to the master workstation in a software difference report response message for compilation into the report.

37. The software difference report claimed in claim 36, wherein the comparison between the software application on the master workstation and the network workstation is performed in the master workstation.

38. The software difference report claimed in claim 36, wherein the software difference report request message sent by the master workstation contains software application version information, the comparison between the software application on the master workstation and the network workstation is performed in the network workstation, and the comparison results sent back to the master workstation in the software difference report response message.